Pentagon Records Agency Breach Exposes Data on 3 Million
September 30, 2026
A breach of the Pentagon’s Defense Manpower Data Center exposed unencrypted personal data on 3 million people, with notice sent
News
Pentagon Records Agency Breach Exposes Data on 3 Million
A breach of the Pentagon's Defense Manpower Data Center exposed unencrypted personal data on 3 million people, with notice sent months after discovery.
France Tax Agency Breached Seven Weeks via Stolen Passwords
An attacker used infostealer-harvested passwords to breach France's DGFIP tax portals for seven weeks, exposing millions of taxpayer and business records.
Citrix NetScaler Zero-Days Deployed WHIPSHOT, SLAPSHOT
Attackers exploited two Citrix NetScaler zero-days to plant custom WHIPSHOT and SLAPSHOT malware, hitting government, financial, and legal-sector networks.
FBI Tells ShinyHunters Members to Turn Themselves In
The FBI publicly urged remaining ShinyHunters members to surrender after Dutch police arrested an alleged leader in Amsterdam and found plans for murders.
Russia’s Star Blizzard Targets 100+ Orgs With Fake Invites
Microsoft says Russian state-backed group Star Blizzard used fake event invitations to install a Windows backdoor at more than 100 Ukraine-linked organizations.
New Spectre-v2 BTR Attack Leaks Linux Root Password Hashes
Academics disclosed a Spectre-v2 variant called BTR that bypasses existing mitigations and recovers Linux root password hashes on Intel systems in minutes.
Autonomous AI Agent Breaches Cybersecurity Nonprofit DIVD
An autonomous AI agent exploited a vulnerability to breach Dutch nonprofit DIVD on its own, leaving extensive forensic evidence of its intrusion attempt.
OpenAI Discloses Self-Replicating Worm-Style Prompt Injection
OpenAI disclosed that GPT models can be manipulated into self-replicating prompt injections that spread like a worm across connected tools and channels.
Fake ChatGPT Custom GPTs Push ClickFix Attacks to Drop RAT
Threat actors use sponsored Google search ads for fake ChatGPT tools to run ClickFix attacks that trick victims into installing remote access trojan malware.
101 Malicious npm Packages Add Developers to WhatsApp Groups
OX Security found 101 malicious npm packages in a campaign called PhantomSub that add developers to WhatsApp groups without consent after installation.
France Tax Agency Breached Seven Weeks via Stolen Passwords
September 30, 2026
An attacker used infostealer-harvested passwords to breach France’s DGFIP tax portals for seven weeks, exposing millions of taxpayer and business
Citrix NetScaler Zero-Days Deployed WHIPSHOT, SLAPSHOT
September 30, 2026
Attackers exploited two Citrix NetScaler zero-days to plant custom WHIPSHOT and SLAPSHOT malware, hitting government, financial, and legal-sector networks.
FBI Tells ShinyHunters Members to Turn Themselves In
September 30, 2026
The FBI publicly urged remaining ShinyHunters members to surrender after Dutch police arrested an alleged leader in Amsterdam and found
Russia’s Star Blizzard Targets 100+ Orgs With Fake Invites
September 30, 2026
Microsoft says Russian state-backed group Star Blizzard used fake event invitations to install a Windows backdoor at more than 100
New Spectre-v2 BTR Attack Leaks Linux Root Password Hashes
September 30, 2026
Academics disclosed a Spectre-v2 variant called BTR that bypasses existing mitigations and recovers Linux root password hashes on Intel systems
Autonomous AI Agent Breaches Cybersecurity Nonprofit DIVD
September 30, 2026
An autonomous AI agent exploited a vulnerability to breach Dutch nonprofit DIVD on its own, leaving extensive forensic evidence of
OpenAI Discloses Self-Replicating Worm-Style Prompt Injection
September 30, 2026
OpenAI disclosed that GPT models can be manipulated into self-replicating prompt injections that spread like a worm across connected tools
Fake ChatGPT Custom GPTs Push ClickFix Attacks to Drop RAT
September 30, 2026
Threat actors use sponsored Google search ads for fake ChatGPT tools to run ClickFix attacks that trick victims into installing
101 Malicious npm Packages Add Developers to WhatsApp Groups
September 30, 2026
OX Security found 101 malicious npm packages in a campaign called PhantomSub that add developers to WhatsApp groups without consent
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.