macOS ClickFix Attack Silently Deploys AMOS Infostealer via Fake CAPTCHA Terminal Commands
June 28, 2026 Security researchers at Palo Alto Networks Unit 42 have uncovered a new macOS ClickFix campaign that uses Terminal commands to silently download, mount, and execute infostealing malware. The campaign targets Mac users with fake CAPTCHA…
Polymarket Supply-Chain Attack Drains Million in Crypto via Frontend Compromise
June 28, 2026 Polymarket, a $9 billion cryptocurrency-based prediction market platform, disclosed on June 26, 2026, that attackers stole approximately $3 million from customers through a frontend supply-chain attack. Consequently, the breach exploited a…
Xsolis Data Breach Exposes 1.4 Million Patient Records in Healthcare AI Firm
June 23, 2026 Healthcare technology firm Xsolis disclosed a data breach on June 23, 2026, that compromised the personal and protected health information of nearly 1.4 million individuals. Furthermore, the incident began with a targeted phishing attack on…
Klue OAuth Breach: Icarus Group Exfiltrates Salesforce Data
June 22, 2026 Market intelligence platform Klue has confirmed a major security breach where attackers stole OAuth tokens used to connect customer Salesforce environments, enabling unauthorized data exfiltration from multiple organizations. The incident,…
Icarus Extortion Group Steals Salesforce CRM Data
June 20, 2026 Market intelligence platform Klue disclosed a critical security incident on June 19, 2026. Threat actors compromised legacy integration credentials to steal OAuth tokens used to connect Klue with customer Salesforce environments.…
UNC6508 Abuses Google Workspace Rules to Steal US Medical and Defense Research
June 16, 2026 Google’s Threat Intelligence Group has disrupted a China-nexus espionage campaign that hid inside North American medical and military research networks for more than a year. The threat actor, tracked as UNC6508, abused legitimate…
Novo Nordisk Clinical Trial Data Breach Exposes Patient and HCP Records
June 15, 2026 Danish pharmaceutical giant Novo Nordisk, the world’s largest insulin producer and maker of blockbuster GLP-1 drugs Wegovy and Ozempic, has disclosed a significant data breach. Attackers gained unauthorized access to internal IT…
Iranian State-Sponsored Hacking Group Handala Breaches Holocaust Victim Support Centre: 2M Documents Leaked
June 2, 2026 Iranian state-sponsored hacking group Handala breached the Holocaust Victim Support Centre in Israel on May 31, 2026. The group claimed responsibility for the attack and leaked over two million documents totaling more than one terabyte of…
ShinyHunters Breach Charter Communications: 4.9M Accounts Exposed
May 29, 2026 The ShinyHunters extortion gang has breached Charter Communications, exposing 4.9 million customer and business accounts. Consequently, the telecom giant confirmed the incident while disputing the severity of the stolen data. Charter…
7-Eleven Data Breach Exposes 185,000 People: ShinyHunters Extortion Gang Strikes
May 26, 2026 Convenience store giant 7-Eleven has confirmed a data breach that exposed the personal information of 185,300 people after the ShinyHunters extortion gang compromised its systems in early April 2026. Consequently, the cybercriminals leaked a…