NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
Kubota North America Breach Exposed Employee Data Over 35 Days
Kubota North America has disclosed a network intrusion lasting more than a month that exposed sensitive personal and financial data belonging to…
Medtronic Notifies Customers After ShinyHunters Breach Exposed 9M Records
Medical device giant Medtronic is sending breach notifications after the ShinyHunters extortion group accessed corporate IT systems in April, potentially exposing names,…
Alleged Scattered Spider Member Extradited to US After Finland Arrest
Peter Stokes, a 19-year-old dual US-Estonian citizen, has been extradited to the United States to face fraud, conspiracy, and computer intrusion charges…
AI Agent Runs Autonomous Ransomware Attack Against Production Database
Sysdig researchers say they have identified what may be the first ransomware attack executed end-to-end by an AI agent, with a large…
CISA Adds SharePoint RCE Flaw CVE-2026-45659 to KEV Catalog
CISA has added a high-severity Microsoft SharePoint Server remote code execution vulnerability to its Known Exploited Vulnerabilities catalog after confirming active exploitation…
FortiBleed Credential Theft Operation Tied to INC and Lynx Ransomware Groups
Researchers at SOCRadar have linked the large-scale FortiBleed FortiGate credential theft campaign to operators of the INC and Lynx ransomware-as-a-service platforms, with…
BlueHammer Flaw in Microsoft Defender Now Linked to Ransomware Campaigns
CISA has updated its Known Exploited Vulnerabilities catalog to confirm that CVE-2026-33825, a privilege escalation flaw in Microsoft Defender, is being actively…
Inside BEC Operations: How Attackers Orchestrate Email Fraud at Scale
Threat intelligence from criminal forums reveals that business email compromise is far more than a phishing scam, involving coordinated infrastructure, call centers,…
Azure CLI Password Spray Campaign Hits 78+ Microsoft Accounts in 81M Attempts
A large-scale, automated password spray attack targeting Microsoft's Azure CLI compromised at least 78 accounts across a two-week window, researchers at Huntress…
Google Patches 382 Vulnerabilities in Chrome 151, 15 Rated Critical
The Chrome 151 release addresses a record-setting batch of security flaws, with 358 of them discovered internally, likely aided by AI-assisted vulnerability…
81 Million Login Attempts Hit Azure CLI in Massive Password Spray Campaign
Huntress tracked over 81 million credential spray attempts against Microsoft 365 environments between June 12 and 21, with attackers abusing the OAuth…
Apple Patches 37 Flaws in iOS, macOS, and Safari, 26 in WebKit Alone
Apple's latest round of security updates addresses dozens of vulnerabilities across its platform, with the majority concentrated in WebKit and exploitable through…