Top Security Breaches 2026-08-04

Auto-generated 2026-08-04T09:00:42.178036+00:00 (UTC)

1. PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web

   Source: The Hacker News | Published: 2026-08-03T09:13:56+00:00 | Score: 23.043
   

   The Police National Legal Database (PNLD) has confirmed that police, government and customer contact information was compromised and published on the dark web.

   The data included names, organisations and work email addresses belonging to police officers, police staff, criminal justice professionals, government partners and customers.

   The incident, identified on July 26, also exposed some names

   Original: https://thehackernews.com/2026/08/pnld-breach-exposes-uk-police-and.html

2. INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws

   Source: The Hacker News | Published: 2026-08-03T16:15:13+00:00 | Score: 18.991
   

   The INC Ransomware operation has emerged as the “dominant threat actor” exploiting the recently disclosed security flaws in SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances.

   In a report published over the weekend, Resecurity said it observed the INC Ransomware accelerating its activity since the beginning of August 2026, listing multiple victims on its data leak site. Per

   Original: https://thehackernews.com/2026/08/inc-ransomware-emerges-as-dominant.html

3. Amgen says cloud data breach exposed patient health, proprietary info

   Source: BleepingComputer | Published: 2026-07-31T22:16:42+00:00 | Score: 16.981
   

   Pharmaceutical company Amgen says it suffered a data breach after threat actors stole corporate data and patient information stored in multiple cloud systems operated by third-party service providers. […]

   Original: https://www.bleepingcomputer.com/news/security/amgen-says-cloud-data-breach-exposed-patient-health-proprietary-info/

4. OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach

   Source: The Hacker News | Published: 2026-07-29T07:51:00+00:00 | Score: 16.486
   

   OpenAI on Tuesday revealed the rogue artificial intelligence (AI) agent that escaped its sealed evaluation environment and broke into Hugging Face’s production environment also hacked multiple third-party accounts and services as part of the attack.

   The latest disclosure shows that the security incident, which stemmed from an internal security test, was more extensive in scope than previously

   Original: https://thehackernews.com/2026/07/openai-agent-used-exposed-credentials.html

5. ExfilSquad hackers leak info of over 100,000 UK police officers, staff

   Source: BleepingComputer | Published: 2026-08-03T15:04:39+00:00 | Score: 15.481
   

   A cyberattack on the U.K.’s Police National Legal Database (PNLD) has compromised contact data of more than 100,000 police officers and other criminal justice professionals. […]

   Original: https://www.bleepingcomputer.com/news/security/exfilsquad-hackers-leak-info-of-over-100-000-uk-police-officers-staff/

6. The Network Has Become the Control Plane for AI Security

   Source: The Hacker News | Published: 2026-07-30T11:32:46+00:00 | Score: 15.032
   

   Network firewalls are the workhorses of modern cybersecurity. They are trusted to protect the network, blocking malicious traffic and preventing intrusions and breaches. And for decades, network security teams have built controls around a relatively stable model: users connect to applications, applications exchange data, and security tools inspect packets, protocols, and destinations. Firewalls

   Original: https://thehackernews.com/2026/07/the-network-has-become-control-plane.html

7. Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations

   Source: The Hacker News | Published: 2026-07-31T06:41:44+00:00 | Score: 13.471
   

   Anthropic on Thursday became the latest artificial intelligence (AI) company to reveal that three of its models, including Claude Opus 4.7, Mythos 5, and an unnamed research model, had breached three unnamed organizations during cybersecurity testing without its knowledge.

   The AI firm said the earliest incidents date back to April 2026, adding it made the discoveries after launching a “

   Original: https://thehackernews.com/2026/07/anthropic-says-claude-mistook-open.html

8. Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database

   Source: The Hacker News | Published: 2026-07-30T13:34:09+00:00 | Score: 13.257
   

   A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the service’s Gremlin query sandbox and obtain full read and write access to databases across customer tenants, according to Wiz.

   Wiz, which codenamed the chain CosmosEscape, said the exploit chain began with a crafted query against a Gremlin database controlled by the attacker. From there, code execution on a

   Original: https://thehackernews.com/2026/07/azure-cosmos-db-flaw-exposed-platform.html

End of report.