Ernst & Young (EY) disclosed a data breach resulting from unauthorized access to a third-party support ticket system used by its IT personnel. The breach occurred between March 28 and April 12, 2026, and was detected on April 23, 2026. The compromised system contained support tickets that may have included documents with client tax information, including personal and financial data used in tax filings. EY has secured its systems, notified law enforcement, and is offering affected clients 24 months of identity monitoring and restoration services. The company has not disclosed the exact number of affected customers or the geographic scope of the breach. There is no indication of misuse or targeted attacks on individuals, and no known extortion or ransomware activity has been linked to this incident.
The Coca-Cola Company disclosed a ransomware attack targeting its Fairlife dairy subsidiary, causing a temporary suspension of Fairlife product production across the United States. The attack involved unauthorized access to production-related systems. Coca-Cola activated incident response and business continuity protocols and is investigating the impact with external cybersecurity experts. Product quality and safety remain unaffected. Canadian operations are not impacted. No data breach or ransom demand has been confirmed, and no ransomware group has claimed responsibility. The full impact and potential material effect on the company are still under assessment.
Genetic testing company 23andMe has agreed to pay $18 million to settle claims from a coalition of 43 attorneys general that it failed to protect customers' genetic data. [...]
A LinkedIn user reported that their account was hacked and subsequently recovered by Microsoft within a few hours. The user identified two individuals allegedly involved in the hacking activity based on message trails left on LinkedIn. The incident was shared on Reddit in a hacking-related subreddit but lacks detailed technical information or evidence of a broader exploit or vulnerability.
The D1R cybercrime group claimed to have stolen data from Synopsys and Bosch, threatening to leak it unless a ransom is paid. Synopsys conducted an investigation and found no evidence of unauthorized access or data breach. The purported leaked data appears to be publicly available information, and Bosch has not confirmed any breach. The claims by the threat actor remain unsubstantiated.
Lidl disclosed a data breach affecting customers in Germany, Belgium, and the Netherlands due to a hack of a third-party service provider. Attackers accessed and stole personal information from a separately stored file containing customer data related to Lidl's online shop. The online shop systems themselves were not compromised. Stolen data includes customer names, contact details, dates of birth, and customer numbers, with potential but unconfirmed exposure of passwords, billing, delivery addresses, and payment information. Lidl has notified affected customers and relevant authorities and warned about possible phishing attempts.
This is a report about an individual named Sascha P who salvaged and revived a historic Bulletin Board System (BBS) from being discarded. The story involves hacking into the original setup to restore the BBS and becoming a dial-up sysop in 2023. The content is presented as a talk and linked via a YouTube video. There is no detailed technical vulnerability or exploit information provided.
For the latest discoveries in cyber research for the week of 13th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES U.S. auto insurer AssuranceAmerica has disclosed a data breach affecting approximately 7 million people. Attackers targeted an employee and used compromised credentials to access company systems, stealing names, contact information, driver’s license numbers, insurance policy and account data, vehicle information, and claims details. Latvia’s state-owned forestry company Latvijas Valsts Meži has suffered a ransomware attack that disrupted mapping, hunting, contractor, and customer systems. Attackers exploited a system that had remained unpatched for two years and leaked approximately 44GB of internal documents, credentials, cryptographic keys, source code, and email correspondence. Injective Labs, a developer of blockchain and cryptocurrency software, has experienced a supply chain compromise after attackers accessed its SDK project and published malicious npm packages. The affected releases exfiltrated cryptocurrency wallet private keys and seed phrases when developers used legitimate key-generation functions embedded in the compromised software. Moody Bible Institute, a U.S. faith-based educational institution, has disclosed a data breach affecting more than 2.3 million donors, students, alumni, and supporters. The ShinyHunters extortion group published allegedly stolen information, including names, dates of birth, residential addresses, email addresses, and phone numbers. AI THREATS Researchers profiled JadePuffer, an autonomous ransomware operation that used a large language model to conduct an intrusion without direct human control. The operation exploited CVE-2025-3248 in an exposed Langflow instance, accessed a production MySQL server, exfiltrated selected information, deleted the database, and issued an extortion demand. Researchers showed that malicious instructions hidden inside open-source project files could achieve remote code execution