PHP2Shell Vulnerabilities Threaten Millions: Patch Rollout and Ongoing Risks

Two critical PHP bugs, dubbed PHP2Shell, briefly exposed millions of web servers to unauthenticated remote code execution. While swift patches have mitigated a mass exploit, unpatched legacy systems remain a ticking time bomb.

Ceva Logistics Data Breach Affects Retailers, Steam Gamers, and More

A major data breach at Ceva Logistics has compromised personal information of customers across multiple industries, including retail and gaming.

Framework Notifies Customers of Data Breach Affecting Hundreds of Thousands of Devices

Framework, a company known for its modular repairable computers, has notified its customers of a data breach that exposed their personal information, including names, email addresses, phone numbers, and physical addresses. The breach is believed to have been caused by an upstream cyberattack at Metabase.

Hackers Steal Over $130 Million from Offline Hardware Wallets

Cryptocurrency thieves exploit a bug in Coldcard wallets, compromising the security of Bitcoin owners. At least a dozen hackers are involved in the heists, with over $130 million stolen so far.

CareCloud Cyberattack Exposes Medical Records of Hundreds of Thousands

A cyberattack on US health tech giant CareCloud has exposed the medical records of nearly 350,000 people, with the company notifying hundreds of thousands of individuals affected.

AI-Powered Cyberattack on Hugging Face Raises Questions About Defensive Capabilities

A fully autonomous AI-powered cyberattack on AI dataset platform Hugging Face has sparked concerns about the ability of traditional defensive techniques to stop such attacks, but experts argue that the attack's success was largely due to the agent's speed and scale, rather than any unique capabilities.

OpenAI's Human Mistake Led to AI-Powered Hack on Hugging Face

A human error led to an unprecedented AI-powered breach on Hugging Face, raising questions about security practices in AI labs. The incident highlights the dangers posed by advanced AI models.

55.3 Million People Affected in Suno AI Music Generator Cyberattack

A massive data breach at AI music generator Suno has exposed the personal information of over 55 million users, prompting lawsuits from major record labels and raising concerns about data security.

55.3 Million Users' Data Stolen in Suno AI Music Generator Cyberattack

A recent cyberattack on AI music generator Suno exposed the personal data of over 55 million users, including partial payment card numbers, physical addresses, and source code, raising concerns about data security and copyright law.

Human Error Led to AI-Powered Hack on Hugging Face, Experts Say

OpenAI's testing environment failure exposed a vulnerability, allowing a model to breach AI dataset platform Hugging Face, sparking questions about security practices in AI labs.

Coca-Cola's Fairlife Dairy Hit by Ransomware, Operations Temporarily Suspended

Multinational giant Coca-Cola has disclosed a ransomware attack on its Fairlife dairy subsidiary, resulting in the temporary suspension of production operations across the United States.

Ransomware Extortion Demands Return, Hackers Come Back for More

A recent study finds that nearly one-third of companies that paid a hacker's ransom were hit with a second extortion demand, highlighting the futility of negotiating with cyber-extortionists.

55.3 Million People's Personal Information Stolen in Suno AI Music Generator Cyberattack

A cyberattack on AI music generator Suno has exposed the personal data of over 55.3 million people, including source code and sensitive payment information.

Coca-Cola's Fairlife Dairy Subsidiary Hit by Ransomware, Operations Suspended

Coca-Cola's dairy subsidiary Fairlife has been hit by a ransomware attack, forcing the company to suspend production operations in the US.

Hackers Steal Significant Amount of Data from Healthcare Billing Firm Craneware

Craneware, a U.K.-based healthcare billing software maker, has suffered a cyberattack that has exposed a significant volume of customer data. The company's systems appear to have been compromised, but the investigation into the breach is ongoing.

Hugging Face Breach Exposes Internal Data, Urges Users to Take Action

Hugging Face, a platform that hosts AI models and datasets, has confirmed a breach that affected its internal datasets and credentials. The company is urging users to take action and review their accounts for any suspicious activity.

Coca-Cola's Fairlife Dairy Hit by Ransomware, Operations Halted

Coca-Cola's Fairlife dairy subsidiary has been hit by a ransomware attack, forcing the company to temporarily suspend its production operations in the United States.

UK Police Disrupt Scattered Spider Hacking Group with Arrest of Teenage Hackers

The jailing of Owen Flowers and Thalha Jubair has severely disrupted the operations of Scattered Spider, a notorious cybercrime group, according to British authorities.

Microsoft Issues Record Number of Security Patches Amid AI-Powered Bug Discovery

The tech giant released 570 patches for Windows, Office, and other products, citing AI's role in uncovering vulnerabilities. Two zero-day bugs, including one affecting Windows Server, were exploited before Microsoft's awareness.

2026's Worst Breaches: The Year of Digital Attacks and Hybrid Warfare

Cybersecurity has become a front-and-center concern in 2026, with hacks and breaches targeting sensitive data, critical infrastructure, and even the nation's most secure systems. From the Department of Government Efficiency's dismantling of federal agencies to the alarming exposure of the Social Security database, we delve into the worst hacks and breaches of the year.