A forum post claims that Metropolis Technologies was breached and that its source code was stolen and uploaded for download. The alleged leak, attributed to actor 888, remains unverified and could expose internal logic, security assumptions, and other sensitive implementation details. #MetropolisTechnologies #888…
A forum actor known as Intelligence claims to be selling a dataset tied to Generali Insurance Bulgaria that contains 1,241,432 personal-data records. The alleged leak includes policy, identity, contact, and vehicle information, but the claim remains unverified. #GeneraliInsuranceBulgaria #Intelligence #InsurerWeb #Bulgaria…
A forum actor using the alias fuie claims to have posted a Boulanger database containing 132,230 customer and after-sales service records. The sample reportedly includes names, contact details, purchase data, warranty information, and service case history, but the claim remains unverified. #Boulanger #fuie…
Mississippi public university system reported a network security incident that affected its student financial aid office, while the online aid portal (MAAPP) remained operational. Cybersecurity experts have been brought in to determine whether confidential data was compromised, and no universities have reported issues so far. #Mississippi #MAAPP
DR.WU Skincare’s internal information system was hit by a cyberattack, but the company says the impact on its operations is not significant. It activated its security incident response process immediately, isolated the affected systems, and has not found any personal data leakage so far. #DRWUSkincare
Foss Inc., a US-based leading provider of installation and maintenance services to the energy industry, was targeted by the pear ransomware threat actor. The attack resulted in ransomware disruption for the victim in the impacted country(s). #UnitedStates
The ransomware attack attributed to direwolf disrupted operations at the Port of Tanjung Pelepas, affecting marine shipping and transportation services across the maritime logistics network. The incident resulted in downtime and operational impact for businesses dependent on port activities in Malaysia. #Malaysia
nightspire ransomware targeted Tuboa,ços da Amazônia Ltda. in Brazil, claiming the theft of Drawings and Customers’ Customized Projects. The threat actor asserted unauthorized access and potential data exposure impacting BR#Brazil
GitLab urged users to immediately patch a maximum-severity path traversal flaw, CVE-2026-85706, that could let unauthenticated attackers read arbitrary data from vulnerable servers under certain conditions. The company also fixed CVE-2026-87719 in GitLab EE, while watchTowr reported early probing activity against exposed GitLab systems and warned defenders to check logs for suspicious API requests. #GitLab #CVE-2026-85706 #CVE-2026-87719 #watchTowr
Attackers are abusing trusted AI platform features like Claude Artifacts, claude.ai/share links, ChatGPT, and Grok conversations to lure victims into downloading malware or running malicious commands. Huntress says campaigns such as FakeAgent, MacSync, and AMOS show how search poisoning and platform trust can be weaponized against users, even on real domains. #Claude #ChatGPT #Grok #FakeAgent #SectopRAT #MacSync #AMOS #Anthropic #Huntress
Threat actors are chaining critical JFrog Artifactory vulnerabilities to bypass authentication, escalate to administrator access, and deploy a Rust-based backdoor on self-hosted servers. Wiz reported active exploitation across multiple environments, with attackers creating rogue accounts, stealing data, and maintaining persistence in minutes. #JFrogArtifactory #CVE202642018 #CVE202642016 #CVE202682329 #Wiz #watchTowr
SecurityWeek’s roundup covers a wide range of cybersecurity developments, from phishing evasion using invisible Unicode and an actively exploited WordPress Super Forms flaw to new US sanctions and a bounty targeting Iranian cyber official Amir Yaryab. It also highlights consent phishing, SIM swapping, cybercrime infrastructure, InjectEave side-channel attacks, and scrutiny of…
Dustin Group, a Swedish IT solutions and technology reseller headquartered in Stockholm, was impacted by ransomware claimed by threat actor fulcrumsec. The disruption affected operations in #Sweden
Kiteworks has acquired Bonfy.AI to extend runtime data governance across its control plane, enabling policy enforcement at the moment sensitive data is exchanged by people, machines, or AI agents. The combined platform closes the gap between data discovery and real-time control, helping enterprises govern data in motion, reduce false positives, and prove compliance across systems like Outlook, Gmail, OneDrive, SharePoint, Workspace, and Salesforce. #Kiteworks #BonfyAI #CMMC20 #HIPAA #GDPR
IDScan.net has confirmed that an unauthorized party may have accessed customer data on its cloud platform, including names and driver’s license or other government-issued identification numbers. The disclosure follows reports that a dark web marketplace called Nexus was offering millions of scanned identity documents, prompting an FBI investigation into the leak. #IDScan.net #Nexus #FBI #Exploit #BrianKrebs