<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"><channel><title>Cyber Resilience — Threats News</title><link>https://security-resilience.ai/threats/</link><description>Ranked threats security news with our own read on each story — what it is, how confident we are, and what it means for you.</description><lastBuildDate>Sun, 23 Aug 2026 02:27:14 +0000</lastBuildDate><item><title>Leak-site claims, 2026-08-23: 120 listings</title><link>https://security-resilience.ai/news/</link><guid isPermaLink="false">sr-digest-leak-claims-2026-08-23</guid><pubDate>Sun, 23 Aug 2026 02:27:14 +0000</pubDate><description>Leak-site claim: coinbasecartel lists Integrated Health Systems — https://security-resilience.ai/news/story/sr-ab6289280ff9.html
Leak-site claim: Helix lists AmSpec — https://security-resilience.ai/news/story/sr-477abdf89d9f.html
Leak-site claim: emperador lists Vietnam Electricity(EVNHANOI) — https://security-resilience.ai/news/story/sr-3ba3e6c615a1.html
Leak-site claim: shinyhunters lists NovoCure Limited — https://security-resilience.ai/news/story/sr-18a533b8c626.html
Leak-site claim: shinyhunters lists BOK Financial — https://security-resilience.ai/news/story/sr-5d6ce78713c8.html
Leak-site claim: coinbasecartel lists RXPE Group — https://security-resilience.ai/news/story/sr-e98c16f5e22a.html
Leak-site claim: coinbasecartel lists Tower Insurance — https://security-resilience.ai/news/story/sr-06308785f9b5.html
Leak-site claim: coinbasecartel lists Flecha Bus — https://security-resilience.ai/news/story/sr-793286ebdece.html
Leak-site claim: coinbasecartel lists OTEIS Conseil &amp; Ingénierie — https://security-resilience.ai/news/story/sr-34393576ad85.html
Leak-site claim: coinbasecartel lists Longhorn Investments — https://security-resilience.ai/news/story/sr-2c19ec13f96a.html
Leak-site claim: coinbasecartel lists Kessler Creative — https://security-resilience.ai/news/story/sr-6f09c8c0c7ea.html
Leak-site claim: coinbasecartel lists Klasko Immigration Law Partners — https://security-resilience.ai/news/story/sr-974287bdb2ea.html
Leak-site claim: coinbasecartel lists Patel — https://security-resilience.ai/news/story/sr-dca8996c5722.html
Leak-site claim: coinbasecartel lists Abacus Advisors — https://security-resilience.ai/news/story/sr-aa48f724b306.html
Leak-site claim: coinbasecartel lists LifeBank Microfinance Foundation — https://security-resilience.ai/news/story/sr-13161afea8c8.html
Leak-site claim: coinbasecartel lists PT Perusahaan Jamu Air Mancur — https://security-resilience.ai/news/story/sr-a649a1612a52.html
Leak-site claim: coinbasecartel lists PT. — https://security-resilience.ai/news/story/sr-26ed59aa0a66.html
Leak-site claim: spacebears lists holzmarkt chemnitz — https://security-resilience.ai/news/story/sr-61f0c089e53c.html
Leak-site claim: spacebears lists Freelom — https://security-resilience.ai/news/story/sr-2b806200da2b.html
Leak-site claim: pear lists Island Networks — https://security-resilience.ai/news/story/sr-3c7b45989064.html
Leak-site claim: pear lists Mogren, Glessner &amp; Ahrens, P.S. — https://security-resilience.ai/news/story/sr-9b413e591709.html
Leak-site claim: rhysida lists CRI Electric — https://security-resilience.ai/news/story/sr-8fe17400e49d.html
Leak-site claim: thegentlemen lists Meridian Logistics Group — https://security-resilience.ai/news/story/sr-f159deef0858.html
Leak-site claim: Panzer lists Nteitalia — https://security-resilience.ai/news/story/sr-ab5026804036.html
Leak-site claim: qilin lists Quaker State Mexico — https://security-resilience.ai/news/story/sr-b6808eb60561.html
