ToxicPanda 2.0 Targets 349 Financial Apps and Steals Android Lock Credentials 2026-08-20 True Waqas True Hacker Leaks 1,033 Stripe Merchant API Keys and 688K Customer Records 2026-08-20 True Deeba Ahmed True Server Mistake Exposes StopAndProtect’s Hacked WordPress Network 2026-08-19 True Waqas True MessiahGPT Criminal AI Service Advertised on BreachForums 2026-08-18 True Waqas True XSS2Shell Vulnerability Puts 500 Million WordPress Sites at Risk of RCE 2026-08-10 True Deeba Ahmed True OctLurk and SilkLurk Windows Backdoors Target Governments in 6 Countries 2026-08-05 True Waqas True “I’m Allowed”: Hackers Use Simple Claims to Bypass AI Guardrails 2026-08-05 True Deeba Ahmed True Brazil Health Surveillance Database Exposed 79GB of Sensitive Records 2026-08-05 True Deeba Ahmed True Kali365 Exploits Microsoft Device Login to Access US Corporate Data 2026-08-05 True Owais Sultan True Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages 2026-08-04 True Deeba Ahmed True Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software 2026-08-04 True Deeba Ahmed True COLDCARD Seed Generation Flaw Linked to Nearly $89 Million Bitcoin Theft 2026-08-03 True Waqas True H96 Android TV Boxes Used for Ad Fraud and Residential Proxies 2026-08-03 True Waqas True Hackers Exploit N-able N-central Flaw After Initial Fix Falls Short 2026-08-03 True Waqas True Anthropic Says Claude Models Hacked 3 Organizations During Cyber Tests 2026-07-31 True Waqas True Wordfence Finds Critical Backdoor in ARVE WordPress Plugin 2026-07-31 True Waqas True Microsoft Fixes CosmosEscape Flaw That Could Allow Any Cosmos DB Takeover 2026-07-30 True Waqas True LeakNet Claims 11TB of Data Stolen in NYC Health + Hospitals Breach 2026-07-30 True Waqas True CVSS 10.0 RufRoot Flaw Allowed Attackers to Hijack Ruflo Without Logging In 2026-07-29 True Waqas True 22-Year-Old IPMI Flaw Exposes 24,000 Servers to Offline Password Cracking 2026-07-29 True Waqas True PhantomEnigma Infects Organizations with Malware via Hijacked Government Websites 2026-07-28 True Owais Sultan True ShinyHunters Claims Ernst & Young (EY) Data Breach, Threatens July 31 Leak 2026-07-28 True Waqas True Fake IT Calls on Microsoft Teams Lead to GoGRPC Backdoor Infections 2026-07-28 True Waqas True Microsoft Fixes Certighost Flaw That Allowed Domain Controller Impersonation 2026-07-27 True Waqas True Hackers Compromise Hotel Wi-Fi Gateways to Hijack Microsoft 365 Accounts 2026-07-27 True Waqas True Google Indexed Claude AI Shared Chats Before Results Were Removed 2026-07-27 True Waqas True Tego AI Discloses Second Claude Flaw in a Week: Hidden Link Silently Sends Files to Attackers 2026-07-24 True CyberNewswire True Russian Hackers Used a Zimbra Zero-Day to Steal Emails Without Link Clicks 2026-07-24 True Waqas True New Dolphin X Malware Uses AI Profiler to Rank High-Value Victims 2026-07-24 True Waqas True New TrickBot Variant Spotted Using DNS to Control Infected Windows PCs 2026-07-23 True Waqas True OpenAI Models Escaped Test Environment and Breached Hugging Face 2026-07-22 True Waqas True New Ubuntu Desktop Vulnerability Turns Local Access Into Root Control 2026-07-22 True Waqas True Fake FBI Agents Use IC3 Complaint Scams to Target Fraud Victims 2026-07-21 True Waqas True Hugging Face Says Autonomous AI Agent System Breached Production Infrastructure 2026-07-20 True Waqas True LG Monitors Spotted Installing Adware-Like App on Windows PCs 2026-07-20 True Waqas True FBI Arrests Florida Man in $220,000 Steam Crypto Theft Case 2026-07-20 True Waqas True “TTF Trap” Phishing Emails Use Fake Font Files to Deliver Windows Malware 2026-07-17 True Waqas True Two Scattered Spider Members Sentenced to 5.6 Years Over TfL Cyberattack 2026-07-16 True Waqas True OkoBot Malware Uses ClickFix, Hidden Browser Extensions to Steal Crypto Data 2026-07-16 True Waqas True Fake Céline Dion Paris Tickets Sold on Facebook and Ticketmaster Clones 2026-07-15 True Waqas True PromptFiction Flaw Auto-Submitted Hidden Prompts in Claude Desktop 2026-07-15 True Waqas True Microsoft’s July 2026 Patch Tuesday fixes 622 flaws and 2 exploited zero-days 2026-07-15 True Waqas True Upwind Finds Coordinated Supply Chain Campaign Compromising Multiple AsyncAPI npm Packages 2026-07-14 True Owais Sultan True Tego AI Finds Claude Tag Slack Integration Can Trigger Unauthorized Enterprise Actions 2026-07-14 True CyberNewswire True Millions of Microsoft Entra Accounts Targeted in OAuth Client ID Spoofing Campaigns 2026-07-14 True Waqas True Cybersecurity Negotiator Gets 70 Months for Helping BlackCat Extort Victims 2026-07-10 True Waqas True Microsoft Warns of GigaWiper Backdoor Built to Destroy Windows PCs 2026-07-09 True Waqas True AI Gateway Connected to Amazon Bedrock Hijacked for Cryptomining 2026-07-09 True Waqas True GhostApproval Flaws Let Top AI Coding Tools Write Outside Workspaces 2026-07-09 True Waqas True Armored Likho Hits Government, Energy Sectors With BusySnake Stealer 2026-07-08 True Waqas True 
