UPDATED
Breach Watch tracks genuine security incidents -- data breaches, ransomware attacks, zero-day exploits, supply-chain compromises and nation-state campaigns -- and classifies each one as critical, high, medium or low severity.
Sources include specialist security desks, CISA's Known Exploited Vulnerabilities catalogue and AlienVault OTX threat-intel pulses, so security teams see actively exploited CVEs alongside the news coverage.
CISA KEV · · Critical severity
Google Brotli Unchecked Return Value Vulnerability. Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory...
CISA KEV · · Critical severity
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability. Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution...
Fast Company Tech · · Medium severity
A cybersecurity firm run by former members of Elon Musk’s Department of Government Efficiency (DOGE) says it has broken into internal data and messaging systems at Anthropic. Perhaps even more surprising, though, is its claim that it...
The Hacker News · · Medium severity
Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator. TrendAI, which...
HackRead · · Medium severity
The US Cybersecurity and Infrastructure Security Agency (CISA) added two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, to its…
BleepingComputer · · Medium severity
Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that do not receive automatic certificate trust updates.
TechRadar · · Medium severity
Benedict is a Senior Security Writer at TechRadar Pro, where he has specialized in covering the intersection of geopolitics, cyber-warfare, and business security. Benedict provides detailed analysis on state-sponsored threat actors, APT...
Help Net Security · · Medium severity
A vulnerability in Brotli, Google’s widely used open-source compression library, is putting a broad range of software at risk. About CVE-2026-111497 Alternatively known as “Node2Shell”, “Broccoli2Shell” and “Brotli2Shell”,...
Slashdot · · High severity
An anonymous reader quotes a report from ProPublica: A Florida man who was the subject of a 2019 investigation by ProPublica was indicted last month on federal charges that he defrauded clients of his ransomware data recovery firm....
AlienVault OTX · · Critical severity
Two critical use-after-free vulnerabilities in the PHP engine, CVE-2026-109618 and CVE-2026-109619, rated CVSS 9.2, affect the session.upload_progress feature. These flaws trigger during multipart request parsing before application code...
AlienVault OTX · · Medium severity
Wiz Research has been monitoring exploitation attempts targeting two critical PHP vulnerabilities since their public disclosure on October 21, 2026. While no successful attacks have been observed in their telemetry, some private...
AlienVault OTX · · Medium severity
ICMacOS (Icarus macOS) is a newly identified macOS Malware-as-a-Service stealer actively marketed since September 2026 by the Russian-speaking actor GlowComa on underground forums. The malware targets macOS systems running Sierra...
AlienVault OTX · · Medium severity
Attackers compromised camera management software (CMS.exe) to gain initial access to multiple organizational environments. Following compromise, adversaries deployed rs.win32.exe into user AppData directories and leveraged DLL...
AlienVault OTX · · Critical severity
A Brazilian Magecart group, active since 2024, conducted a supply chain attack by injecting a card skimmer into the Plausible analytics script of Brazilian ecommerce platform Convertr. Starting October 24, 2026, all Convertr checkouts...
Ubuntu security notices · · Medium severity
Ali Mashally discovered that authd did not properly validate user identities when matching accounts from identity providers. An attacker could possibly use this issue to gain access to another user's local account and files, resulting...
darkreading · · Medium severity
The malware's focus on AI tools expands the traditional infostealer playbook to expose a forest of AI sessions, sensitive business data, and developer infrastructure from a single compromised endpoint.
Infosecurity Magazine · · High severity
The University of New Mexico is working to restore systems following the incident, which has been claimed by the BYOD ransomware group
The Hacker News · · Medium severity
Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting...
BleepingComputer · · Medium severity
Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack on a third-party vendor in the project's infrastructure.
The Register · · Medium severity
The University of New Mexico is canceling classes across the medicine, nursing, and pharmacy faculties for a second day amid continued efforts to recover from a "cybersecurity event." The attack targeted the Health Sciences Center on...
