25 results
According to FTV News, Kang Chiao International School's Linkou campus confirmed to parents that its network systems were breached, and several parents and staff received threatening emails signed by the "Osiris ransomware group" .
According to United Daily News, a 38-year-old man surnamed Lin in Kaohsiung used AI to write scripts to illegally breach the website backends of government agencies and private enterprises, stealing over 230,000 personal data records of citizens and selling them on the dark web .
Following Google's disclosure of the XCPE botnet, cybersecurity vendor TrendAI published observations from June 3 to October 1 showing approximately 1.
Bank SinoPac experienced unauthorized customer account transfers on November 3 and held a press conference on November 4 confirming that external hackers had exploited a security configuration flaw in a new online banking transaction system provided by a third-party vendor .
According to RTHK, Hong Kong's privacy commissioner received breach notifications from several airlines and electrical retailers and opened investigations, logging 51 complaints and 48 enquiries as of October 30 with losses from about HK$10,000 to over HK$1.
Website performance monitoring firm DebugBear said an unauthorized third party gained access to its domain registrar account and replaced its monitoring script with malicious code for about two hours, in what it assesses was a targeted, financially motivated attack on one customer website .
According to CNBC, crypto exchange Binance said a security incident affected about $6.
Vulone disclosed on Oct 18 that a China-linked, financially motivated operator built an AI-agent intrusion platform on the open-source Cairn framework and ran 66 operations between Sep 24 and Oct 14, 48 of which reached at least session-level access .
Fireworks AI updated its October security incident bulletin on November 9, saying that beyond previously known stored secrets it found impact to account and billing information, plus secrets, datasets and incomplete models for a limited set of accounts, with evidence pointing to a financially motivated cybercriminal group engaged in LLMJacking .
According to Media Innovation, The Japan Times and group company News2u Holdings disclosed unauthorized access to a group server on October 2 and said in a second report on the 16th that a ransomware attack was confirmed on September 18, hitting a file server used by administrative departments until August 2022 .
Crypto exchange Bitget confirmed that, based on the latest on-chain tracing, about $387.
Have I Been Pwned says ShinyHunters targeted Carhartt in an August "pay or leak" extortion campaign and later published data including about 12.
According to CyberInsider, French intellectual property software and services firm Questel confirmed a voice phishing attack led to unauthorized access to a Sales SharePoint environment in its Microsoft 365, and some stolen data has been published .
According to The HIPAA Journal, South Carolina nonprofit health system AnMed confirmed on July 26, 2026 a cybersecurity disruption involving malware that took down computers, phones and internet and forced 83 of its 106 facilities to close temporarily .
According to The Independent, Chick-fil-A is notifying customers nationwide that unauthorized parties may have accessed personal and account information after an automated attack on its website and app in June; according to TechRadar, credential stuffing between June 17 and 19 breached thousands of accounts .
According to DSIH, Pulsy, the Grand Est regional e-health operator, was attacked on June 18, 2026, leading to exfiltration of about 5 million rows of patient administrative data including names, sex, birth dates and the national health identifier INS .
According to TechCrunch, market intelligence platform Klue confirmed hackers broke into its systems on June 12 and stole data from some customers, with affected customers including Gong, Jamf, HackerOne, LastPass, Recorded Future, Snyk and Tanium .
According to CyberInsider, data was downloaded without authorization from cardiac monitoring firm iRhythm's third-party-hosted business applications between June 3 and 8, 2026; its June 15 SEC filing says access came through social engineering and an attacker demanded payment on June 9 .
According to The HIPAA Journal, US dental benefits administrator DentaQuest's network was accessed without authorization between May 17 and 20, 2026; the company says at least 15 million people are affected, with names, addresses, SSNs, Medicaid and Medicare numbers and dental or vision health information involved .
Instructure said the attacker used a Free-for-Teacher account to submit a support ticket with malicious code that triggered an XSS flaw, obtained an authorization token and gained elevated access in Canvas, taking usernames, email addresses, course names, enrollment information and messages .