Massive data leak hits China: Over 50 billion records exposed on a cybercrime forum by threat actor “PixieSteed.”

The leaked multi-terabyte dataset reportedly includes user info, purchase histories, and logistics data from e-commerce platforms and citizen databases — one of the largest breaches in recent years.

ShinyHunters claim a new victim: Rockstar Games 🇺🇸

The group says the breach was made possible after compromising Anodot, from which they allegedly obtained credentials to access Rockstar’s Snowflake environment.

Police and intelligence agencies are using phone ad data to track people.

Up to 500M devices feed Webloc, built by Cobwebs and sold by Penlink, enabling location tracking, identity inference, and 3-year history, per Citizen Lab.

Adobe released emergency fixes for a 9.6 CVSS flaw (CVE-2026-34621) in Acrobat/Reader, confirmed under active exploitation.

A prototype pollution bug lets malicious PDFs run arbitrary code via JavaScript. Evidence shows attacks may date back to Dec 2025.

Censys finds 5,219 devices exposed to attacks by Iranian APTs, majority in U.S.

Google Chrome Update Disrupts Infostealer Cookie Theft.

GraphAlgo Scam: Lazarus Hackers Register Real US LLCs to Spread Malware.

Android Banking Trojan Linked to Cambodia Scam Compounds Hits 21 Countries.

All Brazilians potentially impacted by alleged breach of Experian subsidiary.