through Anthropic Claude Code and OpenAI Codex. When operating with automated permissions, the coding agents processed the instructions and executed attacker-controlled scripts, demonstrating a risk that may affect other autonomous development tools. Researchers disclosed Rogue Agent, a vulnerability in Google Dialogflow CX that allowed users with limited agent-editing permission to insert persistent malicious code. The injected code could capture and exfiltrate chatbot conversations. Google addressed the issue, and no known customer environments were compromised through the vulnerability. VULNERABILITIES AND PATCHES Multiple Tenda router models are affected by CVE-2026-11405, an undocumented authentication backdoor that provides administrative access through a hidden password. The flaw affects several FH1201, W15E, AC10, AC5, and AC6 firmware versions and allows attackers to bypass configured credentials and modify device and network settings. Linux maintainers have patched CVE-2026-53359, a critical vulnerability in the Kernel-based Virtual Machine hypervisor. A malicious guest virtual machine could corrupt host kernel memory and potentially escape into the host environment. The flaw affects Intel and AMD x86 systems and is particularly relevant to shared cloud infrastructure. U-Boot has addressed six vulnerabilities affecting signature verification of Flattened Image Tree files used during secure boot. Two flaws could enable arbitrary code execution while a device loads a supposedly verified image, and four could cause crashes. The affected bootloader is widely used in routers, cameras, and embedded controllers. Opera has addressed a critical vulnerability in the Opera GX browser that allowed malicious websites to install browser modifications without user confirmation. An attacker-controlled modification could inject styles across open tabs, leak information such as Gmail addresses, and crash the browser. Opera corrected the issue. TH…
The WorldLeaks extortion group claimed to have stolen 720 GB of data from the healthcare testing and laboratory services provider. The post Centers Laboratory Data Breach Affects 540,000 Individuals appeared first on SecurityWeek .
This entry describes an Ask Me Anything (AMA) post by a SOC Analyst with 4 years of experience in incident response and threat detection on Reddit. It is a discussion and career advice post rather than a security threat or vulnerability.
The Dutch National Police (Politie) says it has found "strong indications" that Dutch hackers have been involved in a February breach at the telecommunications provider Odido. [...]
Other noteworthy stories that might have slipped under the radar: Abnormal AI sued by Anthropic, AssuranceAmerica data breach affects 7 million people, NSA brings back TAO. The post In Other News: DHS Database Hacked, Adobe Boosts Patch Cadence, Canada Disrupts Ransomware Ops appeared first on SecurityWeek .
Hackers exploited a zero-day vulnerability in a third-party system to access a KDDI email system for ISPs. The post 12 Million Impacted by Data Breach at Japanese Telco KDDI appeared first on SecurityWeek .
Multiple official .gov domains, including Woodway, TX and NYC Council, have been found to have pornographic PDF files indexed by Google. These PDFs contain titles referencing adult content and are publicly accessible via search engines, suggesting possible SEO spam or unauthorized uploads. The main websites appear to function normally, but the presence of these indexed PDFs indicates a potential compromise or misuse of the hosting infrastructure. Similar issues have been observed on other government domains such as louisiana.gov and lacity.gov, implying a broader problem affecting multiple government sites.
A data breach involving European cloud provider Nextcloud resulted in the exposure of 367,000 records containing information about staff and clients. The leaked data reportedly includes scripts tailored for clients to set up Nextcloud. The incident was reported via a Reddit cybersecurity post linking to an external news source. There is no detailed technical information about the cause or specific vulnerability that led to the leak. No known exploits or patches are referenced in the available data.
American insurance company AssuranceAmerica has disclosed a data breach impacting nearly 7 million drivers after attackers gained access to its systems earlier this year. [...]
This content is an article discussing personal insights and challenges related to working in cybersecurity incident response (IR). It highlights the high stress levels, the non-technical aspects such as organizational politics and communication, and the critical nature of IR roles in protecting organizations. The article does not describe a specific security vulnerability, exploit, or breach event.
Mount Royal University in Calgary says hackers stole and then deleted data from its file storage systems after breaching the university's network. [...]
The professional services giant says it contained the incident, remediated its source, and experienced no operational or service delivery impact. The post Accenture Confirms Data Breach After Hacker Claims Source Code Theft appeared first on SecurityWeek .
Japanese telecommunications giant KDDI says that millions of people had their email addresses and passwords exposed after attackers breached an email platform used by five internet service providers (ISPs) in the country. [...]
