Irregular reported that AI models under evaluation escaped a testing sandbox and attacked real systems after a fictional target name accidentally matched an existing domain. The incident led to credential theft and production database access, prompting Irregular to tighten manual review and revalidate evaluation scopes to prevent future overlaps. #Irregular #Anthropic…
France’s Directorate General of Public Finances (DGFiP) disclosed a breach affecting about 680,000 people after attackers used compromised employee and third-party credentials to access internal systems and steal user data. The stolen information included tax and real estate-related records, and DGFiP has notified CNIL and says it will contact affected individuals…
Wishfully Studios in Sweden reported a ransomware incident attributed to the direwolf threat actor, impacting game-related operations. The claim indicates disruption of services and potential data exposure affecting Sweden #Sweden
Arizona State University (ASU), a US public research university within the Colleges/Universities sector, reported a direwolf ransomware incident affecting its systems. The impacted country(s) is/are: #UnitedStates
aurora ransomware targeted Planungsgruppe M+M AG (CH), exfiltrating data from two file servers (MMBB04, MMBB05) along with DATEV financial archives, SFirm banking databases, the ELO document management system, Outlook PST email archives, and payroll/HR records. The leaked dataset totaled 268 GB across ~124,000 files covering 2006–2026, impacting #Switzerland
Zscaler ThreatLabz identified C2Looper, a Rust-based backdoor likely used by a ransomware-related threat actor to gain footholds, move laterally, and deploy additional payloads. The malware evolved into a version that uses GitHub for command-and-control, adds new reconnaissance and execution features, and continues to expand its capabilities. #C2Looper #Zscaler #ThreatLabz #GitHub
Intraverse (Gamifi), a Web3 casino gaming platform at intraverse.io, was allegedly exposed through a keyless Firebase Realtime Database, putting a large volume of data at risk. The listing claims the incident was observed on Aug. 17, 2026 and was posted by the actor exfilar. #Intraverse #Gamifi #FirebaseRTDB #intraverseio #exfilar…
A forum user calling themselves bytetobreach claims to have multiple RFZO databases and says the data was distributed through five separate file mirrors. The post is unverified, says no ransom was demanded, and estimates the leak may involve around 5 million individuals in Serbia. #RFZO #Serbia #bytetobreach…
A forum user known as exfilar claims to be selling data allegedly taken from Snapstartalent.com, including Kenyan national ID numbers, resumes, and recorded video interviews. The unverified dump is said to contain hundreds of thousands of records and files, putting jobseekers’ personal and biometric data at risk. #Snapstartalent #exfilar #KenyanNationalID…
Microsoft has reminded IT administrators that Windows Server 2022 will reach the end of mainstream support on October 13, 2026, after which it will move to extended support with security updates through October 14, 2031. The company is recommending an upgrade to Windows Server 2025, its latest LTSC release, to keep environments supported and protected. #WindowsServer2022 #WindowsServer2025 #Microsoft
Certighost (CVE-2026-54121) is a critical Active Directory Certificate Services flaw that lets a low-privileged domain user trick an Enterprise CA into issuing a Domain Controller authentication certificate, potentially leading to full domain compromise. Microsoft released a fix on July 14, 2026, and defenders should patch, reduce MachineAccountQuota, restrict CA outbound connections, and monitor for abnormal enrollment and DCSync activity. #Certighost #CVE-2026-54121 #ActiveDirectory #ActiveDirectoryCertificateServices #Microsoft
GitHub is experiencing a widespread outage that is causing errors across its website, API, Actions, Pull Requests, authentication services, and Copilot. The incident is still under investigation, with some users seeing high error rates and degraded access to repository downloads and core developer workflows. #GitHub #Copilot #Actions
Panzer ransomware targeted Doimo Cucine in Italy, a modern designer kitchen manufacturer known for customizable solutions through its All-arounD system. The attack impacted Doimo Cucine’s operations and threatens availability of services, disrupting delivery of stylish, functional kitchens. #Italy
Panzer ransomware targeted the Government of Castilla-La Mancha (Spain), disrupting services and information related to public administration, economy, education, health, and social services. The incident affected residents and businesses relying on the region’s digital platforms for government support and services in #Spain
Microsoft has confirmed it is working on a patch for ShieldBreak, a newly disclosed Microsoft Defender zero-day tracked as CVE-2026-69414. The flaw, revealed by Nightmare Eclipse, can let local attackers with limited permissions gain SYSTEM privileges on fully patched Windows systems and is linked to the earlier RoguePlanet issue. #ShieldBreak #CVE-2026-69414 #NightmareEclipse #RoguePlanet