A new hacking group claims it stole 135,000 records from a UK police platform, exposing contact details that could support phishing and impersonation.
Tag: eSecurity Planet
GitHub Account Breach Fuels Shai-Hulud npm Supply Chain Attack
A compromised GitHub account fueled a supply chain attack, spreading credential-stealing malware across hundreds of packages.
Black Hat 2026: Improving CISO to Board Cyber Risk Reporting
A Pulse Security report finds that effective board cyber risk reporting depends more on governance than presentations.
AI Agent Harnesses Can Change Red Teaming Results
Lasso research finds AI agent harnesses can influence red teaming performance as much as the underlying LLM.
BSides 2026: How AI Agents Really Perform in Offensive Security
BSides 2026 research shows AI agent behavior reveals more than benchmark scores.
Coldcard RNG Flaw Linked to Suspected $88.6M Bitcoin Theft
A Coldcard RNG flaw may have exposed predictable wallet seeds linked to $88.6 million in suspected Bitcoin thefts across 4,585 addresses.
N-able N-central Vulnerability Under Active Exploitation
Threat actors are actively exploiting an N-able N-central vulnerability that can grant unauthenticated administrative access.
Amazon Links Four npm Supply-Chain Attacks to North Korea’s Sapphire Sleet
Amazon linked four npm supply-chain attacks to North Korea’s Sapphire Sleet, exposing the security risks posed by compromised maintainer accounts.
Anthropic Says Claude Found New Attacks on HAWK and Reduced-Round AES
Anthropic says Claude Mythos improved attacks on HAWK and reduced-round AES-128, though production encryption systems remain unaffected.
eSecurityPlanet Podcast: Semperis Global Field CTO Marty Momdjian
Identity systems sit at the center of enterprise security, but they are also one of the first places attackers look when launching ransomware and other…
FTC Sues Hims & Hers Over Alleged Privacy Violations, Subscription Practices
The FTC has sued Hims & Hers over allegations it shared sensitive health data with advertisers and used deceptive subscription practices. Here’s what…
ShinyHunters Claims Brinks Home Salesforce Data Theft
ShinyHunters claims it breached Brinks Home through a Microsoft Entra vishing attack.
Revolut Data Breach? Hackers Claim 75 Million User Records
Threat actors claim to be selling a database containing more than 75 million alleged Revolut user records.
Minnesota Water Utilities Hit by Coordinated Cyberattack
A coordinated cyberattack hit more than 30 Minnesota water utilities.
Intel 471 Warns of Expanding Software Supply Chain Attacks
Intel 471 warns software supply chain attacks are increasingly targeting developer identities and CI/CD pipelines.
MCBS Healthcare Data Breach Affects 1.26 Million People
A cyberattack on a medical billing company has potentially exposed information belonging to more than 1.26 million people, underscoring that healthcare’s…
Enterprise ERP AI Adoption Outpaces Security Readiness
A new Onapsis report finds AI adoption across ERP systems is outpacing security readiness.
AI-Speed Attacks and Critical Flaws Compress Defenders’ Response Window this Week of July 2026
Weekly summary of Cybersecurity Insider newsletters
FastJson RCE Zero-Day Actively Targets Organizations
Threat actors are actively exploiting the FastJson CVE-2026-16723 zero-day, with no patch available for affected FastJson 1.x versions.
Rogue OpenAI Agent Hit More Than One Target, New Disclosures Show
OpenAI disclosed that the rogue AI agent behind the Hugging Face breach also accessed four additional public services during the same cybersecurity…