CISA Alerts · · Medium severity
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, corrupt memory, disclose sensitive information, or potentially execute arbitrary code. The following...
CISA Alerts · · Medium severity
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code (CVE-2023-4863), bypass authentication (CVE-2026-16436 and CVE-2026-16437), or perform arbitrary operations...
AlienVault OTX · · Medium severity
Three malware campaigns using VBScript have been identified targeting victims primarily in Brazil and Portugal through phishing attacks. The campaigns deliver Overlord RAT, Lampion trojan, and an unknown RAT using fake legal notices,...
IT Pro · · Medium severity
Nicole Kobie first started writing for ITPro in 2007. As a freelance journalist covering technology and business, Nicole's work includes bylines in New Scientist, Wired, PC Pro and many more. Nicole the author of a book about the...
AlienVault OTX · · Medium severity
Security researchers uncovered DarkCore, a remote access trojan distributed through cybercrime networks with advanced credential theft and session hijacking capabilities. The threat features a dedicated browser that reuses stolen...
The Record by Recorded Future · · Medium severity
For about two hours on Monday, the organization diverted ambulances to health systems in Albuquerque and Santa Fe. They were forced to suspend outpatient surgeries and appointments for the remainder of the day.
HackRead · · Medium severity
Hackers impersonate IT support in Microsoft Teams external chats, tricking employees into granting remote access and installing malware on corporate computers.
The Register · · Medium severity
The US government's cybersecurity watchdog has confirmed attackers are exploiting both critical PHP2Shell vulnerabilities, giving federal agencies three days to patch the bugs that have wreaked havoc across the web over the past week....
TechCrunch Security · · Medium severity
government cyber agency warns that hackers have figured out a way to exploit the popular PHP software, used in 70% of the web's software.
CERT Polska · · Medium severity
W oprogramowaniu KGS Software tia Viewer wykryto podatność typu Stored Cross-Site Scripting (CVE-2026-105987).
Help Net Security · · Medium severity
Threat actors are flooding employees’ inboxes with spam and then contacting them on Microsoft Teams as IT support, offering to fix the problem they created, Arctic Wolf has found. The security company documented more than 400 incidents...
BleepingComputer · · Medium severity
Attackers are increasingly abusing legitimate IT tools, Microsoft 365 sessions, and everyday workflows to compromise businesses without triggering traditional defenses. Huntress Labs ranks the threats hitting organizations hardest,...
Medianama · · Medium severity
Ashish Kumar Chauhan, the National Stock Exchange (NSE) chief, has asked a stockbrokers’ body, the Association of National Exchanges Members of India (ANMI), to set up a special task force to battle against AI-driven cyberattacks....
The Record by Recorded Future · · Medium severity
Cybercriminals are stuffing infostealer malware into bogus apps aimed at tracking gas prices, police activity, drone strikes and other information of concern to average Russians, researchers said.
Wired Security · · Medium severity
Jess Asato’s public campaigning for victims of online abuse put her in the crosshairs of Grok’s deepfake scandal. Then the UK member of parliament became a victim of the abuse herself.
Flashpoint · · Critical severity
Table Of Contents Table of Contents Introducing Ransomware in the Age of AI: A Survival Guide for Defenders Understanding the Modern Ransomware Attack Lifecycle Build a More Proactive Defense Against Ransomware More subscribe to our...
TNW · · Medium severity
Bitdefender has launched GravityZone Exposure Management, which combines vulnerability discovery, internet-facing asset scanning, attack-path mapping and per-user hardening. It is available now on Windows, as an add-on or standalone....
BGR · · Medium severity
As per a new report, Samsung TVs could allegedly use other Bluetooth devices around you to listen to you all the time. Here's how it's a privacy breach.
TechRadar · · High severity
Over 525,000 hit in massive University of Copenhagen data breach
The Record by Recorded Future · · Medium severity
More than half of the individual warnings from the Australian Signals Directorate (ASD) drew on previously secret material that had been cleared for disclosure, underscoring the growing role of intelligence sharing to prevent attacks.
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free