Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
The major food retail chain took systems offline following a cyberattack that affected customer-facing services and employee access across multiple regional brands, though physical stores remained operational.
The Japanese media and financial information conglomerate disclosed unauthorized access to a development system through stolen credentials, marking its third security incident in a month.
Threat actors briefly compromised AOMEI's configuration servers between April and July 2026, injecting malicious payloads through the backup software's built-in promotion system before covering their tracks within minutes.
An open-source AI coding agent suffered a security incident affecting 1.4% of its users, with attackers gaining access to stored API keys from external providers and running up charges exceeding $1,700 on compromised accounts.
F5 has issued emergency patches for three critical vulnerabilities in NGINX that could allow unauthenticated attackers to execute arbitrary code or trigger denial-of-service attacks on affected systems.
Microsoft has acknowledged that its latest Windows Server security updates are triggering authentication and mail delivery failures on some Exchange Server deployments. The company provided a temporary registry workaround while it develops a permanent fix.
Attackers are leveraging a critical OS command-injection vulnerability in SiteGuard Server Edition to gain elevated privileges on vulnerable web application firewalls. The flaw, tracked as CVE-2026-106931, affects the statistics feature that ships enabled by default.
ConnectWise has disabled its Cloud Backup service after attackers obtained application identities and gained unauthorized access to at least 162 Microsoft 365 tenants, using stolen credentials to bypass multi-factor authentication.
