Privacy Headlines

BleepingComputer · 10/13/2026

A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files. [...]

DataBreaches.net · 10/13/2026

Luis Monzon reports: Ampath Laboratories, one of South Africa’s largest pathology service providers, has been hit by a cyberattack, with the attacker claiming that more than 80 million patient records have been exfiltrated. Threat actor ByteToBreach, which has attacked other major entities across Africa, including major targets in Nigeria, claimed responsibility for the breach. The... Source

Fox News Tech · 10/13/2026

Hackers targeted Danfoss refrigerator controls across French supermarkets, forcing chains like Carrefour and Monoprix to discard massive food stocks.

BleepingComputer · 10/13/2026

TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion brands. [...]

The Record · 10/13/2026

The new research, published by AI security startup AIR, found that a network filtering flaw in Vercel Sandbox — a tool used to run code in isolated environments — could allow agents to exploit certificate validation processes to transmit data outside approved networks.

SecurityWeek · 10/13/2026

Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services. The post Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach appeared first on SecurityWeek .

The Record · 10/13/2026

North Korean hackers have been targeting Ukrainian experts in diplomacy, security and international policy amid Pyongyang’s growing military cooperation with Russia.

DataBreaches.net · 10/13/2026

UpGuard provides another entry for our “No need to hack when it’s leaking” files. This time, it’s Liberating Research. On August 31, Greg Pollock from UpGuard contacted DataBreaches.net to report a data leak they discovered containing sensitive medical information on almost 100,000 people. By agreement, we both delayed publication to give the responsible firm time... Source

DataBreaches.net · 10/13/2026

Back in the day, when my co-author and I would conduct training workshops on neurobehavioral disorders in children and teens, we would always introduce our presentation with an overhead that said, “Two Professionals. Three Opinions.” That remains true for so many controversial or contentious topics. This week, Marco A. De Felice of SuspectFile tackled questions... Source

EDPB News · 10/13/2026

Brussels, 13 October – During its latest plenary, the EDPB has adopted statement on smart glasses and published the report “The connected gaze. Video recording, surveillance and administering evidence in the age of smart glasses” *, developed in the context of the Support Pool of Expert (SPE) programme **. As smart glasses become widely available and more frequently used, they raise significant questions for the protection of individuals’ personal data and rights and freedoms even if they create new opportunities for communication, assistance, and innovation. “These devices look like ordinary glasses, but they include cameras and microphones and are connected to the internet. This raises serious privacy concerns, as individuals may be recorded without their knowledge. The risks are even greater in sensitive environments—such as hospitals, schools, or workplaces—and when recordings are shared on social networks. And of course, children are especially at risk when using these glasses or

SecurityWeek · 10/13/2026

The company says it took some of its systems offline to contain a security issue within its network. The post Cyberattack Prompts Grocery Giant Ahold Delhaize to Disconnect Systems appeared first on SecurityWeek .

BBC Technology · 10/13/2026

TFG London has apologised to customers for disruption after it identified a "cybersecurity incident" on Sunday.

BleepingComputer · 10/12/2026

Norway's Data Protection Authority (Datatilsynet) has fined Microsoft-owned advertising company Xandr NOK 92 million ($9.6M) for unlawfully processing and sharing sensitive data belonging to Grindr users in the country. [...]

BleepingComputer · 10/12/2026

Anthropic announced that its internal AI models undergoing "high-risk and cybersecurity evaluations" no longer have internet access following incidents involving U.S. government websites at the federal, state, and local levels. [...]

Fox News Tech · 10/12/2026

The Pentagon data breach exposed 2.76 million Social Security numbers and military records, raising long-term identity theft concerns for veterans.

BleepingComputer · 10/12/2026

Attackers remotely defrosted refrigerators at multiple French supermarket chains overnight in a cyberattack that reportedly targeted Danfoss refrigeration controllers. [...]

BBC Technology · 10/12/2026

Kanishka Narayan said the government will use advanced AI to strengthen the UK against cyber attacks.

BleepingComputer · 10/12/2026

Retail giant Ahold Delhaize, one of the world's largest food retail chains, confirmed today that it had to take some systems offline in response to a "cybersecurity incident" affecting its network. [...]

DataBreaches.net · 10/12/2026

David Hollingsworth reports: The operator of a global suite of cancer care providers has confirmed that patient data has been affected by a data breach involving Australia’s largest cancer care provider, the Icon Cancer Centre. “Icon Oncology Group is managing a data breach incident involving unauthorised access to some patient information held on a supplier’s... Source

DataBreaches.net · 10/12/2026

AFP reports: Major French supermarket chains Intermarche and Cooperative U were hit by a cyberattack that caused their refrigerators to defrost, the two retailers told AFP Monday. Some 150-200 Intermarche shops were targeted, along with almost 100 Cooperative U outlets, in the attack, they said. Paris prosecutors confirmed the attack, which reportedly also hit other... Source

EDPB News · 10/12/2026

Background information Date of final decision: 05/06/2026 National case Controller: Wind Tre S.p.A. Legal Reference(s): Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right to access by the data subject), Article 21 (Right to object), Article 24 (Responsibility of the controller), Article 25 (Data protection by design and by default) and Article 32 (Security of processing) Decision: Administrative fine, Definitive ban on data processing, Compliance order Website topics: Data subjects rights, Basic principles, Legal basis, Marketing Summary of the Decision Origin of the case The Italian Data Protection Authority (DPA) carried out an investigation into Wind Tre S.p.A. following numerous complaints and reports from individuals concerning unsolicited promotional contacts and the activation of contracts and

SecurityWeek · 10/12/2026

Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers. The post iRhythm Data Breach Impacts at Least 360,000 People appeared first on SecurityWeek .

SecurityWeek · 10/12/2026

The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a conference. The post Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe appeared first on SecurityWeek .

New York Post Tech · 10/11/2026

A Canadian cybersecurity executive who negotiates with ransomware hackers faces federal extortion-related charges as authorities investigate a hacking group that claims to have stolen sensitive FBI employee information

The Record · 10/11/2026

A cyberattack overnight Sunday disrupted refrigerators at hundreds of French supermarkets, spoiling fresh food at stores run by some of the country’s largest grocery chains.