Leak-site claim: qilin lists iPic — https://security-resilience.ai/news/story/sr-3675b1cb4285.html
Leak-site claim: akira lists JC Sales — https://security-resilience.ai/news/story/sr-2ca52c59e981.html
Leak-site claim: qilin lists Cinépolis — https://security-resilience.ai/news/story/sr-59aec1cd2d98.html
Leak-site claim: rhysida lists Fairview Dental Group — https://security-resilience.ai/news/story/sr-df77b4f7bf55.html
Leak-site claim: qilin lists Gindre India — https://security-resilience.ai/news/story/sr-cd64a29b58e1.html
Leak-site claim: rhysida lists Battle Creek Public Schools — https://security-resilience.ai/news/story/sr-a6feed08bcc8.html
Leak-site claim: qilin lists The Pendas Law Firm — https://security-resilience.ai/news/story/sr-0cb844da7e0d.html
Leak-site claim: qilin lists Blake Services — https://security-resilience.ai/news/story/sr-9e7272a78206.html
Leak-site claim: qilin lists Professional — https://security-resilience.ai/news/story/sr-a3513917cc48.html
Leak-site claim: thegentlemen lists UOLconsult — https://security-resilience.ai/news/story/sr-2a04663f977a.html
Leak-site claim: thegentlemen lists dlp motive — https://security-resilience.ai/news/story/sr-350f114639c7.html
Leak-site claim: thegentlemen lists AWJ Holding — https://security-resilience.ai/news/story/sr-3b3f08d893a9.html
Leak-site claim: thegentlemen lists Lexacaucho — https://security-resilience.ai/news/story/sr-05fd10407da9.html
Leak-site claim: thegentlemen lists LOG Systems — https://security-resilience.ai/news/story/sr-83979cee380e.html
Leak-site claim: thegentlemen lists Magdalena Grand Beach Golf Resort — https://security-resilience.ai/news/story/sr-868cab5a2ed8.html
Leak-site claim: thegentlemen lists Akatake Engineering — https://security-resilience.ai/news/story/sr-e22f42ade5a1.html
Leak-site claim: thegentlemen lists ESCON Group — https://security-resilience.ai/news/story/sr-871b8ac63100.html
Leak-site claim: thegentlemen lists Almeer — https://security-resilience.ai/news/story/sr-ab581095773c.html
Leak-site claim: thegentlemen lists Geb Sas — https://security-resilience.ai/news/story/sr-e4fdbe6216b0.html
Leak-site claim: thegentlemen lists ARBEITERKAMMERN — https://security-resilience.ai/news/story/sr-8dcd17589134.html
Leak-site claim: thegentlemen lists Aquasea — https://security-resilience.ai/news/story/sr-7390cd11b462.html
Leak-site claim: thegentlemen lists CAZ Investments — https://security-resilience.ai/news/story/sr-7c51b836546b.html
Leak-site claim: thegentlemen lists Oceanica Internacional — https://security-resilience.ai/news/story/sr-5803d424f6cf.html
Leak-site claim: thegentlemen lists Ariel Energia — https://security-resilience.ai/news/story/sr-f680e6ef0483.html
Leak-site claim: dragonforce lists Hogan Omidi P.C. — https://security-resilience.ai/news/story/sr-1114a1b183f6.html
Leak-site claim: DYSPHOR1A lists Yoma Fleet — https://security-resilience.ai/news/story/sr-3e0db8501154.html
Leak-site claim: anubis lists Interim HealthCare [Head office] — https://security-resilience.ai/news/story/sr-541ee16f1dd1.html
Leak-site claim: direwolf lists NorthStar — https://security-resilience.ai/news/story/sr-1267e1fc8d87.html
Leak-site claim: direwolf lists Aztec Software — https://security-resilience.ai/news/story/sr-3b51797acda0.html
Leak-site claim: direwolf lists The Revel Collective — https://security-resilience.ai/news/story/sr-f92d881cbd6f.html
Leak-site claim: direwolf lists ProSim Aviation Research — https://security-resilience.ai/news/story/sr-05f6aa6c1ae7.html
