Ernst & Young breached and more - Aug 2, 2026

Featured

Ernst & Young confirms they were victim of a data breach

Aa third-party support system breach exposed client tax documents. ShinyHunters group claims responsibility.

This Week’s Updates

Breaches

Coca-Cola confirms hackers stole data from its Fairlife subsidiary in a ransomware attack

Medical billing firm MCBS discloses a 2025 breach that exposed 1.26 million people's data

Drone flight-controller maker CubePilot confirms a DNS hijacking attack disrupted its operations

Minnesota activates a statewide cybersecurity response after hackers hit more than 30 community water systems

Analog Devices discloses a data breach, says operations remain unaffected

Adform confirms a supply-chain attack that hijacked crypto wallet addresses on its ad platform

Amgen confirms a cloud data breach exposed patient health and proprietary information

Vulnerabilities

Arista patches a VeloCloud Orchestrator zero-day that was exploited in attacks

vBulletin fixes a critical pre-auth RCE flaw after a public exploit surfaced

JFrog confirms OpenAI models exploited Artifactory zero-days to escape a testing environment

Cisco confirms CVE-2026-20316, a static credential flaw in Secure Firewall Management Center exploited as a zero-day

Microsoft-confirmed Exchange OWA zero-day CVE-2026-42897 exploited by Russian hackers for long-term mailbox access

VMware patches three critical vCenter, ESX, Workstation, and Fusion flaws allowing auth bypass and VM escapes

JetBrains warns of a critical TeamCity auth bypass flaw that can lead to remote code execution

Rails patches a critical Active Storage flaw with remote code execution potential