[SPONSOREDNUBIVANCE]
Know a small business winging it on security?
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it alongData Breaches
UK Police Expose Victim Data to Stalker, Regulator Warns
When victims share their most sensitive information with the police, they trust that it will be kept safe - but in two shocking data breaches, the Metropolitan Police Service let that trust down, putting a stalking victim's new address and number at risk. The incidents have sparked a stern warning from regulators about the force's handling of sensitive information.
Leaked n8n API Tokens Compromise Thousands of Instances
Thousands of n8n instances are at risk after GitGuardian researchers discovered 321 live instances accepting leaked API tokens, allowing attackers to steal raw credentials without exploiting software vulnerabilities. A staggering 4,576 credentials tied to 1,255 hostnames were compromised, putting countless users at risk of data breaches.
Beacon CRM Breach Exposes UK Charity Data
A cyberattack on Beacon CRM has compromised the data of a UK charity, with the company confirming that an unauthorized third-party likely downloaded copies of its database backups. If you're a Beacon CRM user, it's best to assume that all your stored data, including files, may have been accessed.
Lawmakers Push to Extend ID Theft Services for OPM Breach Victims
Lawmakers are pushing for a bill that would provide lifetime identity protection for the 4.2 million federal employees and contractors affected by the 2015 Office of Personnel Management breach, giving them the peace of mind they deserve. The proposed RECOVER PII Act aims to make the currently expiring protection program permanent, ensuring victims are safeguarded against ID theft for life.
Breach Victims Set for Lifetime Identity Protection
With the federal government's identity protection services set to expire on September 30, 22.1 million breach victims from the 2015 China-linked breaches face a looming gap in lifetime protection. Will they be left vulnerable after a decade of coverage?
UK Police Database Breach Exposes Officer Data on Dark Web
A sensitive police database has been breached, putting the personal details of police officers, staff, and justice professionals at risk after being published on the dark web. The breach, detected on July 26, exposed names, work email addresses, and organizations, but thankfully, no passwords or security credentials were compromised.
ExfilSquad Breach Exposes Data of 100,000 UK Police Officers
A massive data breach has hit the UK police force, with a hacking group claiming to have stolen sensitive information from over 100,000 officers, including names, organizations, and email addresses. The breach, attributed to ExfilSquad, has left thousands of police personnel and government partners vulnerable to potential identity theft and harassment.
PNLD Breach Reveals U.K. Police and Government Contacts on Dark Web
A recent PNLD data breach has exposed sensitive contact information of U.K. police, government officials, and customers on the dark web, including names, work email addresses, and organisation details. The breach could make it easier for scammers to craft convincing phishing messages targeting law enforcement officers.
KT's Lax Security Exposes 16,647 Users to $175,000 in Unauthorized Micropayments
A shocking security lapse at KT has left 16,647 users vulnerable to unauthorized micropayments totaling $175,000, after a hacker exploited a lost femtocell to breach the company's mobile network. This costly breach has resulted in stolen identities and a hefty penalty for South Korea's largest telecommunications company.
UK Government Investments Exposes Official Contact Data in 40-Hour Breach
A simple mistake by a staff member at UK Government Investments left sensitive contact information of 51 government officials exposed to the public for a staggering 40 hours. The breach, revealed in the organization's annual report, highlights the importance of following basic security protocols to protect official data.
Amgen Discloses Cloud Data Breach Exposing Patient Health Info
Amgen recently discovered a cloud data breach that compromised patient health information, prompting immediate action to contain and investigate the incident. The breach, detected in July 2026, involved unauthorized access to multiple cloud systems operated by third-party service providers, resulting in the theft of sensitive data, including proprietary information and protected health records.
Hugging Face Breach Exposes Defense Gaps in AI Age
In a shocking revelation, Hugging Face fell victim to a breach that exposed vulnerabilities in AI-powered defenses, with over 17,000 attack events detected across its sandboxes. The incident was linked to a sophisticated attack chain involving OpenAI's models, highlighting the need for stronger security measures in the AI age.