Leak-site claim: direwolf lists Authenticate Information Systems — https://security-resilience.ai/news/story/sr-f499dd1e7dd0.html
Leak-site claim: direwolf lists Diaco Global — https://security-resilience.ai/news/story/sr-b92ce09ce9aa.html
Leak-site claim: direwolf lists iSON XPERIENCES — https://security-resilience.ai/news/story/sr-ae3a1528f031.html
Leak-site claim: direwolf lists Deer Creek-Mackinaw CUSD — https://security-resilience.ai/news/story/sr-727e1825305c.html
Leak-site claim: direwolf lists Allstar Industries — https://security-resilience.ai/news/story/sr-f05ff5d71190.html
Leak-site claim: direwolf lists HP Carriers — https://security-resilience.ai/news/story/sr-901cb71a7455.html
Leak-site claim: direwolf lists MCT Group of Companies — https://security-resilience.ai/news/story/sr-a13bd37096e5.html
Leak-site claim: direwolf lists Reviso Cloud Accounting Limited — https://security-resilience.ai/news/story/sr-249d391ccd15.html
Leak-site claim: direwolf lists Studee — https://security-resilience.ai/news/story/sr-535bae508a9f.html
Leak-site claim: SilentRansomGroup lists D... — https://security-resilience.ai/news/story/sr-e7fa6fb56f70.html
Leak-site claim: DYSPHOR1A lists The University of Delhi (DU) — https://security-resilience.ai/news/story/sr-3d68210b1c4c.html
Leak-site claim: xpl0itrs lists Gruppo Spaggiari Parma — https://security-resilience.ai/news/story/sr-bcf9de353641.html
Leak-site claim: kairos lists Ayuntamiento de Velilla de San Antonio — https://security-resilience.ai/news/story/sr-83c277ce71a3.html
Leak-site claim: iah6477 lists regencycenters — https://security-resilience.ai/news/story/sr-186c7c15d9a0.html
Leak-site claim: iah6477 lists acima — https://security-resilience.ai/news/story/sr-8e084f575527.html
Leak-site claim: iah6477 lists marvin — https://security-resilience.ai/news/story/sr-67e1d9f0e626.html
Leak-site claim: emperador lists NetExam — https://security-resilience.ai/news/story/sr-e91f3880482d.html
Leak-site claim: play lists Be Media — https://security-resilience.ai/news/story/sr-c21e435c42f1.html
Leak-site claim: play lists Latoplast — https://security-resilience.ai/news/story/sr-02b86c3cf250.html
Leak-site claim: payload lists Qualiflex Datacenter | HWZ-Studiengnge (fh-hwz.ch), myenb.ch, etc — https://security-resilience.ai/news/story/sr-e47006d6b80f.html
Leak-site claim: titan lists Termotecnica Industriale S.r.l. — https://security-resilience.ai/news/story/sr-e96bf9bf90d0.html
Leak-site claim: Panzer lists Frisian Flag Indonesia — https://security-resilience.ai/news/story/sr-6e03898e96f7.html
Leak-site claim: titan lists CTP S.r.l. — https://security-resilience.ai/news/story/sr-cb50bdffdd6f.html
Leak-site claim: titan lists Tedesco &amp; Partners STP srl — https://security-resilience.ai/news/story/sr-090f8620d154.html
Leak-site claim: titan lists POEMA S.r.l. — https://security-resilience.ai/news/story/sr-3f752c959aec.html
Leak-site claim: DYSPHOR1A lists AYUDHYA TH Insurance — https://security-resilience.ai/news/story/sr-7aedc8c2b956.html
Leak-site claim: DYSPHOR1A lists GUSTO College GLMS — https://security-resilience.ai/news/story/sr-33fe1c4989fc.html
Leak-site claim: DYSPHOR1A lists Indonesian Police Database — https://security-resilience.ai/news/story/sr-a7f5bfe9be7c.html
Leak-site claim: DYSPHOR1A lists Job Net .COM.MM — https://security-resilience.ai/news/story/sr-21cd2e2e289e.html
Leak-site claim: DYSPHOR1A lists Strategy First International College — https://security-resilience.ai/news/story/sr-db29e404bb50.html
Leak-site claim: akira lists Cascade Coffee — https://security-resilience.ai/news/story/sr-9cf6ba226a1a.html
