Data Breach

Data Breach, data breach alert, data leak, data leakage, security incident, breach investigation, breach response, credential leak, personal data exposure, data theft, leaked database, exposed records, account compromise, password leak, corporate data breach, remote code execution, cyber espionage

Page 2

Compliance and Privacy

Capcom confirms CAPCOM ID breach affecting 11.7 million accounts — what users need to do

Japanese gaming giant Capcom has confirmed unauthorized access to its CAPCOM ID membership service, exposing the email addresses and related account metadata of roughly 11.7 million users. While the company says passwords for the vast majority of accounts and payment card data were not exposed, a small number of accounts contained additional personal details and a few had their passwords maliciously changed. Capcom detected suspicious activity on October 19, launched…

Saugata DattaOct 23, 20264 min read96

Automation

AWS Continuum: Turning Vulnerability Noise into Actionable, Context-Aware Fixes

Security teams are drowning in scanner output: thousands of findings a day, many irrelevant or impossible to exploit. AWS Continuum for code vulnerabilities aims to change that dynamic by validating which findings are actually exploitable in your environment, ranking issues by business impact, and proposing concrete remediations that integrate directly into developer workflows. It combines code analysis, environment context, and sandboxed reproduction to move teams from manual triage to prioritized,…

Saugata DattaOct 23, 20264 min read98

Cybersecurity

Accidental Leak Exposes Critical KSMBD Flaws in the Linux Kernel

Several unpatched Linux vulnerabilities were unintentionally posted to public mailing lists in October, exposing technical details before fixes reached production kernels. The reports, submitted by Trend Micro’s Zero Day Initiative (ZDI), included two critical flaws—each rated CVSS 9.0—that affect the kernel’s built-in KSMBD SMB file server and could enable remote code execution depending on configuration. Other reports described local privilege-escalation and information-disclosure risks across different kernel subsystems and related software.…

Saugata DattaOct 23, 20264 min read99

Compliance and Privacy

Mass Exposure: What the CPR Breach Means for 8.8 Million People in Denmark

Denmark's central population register (CPR) was the target of a large-scale data access event: unauthorized parties used a private company's legitimate access rights to query the register and, according to official statements, obtained names, addresses and personal identification numbers for roughly 8.8 million people. The activity lasted about ten days in September and was discovered by the register's administration on October 2; the company account was suspended and the case…

Saugata DattaOct 6, 20265 min read151

Compliance and Privacy

Atlassian Urges Immediate Patching After Critical Arbitrary File-Access Flaw

Atlassian has released emergency fixes for a critical arbitrary file access vulnerability that affects eight of its products — including Jira, Confluence, and Bitbucket. Tracked as CVE-2026-21589 with a CVSS score of 9.3, the flaw allows unauthenticated attackers to retrieve specific files from an application’s web root if they can guess the exact path and filename. While the bug does not let attackers enumerate directories, the ability to fetch particular…

Saugata DattaOct 6, 20264 min read187

AWS

Amazon Drops NDAs as Data Center Backlash Grows

Amazon’s recent move to stop using nondisclosure agreements (NDAs) with government agencies marks a tactical shift in a widening dispute over the role of large data centers in local communities. Announced by AWS CEO Matt Garman in a blog post, the change comes as cities and states across the U.S. consider moratoriums and tougher scrutiny of new facilities. The announcement is short but strategic: Amazon is trying to blunt a…

Saugata DattaOct 4, 20264 min read222

Compliance and Privacy

Lee Orders Nationwide Security Sweep After Multiple South Korean Bank Breaches

South Korea’s president, Lee Jae Myung, has ordered an urgent and comprehensive investigation into a string of recent data breaches that exposed personal information across several banks and finance firms. The incidents, reported in early October 2026, have raised alarms about the security of employee-support systems and third-party services that sit outside core customer banking platforms. Authorities are probing whether automated tools — including traces of AI-driven automation — played…

Saugata DattaOct 4, 20264 min read155

Compliance and Privacy

ShinyHunters’ “Rey” Detained in Jordan: What His Cooperation Means for the FBI Probe

A suspected member of the ShinyHunters group who uses the online alias “Rey” has reportedly been detained in Jordan and is cooperating with U.S. law enforcement. Identified in reporting as Saif al‑Din Khader (also known online as ReyXBF), he was allegedly taken into custody on September 29, 2026. Sources say his cooperation is already assisting the FBI and other agencies as they pursue leads to identify and apprehend additional individuals…

Saugata DattaOct 4, 20264 min read151

Automation

Critical GitLab AI Gateway Flaw: What Administrators Need to Do Now

GitLab has pushed an urgent set of security updates after disclosing a critical vulnerability in its AI Gateway that could allow authenticated users to run arbitrary commands on the gateway. Tracked as CVE-2026-90970 and rated CVSS 9.9, the flaw affects self-hosted AI Gateway deployments that support GitLab Duo AI features. While GitLab’s hosted gateways have already been patched, organizations running their own gateways must act immediately to mitigate a high-impact…

Saugata DattaOct 3, 20264 min read209

Cybersecurity

Citrix NetScaler Reboots After Emergency 0-Day Patch: What Teams Need to Know

Citrix released emergency builds to address two actively exploited zero-day vulnerabilities in NetScaler appliances, but some organizations report that the patched appliances are repeatedly rebooting. What began as a rapid mitigation effort to stop remote command execution and DTLS-related attacks has morphed into an availability problem for some deployments—raising the difficult question defenders must balance: is this an operational outage or evidence of ongoing compromise? This post explains what’s known,…

Saugata DattaOct 3, 20264 min read208

Cybersecurity

Antino: A Stealthy Backdoor That Hides in Outlook and OneDrive

A new espionage campaign tracked by Cisco Talos has exposed a sophisticated Windows backdoor, nicknamed Antino, that uses Microsoft 365 services as its covert communications channel. Targeting government and policy organizations across Asia — including Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, and Myanmar — the activity centers on highly tailored spear‑phishing lures and a multi-stage infection chain that culminates in a Rust-compiled implant communicating through Outlook and OneDrive. The…

Saugata DattaOct 3, 20265 min read204

Cybersecurity

Akira Ransomware Uses Windows Safe Mode to Shut Down EDR Before Launching Encryptor

Akira’s latest tactics expand the ransomware playbook: instead of relying solely on kernel drivers or signed binaries to disable protections, an affiliate in a recent intrusion rebooted a compromised host into Safe Mode with Networking to silence endpoint defenses while keeping network access for remote control and exfiltration. The operation began with a successful credential-spraying attack against an exposed SonicWall SSL VPN that lacked MFA, and it unfolded rapidly—domain enumeration,…

Saugata DattaAug 13, 20264 min read234

Free Tools: IP, DNS, SSL