Cybersecurity
Latest news, analysis, and updates in cybersecurity.

Estée Lauder Data Breach Hid for 10 Months in Oracle
Attackers stole sensitive HR data through Oracle E-Business, and Estée Lauder took 10 months to confirm what was exposed.

Weaponized Dataset Cracks Open Hugging Face Breach
A malicious uploaded dataset gave attackers a path into Hugging Face systems, turning public AI assets into a fresh supply-chain warning.

1,000 World Cup Pirate Domains Fall in DOJ Streaming Blitz
The DOJ seized 1,000 World Cup streaming domains during the tournament, turning piracy enforcement into a live fight over sports rights.

HOLLOWGRAPH Malware Hijacks Microsoft 365 Calendars
HOLLOWGRAPH hides commands and stolen files in Microsoft 365 Calendar events, turning trusted cloud traffic into an espionage channel.

ServiceNow CVE-2026-6875 Hands Hackers an RCE Path
ServiceNow CVE-2026-6875 is being exploited, giving unauthenticated attackers an RCE path into unpatched AI Platform instances.

17,000 AI Agent Actions Crack Open Hugging Face Breach
Hugging Face says an autonomous AI agent breached production systems, stole some credentials, and triggered an AI-assisted defense.

AI Agent Cracks Hugging Face and Steals Credentials
Hugging Face says an autonomous AI agent used a malicious dataset to reach internal data, steal credentials, and trigger 17,000 events.
SS7 Flaw Let Iran Hunt U.S. Troops by Phone Signal
Iran allegedly used SS7 flaws to track U.S. troops by phone signal, turning commercial networks into targeting tools.

42 US Attacks Pull Russian Cybercrime Hosts Into Court
DOJ says Russian bulletproof hosts enabled attacks on 42 US entities, shifting pressure from hackers to infrastructure sellers.

Windows Bind Link Attacks Trick EDR Into Clean Scans
Bitdefender says Windows bind links can split file views, letting malware trick EDR into scanning clean files while hostile code runs.

AI Buries Microsoft Patch Tuesday Under Record 570 Fixes
Microsoft’s 570-fix Patch Tuesday shows AI is finding bugs faster than enterprises can patch them.

Windows 10 Security Updates Now Trap One in Six PCs
One in six monitored Windows PCs still runs Windows 10, turning the end of standard support into a stubborn security and cost problem.