Leak-site claim: titan lists CONDOR SPA — https://security-resilience.ai/news/story/sr-ea88c1b420d0.html
Leak-site claim: titan lists Elbor S.p.A. — https://security-resilience.ai/news/story/sr-77ccd03e1640.html
Leak-site claim: everest lists CCA Bank — https://security-resilience.ai/news/story/sr-054c1a7a05ae.html
Leak-site claim: akira lists Deas Millwork — https://security-resilience.ai/news/story/sr-4fec65784beb.html
Leak-site claim: titan lists TECNOLOGICA S.r.l. — https://security-resilience.ai/news/story/sr-ad9ba9c5e788.html
Leak-site claim: pear lists Medical Arts Chemists and Surgicals — https://security-resilience.ai/news/story/sr-966c80c8595b.html
Leak-site claim: pear lists Club One Casino — https://security-resilience.ai/news/story/sr-5c8f8e05f445.html
Leak-site claim: pear lists Practi-Cal — https://security-resilience.ai/news/story/sr-e4b894e6148c.html
Leak-site claim: pear lists Austin Plastic Surgery Institute — https://security-resilience.ai/news/story/sr-b11f70e6cf30.html
Leak-site claim: titan lists ELCON MEGARAD S.p.A — https://security-resilience.ai/news/story/sr-a3bdf061aa24.html
Leak-site claim: lockbit5 lists usbank.com — https://security-resilience.ai/news/story/sr-72a0c6b7d169.html
Leak-site claim: majinahanashi lists Grand Ion Delemen Hotel — https://security-resilience.ai/news/story/sr-825591db6ba7.html
Leak-site claim: majinahanashi lists The Margo Hotel — https://security-resilience.ai/news/story/sr-0c847b2341ae.html
Leak-site claim: qilin lists Questronix — https://security-resilience.ai/news/story/sr-2eeeebf8f04b.html
Leak-site claim: qilin lists Provite — https://security-resilience.ai/news/story/sr-0cc41a85e15e.html
Leak-site claim: qilin lists Trends And Concepts — https://security-resilience.ai/news/story/sr-13e69739f9d9.html
Leak-site claim: Deadlock lists JP Molyneux Studio — https://security-resilience.ai/news/story/sr-16901ea99f9b.html
Leak-site claim: everest lists Kingston Technology — https://security-resilience.ai/news/story/sr-c21f0b61d45e.html
Leak-site claim: everest lists Experts Entreprendre — https://security-resilience.ai/news/story/sr-905e065f1a36.html
Leak-site claim: everest lists Grupo DT — https://security-resilience.ai/news/story/sr-6dee102114a5.html
Leak-site claim: everest lists Capgemini Engineering — https://security-resilience.ai/news/story/sr-71a6ba8fa150.html
Leak-site claim: xpl0itrs lists Target — https://security-resilience.ai/news/story/sr-458d1ef91dfc.html
Leak-site claim: qilin lists Semana — https://security-resilience.ai/news/story/sr-e4d1c503a0a2.html
Leak-site claim: Helix lists Delek US — https://security-resilience.ai/news/story/sr-a90f715f3a49.html
Leak-site claim: Deadlock lists UFOC — https://security-resilience.ai/news/story/sr-7616d97501e5.html
Leak-site claim: Deadlock lists Global Terminal Services — https://security-resilience.ai/news/story/sr-e00b5b1b037d.html
Leak-site claim: xpl0itrs lists Mihuru — https://security-resilience.ai/news/story/sr-bdfb939ecb12.html
Leak-site claim: krybit lists sunsea.co.th — https://security-resilience.ai/news/story/sr-7e4761d3c812.html
Leak-site claim: coinbasecartel lists Crowe — https://security-resilience.ai/news/story/sr-cdc6b6c02208.html
Leak-site claim: coinbasecartel lists Advanced Engineering Consultants — https://security-resilience.ai/news/story/sr-0efc57ccf4b1.html
Leak-site claim: akira lists Ericksen Krentel — https://security-resilience.ai/news/story/sr-92c1bf8d7db0.html
Leak-site claim: Orova lists DL HOLDINGS GROUP — https://security-resilience.ai/news/story/sr-4165a4584c44.html
