breach

Breaches & attacks · Exploited · since 12 Nov 2026

Apify detected unauthorized access to its internal systems and responded by rotating API tokens and forcing 2FA resets for affected accounts. The breach prompted immediate credential revocation and OAuth connection removal.

Do:Rotate all API tokens, enforce 2FA for all accounts, and audit for further compromise.

Breaches & attacks · Real loss · since Aug 2026 (approx.)

Attackers used the open‑source AI pentest framework Cairn to breach ten organizations, gaining unauthorized access and exfiltrating data. The campaign spanned August and September 2026 and targeted semiconductor, advanced‑manufacturing, and defense sectors.

Do:Investigate the breach, reset compromised accounts, and strengthen monitoring for AI‑driven intrusion attempts.

Breaches & attacks · Exploited · since 10 Nov 2026 · updated 12 Nov 2026

Russian state-linked hackers compromised government email servers in Romania and Kazakhstan to intercept correspondence with NATO and EU officials. Researchers revealed the covert espionage campaign affecting diplomatic communications.

Do:Investigate server logs for unauthorized access and review government email security controls.

Breaches & attacks · Exploited · since 10 Nov 2026 · updated 12 Nov 2026

AI startup Fireworks AI disclosed a security breach where attackers accessed its development machines. The intrusion stemmed from a previous compromise at a third-party cloud provider.

Breaches & attacks · Real loss · since 26 Oct 2026 · updated 10 Nov 2026

Attackers used Qubole platform AWS access credentials to breach multiple customer accounts between October 14 and October 26. The intruders stole stored secrets and data from the affected environments.

Do:Audit AWS IAM roles and review logs for unauthorized access originating from Qubole integration credentials.

Breaches & attacks · Exploited · since 9 Nov 2026

Hackers allegedly leveraged an AI assistant connection tool to compromise a German web hosting company. The incident exploited the customer assistant interface to gain unauthorized access.

Breaches & attacks · Exploited · since 5 Nov 2026

A cyberattack targeted the infrastructure of the French Blood Bank site, though officials confirmed that blood products remained uncompromised. The incident follows a wave of remote attacks affecting supermarket refrigeration systems across Europe.

Breaches & attacks · Real loss · since 3 Nov 2026

Blockchain infrastructure provider Chainstack disclosed that an unauthorized party accessed parts of its infrastructure. The breach exposed customer data and password hashes.

Breaches & attacks · Real loss · since 31 Oct 2026

Cloud hosting platform Northflank suffered a security breach where attackers accessed stored secrets. The incident resulted in the unauthorized use and exposure of customers' AI API keys.

Do:Rotate all credentials and secrets stored on the Northflank platform.

Breaches & attacks · Exploited · since 29 Oct 2026 · updated 12 Nov 2026

Binance announced it is investigating a potential major security breach involving digital assets. The exchange is reviewing the incident to determine the scope and impact.

Breaches & attacks · Real loss · since 29 Oct 2026 · updated 2 Nov 2026

Polymarket suspended trading after attackers compromised a third-party service to inject cryptocurrency-draining scripts. Approximately $2.5 million in assets was traced to attacker wallets.

Breaches & attacks · Exploited · since 29 Oct 2026

Breaches & attacks · Exploited · since 8 Oct 2024