Threats & incidents
-
RingCentral breach data reaches 1.6m addresses
A dataset attributed to RingCentral’s July social-engineering incident contains almost 1.6 million unique email addresses, extending the known public footprint of the breach.
-
Apple spyware alerts reach 110 countries
Apple has sent a fresh wave of mercenary-spyware threat notifications across 110 countries and expanded how high-risk users are warned about targeted attacks.
-
SAP Commerce attacks follow patch by days
Attack traffic is already targeting a maximum-severity SAP Commerce Cloud vulnerability only days after SAP released fixes for the unauthenticated code-execution flaw.
-
€30m banking fraud traced to payment provider flaw
Arrests in Europe and Brazil have followed an investigation into a €30 million German banking fraud that authorities traced to exploitation of a payment provider vulnerability.
-
678,000 caught in French tax breach
France’s tax authority has confirmed the extraction of fiscal data concerning 678,000 people and businesses after attackers used impersonated credentials to access internal systems.
-
Ransomware fragments as data theft gains ground
Check Point recorded 2,139 ransomware leak-site victims in Q2 2026 as active groups reached a record 93 and smaller affiliate-driven operations gained ground.
-
Trezor customers exposed through ShipMonk breach
A breach at logistics provider ShipMonk exposed contact and shipping information belonging to 13,689 Trezor customers across the UK, Europe and other markets.
-
Dutch NCSC confirms macOS Screen Sharing attacks
The Dutch NCSC has observed attackers exploiting CVE-2026-65400 against internet-reachable Macs, gaining root access and installing cryptomining software.
-
VMware vCenter flaw moves into active exploitation
Incident responders have linked successful compromises across 47 countries to the critical VMware vCenter flaw CVE-2026-59310, only days after Broadcom disclosed and patched it.
-
Cl0p claims Philips and Shell data theft
Philips has contained an attempted compromise and Shell is investigating a possible incident after Cl0p claimed to have stolen engineering and project information from both companies.