Leak-site claim: incransom lists BANGKOKCABLE — https://security-resilience.ai/news/story/sr-04c0afdb48d1.html</description></item><item><title>The Average Cost of a Data Breach Rises to $5 Million</title><link>https://security-resilience.ai/news/story/sr-9096a040fc19.html</link><guid isPermaLink="true">https://security-resilience.ai/news/story/sr-9096a040fc19.html</guid><category>claimed</category><pubDate>Sun, 23 Aug 2026 02:27:13 +0000</pubDate><description>IBM claims the average data breach now costs $4.99 million, with AI attacks a factor. A breach at a large enterprise means fines and restitution; at a resource-constrained business it can end the company overnight — either way, prevention beats cure.</description></item><item><title>KEV: CVE-2026-20316 — Cisco Secure Firewall Management Center (FMC) (Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability)</title><link>https://security-resilience.ai/news/story/sr-ce0e7ef98629.html</link><guid isPermaLink="true">https://security-resilience.ai/news/story/sr-ce0e7ef98629.html</guid><category>confirmed</category><pubDate>Sun, 23 Aug 2026 02:27:13 +0000</pubDate><description>CISA added CVE-2026-20316 to KEV: hard-coded password in Cisco Secure FMC, exploited as a zero-day. Patch if you run FMC (enterprises, MSPs); most smaller shops don't deploy it and can skip this.</description></item><item><title>KEV: CVE-2026-16812 — Arista VeloCloud Orchestrator (Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability)</title><link>https://security-resilience.ai/news/story/sr-78bd02e91239.html</link><guid isPermaLink="true">https://security-resilience.ai/news/story/sr-78bd02e91239.html</guid><category>confirmed</category><pubDate>Sun, 23 Aug 2026 02:27:13 +0000</pubDate><description>CISA added CVE-2026-16812 to KEV: unauthenticated OS command injection in on-prem Arista VeloCloud Orchestrator, actively exploited. Patch VCO now if you self-host it; managed/cloud SD-WAN tenants can skip this one.</description></item><item><title>17 Iranians Charged with Conducting Massive Cyber Theft Campaign on Behalf of the Islamic Revolutionary Guard Corps and Other Iranian Entities</title><link>https://security-resilience.ai/news/story/sr-d9bcf5bd8a3b.html</link><guid isPermaLink="true">https://security-resilience.ai/news/story/sr-d9bcf5bd8a3b.html</guid><category>confirmed</category><pubDate>Sun, 23 Aug 2026 02:27:13 +0000</pubDate><description>DOJ charged 17 Iranians with running a years-long IP theft and ransomware operation on behalf of the IRGC and other state entities. Treat any Iranian-origin targeting of your IP or networks as state-backed, and keep critical IP off exposed systems.</description></item><item><title>Critical Zimbra RCE flaw now actively exploited in attacks</title><link>https://security-resilience.ai/news/story/sr-0d2298a52b6c.html</link><guid isPermaLink="true">https://security-resilience.ai/news/story/sr-0d2298a52b6c.html</guid><category>claimed</category><pubDate>Sun, 23 Aug 2026 02:27:13 +0000</pubDate><description>CERT Polska reports active exploitation of a critical RCE in Zimbra Collaboration. Claimed but unconfirmed by any filing or second source; treat as unverified for now and review the advisory if you run Zimbra.</description></item><item><title>Critical RCE flaw in Windows IKE Extension now actively exploited</title><link>https://security-resilience.ai/news/story/sr-585cf6b5bac0.html</link><guid isPermaLink="true">https://security-resilience.ai/news/story/sr-585cf6b5bac0.html</guid><category>claimed</category><pubDate>Sun, 23 Aug 2026 02:27:13 +0000</pubDate><description>CISA added CVE-2025-33053 to its KEV catalog: this Windows IKE Extension RCE is confirmed exploited in the wild. Patch it now.