4+ day, 23+ hour ago   (398+ words) Mathspace, a mathematics learning platform used by schools in Australia and New Zealand, has disclosed a data breach affecting 1,079,819 students, parents or guardians, teachers, and employees. The incident stemmed from the exploitation of a critical vulnerability in a self-hosted Metabase…...

1+ week, 3+ day ago   (365+ words) A newly disclosed vulnerability in the Hugging Face Transformers library can cause attacker-controlled Python code to be written to a local system before a user decides whether to trust and execute remote code. Tracked as CVE-2026-80047 and documented in CERT…...

1+ week, 4+ day ago   (355+ words) In an August 30 update, the medical-device maker said its investigation remained ongoing, but it had found no indication of unauthorized activity in its environment. The company said the incident did not affect its cloud-based systems or applications. Unauthorized activity was…...

3+ week, 22+ hour ago   (375+ words) Apollo Global Management has disclosed a July cyber incident in which attackers gained unauthorized access to cloud platforms and potentially obtained highly sensitive personal information. The New York-based alternative asset manager said the intrusion occurred between July 6 and July 10 after…...

3+ week, 1+ day ago   (469+ words) US Bank is investigating claims by the LockBit ransomware operation that it breached the financial institution and stole undisclosed data, as the cybercriminal group threatens to publish the alleged material unless an extortion demand is paid by September 3. The bank…...

3+ week, 3+ day ago   (475+ words) A threat actor has published a dataset containing allegedly live Stripe API keys for 659 merchant accounts, exposing data linked to 688,363 customers across 42 countries. The 35 GB archive was posted for free on a data-trading forum on August 18, 2026, rather than being offered…...

3+ week, 4+ day ago   (491+ words) Pokémon Center has begun notifying customers in the United Kingdom and Germany that their personal information was exposed after a cyberattack on CEVA Logistics, the third-party responsible for fulfilling Pokémon Center orders in both markets. The incident has also led…...

4+ week, 1+ day ago   (435+ words) Hardware wallet maker Trezor has disclosed a third-party data breach affecting approximately 13,689 customers after unauthorized actors accessed systems operated by its shipping and fulfillment provider, ShipMonk. Trezor said ShipMonk notified the company of unauthorized access to systems holding customer information…...