Latest cybersecurity threats, data breaches, hacking incidents, security vulnerabilities, ransomware attacks, and expert guidance on digital security.
Authorities announced that hackers stole personal information from 7 million California public school students via a compromised login discovered September 25. The breach exposed names, addresses, disability records, and demographics dating back to 2006, though it did not include Social Security numbers or financial accounts. Affected individuals are eligible for 24 months of free identity-protection services.
JPMorgan Chase announced it will prevent third-party AI agents from logging into or acting on customer accounts, citing security concerns over rogue software. Major websites including Yelp, Delta Air Lines, and Charles Schwab are also blocking access from autonomous AI agents developed by companies like OpenAI, Meta, and Google.
Chinese-made smart rental vehicles captured sensitive military data during a security exercise in Norway, raising significant security concerns. Officials stated a general ban would be disproportionate, though previous tests showed Chinese manufacturer Yutong could theoretically remotely immobilize electric buses via over-the-air updates.
A cyberattack on contractor BAE Systems has disabled the Bankruptcy Noticing Center, halting production and transmission of bankruptcy notices for all U.S. federal courts. The outage affects critical services including BNC.uscourts.gov and the National Creditor Registration Service while BAE investigates the isolated breach.
The number of publicly disclosed cybersecurity vulnerabilities reached a record high in 2025 and remained on an upward trajectory through the first half of 2026. Artificial intelligence technologies are significantly contributing to this surge by helping identify security flaws at an accelerated rate.
A Pentagon inspector general report reveals that unclassified wireless communications failed to secure metadata, allowing malicious actors to pinpoint troop locations. The vulnerability stemmed from a lack of carrier vetting and the continued use of unencrypted SMS messaging despite known espionage risks.
Hackers remotely overrode security systems on industrial refrigerators across more than 400 French supermarkets, raising temperatures to 122 degrees Fahrenheit and spoiling millions of euros worth of meat. The attack highlights a growing trend of targeting building automation systems for ransom, with reports indicating 73 percent of organizations have vulnerable BAS infrastructure.
The article warns that AI agents are vulnerable to prompt injection attacks via phishing emails, potentially executing hidden malicious instructions. It argues that users must distrust their AI assistants and developers should strip hidden content to prevent these security breaches.
ConnectWise suspended its Cloud Backup service after malicious actors accessed application identities to compromise Microsoft 365 tenants. Microsoft and Huntress confirmed unauthorized activity starting October 15, affecting at least 162 identified tenants. The company is investigating the incident while maintaining that stored backup data remains secure.
Security researchers discovered a scam where hackers hijack Google ads to redirect users to fake AI download pages containing malware. The attack exploits Bing redirects to hide malicious installers that execute hidden commands on Mac systems, mimicking official software experiences to trick users.