Ernst & Young (EY), one of the “Big Four” accounting firms, is investigating a data breach involving its third-party support ticket system. The incident exposed sensitive client information stored within support tickets, raising concerns about supply chain security and the risks associated with thir
Medical device giant Medtronic has confirmed a data breach orchestrated by the notorious cybercriminal group ShinyHunters, resulting in unauthorized access to customer information. The incident affects an undisclosed number of individuals whose personal data was stored in Medtronic’s systems. ShinyH
Over 900 Oracle E-Business Suite (EBS) instances remain exposed to internet-facing attacks, with threat actors actively exploiting known vulnerabilities to gain unauthorized access. These publicly accessible systems represent critical enterprise infrastructure managing finance, HR, supply chain, and
Aflac, one of the world’s largest insurance providers, has disclosed a data breach affecting its Japanese subsidiary after unauthorized access to internal systems. The incident compromised customer data including personal information and policy details. The breach highlights growing threats to the i
Oracle E-Business Suite (EBS) is under active attack through CVE-2026-46817, a critical authentication bypass vulnerability with a CVSS score of 9.8. Attackers are exploiting unpatched instances to gain unauthorized administrative access, potentially compromising sensitive financial and business dat
A massive data breach at a third-party identity verification provider has exposed over one million passport scans and associated personal information online. The compromised data includes full passport images, selfie photos, government-issued ID documents, and personally identifiable information (PI
A critical authentication bypass vulnerability in Python.org’s API infrastructure allowed attackers to forge admin-level API requests without proper credentials. The flaw exploited weak authentication token validation, enabling potential unauthorized access to administrative functions, user data man
Tata Electronics, a key supplier for tech giants Apple and Tesla, has confirmed a significant data breach after threat actors claimed to have exfiltrated 630GB of sensitive corporate data. The leak allegedly contains proprietary manufacturing information, employee records, and confidential business
Japanese telecommunications giant KDDI Corporation disclosed a massive data exposure affecting 14.2 million email credentials from its managed email service. The breach resulted from a misconfigured cloud storage bucket that left authentication credentials publicly accessible on the internet. While
Security researcher Mythos has uncovered “Squidbleed,” a critical memory leak vulnerability affecting Squid proxy servers that has remained undetected for nearly three decades. This flaw, present since the Clinton administration, allows remote attackers to extract sensitive information from server m