Current security news from curated sources
Aggregated from BSI Bürger-CERT, BSI WID, SANS NewsBites, Krebs on Security, The Hacker News and the Allianz für Cyber-Sicherheit.
- BreachSANS NewsBites
Los Angeles City Attorney's Office Breach Exposed LAPD Files
NEOSEC summary pending — original source not mirrored verbatim.
- BreachSANS NewsBites
December 2025 Eurail Breach Exposed Passports
NEOSEC summary pending — original source not mirrored verbatim.
- Breachpwn.watch
UNC3886 breaches Singapore telecom providers (CYBER GUARDIAN)
In February 2026 Singapore’s CSA revealed China-linked UNC3886 had breached all four major telecom providers in a months-long espionage campaign using zero-days and rootkits. Singapore ran operation CYBER GUARDIAN to evict the actors.
- Breachpwn.watch
Asahi ransomware attack halts orders and beer shipments in Japan (Qilin claims it)
A ransomware attack on September 29, 2025 stopped Asahi Group's order processing, shipments and call centres in Japan and briefly halted its six Japanese beer plants. Asahi confirmed ransomware and possible data theft; Qilin claimed the attack and leaked files it said were stolen.
- Breachpwn.watch
Collins Aerospace MUSE ransomware knocks out check-in at Heathrow, Brussels and Berlin
Ransomware hit RTX's Collins Aerospace MUSE passenger-processing software on September 19, 2025, breaking electronic check-in, bag drop and boarding at several European airports. Airports fell back to manual check-in and handwritten boarding passes; Brussels was still disrupted days later. ENISA confirmed it was ransomware.
- Breachpwn.watch
Jaguar Land Rover cyberattack stops car production for five weeks
A cyberattack that began on August 31, 2025 forced JLR to shut down IT systems and halt production worldwide from September 1. A phased restart began October 8; UK production was back to normal by November 14. The UK government guaranteed a £1.5B loan to keep JLR's suppliers afloat.
- Breachpwn.watch
Ingram Micro SafePay ransomware takes down ordering systems for a week
SafePay ransomware hit IT distributor Ingram Micro around July 3, 2025, taking down its website, ordering systems, the Xvantage platform and Impulse licensing. Ingram Micro took systems offline and restored order processing globally by July 9-10.
- Breachpwn.watch
Qantas: 5.7M customers' data stolen from a contact-centre platform
A cyber criminal accessed a third-party customer-service platform used by a Qantas contact centre. After deduplication, 5.7M unique customers were affected: names, emails, frequent-flyer details, and for some phone numbers, birth dates, addresses, gender and meal preferences. No passwords, PINs, card or passport data were taken.
- Breachpwn.watch
Salt Typhoon: Chinese state hackers inside US telecom networks
PRC-affiliated actors (publicly called Salt Typhoon) compromised networks at multiple US telecommunications companies. The FBI and CISA said they stole customer call records, got into the private communications of a limited number of people mainly involved in government or political activity, and copied information subject to US law enforcement wiretap requests. Allied agencies then published hardening guidance for communications infrastructure.