'123456' password linked to Denmark data breach affecting 8.8M people
A person claiming responsibility for the breach of Denmark's Central Register of Persons (CPR) says they gained access through an IT company's account protected by the password "123456." The person told Danish news outlet Politiken they had no intention of selling or leaking the data. The newspaper reported that at least three company accounts, including an administrator account, used the same password. READ MORE...
Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted
European food retailers have been affected by two separate disruptive cyberattacks: In France, several supermarket chains have had their fridges and freezers tampered with and chilled/frozen products destroyed, while in the Netherlands and Belgium workers at stores owned by Dutch multinational Ahold Delhaize have been dealing with disruption resulting from an unspecified "security issue". Hundreds of stores across the country were affected by a cyberattack on the refrigeration control systems. READ MORE...
GTA 6 leaker threatens to release full playable version of game ahead of official launch
The hacker behind a high-profile string of leaks involving the upcoming release of the Grand Theft Auto (GTA) 6 videogame has threatened to release a complete, playable build. The website of "CyberLeek" published the threat shortly after releasing around 25 minutes of fresh footage of the blockbuster game due to be released in November by Rockstar Games. Eurogamer, which has seen the footage, says it appears to be legitimate, and confirmed that it carries the emblem of CyberLeek. READ MORE...
GitLab fixes critical vulnerability that exposed software environments to sabotage
GitLab said Monday that it had fixed a vulnerability that could have allowed an attacker to execute remote code on an affected server. The critical-severity flaw, tracked as CVE-2026-97229, resulted from GitLab Community Edition and Enterprise Edition servers' failure to check user input for malicious text, the software engineering and orchestration platform said in a patch release document. The company issued new versions of both editions of its server that fix the problem. READ MORE...
npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover
Bloom Security researchers found that npm's Trusted Publishing feature let an attacker push new versions of someone else's package without stealing a credential. The attacker only needed to register a GitHub repository name the maintainer had left behind. Bloom counted more than 1,500 npm packages exposed this way, and GitHub, which owns npm, says it has shipped fixes. The exposed packages have more than 10 million downloads in total and more than a million a month. READ MORE...
Small AI Models Could Soon Self-Replicate on IoT Devices, Anthropic Warns
Small AI models may be only months away from being able to self-replicate across commercial IoT devices, without needing a data center, according to research from Anthropic's Frontier Red Team. The study looks at AI worms that run their own model directly on the devices they compromise. Such malware would be hard to shut down because it has no central point to switch off, though it would likely spread slowly. READ MORE...
What to do when a data breach notice doesn't say much
Publicly reported data breaches hit an all-time high in the US last year, with over 3,300 incidents recorded and nearly 280 million victim notices mailed out. But are all of these worth the paper they're written on? Increasingly, they lack crucial details. As the volume of data breach incidents increases, there's a growing chance that you'll be caught up in one. According to the non-profit Identity Theft Resource Center, over 471 million victim notices went out in the first half of 2026 alone. READ MORE...
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
SonicWall customers are on the defensive once again, as threat actors are actively exploiting a maximum-severity vulnerability in the cybersecurity vendor's unified secure access gateway, the Secure Mobile Access (SMA) appliance. CVE-2026-102255 is a server-side request forgery (SSRF) flaw in the SonicWall SMA 1000 appliance's WorkPlace interface, a Web-based portal for remote users. The vulnerability, which SonicWall assigned a maximum 10 out of 10 CVSS score. READ MORE...
- ...in 1775, The Continental Congress authorizes construction of two warships, thus instituting an American naval force.
- ...in 1941, singer-songwriter Paul Simon ("50 Ways to Leave Your Lover", "Bridge Over Troubled Water") is born in Newark, NJ.
- ...in 1958, Michael Bond's children's book "A Bear Called Paddington" is first published, introducing the classic title character.
- ...in 2010, all 33 Chilean miners trapped by a cave-in are rescued, after spending more than 69 days underground.
