Magento zero-day vulnerability actively exploited without a patch
A Magento zero-day vulnerability is reportedly being actively exploited, and no patch is available. Organizations using affected Magento systems may face immediate compromise risk.
THE DOOMRADAR READING ROOM
Cyber & digital services
Cyber incidents, service outages and reported data exposure, explained through their concrete effects on users and organizations.
Earlier reports
Back to newestOrdered by reported development. Each article describes what was known at the time shown.
Germany establishes a virtual AI safety institute modeled on the UK
Germany's federal government is establishing a virtual institute focused on AI safety, using the UK as a model. The supplied headline gives no further operational details.
See's Candies reports potential data breach
A law firm is investigating reports that See's Candies may have exposed customers' personal information. The supplied report provides no details on the scope or type of data affected.
Austria to implement NIS2 cybersecurity standards from October
Austria is set to apply cybersecurity standards under the EU NIS2 Directive from October. The measure concerns strengthened obligations for covered organizations.
AI risks in military decision-making and rogue agents
Artificial intelligence, military decision-making procedures and potentially rogue AI agents are discussed. No specific attack, breach or operational incident is identified.
Phishing-style disinformation reported in election campaign
The supplied report compares election disinformation to phishing, indicating concern about deceptive digital influence during a campaign. No specific attack, breach or operational disruption is described.
Personal data of British politicians and military personnel posted on dark web
Hackers reportedly published personal data belonging to British politicians and military personnel on the dark web. The supplied report does not specify the number of people affected or the source of the data.
Germany plans protective shield against Russian sabotage after drone incident
Germany’s Interior Ministry is reportedly planning a protective shield against Russian sabotage following a drone incident. The report describes a planned response, not a confirmed attack or implemented measure.
German chancellor warns of further hybrid attacks after Leipzig drone incident
Following a drone incident in Leipzig, Chancellor Friedrich Merz warned that further hybrid attacks could occur. The supplied report does not provide details about damage, attribution or specific new measures.
Security flaw found in widely used PC startup firmware
A reported vulnerability in a common PC startup component could allow attackers to compromise systems before the operating system loads. The supplied headline does not provide technical or scope details.
German infrastructure faces scrutiny over cyberattack exposure
A report examines how vulnerable infrastructure in Germany is to cyberattacks. No specific attack, breach or outage is identified in the supplied headline.
Prank website impersonates a Republican midterm convention site and redirects visitors to Epstein files
A prankster created a lookalike Republican midterm convention website that sends visitors to documents known as the Epstein files.
UK Greens challenge NHS use of technology giant
The Green Party is pressing the NHS over its use of a technology company. The supplied headline does not specify the company, system or any confirmed disruption.
Microsoft faces backlash over handling of zero-day dispute
A report describes a dispute over Microsoft's response to a security researcher concerning a zero-day vulnerability.
JetBrains Cadence reportedly breached through TeamCity vulnerability
A report alleges that JetBrains Cadence was compromised by exploiting a vulnerability in its TeamCity environment.
Job-seeker loses savings in fake-recruiter scam
A fraudulent recruitment scheme reportedly caused a person to lose all of their savings during a job interview. The supplied information does not establish broader scale or systemic impact.
Cyberattack steals $1.6 million from UMC regional body
A cyberattack reportedly resulted in the theft of $1.6 million from a regional body of UMC.
Airport hackers publish personal data of public figures on the dark web
Hackers linked to an airport-related incident have published personal data belonging to a judge, politicians and celebrities on the dark web. The supplied headline does not identify the airport, attackers or the scale of the exposure.
Germany raises alarm after hacker attack
A report says Germany has raised an alarm following a hacker attack. The supplied headline does not identify the victim, scope or operational impact.
AI-generated political ads flood social media ahead of Victoria election
AI-generated advertisements are appearing widely on social media ahead of Victoria’s election. The supplied report questions who is behind the campaign.
U.K. airport data leak affects thousands of Dutch people
A data leak involving a U.K. airport has affected thousands of Dutch individuals. The supplied report says the British prime minister’s Dutch wife may also be included.
57 indicted in NT$900 million voice-cloning romance scam
Authorities indicted 57 people over an alleged voice-cloning romance scam involving approximately NT$900 million. The scheme reportedly used synthetic voices to defraud victims.
Probe alleges espionage exploitation of India's Agniveer recruitment ecosystem
An investigation reportedly found that public information officers exploited the Agniveer recruitment ecosystem for espionage. The supplied headline does not provide operational details or confirmed damage.
Germany confronts alleged hybrid threats
A report examines Germany’s efforts to counter unspecified invisible threats described as hybrid warfare.
Data breach exposes 153 million driver's license records
A data breach has exposed 153 million driver's license records. The scale of the exposure creates a substantial risk of identity theft and other misuse.
EtherHiding campaign compromises 5,400 websites with malicious code
An EtherHiding campaign reportedly compromises 5,400 websites, which load malicious code from the BSC testnet. The supplied headline does not specify the victims, payload or measured harm.
Second PaperCut NG attack wave hits schools and universities
A second wave of attacks is reportedly affecting schools and higher-education institutions using PaperCut NG. The supplied headline does not provide details on the attack method, scope or impact.
Cyberattack and data leak in Germany prompts key questions
A report examines a cyberattack and data leak in Germany. The supplied information does not specify the affected organization, scale of the breach or operational impact.
Ransomware management in Spanish municipality raises concerns
A report alleges irregularities and ethical questions surrounding the handling of a ransomware incident in the Concello de Cangas.
Taiwan defense ministry plan includes a cyber hunt team
Taiwan's Ministry of National Defense is reported to be planning a cyber hunt team. The headline provides no evidence of a current attack or disruption.
CSIST ordered to address system weaknesses after hack
CSIST has been told to fix its system following a hack. The supplied information does not establish the scale of the breach or wider disruption.
Russian operatives reportedly use sabotage across Europe to challenge NATO
The report describes Russian agents conducting sabotage operations in Europe. The supplied headline does not identify specific incidents, targets or confirmed damage.
Critical-infrastructure data reportedly leaked in Berlin hacking incident
New reporting says data on Berlin's critical infrastructure was leaked in a hacking incident, prompting opposition calls for consequences. The supplied information does not specify the systems affected or the extent of operational impact.
Philippines faces a major cybersecurity blind spot
A report highlights significant gaps in the Philippines' cybersecurity defenses. The supplied information does not specify a particular attack or breach.
Guide addresses API quota problems and prompt-injection defenses
The report discusses practical implementation of an AI system, including API quota issues and defenses against prompt injection.
US military disables advertising IDs over troop-tracking concerns
The US military has disabled advertising identifiers amid concerns that they could be used to track troops. The measure addresses a potential operational-security and privacy vulnerability.
Report says attackers have long known Germany's vulnerabilities
The headline warns that perpetrators have known for years where Germany is vulnerable. It does not identify the perpetrators, targets or a specific attack.
Swiss authorities address reported Russian cyberattack
Swiss authorities, including Foreign Minister Ignazio Cassis, reportedly discussed a Russian cyberattack against Switzerland. The supplied headline does not provide details on the affected systems or extent of disruption.
Czech church commission warns of pro-Russian disinformation
A church commission in the Czech Republic has warned about pro-Russian disinformation.
Chrome patches sixth 2026 zero-day after in-the-wild V8 exploit
Google Chrome has patched its sixth zero-day vulnerability of 2026, involving an exploit in the V8 JavaScript engine that was reportedly used in attacks.