Data Breach

A dataset containing 9.2 million Israeli citizen records has surfaced on dark web marketplaces, marketed as a recent breach of Israel’s population registry. Investigation reveals this data originates from a 2005 compromise at Israel’s Population and Immigration Authority, making it nearly two decade

A critical zero-day vulnerability in Metabase, an open-source business intelligence platform, is being actively exploited in the wild. The flaw, assigned a maximum CVSS score of 10.0, allows unauthenticated attackers to gain administrative access and extract sensitive data from affected instances. O

Security researchers have unveiled a novel interrupt injection attack that successfully bypasses Spectre v2 mitigations on both Intel and AMD processors. The attack exploits the way CPUs handle interrupts during speculative execution, allowing attackers to leak sensitive data from kernel memory desp

A threat actor group known as ExfilSquad has successfully breached a UK police database, exposing personal information of over 100,000 police officers and staff members. The leaked data includes names, ranks, email addresses, phone numbers, and potentially home addresses of law enforcement personnel

Water treatment facilities in Georgia and Michigan have been compromised in cyberattacks linked to escalating US-Iran tensions. Attackers targeted industrial control systems (ICS), potentially gaining access to operational technology that manages water treatment processes. These incidents follow a p

Analog Devices, Inc. (ADI), a leading semiconductor manufacturer with over $12 billion in annual revenue, has disclosed a data breach following unauthorized access to its corporate systems. The company confirmed that threat actors infiltrated its network and exfiltrated sensitive data, though the fu

A critical vulnerability (CVE-2025-66066) in Ruby on Rails Active Storage allows unauthenticated attackers to achieve remote code execution by exploiting insecure direct object references in file handling mechanisms. With a CVSS score of 9.8, this flaw affects Rails versions 6.0.0 through 7.1.3, ena

A critical vulnerability (CVE-2026-66066) in Ruby on Rails’ Active Storage component allows unauthenticated attackers to read arbitrary files from vulnerable servers through malicious image upload manipulation. The flaw affects Rails versions 6.0.0 through 7.1.3, with successful exploitation potenti

Microsoft SharePoint Server is under siege from active exploitation of CVE-2026-50522, a critical remote code execution vulnerability with a CVSS score of 9.8. Following the public release of proof-of-concept code, threat actors are weaponizing this flaw to compromise unpatched SharePoint instances.