SailPoint Discloses GitHub Repository Breach Linked to Third-Party VulnerabilitySailPoint reports that hackers exploited a third-party application vulnerability to access a subset of its GitHub repositories on April 20, 2026. The company claims that production environments remained secure and has notified affected customers directly.****#cybersecurity #infosec #incident #databreachhttps://beyondmachines.net/event_details/sailpoint-discloses-github-repository-breach-linked-to-third-party-vulnerability-4-k-f-o-2/gD2P6Ple2L

Iranian-backed MuddyWater is using Microsoft Teams to steal credentials, combining the attack with false flag ransomware to hide its espionage activities.#MuddyWater #MicrosoftTeams #CyberAttack #DataBreachhttps://verisizintisi.com/en/blog/2026-05-06-muddywater-microsoft-teams-credential-theft-false-flag

Attackers adopt JavaScript runtime Bun to spread NWHStealerhttps://www.malwarebytes.com/blog/threat-intel/2026/05/attackers-adopt-javascript-runtime-bun-to-spread-nwhstealerRead on HackerWorkspace: https://hackerworkspace.com/article/attackers-adopt-javascript-runtime-bun-to-spread-nwhstealer#malware #databreach #cybersecurity

Iranian cyber espionage disguised as a Chaos Ransomware attackhttps://securityaffairs.com/191765/breaking-news/iranian-cyber-espionage-disguised-as-a-chaos-ransomware-attack.htmlRead on HackerWorkspace: https://hackerworkspace.com/article/iranian-cyber-espionage-disguised-as-a-chaos-ransomware-attack#ransomware #databreach #cybersecurity

THREAT INTEL | WOHA🟢 Actor "lamashtu" claims Undisclosed️ Unverified claimhttps://www.yazoul.net/intel/claim/2026-05-06-woha-ransomware-attack-by-lamashtu-may-2026#DarkWeb #DataBreach #ThreatIntel #CyberSecurity #InfoSec

Everest Ransomware Group Leaks 108 GB of Alleged Liberty Mutual DataThe Everest ransomware group leaked 108 GB of data allegedly stolen from Liberty Mutual, which the insurer attributes to a third-party vendor compromise.****#cybersecurity #infosec #incident #databreachhttps://beyondmachines.net/event_details/everest-ransomware-group-leaks-108-gb-of-alleged-liberty-mutual-data-v-j-o-u-4/gD2P6Ple2L

THREAT INTEL | maiadouro.pt🟢 Actor "safepay" claims Undisclosed️ Unverified claimhttps://www.yazoul.net/intel/claim/2026-05-05-maiadouro-ransomware-attack-by-safepay-may-2026#DarkWeb #DataBreach #ThreatIntel #CyberSecurity #InfoSec

A rigged game: ScarCruft compromises gaming platform in a supply-chain attackhttps://www.welivesecurity.com/en/eset-research/rigged-game-scarcruft-compromises-gaming-platform-supply-chain-attack/Read on HackerWorkspace: https://hackerworkspace.com/article/a-rigged-game-scarcruft-compromises-gaming-platform-in-a-supply-chain-attack#malware #databreach #cybersecurity

THREAT INTEL | or-technology.com🟢 Actor "stormous" claims UndisclosedAllegedly exposed• Financial records• Project files• Corporate data️ Unverified claimhttps://www.yazoul.net/intel/claim/2026-05-03-or-technology-ransomware-claim-by-stormous-may-2026#DarkWeb #DataBreach #ThreatIntel #CyberSecurity #InfoSec

NEW:Yesterday, the USAO in Maryland issued a press release stating that Matthew Bathula, a clinical pharmacy specialist, had been charged with unauthorized access and ID theft involving patients at "Company A" -- a medical system in Maryland. 195 patients have been notified. If you read the DOJ presser, it alleges a lot of activities that go waaaay beyond the usual insider "snooping." A little digging revealed that "Company A" is the University of Maryland Medical Center, where Bathula was employed during the years of alleged wrongdoing. Read the presser and more at:https://databreaches.net/2026/05/02/maryland-pharmacist-indicted-on-unauthorized-computer-access-related-to-u-maryland-medical-center/#databreach #IDtheft #HIPAA #infosec #insider #healthsec

