The Breach News

Cyber Threat Legislation Faces Uncertainty Amid Washington Budget Clash

Information Sharing, Legislation, Standards, Regulations & Compliance Senate Homeland Security Cancels Markup Session Chris Riotta (@chrisriotta) • September 18, 2025 Image: Gabriele Maltinti/Shutterstock A significant political impasse in the U.S. Congress over federal spending may jeopardize a key cybersecurity intelligence sharing initiative that relies on corporate participation. Lawmakers face an…

Read MoreCyber Threat Legislation Faces Uncertainty Amid Washington Budget Clash

Meta Issues Warning on FreeType Vulnerability (CVE-2025-27363) Amid Active Exploitation Threats

Meta has issued a critical warning regarding a security vulnerability in the FreeType open-source font rendering library, indicating that it may have been actively exploited in the wild. This vulnerability is cataloged under the CVE identifier CVE-2025-27363 and carries a high severity CVSS score of 8.1. It is characterized as…

Read MoreMeta Issues Warning on FreeType Vulnerability (CVE-2025-27363) Amid Active Exploitation Threats

Ukraine Warns of Potential Massive Cyberattacks by Russia Targeting Critical Infrastructure

In a recent advisory, the Ukrainian government alerted that “massive cyberattacks” are imminent, targeting the critical infrastructure of Ukraine and its allies. The Ministry of Defense’s Main Directorate of Intelligence (GUR) has identified the energy sector as a primary target. The agency indicated that these cyberattacks would likely be designed…

Read MoreUkraine Warns of Potential Massive Cyberattacks by Russia Targeting Critical Infrastructure

Breach Update: Microsoft and Cloudflare Take Down RaccoonO365

Cybercrime, Fraud Management & Cybercrime Colt Services Faces Ongoing Outages; Finland Charges U.S. National in Vastaamo Hack Anviksha More (AnvikshaMore) • September 18, 2025 Image: Shutterstock/ISMG Each week, Information Security Media Group compiles cybersecurity incidents worldwide. Recently, Microsoft dealt a significant blow to RaccoonO365, outages at Colt Technology Services continue,…

Read MoreBreach Update: Microsoft and Cloudflare Take Down RaccoonO365

New Assault on ChatGPT Research Agent Exfiltrates Secrets from Gmail Inboxes

ShadowLeak Vulnerability Exposes Risks in Language Models Recent developments in the cybersecurity landscape have unveiled a significant vulnerability involving prompt injection attacks on large language models (LLMs), spotlighted by the alarming case of ShadowLeak. This method primarily utilizes indirect prompt injections embedded within untrusted documents and emails, enabling malicious actors…

Read MoreNew Assault on ChatGPT Research Agent Exfiltrates Secrets from Gmail Inboxes