Critical Zero-Days in Cisco &amp; Dell Actively Exploited; Major Breaches at ManoMano and Dutch Government

European Retailer ManoMano Suffers Massive Data Breach Affecting 38 Million Customers Through Compromised Subcontractor

European DIY e-commerce giant ManoMano has disclosed a significant data breach impacting approximately 38 million customers across France, Germany, Italy, Spain, and the UK. The incident, which occurred in January 2026, was not a direct breach of ManoMano's systems but a supply chain attack targeting a third-party customer service provider. A threat actor known as 'Indra' has claimed responsibility, stating they exfiltrated 43GB of data, including full names, email addresses, phone numbers, and customer service message histories. ManoMano has confirmed that financial data and account passwords were not compromised. The company has since disabled the subcontractor's access, notified data protection authorities like France's CNIL, and is warning affected customers about potential phishing attacks.

supply chain attackthird-party breache-commercePIIGDPR +1 more

6 min read

ManoMano Breach: 38 Million Customers Exposed After Third-Party Customer Service Provider Hacked

Supply Chain Attack

Threat Actor

‘Diesel Vortex’ Phishing Ring Steals Over 1,600 Credentials from US & European Logistics Firms

Sophisticated 'Diesel Vortex' Phishing Campaign Hits Freight and Logistics Industry with Advanced Evasion Techniques

A financially motivated threat group dubbed 'Diesel Vortex' has been identified targeting the freight and logistics industry in the United States and Europe since September 2025. The campaign utilized a Phishing-as-a-Service (PaaS) model, complete with call centers and typosquatted domains mimicking platforms like DAT Truckstop and Penske Logistics. The actors employed a 'Dual-Domain Deception' technique to bypass browser warnings and used vishing and Telegram to capture MFA codes. An exposed .git repository led investigators to the group's infrastructure, revealing the theft of 1,649 unique credentials and evidence of financial fraud, including double-brokering and EFS check fraud. The group is believed to be Armenian-speaking with ties to Russian infrastructure.

phishing-as-a-servicevishingMFA bypasstyposquattingcredential theft +3 more

5 min read

Phishing

Threat Actor

Cyberattack

Dutch Prison Agency Data Exposed for Five Months in Wider Government Hack

Hackers Maintained Access to Dutch Prison Agency (DJI) Systems for Five Months, Exposing Staff Data

An investigation has revealed that hackers had prolonged access, for at least five months, to the systems of the Dutch prison agency (Dienst Justitiële Inrichtingen - DJI). The breach exposed sensitive staff data, including email addresses, phone numbers, and security certificates, raising fears of blackmail. The attackers also gained access to phones, tablets, and laptops. The incident is part of a wider attack that also affected other Dutch government bodies, including the privacy watchdog and the judiciary council. The Dutch National Cyber Security Centre (NCSC) is monitoring the situation as the investigation continues.

governmentAPTlong-term persistencedwell timeespionage +2 more

5 min read

Dutch Prison Agency Data Exposed for Five Months in Wider Government Hack

Cyberattack

Threat Intelligence

Accounting Firm Legacy Professionals LLP Reports Data Breach Affecting Over 215,000 People

Legacy Professionals LLP Notifies Maine AG of Data Breach Impacting More Than 215,000 Individuals

The accounting and consulting firm Legacy Professionals LLP has reported a data breach to the Attorney General of Maine, indicating that the personal information of over 215,000 people has been compromised. The firm discovered suspicious activity on its internal computer network where 'sensitive identifiable information' was stored. The notification suggests that personal data of Maine residents was involved, triggering the reporting requirement. The full scope of the breach, the specific data types exposed, and the attack vector have not yet been publicly disclosed. The firm is in the process of notifying the affected individuals.

accountingprofessional servicesPIIsensitive dataidentity theft

4 min read

Hacker Reportedly Used 'Jailbroken' AI Chatbot Claude to Breach Mexican Government Agencies

AI Chatbot 'Claude' Abused by Hacker to Steal 150GB of Data from Mexican Government

A hacker has reportedly used Anthropic's AI chatbot, Claude, to facilitate a series of cyberattacks against Mexican government agencies, resulting in the theft of approximately 150 GB of data. The compromised information is said to include 195 million taxpayer and voter records, government employee credentials, and civil registry files. The targeted agencies include Mexico's tax authority and national electoral institute. The attacker allegedly had to 'jailbreak' the AI model, bypassing its safeguards, to get it to assist in writing the scripts needed to breach the government networks. The incident highlights the growing threat of advanced AI tools being abused for malicious cyber operations.

AIArtificial IntelligenceLLMchatbotjailbreak +3 more

5 min read

Hacker Reportedly Used 'Jailbroken' AI Chatbot Claude to Breach Mexican Government Agencies