@DysruptionHub @PogoWasRight When we checked the source, we found that the news had been updated. Argus Flow is a global breach news agency. The initial report stated it was a ransomware attack. I instructed our editors to review and update the report.You can find more detailed information about our project;https://verisizintisi.com/en/argus-flow

“Chaos is a ladder”: Vidar’s recent rise to the tophttps://www.intrinsec.com/chaos-is-a-ladder-vidar-rise-to-the-top/Read on HackerWorkspace: https://hackerworkspace.com/article/chaos-is-a-ladder-vidars-recent-rise-to-the-top#malware #databreach #incidentresponse

AI Cyber Threat Series: AI Is Now a Weapon. Day One Proved It.https://www.cyderes.com/howler-cell/ai-is-now-cyber-weaponRead on HackerWorkspace: https://hackerworkspace.com/article/ai-cyber-threat-series-ai-is-now-a-weapon-day-one-proved-it#databreach #aisecurity #vulnerability

Medical, utility tech companies hit by intrudershttps://www.theregister.com/2026/04/27/itron_medtronic_hacked/Read on HackerWorkspace: https://hackerworkspace.com/article/medical-utility-tech-companies-hit-by-intruders#ransomware #databreach #cybersecurity

ShinyHunters Extortion Group Claims Breach of 1.4 Million Udemy RecordsThe ShinyHunters extortion group claims to have stolen 1.4 million records from Udemy, including PII and corporate data, using identity-based attack vectors. The group has threatened to leak the data if a ransom is not paid by April 27, 2026.****#cybersecurity #infosec #incident #databreachhttps://beyondmachines.net/event_details/shinyhunters-extortion-group-claims-breach-of-1-4-million-udemy-records-y-a-7-t-h/gD2P6Ple2L

So, it's finally Friday. Two consecutive days of data breach notifications really made this week special, and not in a good way.Yes, this is a rant. No, I'm not sorry. AI corporations are empowering cybercriminals with half-baked concoctions. If the mythical Mythos can dig up a few obscure vulnerabilities, so can cybercriminals, using your corporate toys. We are losing the cybersecurity battle, if it hasn't already been lost.No, this is not defeatism. Defenders are using AI to defend, doing the same thing they have always done, which is to defend. Attackers are using AI to attack, doing the same nefarious business with new, shiny, half-baked toys gifted to them by AI corporations. A blind person can see that the two are running on two separate train tracks that will never meet. We are all are losing this battle. Do something that actually puts the defenders on the same track as the attackers.#infosec #databreach

Cosmetics brand Rituals disclosed a data breach affecting "My Rituals" members. Attackers gained access to personal information, including names and addresses. #Rituals #DataBreach #CyberSecurityhttps://verisizintisi.com/en/blog/2026-04-24-rituals-data-breach-exposes-member-personal-details

The Medibank ransomware attack exposed sensitive health data of 9.7 million customers. The company refused to pay the ransom, leading to data being leaked on the dark web. #Medibank #DataBreach #Ransomware #CyberSecurityhttps://verisizintisi.com/en/blog/2026-04-22-medibank-data-breach-detailed-incident-review

Automation claims data breach on Russian Federation's Gemotest, on pwnforums.st. #DataBreach #Healthcare #RussianFederation #ThreatIntel

THREAT INTEL | STERIMED Actor "qilin" claims Undisclosed️ Unverified claimhttps://www.yazoul.net/intel/claim/2026-04-22-sterimed-ransomware-attack-by-qilin-april-2026#DarkWeb #DataBreach #ThreatIntel #CyberSecurity #InfoSec