Incidents
Ofqual statistics show school cyber incidents falling to 27%
New Ofqual data reveals the proportion of UK schools hit by cyber incidents has fallen to 27%, while two-thirds can now recover immediately from attacks.
Incidents
Incidents on Zero Day Room: Confirmed breaches, finance, health, telecom, government and Post-incident reports and lessons.
Incidents
Pentagon breach exposes 2.76 million SSNs in personnel data
The Pentagon has confirmed a months-long breach of its Defense Manpower Data Center, exposing unencrypted Social Security numbers and personal details.
Incidents
Tren de Aragua ATM Jackpotting Sanctions Target $40.73 Million Scheme
The U.S. Treasury sanctioned 10 individuals and companies linked to a Tren de Aragua ATM malware scheme that caused over $40.7 million in losses.
Incidents
Facebook liable for 43 million data privacy violations
A New Mexico jury found Meta's Facebook liable for over 43 million violations of state consumer protection law.
Incidents
Kiteworks issues global server shutdown advisory
Kiteworks advised customers worldwide to shut down servers for a six-hour window on Saturday, September 26, based on credible threat intelligence.
Incidents
EU Auditors Cite Information-Sharing Gaps in Cyber Response
The EU Court of Auditors warns that poor information sharing and undefined roles are hindering the bloc's ability to detect and respond to large-scale cyber incidents.
Incidents
Spain Reports First AI Agent Data Breach
Spain's data protection agency has disclosed the country's first confirmed personal data breach carried out by an agentic AI.
Incidents
Cyberattacks Disrupt Two Oil Tankers Bound for Texas
The US Coast Guard and FBI boarded two oil tankers last month after cyberattacks disrupted their voyages. Investigators found evidence of a malicious cyber actor on one vessel, though they have not publicly linked the incidents to Iran.
Incidents
Florida DMV breach linked to stolen police credentials
The Florida Department of Highway Safety and Motor Vehicles confirmed a data breach after credentials were stolen from a Plant City police officer's personal device.
Incidents
McKesson Investigates ShinyHunters Data Breach
Healthcare distributor McKesson is investigating a data breach claimed by ShinyHunters, which reportedly compromised hundreds of millions of records.
Incidents
Nutex Health breach exposes patient data
US healthcare provider Nutex Health disclosed a data breach where patient and employee information was stolen.
Incidents
Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers
Hardware wallet maker Trezor disclosed a data breach at its shipping provider ShipMonk, exposing 67,000 U.S. Customers' order data from 2019-2021.
Incidents
G7 Calls for Accelerated Quantum-Safe Encryption Transition
The G7, chaired by France’s ANSSI during its 2026 presidency, issued a September 3 call urging governments and businesses to prioritize post-quantum cryptography.
Incidents
PostgreSQL patches 12-year-old logical replication flaw
PostgreSQL has released updates to fix CVE-2026-6471, a vulnerability allowing accounts with the REPLICATION attribute to execute arbitrary code.
Incidents
Pegasus Zero-Click Infects Serbian Activist via Patched iOS
Citizen Lab and SHARE Foundation found a Serbian student activist's iPhone was infected with NSO's Pegasus spyware using a zero-click iMessage exploit.
Incidents
GitHub details five lessons for threat feed ingestion
GitHub's Dependabot team, which monitors over 30 million repositories, shares operational lessons from ingesting community threat intelligence at scale.