PrivacySignal
Analysis ← Front page
Breach

ClickFix campaign in Ukraine compromises over 100 websites to spread Lunex malware

The Record · · International · Data Breaches

CERT-UA found fake Cloudflare verification pages that led visitors into a now-familiar ClickFix trap. This time the goal was to infect machines with an infostealer.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security
Read the original at The Record → Browse the archive

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

The Attacker Did Not Need to Sleep

Spain received its first reported personal-data breach carried out by an AI agent. The techniques were familiar. The speed and autonomy were not.

· 4 min read Read →

Related stories

Breach
The Guardian — Tech · · International

Ofcom investigates Meta over Instagram Instants safety checks

UK regulator Ofcom has opened an investigation into Meta over Instagram Instants, a Snapchat-style feature launched on Instagram. The probe centers on whether Meta conducted adequate risk assessments under the Online Safety Act, particularly regarding children's access and potential exposure to illegal content.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

#breach#enforcement Read original →
Breach
DataBreaches.net · · International

Japan hands over ‘Qilin’ hacker group member to Germany

JiJi reports: Japanese police have captured a Russian national believed to be a key member of the “Qilin” international hacker group and extradited him to Germany, investigative sources said Tuesday. Qilin is believed to have carried out ransomware attacks against companies worldwide, causing major damage through data encryption. In 2025, the group claimed responsibility online... Source

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
DataBreaches.net · · International

Denmark Central Person Register (CPR) Breach: Cyberattack Exposes Data of 8.8 Million

Rescana’s new report on a breach affecting the Denmark Central Person Register (CPR) summarizes the situation: On October 5, 2026, Danish authorities publicly disclosed a significant data breach affecting the Central Person Register (CPR), Denmark’s national population database. Attackers exploited a legitimate company account to access the names, addresses, and CPR numbers of approximately 8.8... Source

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
The Guardian — Tech · · International

Misuse of AI is brands’ top reputational threat, new survey says

A survey of more than 150 public affairs leaders ranked AI misuse as the single biggest reputational threat facing companies today, placing it above harms to children and geopolitical controversies as a brand risk.

Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy

#breach#ai-governance#ai Read original →
Breach
BleepingComputer · · International

Engineer sentenced for locking over 3,000 devices on employer network

A former core infrastructure engineer at an industrial company headquartered in New Jersey was sentenced to 32 months in prison for locking thousands of devices on his employer's network in a ransomware-style attack. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
The Guardian — Tech · · International

Anthropic says AI agents didn’t breach Australian government websites – video

Anthropic told an Australian parliamentary hearing that a review of hundreds of millions of transcripts found no unauthorized access to government systems by its AI agents. The company's head of safeguards acknowledged, however, that Anthropic has limited visibility into how customers use its tools because of its zero data retention policy.

Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · Compliance · General readers · Policy

#breach#ai-governance#regulation#ai Read original →