In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders.

A five-year-old software vulnerability recently compromised servers associated with the Ukrainian state data exchange infrastructure. Specifically, an unidentified adversary leveraged the critical…

Capcom Confirms Unauthorized Access Japanese game maker Capcom has confirmed unauthorized access to its CAPCOM ID membership system. The breach involves 11.77 million user records worldwide. CAPCO…

The Browser Company Retires Arc The Browser Company has already stopped developing Arc, a browser that developers loved. Its user base never grew large enough, so the company chose to move on to a…

I used to think web security was mostly about learning the right tools. Building an intentionally vulnerable application taught me…

State Bank of India confirmed customer records leaked on the dark web, weeks after Shinhan, KB Kookmin and Hana were breached in attacks…

In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders.

October 2026 has brought a dense series of cybersecurity disclosures, software vulnerabilities, data exposures and infrastructure incidents…

A breakdown of what’s confirmed, what isn’t, and what customers and SOC teams should do now.

An API key is often treated as a small configuration detail.

A write-up documenting my journey through the data manipulation module of pwn.college’s Linux Luminarium.

Logs help teams debug workflows, but they can also become an accidental secret store.

Cybersecurity Basics

At a Glance Organization VIDAA OS and its ACR partner Unruly (exposure); Samsung Tizen and Vizio SmartCast (opt-out findings) Data exposed ACR detection results with device IDs, app names and cont…

TL;DR A recent PingCAP data breach exposed internal company systems between September 9 and October 7, 2026. Specifically, an attacker used stolen credentials to copy customer records and propriet…

Cryptocurrency hardware wallet manufacturer Keystone recently disclosed an unauthorized intrusion into its web platform. Specifically, security engineers detected anomalous activity targeting inte…

Japanese technology conglomerate GMO Internet Group suffered a catastrophic security compromise across its virtual workspace infrastructure. Specifically, the GMO Desktop Cloud breach impacted ove…

A system designed to guarantee anonymity for crime witnesses has suffered a catastrophic data leak. Specifically, Canadian non-profit Toronto Crime Stoppers suspended operations on October 21 foll…

Keys to the Cloud, Possibly in Stranger Hands Access keys to cloud services may have fallen into the wrong hands. The cause is a compromise of a platform where developers trusted their secrets to …

The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected.