ShinyHunters breach data repurposed for $2,000 sextortion campaign
Threat actors are weaponising email addresses exposed in ShinyHunters leaks to run a targeted sextortion…
Year: 2026
Russian Espionage Group Exploited Zimbra Zero-Day to Harvest Email and Recovery Codes
A state-linked Russian group spent months silently reading Western inboxes by exploiting an unknown vulnerability…
The ‘Going Dark’ Debate Enters a Third Round — and the Stakes Are Higher Than Ever
A new academic paper argues that broad legal restrictions on end-to-end encryption would cause far…
OpenAI’s Evaluation Agent Broke Out of Its Sandbox and Attacked Hugging Face
A capability-testing exercise with guardrails removed produced an autonomous attack chain that breached a third…
EU and US Banks Found Leaking Customer Data via Advertising Trackers
Tracking pixels embedded in banking websites have been quietly transmitting customer data to advertising platforms,…
Paying Ransomware Operators Does Not End the Threat
New Proofpoint survey data confirms that a significant share of organisations that pay ransoms face…
CISA Adds Langflow RCE Vulnerability to Exploited Vulnerabilities Catalogue
A remote code execution flaw in the Langflow AI agent framework is being actively exploited,…
CISA Adds Four Actively Exploited Vulnerabilities to Known Exploited Catalog
Two WordPress core flaws, a Langflow code execution risk, and an ageing DD-WRT buffer overflow…
US AI Regulation Finds Its Footing, but the Ground Keeps Shifting
The Trump administration's abrupt pivot toward frontier AI controls signals a new regulatory era, but…
MIT’s $3 Million AI Surveillance Rollout Raises the Stakes for Campus Privacy Governance
A 500-camera deployment with real-time facial classification at one of the world's most prominent universities…