Latest news as of 9/6/2026, 8:43:45 PM
Have I Been Pwned
In August 2026, the Organization for Transformative Works (OTW) . The breach resulted in the exposure of 145k unique email addresses along with usernames and passwords stored as either MD5 or PBKDF2 hashes. OTW self-submitted the exposed data to HIBP. identified unauthorised access to the Fanlore wiki it operates
Have I Been Pwned
In August 2026, Australian beauty retailer . The group subsequently published data allegedly obtained from the company, which included 2M unique email addresses along with names, phone numbers, geographic locations (suburb and postcode) and purchases. Oz Hair and Beauty was the target of an xpl0itrs extortion attack
The Register
Unknown parties know where you stayed last summer, down under, across 120 Quest properties
Dark Reading
In the first purported "near-autonomous" attack on a nation-state, a Chinese-language operator used a complex AI framework to target and compromise government agencies, likely in Taiwan.
The Register
Expanded multistage chain of thought monitoring makes frontier model work more expensive
Dark Reading
A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potential exploitation of CVE-2026-19478.
Dark Reading
Researchers discovered a "meta-hacking" technique that can manipulate the AI service into revealing its own security weaknesses.
The Register
Gaps in expiry checks could let dead plastic make purchases again
Bleeping Computer
Comcast is promoting WiFi-based motion detection as a part of its new Xfinity Shield home protection platform, allowing routers and wireless devices to detect people moving through a home without cameras or motion sensors. [...]
Dark Reading
Million-dollar heists, divorce, and career-ending burnout are all stories told in the latest docuseries revealing a behind-the-scenes look at the cybersecurity community.