ShinyHunters Breach Famous Physical Security Brand
The notorious hacking group ShinyHunters has breached the most iconic brand in physical security, sending shockwaves through the industry. This high-profile hack has left many wondering about the vulnerability of even the most trusted names in security.
CAF Bank Outage Persists, Charities Struggle with Disrupted Payments
Thousands of UK charities are still reeling from a week-long online banking outage at CAF Bank, with £1.45 billion in customer deposits stuck in limbo and no end in sight for a resolution. The disruption has left 14,000 charity customers scrambling to manage their day-to-day transactions.
South Korea Slaps KT with $39 Million Fine for 11-Month Data Breach
South Korea's Personal Information Protection Commission has slapped KT Corporation with a hefty $39 million fine for a data breach that went undetected for a staggering 11 months, exposing sensitive info of over 16,647 customers. The penalty, equivalent to KRW 53.979 billion, is a stern reminder of the importance of robust cybersecurity measures.
ShinyHunters Breach Exposes Brinks Home Data
Brinks Home recently disclosed a security breach, with an extortion group claiming to have exposed millions of customer records, prompting the company to activate its incident response procedure and work with leading forensics experts to contain the damage. The breach, identified on July 20, thankfully didn't impact alarm monitoring and system functionality.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Analog Devices Exposes Data Breach, Probes Incident
Analog Devices recently uncovered a data breach, swiftly springing into action to contain the incident and minimize damage after detecting unauthorized access to its systems on June 23. The company has launched a thorough investigation, working with cybersecurity experts and law enforcement to understand the breach and prevent future threats.
ShinyHunters Targets Healthcare with Rising Data Theft Attacks
ShinyHunters is on the hunt, using data theft at cloud scale to target healthcare and medical-tech organizations, leveraging stolen OAuth tokens and corporate single-sign-on accounts to wreak havoc. This notorious extortion gang has successfully breached numerous organizations in the past two years, often through clever social engineering tactics.
Minnesota Water Systems Hit by Coordinated Cyberattack
A coordinated cyberattack hit over 30 Minnesota community water systems, prompting a swift response from state and federal teams to contain the intrusion and mitigate immediate impacts on local water operations. The breach caused significant disruptions, with some cities like Braham forced to go offline and ask residents to conserve water.
Data Breach Costs Soar to $5 Million Average Globally
The global average cost of a data breach has skyrocketed to a record $4.99 million, with organisations facing a daunting 602 incidents on average, and experts warn that a reactive security approach is no longer enough to keep up with today's rapid-fire cyber threats. To stay ahead, businesses must shift to a continuous, autonomous defence - or risk being left in the dust.
OpenAI Models Exploit JFrog Zero-Days to Breach Hugging Face
OpenAI's models uncovered critical zero-day vulnerabilities in JFrog's self-hosted Artifactory installations, potentially granting hackers unrestricted internet access - but thanks to JFrog's swift response, fixes were rapidly developed and deployed to protect customers. The vulnerabilities, now patched, were responsibly disclosed by OpenAI researchers and publicly credited by JFrog.
Minnesota Water Utilities Targeted in Coordinated Cyberattack
A coordinated cyberattack has left over 30 Minnesota communities without access to water services, with officials working swiftly to contain and investigate the damage. Minnesota Information Technology Services is leading the response, sharing vital threat intelligence and guiding affected utilities through the recovery process.
CAF Bank Halts Online Services Over Security Vulnerability
Thousands of charities are facing disruption to their online accounts and payroll services after CAF Bank temporarily halted its online banking services due to a newly discovered security vulnerability. The suspension, which began on July 24, will remain in place until the issue is resolved.
CAF Bank Halts Online Services Over Third-Party Software Vulnerability
CAF Bank has temporarily halted its online banking service due to a third-party software vulnerability, and customers are being supported while the issue is resolved with the help of external experts. The bank's CEO, Alison Taylor, has apologized for the disruption, assuring customers that access will be restored once the connection is secure.