Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
Spain's AEPD received notification of a breach involving an autonomous AI agent that exploited vulnerabilities, accessed systems, and modified personal data. The incident underscores that AI-driven attacks are no longer theoretical.
A September 23, 2026 webinar will analyze real Google Workspace compromises and the critical decisions security teams face in the hours after discovering unauthorized access.
Google released its September 2026 security patches addressing 110 vulnerabilities on Pixel devices, including a zero-day in the cellular modem component that attackers are already exploiting in targeted campaigns.
Acronis has released fixes for a high-severity local privilege escalation vulnerability affecting its backup integrations for cPanel, WHM, and Plesk, warning that the flaw is being exploited in limited targeted attacks.
A threat actor breached the maintainer's website and injected malicious code into two consecutive plugin updates, creating hidden user accounts on affected installations.
The Houston utility company acknowledged that attackers stole personal data from 7.49 million customers through an unprotected API endpoint, prompting multiple class-action lawsuits.
A cross-platform malware framework active since 2023 has shifted to using MQTT messaging for C2 communications, targeting enterprise infrastructure across Asia and South America while evading direct connections to attacker infrastructure.
Threat actors are leveraging an unauthenticated vulnerability in a WordPress plugin to deploy PHP webshells and establish persistent access to compromised sites. Wordfence has blocked over 100,000 exploitation attempts.
