Major Incidents or Breaches

• A former IT employee at an Iowa school district was sentenced to 21 months in prison after orchestrating a prolonged cyberattack against the district, causing significant disruption to classroom operations and deleting critical data^[2].
• Chinese state-sponsored hackers maintained undetected access for a decade on a target organization’s isolated network by hijacking the authentication stack, enabling long-term espionage and administrative visibility^[3].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Attackers compromised over 400 packages in the Arch Linux User Repository (AUR), modifying build scripts to distribute an infostealer and eBPF-based rootkit capable of stealing credentials and access tokens from affected systems ^[5][14].
• Danish pharmaceutical company Novo Nordisk disclosed a data breach impacting patient information from clinical trials ^[17].
• The state of Maine disabled its public data breach reporting portal after fraudulent breach disclosures were published on the site, prompting a procedural review ^[11].
• Iranian cyber group Handala claimed responsibility for hacking Cal Water, publishing 5GB of data including customer personal information and RTKBase platform credentials ^[25].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Danish pharmaceutical company Novo Nordisk disclosed a data breach impacting patient information from certain clinical trials^[13].
• The French government confirmed a breach of its encrypted Tchap messaging platform, affecting over 73,000 public sector employee accounts^[15].
• Kyushu Electric Power in Japan reported a physical security incident involving the loss of a drive containing personal data of 10.9 million clients^[16].
• South Korean e-commerce firm Coupang was fined a record $409 million by the Personal Information Protection Commission following a massive data breach^[21].
• Fake breach disclosures were submitted to Maine’s official breach portal and published publicly before verification, constituting a misinformation campaign^[17].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• The University of Nottingham suffered a data breach impacting over 450,000 current and former students, with the ShinyHunters group taking credit and leaking email addresses and other information^[13][39].
• Oracle PeopleSoft servers have been targeted in ongoing data theft attacks by the ShinyHunters extortion gang, who claim to have stolen data from over 100 organizations^[18].
• Data belonging to 2.4 million VRChat users has been stolen in a breach, exposing sensitive user information^[44].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Microsoft confirmed that 73 of its open-source GitHub repositories were compromised to inject password-stealing malware as part of a supply chain attack linked to the Miasma worm. Some repositories remain offline as the investigation continues, and the incident disrupted continuous integration pipelines for several Microsoft projects ^[11][27][31].
• ServiceNow disclosed a security incident where attackers exploited an unauthenticated API flaw, enabling unauthorized access to customer data. The vulnerability had reportedly been known since April and has since been patched ^[6][20][43].
• Two Russia-aligned threat actor campaigns continue to exploit a WinRAR vulnerability (CVE-2025-8088), patched last July, to deploy information stealers and conduct cyberespionage against Ukrainian government and military organizations ^[12][32].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• SoFi confirmed a data breach at its Hong Kong subsidiary following unauthorised access to a third-party vendor database containing customer information ^[15].
• The University of Oxford disclosed a data breach after its CareerConnect careers platform, managed by third-party provider Group GTI, was compromised ^[23].
• Lansing Community College reported a breach impacting 174,000 individuals, with hackers accessing personal data from college systems ^[39].
• DentaQuest, a US dental benefits administrator, suffered a breach exposing sensitive data, as reported in recent threat intelligence ^[40].
• Silent Ransom Group targeted US law firms in escalating extortion attacks, using vishing, IT impersonation, and in-person intrusions to steal data ^[24].
• Meta and WhatsApp detected and blocked new spear-phishing attacks linked to NSO Group, and Meta is pursuing a federal court contempt order against the spyware vendor for violating a no-hacking order ^[7][18][36].
• Pirated PC games are being used to distribute password-stealing malware, with over 400,000 devices reportedly infected worldwide ^[42].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Meta disclosed that over 20,000 Instagram accounts were compromised after attackers exploited Meta’s AI-powered support system to reset passwords and hijack accounts. Authorities have been notified regarding the incident ^[3][12].
• Law firms and professional services organizations in the United States have been targeted by the Silent Ransom Group, which uses fake IT support calls in social engineering attacks that lead to rapid data theft ^[6].
• Researchers revealed details of a financially motivated extortion campaign by threat actor UNC3753, which has targeted dozens of organizations across professional, legal, and financial services sectors using vishing and physical intrusions ^[1].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Hackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro WordPress plugin, enabling attackers to take complete control of affected WordPress sites ^[2].
• Hackers are using Meta’s AI bots to compromise Instagram accounts ^[4].

Newly Discovered Vulnerabilities

• A critical flaw (CVE-2026-3300) has been identified in the Everest Forms Pro plugin for WordPress, which is currently being exploited in the wild ^[2].

Trends, Tools, or Tactics of Interest

Major Incidents or Breaches

• The ShinyHunters extortion group leaked approximately 234 GB of data allegedly stolen from DentaQuest, impacting 2.6 million individuals ^[26].
• The Miasma worm campaign compromised 73 Microsoft GitHub repositories across four organizations in a major supply chain attack ^[7].
• Multiple supply chain attacks hit the npm ecosystem, with threat actors using both malicious and trojanized versions of over 50 legitimate packages to distribute Rust-based information stealers, including IronWorm and a new Miasma variant ^[9].
• Tech giant Toshiba and retailer Muji reported suspicious Polyfill login screens appearing on their websites, potentially harvesting user credentials ^[14].
• Over 900 US automatic tank gauge systems used to monitor fuel and chemical storage tanks were found exposed online and are now under active attack by threat actors ^[18][20].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• The Windows version of Hola Browser was compromised in a supply chain attack, resulting in the delivery of an undeclared cryptocurrency miner to users ^[15].
• DentaQuest, a dental benefits administrator, suffered a data breach exposing sensitive information of 2.6 million accounts ^[17].
• The United Nations World Food Programme disclosed a breach of its self-registration application for Palestine, affecting 600,000 Gaza households ^[18].
• Nightclub operator RCI reported a data breach after detecting a network intrusion in March, with files containing information on 40,000 individuals stolen ^[32].
• Unknown attackers maintained persistent access to the Outlook mailbox of a senior executive at a major global stock exchange for at least five months, exfiltrating inbox data in small batches ^[12].
• Meta’s AI support bot was manipulated by attackers to hand over control of Instagram accounts by changing recovery email addresses ^[42].

Newly Discovered Vulnerabilities