Russian State-Backed Threat Actor Exploits Zimbra Zero-Day To Steal Emails & Authentication Data post, juli 24, 2026juli 27, 2026 A Russian state-supported hacking group has been exploiting a previously unknown vulnerability in Zimbra Collaboration Suite to silently steal emails, passwords, two-factor authentication codes and corporate address books from government and commercial organizations across Western countries. The campaign, attributed to a threat group primarily known as Laundry Bear, has been… Continue Reading
Professional Services Giant Ernst & Young (EY) Hacked post, juli 17, 2026juli 20, 2026 Ernst & Young has begun notifying clients of a data breach after an attacker compromised a third-party support platform and downloaded documents containing personal and financial information used in preparing tax returns. The incident affected an external IT service-management system used by EY employees supporting the firm’s client tax services…. Continue Reading
Accenture Confirms Security Breach Following Claims of Stolen Source Code post, juli 8, 2026juli 17, 2026 One of the world’s largest technology consulting firms is investigating a security incident after a threat actor claimed to have stolen tens of gigabytes of internal development data allegedly belonging to Accenture. The individual, using the online alias “888,” has advertised what they describe as approximately 35GB of confidential company… Continue Reading
Zara data breach exposed personal information of 197,000 people post, mei 8, 2026mei 13, 2026 Hackers who gained access to the databases of Spanish fast-fashion retailer Zara stole data belonging to more than 197,000 customers, according to data breach notification service Have I Been Pwned. Zara has over 1,500 company-managed and franchised stores worldwide and is the flagship brand of the Inditex Group, one of… Continue Reading
Instructure hacker claims data theft from 8,800 schools, universities post, mei 5, 2026mei 6, 2026 The hacker behind a breach at education technology giant Instructure claims to have stolen 280 million records tied to students and staff from 8,809 colleges, school districts, and online education platforms. Instructure is a cloud-based education technology company best known for its Canvas learning management system, which schools and universities… Continue Reading
Checkmarx Investigates Dark Web Data Leak Following Supply Chain Cyberattack post, april 27, 2026april 29, 2026 Israeli application security firm Checkmarx has confirmed that data linked to its internal systems has surfaced on the dark web, following a sophisticated supply chain cyberattack first detected on March 23, 2026. The company says its investigation is ongoing, as cybersecurity experts warn the incident could have wider implications for… Continue Reading
Home security giant ADT data breach affects 5.5 million people post, april 27, 2026april 29, 2026 The ShinyHunters extortion group stole the personal information of 5.5 million individuals after breaching the systems of home security giant ADT earlier this month, according to data breach notification service Have I Been Pwned. Founded in 1874 as American District Telegraph, ADT is the oldest and largest home security company… Continue Reading
ICT-systemen gemeente Epe gehackt, gegevens gelekt post, maart 14, 2026maart 16, 2026 De gemeente weet nog niet precies om welke gegevens het gaat. Dat wordt op dit moment onderzocht. Epe verwacht daar maandag meer duidelijkheid over te kunnen geven. De betrokkenen worden dan zo snel mogelijk geïnformeerd. ‘Systemen weer veilig’ Inmiddels zijn volgens de gemeente samen met cyber security-experts de systemen gecontroleerd… Continue Reading
Coinbase confirms insider breach linked to leaked support tool screenshots post, februari 4, 2026 Coinbase has confirmed an insider breach after a contractor improperly accessed the data of approximately thirty customers, which BleepingComputer has learned is a new incident that occurred in December. “Last year our security team detected that a single Coinbase contractor improperly accessed customer information, impacting a very small number of… Continue Reading
Head of U.S. Cyber Defence Uploaded Sensitive Documents To ChatGPT post, januari 29, 2026januari 30, 2026 The acting director of the U.S. Cybersecurity and Infrastructure Security Agency (CISA), Madhu Gottumukkala, has sparked a high-stakes internal security review after uploading sensitive government contracting documents into the public version of ChatGPT, potentially exposing material not meant for broader dissemination. While the documents were not classified, they were marked… Continue Reading