</description></item><item><title>Critical Progress LoadMaster flaw now actively exploited in attacks</title><link>https://security-resilience.ai/news/story/sr-0d7360668a54.html</link><guid isPermaLink="true">https://security-resilience.ai/news/story/sr-0d7360668a54.html</guid><category>claimed</category><pubDate>Sun, 23 Aug 2026 02:27:13 +0000</pubDate><description>CISA added the Progress Kemp LoadMaster command injection (CVE-2024-8190) to KEV: actively exploited. Patch LoadMaster immediately if you run it yourself; most smaller teams use a cloud or MSP version and can ignore this one.</description></item><item><title>Just 1% of AI-Discovered Vulnerabilities Exploited in the Wild, Research Shows</title><link>https://security-resilience.ai/news/story/sr-3c310fa3780b.html</link><guid isPermaLink="true">https://security-resilience.ai/news/story/sr-3c310fa3780b.html</guid><category>claimed</category><pubDate>Sun, 23 Aug 2026 02:27:13 +0000</pubDate><description>VulnCheck's research finds only 1% of AI-discovered vulnerabilities see wild exploitation so far. That suggests AI currently helps defenders more than attackers.</description></item><item><title>CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities</title><link>https://security-resilience.ai/news/story/sr-979f1255058a.html</link><guid isPermaLink="true">https://security-resilience.ai/news/story/sr-979f1255058a.html</guid><category>corroborated</category><pubDate>Sun, 23 Aug 2026 02:27:13 +0000</pubDate><description>CISA is urging immediate patches for three SharePoint vulnerabilities under active exploitation, two of them used as zero-days. If you run SharePoint and it is reachable, treat this as urgent and apply the fixes now.</description></item><item><title>Canadian Man Pleads Guilty to Hacking U.S.</title><link>https://security-resilience.ai/news/story/sr-9084ef30f0f9.html</link><guid isPermaLink="true">https://security-resilience.ai/news/story/sr-9084ef30f0f9.html</guid><category>confirmed</category><pubDate>Sun, 23 Aug 2026 02:27:13 +0000</pubDate><description>Connor Riley Moucka pleaded guilty to hacking a U.S. cloud storage provider and extorting its customers after compromising 165+ orgs and stealing billions of records. If you were a customer, treat this as a confirmed breach and review what you stored there.</description></item><item><title>Researchers Uncover North Korean 'ClickFake' Campaign Targeting Web3 Pros</title><link>https://security-resilience.ai/news/story/sr-ad8b502b0eb7.html</link><guid isPermaLink="true">https://security-resilience.ai/news/story/sr-ad8b502b0eb7.html</guid><category>corroborated</category><pubDate>Sun, 23 Aug 2026 02:27:13 +0000</pubDate><description>Famous Chollima is hitting Web3 pros with ClickFix lures that drop Windows and macOS trojans. If a site tells you to paste a “fix” into Terminal or Run, close it — that is the payload.</description></item><item><title>8-K Item 1.05: AMGEN INC reports material cybersecurity incident</title><link>https://security-resilience.ai/news/story/sr-d4915d04285c.html</link><guid isPermaLink="true">https://security-resilience.ai/news/story/sr-d4915d04285c.html</guid><category>confirmed</category><pubDate>Sun, 23 Aug 2026 02:27:13 +0000</pubDate><description>Amgen disclosed a material cybersecurity incident in an 8-K. Large pharma can absorb it.  If one breach could sink your company, rehearse your tested backups and response plan now.</description></item></channel></rss>