McGraw Hill linked to 13.5M-record data leak
…McGraw Hill has kept quiet on its own channels, with no mention of the incident on its website and no response to The Register 's questions. In statements to other outlets , however…
Search
All sources
bleepingcomputer.com
24
theregister.com
18
techcrunch.com
9
github.blog
7
wired.com
6
theverge.com
6
9to5mac.com
4
engadget.com
3
appleinsider.com
3
techradar.com
3
cnet.com
2
guru3d.com
2
Videos
More videosTop stories
Rogue AI agents can work together to hack systems
…the-land agentic incident." Irregular’s report doesn't specify which companies' models the AI agents employed – it says "public production LLMs by the frontier AI labs". The security company works with…
Samsung update failure leaves users without clean clothes
…What’s your worst update horror story? Software updates are supposed to improve our devices, patching old security holes and delivering new features. They’re such a big deal that we often…
Dutch navy frigate tracked by mailing it a Bluetooth tracker
…Technological evolution means things that were totally acceptable in the enterprise world before may now be critical security risks that have yet to enter into your OPSEC equation. ® military bluetooth security privacy
Discussions and forums
What a bunch of idiots... Canvas
https://www.reddit.com/r/canvas/comments/1taj9mk/instructure_just_confirmed_they_paid_the_ransom/ "We received assurances that it will not be further shared on the dark web or elsewhere, and we received proof that any co…
Tell HN: Compliance is not equal to Security
For over a decade, I’ve been doing bug bounty, security audits, and security consulting. And if there’s one thing I’ve seen repeatedly, it’s this:Most startups call a security engineer or hire a security agency only when…
1
1
The compression of the exploit timeline: Why n-day gaps and 90-day embargoes are failing in practice.
The traditional vulnerability disclosure timeline relies on a fundamental assumption: exploit development and vulnerability discovery take time. Over the last 12 months the integration of LLMs into offensive tooling has …
Threat Intel: ShinyHunters Leaks 9.4GB Database of 7-Eleven Franchisee Systems Post-Extortion Refusal
Overview: On May 24, 2026, the data breach notification service Have I Been Pwned (HIBP) integrated a dataset originating from an April 2026 extortion campaign targeting 7-Eleven. The breach, attributed to the threat act…
Accidentally exposed publicly my entire LAN for 2 weeks
Posting this as a PSA / confession because I almost had a heart attack last night and I figure if I got bit, someone else will too. TL;DR: Replaced pangolin + NPMplus with a double-Caddy + WireGuard setup. Put a "clever"…
Rockstar Games affected by data breach, "limited amount of non-material information" accessed
…This incident has no impact on our organisation or our players." On April 11, a hacking group claimed to have accessed Rockstar's Snowflake servers through the third-party SaaS platform Anodot…
'Pay or leak': Hackers breach Rockstar Games and demand ransom with a graphic straight from Cyberpunk 2077
…Rockstar Games has confirmed to Cyber Security Guru that a breach had indeed taken place, though users won’t feel any of it. “This incident has no impact on our organization or…
Critical vm2 sandbox bug lets attackers execute code on hosts
…The security issue is tracked as CVE-2026-26956 and has been confirmed to impact vm2 version 3.10.4, although earlier releases may also be vulnerable. Proof-of-concept (PoC) exploit…
Unpatched Microsoft Defender Flaw Lets Hackers Gain Admin Access on Windows
…A security researcher who goes by the name Chaotic Eclipse discovered what they call the "RedSun" vulnerability just weeks after discovering, disclosing, and then leaking a Windows zero-day exploit that Microsoft…
How JumpCloud unifies IT management to tame shadow AI
…scaffolding of AI adoption." Running before they can walk will cause shadow AI-related security and compliance incidents for 40 percent of enterprises by 2030, says Gartner. Gaining that all-important visibility…
Two different attackers poisoned popular open source tools
…According to security experts, the incidents demonstrate the future of supply-chain attacks. "We are seeing more and more developers targeted by this type of activity," Cisco Talos outreach lead Nick Biasini…