Data Breaches

Editorial illustration of a key ring being rotated beside an AI vault as shields fail, marking Hugging Face's token-rotation guidance after the autonomous-agent breach.

Data Breaches

Hugging Face Confirms Breach Detail: Frontier LLMs Failed to Stop the Autonomous Agent; Users Urged to Rotate Tokens

Hugging Face's autonomous-agent breach gets user-action guidance — and a Chinese open-weight model, GLM 5.2, reportedly powered the attack while frontier LLMs failed to help defenders.

Editorial illustration of a spilling records folder beside a cracked enterprise-software panel, marking Estée Lauder Oracle E-Business Suite zero-day breach.

Data Breaches

Estée Lauder Discloses Impact From Oracle E-Business Suite Zero-Day Breach

Another Oracle EBS customer disclosure lands: Estée Lauder confirms the theft of employees' personal, financial, and health data from its Oracle E-Business Suite HR system, closing one of the last gaps in the 2025 Oracle zero-day cycle.

Editorial illustration of a small robot arm slipping a key from an open AI model-repository vault, marking Hugging Face's breach by an autonomous AI agent.

Data Breaches

Hugging Face Confirms Production Infrastructure Breach Reportedly Perpetrated by Autonomous AI Agent

A first-of-its-kind AI-agent breach hits the world's largest AI model repository — defender posture and AI-supply-chain review are the week's practical takeaways for organizations that depend on Hugging Face-hosted models, datasets, and Spaces.

Ransomware

Coca-Cola Suspends Fairlife US Milk Production Following Ransomware Attack (SEC 8-K Filed)

A ransomware attack halts fairlife's US milk production and lands as a Coca-Cola SEC 8-K filing — food-industry sector-advisory coverage this week.

Editorial illustration of a DNA helix beside a gavel and coin stacks, marking 23andMe's $18M settlement with 42 state attorneys general.

Data Privacy

23andMe Reaches $18 Million Multi-State Settlement Across 42 State Attorneys General

A significant multi-state privacy settlement — regulatory-policy analysis coverage this week — as 23andMe agrees to pay $18 million to a coalition of 42 state attorneys general over the security failings behind its data breach.

Editorial illustration of an airplane tail beside a spilling records folder and a headset, marking the Qantas breach of 5.7 million from a tech-support scam.

Data Breaches

Qantas Discloses Data Breach Affecting 5.7 Million People Traced to Tech-Support Scam

A scale-significant airline-industry disclosure traced to a tech-support scam — sector-advisory coverage this week, based on early single-source reporting that Qantas has yet to fully detail.

Editorial illustration of three trails converging on a customer-records file, representing Microsoft's analysis of three Salesforce attack paths.

Threat Intelligence

Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity

Microsoft maps ShinyHunters' Salesforce activity — defender review for SaaS-heavy organizations this week.

Editorial illustration of a magnifying glass over a newspaper beside a spilling records folder, marking the Accenture data breach in a weekly security recap.

Data Breaches

Accenture Confirms Data Breach After Hacker Lists Stolen Source Code and Cloud Keys for Sale

A consulting-and-IT-services sector signal: Accenture has confirmed an intrusion after a threat actor advertised stolen source code and cloud credentials for sale, calling it an isolated, remediated matter even as the scale and any client impact remain unverified.

Flat white line-art of an open report book beside a shield, one flat red dot at the shield — CISA credential-leak forensic report.

Data Breaches

CISA Publishes Forensic Report on May AWS GovCloud Credential Leak

A candid CISA transparency report — defender takeaways on incident-playbook readiness this week.

Flat white line-art of a government building beside a tall database drum — a DHS database breach reported in a weekly security roundup.

Data Breaches

DHS Database Hacked, SecurityWeek Roundup Reports; Adobe, Canada Also Featured

A federal-agency database breach lands in the weekly roundup — sector-advisory tracking this week.

Flat white line-art of a cloud shape linked to a stack of patient record cards — AdaptHealth cloud-systems compromise affecting patient data.

Data Breaches

AdaptHealth Discloses Cloud-Systems Compromise Affecting Patient Data

Another healthcare-sector cloud-compromise disclosure — sector-advisory work this week. AdaptHealth says attackers reached its cloud systems and accessed patient data, with social engineering reported as the initial-access route.

Flat white line-art of a pacemaker device beside a stack of patient record cards — Medtronic warns pacemaker patients of a health-data exposure.

Data Breaches

Medtronic Warns Pacemaker Patients Health Data May Have Been Exposed in Cyber Incident

A medical-device-manufacturer disclosure with sector-advisory implications — patient notification in focus this week.

See all