Security
Oracle Health Breach Hit Nearly 20 Million People, Texas Filing Shows
A filing with the Texas attorney general puts the 2025 Oracle Health breach at almost 20 million people. Stolen credentials opened legacy Cerner servers.
Security
Security
Legal Aid Agency Says Stolen Records Date Back to 1978
A UK government update says the 2025 hack of the Legal Aid Agency took records from as far back as 1978. About 250,000 of the stolen records predate 2007.
Security
FortiBleed Still Active as FBI Warns Hackers Are Locking Admins Out of Firewalls
A joint FBI and Secret Service advisory says FortiBleed attackers are still taking over Fortinet FortiGate devices with stolen logins and removing the real administrators.
Security
ASOS Breach: Hackers Used the App’s Own Push Alert to Announce the Theft
Customers of the UK retailer got a rogue “ASOS HACKED” notification on 6 October. The company says names and contact details were taken after an employee was tricked.
Security
GhostAction Wave Plants Credential-Stealing Workflows in Thousands of GitHub Repos
Researchers say attackers using hijacked maintainer accounts have pushed a fake “security audit” workflow to tens of thousands of GitHub repositories since 7 October. It steals cloud, AI and package-publishing keys.
Security
Hackers Exploit Unpatched AhsayCBS Backup Flaws to Hide Crypto Miners
Huntress says attackers are chaining two AhsayCBS flaws to take over backup servers. The newest release, 10.3.4, is also affected.
Security
FBI Arrests Another Suspect Tied to ShinyHunters and the FBI Jobs Portal Breach
FBI Director Kash Patel says agents arrested another suspected ShinyHunters co-conspirator. The group claimed it stole data on nearly all FBI agents and applicants.
Security
Suspected AI-Driven Hacks Hit Major South Korean Banks, Exposing Loan Data
Shinhan, KB Kookmin and Hana banks have reported breaches, and officials suspect AI agents were used. Customer income and loan details were taken, which raises the risk of follow-up fraud.
Security
Ransomware Affiliate “Azazel” Used an AI Coding Assistant to Attack Networks
CloudSEK researchers say a ransomware affiliate working with the Gentlemen group ran attacks through an AI coding assistant. The operation reached enterprises in six countries.
Security
FBI: China-Linked Hackers Ran Portal Giving Others Access to Stolen Email
A joint advisory says hackers tied to Integrity Technology Group stole email from agencies and hospitals and ran a web app that gave third parties access to it.