ICO Reprimands Met Police Over Unvetted Use of Auror Platform
October 15, 2026
The UK ICO reprimanded the Metropolitan Police and issued an enforcement notice after officers used the Auror retail crime platform
Data Security
ICO Reprimands Met Police Over Unvetted Use of Auror Platform
The UK ICO reprimanded the Metropolitan Police and issued an enforcement notice after officers used the Auror retail crime platform without data checks.
Unsecured Database Holds 13.7M Breach Records Tied to Vibetech
Researcher Jeremiah Fowler found an unsecured database of 13.7 million records tied to AT&T, Amazon, Walmart and PayPal, linked to India-based Vibetech.
Meta Notifies 1,500 After Stolen Credentials Expose GitHub Code
Meta is notifying about 1,500 people after hackers used an employee's stolen credentials to take product code and a small amount of personal data from ...
ShinyHunters Claims H&M Database Breach; Retailer Sees No Compromise
ShinyHunters claims it accessed H&M internal databases covering inventory and logistics; H&M says it is investigating and sees no sign of compromise yet.
UK Housing Ombudsman Probes Third-Party Incident, Pauses Complaints
The UK Housing Ombudsman Service is investigating a third-party security incident at its case management system and has blocked new online complaints.
Norway Fines Microsoft’s Xandr $9.6M Over Grindr Data Sharing
Norway's data protection authority fined Microsoft-owned Xandr NOK 92 million, its largest ever, over ad auctions that exposed Grindr users' sensitive data.
Gentlemen Ransomware Gang Claims MoneyGram Breach, Unconfirmed
The Gentlemen ransomware gang listed MoneyGram on its leak site and set a deadline of a little over a week. MoneyGram has not confirmed any ...
CyberXero Broker Used Claude Code Agents to Steal Ukrainian Data
A Russian-speaking initial access broker, CyberXero, ran 51 Claude Code agents to compromise WordPress sites and steal over 628,000 Ukrainian records.
Nippon Columbia Malware Incident Exposes 8.6M Karaoke Customers
Nippon Columbia disclosed malware on an employee computer that may have exposed records of about 8.7 million karaoke customers and employees across Japan.
GhostAction Campaign Hits 500+ GitHub Accounts to Steal API Keys
Socket reports GhostAction, a campaign compromising more than 500 GitHub accounts and injecting workflows that harvest cloud, AI and package-registry secrets.
Unsecured Database Holds 13.7M Breach Records Tied to Vibetech
October 15, 2026
Researcher Jeremiah Fowler found an unsecured database of 13.7 million records tied to AT&T, Amazon, Walmart and PayPal, linked to
Meta Notifies 1,500 After Stolen Credentials Expose GitHub Code
October 14, 2026
Meta is notifying about 1,500 people after hackers used an employee’s stolen credentials to take product code and a small
ShinyHunters Claims H&M Database Breach; Retailer Sees No Compromise
October 14, 2026
ShinyHunters claims it accessed H&M internal databases covering inventory and logistics; H&M says it is investigating and sees no sign
UK Housing Ombudsman Probes Third-Party Incident, Pauses Complaints
October 14, 2026
The UK Housing Ombudsman Service is investigating a third-party security incident at its case management system and has blocked new
Norway Fines Microsoft’s Xandr $9.6M Over Grindr Data Sharing
October 13, 2026
Norway’s data protection authority fined Microsoft-owned Xandr NOK 92 million, its largest ever, over ad auctions that exposed Grindr users’
Gentlemen Ransomware Gang Claims MoneyGram Breach, Unconfirmed
October 13, 2026
The Gentlemen ransomware gang listed MoneyGram on its leak site and set a deadline of a little over a week.
CyberXero Broker Used Claude Code Agents to Steal Ukrainian Data
October 12, 2026
A Russian-speaking initial access broker, CyberXero, ran 51 Claude Code agents to compromise WordPress sites and steal over 628,000 Ukrainian
Nippon Columbia Malware Incident Exposes 8.6M Karaoke Customers
October 12, 2026
Nippon Columbia disclosed malware on an employee computer that may have exposed records of about 8.7 million karaoke customers and
GhostAction Campaign Hits 500+ GitHub Accounts to Steal API Keys
October 12, 2026
Socket reports GhostAction, a campaign compromising more than 500 GitHub accounts and injecting workflows that harvest cloud, AI and package-registry
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.