What's happening in security
Breaches, credential dumps, actively exploited bugs and AI incidents — pulled from 2,929 items across public feeds, Have I Been Pwned and CISA KEV.
Biggest this week
- Unauthenticated attackers are bypassing Cisco ISE’s management interface (CVE-2026-76460) — Help Net Security, 5h ago
- Google fixes actively exploited Android zero-day on Pixel devices — BleepingComputer, 1d ago
- Cisco warns customers of actively exploited zero-day in email gateways — CyberScoop, 2d ago
- Cisco patches actively exploited email gateway zero-day (CVE-2026-76461) — Help Net Security, 2d ago
- Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day — SecurityWeek, 9h ago
-
Charter: 4,851,517 accounts breached
Data exposed: Email addresses, Job titles, Names, Phone numbers, Physical addresses. In May 2026, the telecommunications company Charter Communications (the parent company behind the consumer broadband and cable brand Spectrum) wa…
-
Kemper: 269,299 accounts breached
Data exposed: Email addresses, Names, Partial credit card data, Phone numbers, Physical addresses, Purchases. In April 2026, the American insurance holding company Kemper Corporation was named by the ShinyHunters ransomware group …
-
Mytheresa: 84,108 accounts breached
Data exposed: Email addresses, Names, Partial credit card data, Phone numbers, Physical addresses, Purchases, Salutations. In April 2026, the luxury fashion e-commerce platform Mytheresa was listed as a victim of the ShinyHunters …
-
Ameriprise: 502,597 accounts breached
Data exposed: Email addresses, Employers, Financial transactions, Job titles, Names, Phone numbers, Physical addresses. In March 2026, the financial services firm Ameriprise Financial was named by the ShinyHunters group in a "pay …
-
Security Roundup May 2026
Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants. Verizon DBIR spotlights software vulnerabilities For the first time in the history of Verizon’s Data Breach Investigations R…
-
7-Eleven: 185,256 accounts breached
Data exposed: Dates of birth, Email addresses, Names, Phone numbers, Physical addresses. In April 2026, 7-Eleven was the victim of a "pay or leak" extortion campaign by ShinyHunters , with the data later published that month. The …
-
Dragonica Lunaris: 126,293 accounts breached
Data exposed: Dates of birth, Email addresses, Names, Passwords, Spoken languages, Usernames. In December 2025, the European Dragonica private server Dragonica Lunaris suffered a data breach. The incident exposed 126k email addres…
-
Windows93 / Myspace93: 46,105 accounts breached
Data exposed: Email addresses, IP addresses, Passwords, Usernames. In January 2021, the parody site Windows93 suffered a data breach of the Myspace93 sub-site after a beta application was exploited to download server files. The co…
Last fetch 7m ago · 0 new · 2 source error(s)