Pentagon DMDC breach exposed sensitive data of over 3 million people
A breach at the Pentagon's DMDC exposed sensitive data of more than 3 million military and civilian personnel.
In this digest
Security Intel Feed
Cyber Hose
Page 19 of 92
Read digest
Bitwarden Server Authentication Bypass via SSO Identifier
Bitwarden Server authentication bypass via SSO identifier (CVE-2026-101878, CVSS 7.7) leads this digest.
Read digestBitget attacker tested risk controls before $388M theft, CEO says
Bitget's $388M theft exploited a third-party zero-day; plus high-severity CVEs in gz-yami mall4j and a Ziroom ZHOME command injection advisory.
In this digest
Apple emergency patch fixes exploited CVE-2026-86950 in iOS 26
Apple rushes an emergency patch for an actively exploited iOS and macOS flaw, while researchers discuss the rise of fully automated LLM-driven hacking.
In this digest
Times Car confirms data breach affecting 6.6 million user accounts
Times Car breach hits 6.6M accounts, Keio railway hit by ransomware, Carbonato botnet steals AI keys, and Microsoft tracks NeedyMantis malware.
In this digest
Bitget: Third-Party Security Product Zero-Day Used to Steal $388M
Bitget loses $388M to a third-party zero-day exploit, 16,000 Supabase databases leak PII, and Authlib's JWS bug allows unsigned token bypass.
In this digest
JadePuffer AI attacks target Azure tenants, wipe cloud resources
JadePuffer ransomware uses compromised Azure service principals for AI-driven destructive attacks; Chrome extension spyware hits millions.
In this digest
ShinyHunters bypasses WAFs to exploit Oracle PeopleSoft flaw
ShinyHunters mass-exploits Oracle PeopleSoft via WAF bypass, 80,000+ orgs hit by AI credential theft, and Dutch police arrest a ShinyHunters associate.
In this digest
DC Health Agency Exposes 400,000 Medicaid Beneficiary Records
A DC health agency data exposure hits 400,000 beneficiaries, plus a rogue MFA Entra attack, Proton Mail spoofing, and multiple CVSS 8.8 CVEs.
In this digest
JADEPUFFER Used Compromised Azure Principals to Delete Cloud Resources
JADEPUFFER exploited leaked Azure service principal credentials to delete storage and cloud resources in a ransomware-aligned attack.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check