Norway Fines Microsoft’s Xandr $9.6M Over Grindr Data Sharing
October 13, 2026
Norway’s data protection authority fined Microsoft-owned Xandr NOK 92 million, its largest ever, over ad auctions that exposed Grindr users’
Data Security
Norway Fines Microsoft’s Xandr $9.6M Over Grindr Data Sharing
Norway's data protection authority fined Microsoft-owned Xandr NOK 92 million, its largest ever, over ad auctions that exposed Grindr users' sensitive data.
Gentlemen Ransomware Gang Claims MoneyGram Breach, Unconfirmed
The Gentlemen ransomware gang listed MoneyGram on its leak site and set a deadline of a little over a week. MoneyGram has not confirmed any ...
CyberXero Broker Used Claude Code Agents to Steal Ukrainian Data
A Russian-speaking initial access broker, CyberXero, ran 51 Claude Code agents to compromise WordPress sites and steal over 628,000 Ukrainian records.
Nippon Columbia Malware Incident Exposes 8.6M Karaoke Customers
Nippon Columbia disclosed malware on an employee computer that may have exposed records of about 8.7 million karaoke customers and employees across Japan.
GhostAction Campaign Hits 500+ GitHub Accounts to Steal API Keys
Socket reports GhostAction, a campaign compromising more than 500 GitHub accounts and injecting workflows that harvest cloud, AI and package-registry secrets.
Tampered Ledger Nano X Devices Tied to CryptoBilis and $93M Drain
Ledger confirmed a hidden implant in a Nano X bought from reseller CryptoBilis, as wallet drains estimated at $93.2 million hit 315 wallets from October ...
Georgia Power, Alabama Power Portal Breach Hits 400,000 Accounts
An unauthorized party accessed the Georgia Power and Alabama Power customer portal, exposing about 400,000 accounts, including partial SSNs and contact data.
ASOS Confirms Breach After Hackers Hijack App Push Notifications
ASOS confirmed a breach after attackers sent a fake push alert claiming a Snowflake hack; names and contact details may be exposed, but not card ...
Denmark CPR Breach Exposes Data of 8.8 Million People
Attackers abused a private firm's lawful lookup rights to pull names, addresses and CPR numbers of 8.8 million people from Denmark's Central Person Register.
FBI Drops Accenture Contractor After ShinyHunters PeopleSoft Breach
The FBI removed an Accenture contractor over an unapplied patch that let ShinyHunters breach FBIJobs.gov, as a suspected group leader was arrested in Jordan.
Gentlemen Ransomware Gang Claims MoneyGram Breach, Unconfirmed
October 13, 2026
The Gentlemen ransomware gang listed MoneyGram on its leak site and set a deadline of a little over a week.
CyberXero Broker Used Claude Code Agents to Steal Ukrainian Data
October 12, 2026
A Russian-speaking initial access broker, CyberXero, ran 51 Claude Code agents to compromise WordPress sites and steal over 628,000 Ukrainian
Nippon Columbia Malware Incident Exposes 8.6M Karaoke Customers
October 12, 2026
Nippon Columbia disclosed malware on an employee computer that may have exposed records of about 8.7 million karaoke customers and
GhostAction Campaign Hits 500+ GitHub Accounts to Steal API Keys
October 12, 2026
Socket reports GhostAction, a campaign compromising more than 500 GitHub accounts and injecting workflows that harvest cloud, AI and package-registry
Tampered Ledger Nano X Devices Tied to CryptoBilis and $93M Drain
October 12, 2026
Ledger confirmed a hidden implant in a Nano X bought from reseller CryptoBilis, as wallet drains estimated at $93.2 million
Georgia Power, Alabama Power Portal Breach Hits 400,000 Accounts
October 8, 2026
An unauthorized party accessed the Georgia Power and Alabama Power customer portal, exposing about 400,000 accounts, including partial SSNs and
ASOS Confirms Breach After Hackers Hijack App Push Notifications
October 7, 2026
ASOS confirmed a breach after attackers sent a fake push alert claiming a Snowflake hack; names and contact details may
Denmark CPR Breach Exposes Data of 8.8 Million People
October 6, 2026
Attackers abused a private firm’s lawful lookup rights to pull names, addresses and CPR numbers of 8.8 million people from
FBI Drops Accenture Contractor After ShinyHunters PeopleSoft Breach
October 6, 2026
The FBI removed an Accenture contractor over an unapplied patch that let ShinyHunters breach FBIJobs.gov, as a suspected group leader
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.