Where it happened
The last 14 days. 74 of 541 security stories named a country; the other 467 are listed below the map. Pick a country to see its stories.
- Major
- Medium
- Low
- Blamed
- Blamed, to targeted
Countries 24
Blamed means the reporting attributes the attack to that country, which isn't proof.
All countries
-
Major. CISA says it's being exploited
CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws
-
Major. Zero-day
BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
-
Major. CISA says it's being exploited
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
-
Major. Zero-day
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
-
Medium. Systems compromised
Compromised TLS Certificates
-
Medium. Described as critical
CISA warns of hackers now exploiting critical Node2Shell flaw
-
Medium. Exploit
BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
-
Medium. Data breach
Quest Diagnostics confirms data breach exposed patient records
-
Medium. Data leak
State Bank of India Suffers a Customer PII Data Leak
-
Medium. Supply-chain attack
Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack
-
Medium. Backdoor
OVHcloud CLI releases backdoored on GitHub to steal developer secrets
-
Medium. Data breach
Japan Airlines suffers third-party data breach exposing passenger info
-
Medium. Malware
Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.
-
Medium. Breach
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
-
Medium. Systems compromised
American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed
-
Medium. Ransomware
Nefilim and Hive ransomware affiliate gets 70 months in prison
-
Medium. Breach
Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach
-
Medium. Data stolen
Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature
-
Medium. Ransomware
Japan's GMO urges customers to shut down PCs amid ransomware threat
-
Medium. Ransomware
UNM Health ransomware attack disrupts patient care, surgeries
-
Medium. Malware
Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption
-
Medium. Malware
Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers
-
Medium. Data breach
Energy giant ENGIE discloses data breach affecting customers
-
Medium. Data breach
University of Copenhagen data breach exposes data of 525,000 people
-
Medium. Breach
Former pentester used ARTEX AI to steal 8.2 million data records
-
Medium. Hack
Bias in Qwen3-Coder Model
-
Medium. Botnet
Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet
-
Medium. Backdoor
Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack
-
Medium. Data breach
Capcom confirms data breach affecting 11.7 million accounts
-
Medium. Hack
Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected
-
Medium. Malware
Lazarus hackers use post-quantum cryptography for malware delivery
-
Medium. Backdoor
China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors
-
Medium. Breach
Certes puts data protection beyond the breach in focus
-
Medium. Backdoor
Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion
-
Medium. Systems compromised
Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree
-
Medium. Breach
Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites
-
Medium. Spyware
Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election
-
Medium. Breach
Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader
-
Medium. Extortion
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
-
Medium. Breach
Certes puts data protection beyond breach in focus
-
Medium. Breach
Certes puts data protection beyond breach in focus
-
Medium. Data breach
Burger King Japan data breach exposes 11 million customer records
-
Low.
Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations
-
Low.
U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases
-
Low.
Ex-OpenAI Engineer Held Over Secret Recorder, Saudi Ties
-
Low.
Saudi Arabia opens drone and cyber centres
-
Low.
Insider incidents cost Middle East organisations US$2.41 million annually
-
Low.
26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories
-
Low.
Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes
-
Low.
Cyber Vulnerabilities Besiege Italy, Absent Clear Cause
-
Low.
Police seize Virtualine bulletproof service tied to ransowmare, cybercrime
-
Low.
Studying Fraudulent North Korean IT Workers
-
Low.
FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering
-
Low.
UAE organisations struggle to enforce AI security controls
-
Low.
CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets
-
Low.
Iran-linked Handala hacking group sends bouquets and letters to Israel polling sites
-
Low.
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
-
Low.
What does the UAE’s next cyber challenge look like?
-
Low.
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
-
Low.
Chinese man extradited for role in $36 million cryptocurrency scam
-
Low.
Cisco study: UAE cyber defence advances, but visibility and coordination gaps remain
-
Low.
What We Missed: Feds Lasso Texas Laptop Farms
-
Low.
eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable
-
Low.
UAE Transitions 50% of Gov't Services to Agentic AI
-
Low.
Hacker gets 8 years for stealing $3.3 million from taxpayers
-
Low.
Ahold Delhaize: Cyberattack affects services across US and Europe
-
Low.
Relive the top moments for our momentous CISO50 & Future Security Awards 2026
-
Low.
Researchers Infiltrate Microsoft Tech Support Scam Operation
-
Low.
Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers
-
Low.
UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing
-
Low.
CISO50 and Future Security Awards 2026 celebrate cybersecurity leadership
-
Low.
CISO50 and Future Security Awards 2026 celebrate cybersecurity leadership
-
Low.
BAE Systems cyberattack disrupts US federal court operations
-
Low.
CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing
Not on the map the most important of 467
Major. CISA says it's being exploited
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
Major. CISA says it's being exploited
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
Major. CISA says it's being exploited
Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
Major. Reported as actively exploited
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
Major. CISA says it's being exploited
PHP2Shell security flaws now sucessfully exploited in the wild
Major. CISA says it's being exploited
CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud