Cybersecurity Incident

Australian payments firm Zip Co. flagged A$10.1 million ($7.1 million) in expenses tied to an external fraud event in the US, and its shares roughly halved.

curated · 2026-10-23 · context →

Two Marines are suing the Defense Department over a breach of the Defense Manpower Data Center's information system that exposed personal information of more than 3 million people.

curated · 2026-10-23 · context →

Rand Mutual Assurance (RMA), the insurer handling injury claims for mineworkers and metalworkers, is investigating an alleged theft of 1.68 million claim records. A hacker claims to hold 366GB of its data.

curated · 2026-10-23 · context →

The South African presidency pulled its website offline two days after the PHP project released fixes for critical flaws, pointing to a security exposure tied to the global PHP vulnerability scramble.

Leadership read: A breach is a governance event before it is a technical one. For Presidency of South Africa in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire or a…

curated · 2026-10-23 · context →

Reports of roughly $16 million in USDT transfers linked to a possible hack at India's CoinDCX; the exchange publicly denies that a hack occurred. The incident is unconfirmed.

Leadership read: A breach is a governance event before it is a technical one. For CoinDCX in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Asia, watch whether the response is a hire or a contractor; that…

curated · 2026-10-22 · context →

Cyberattack on Yonsei University's online portal leaked personal data of about 10,000 current and former students and faculty, including IDs, names, affiliations, phone numbers, email addresses and passwords. The university's Office of Information and Communications confirmed the breach.

curated · 2026-10-22 · context →

Security flaw in OpenCode AI coding agent (by Anomaly) let a malicious or hijacked MCP server execute code on developers' Windows and WSL machines at sign-in. Fixed in version 1.18.33.

Leadership read: A breach is a governance event before it is a technical one. For Anomaly in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire or a contractor; that…

curated · 2026-10-22 · context →

Hong Kong-based online retailer Playasia took its store offline after weeks of sustained, sophisticated cyberattacks, and is conducting a full security audit and systems hardening.

curated · 2026-10-22 · context →

The Money Store is the reported victim of a ransomware group's claim to have stolen mortgage customer data. Plaintiff law firms are soliciting class action claimants, indicating likely legal and regulatory exposure.

curated · 2026-10-22 · context →

MSUFCU (Michigan State University Federal Credit Union) took e-banking services offline after an NSA warning tied to the PHP2Shell remote code execution vulnerability, which is affecting a large share of internet-facing sites.

Leadership read: A breach is a governance event before it is a technical one. For MSUFCU in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire or a contractor; that…

curated · 2026-10-22 · context →

South Carolina's state capital city was hit by a cyberattack that disrupted systems including the MyColaSC citizen services platform used to pay utility bills and report non-emergency issues.

curated · 2026-10-22 · context →

Pentagon's Defense Manpower Data Center disclosed a data breach after a file-sharing system vulnerability (found July 16) exposed unencrypted PII of service members and affiliates for about nine months. A class-action lawsuit alleges failed cybersecurity controls and late victim notification, citing Office of Inspector General reports that found 14 of 20 FISMA core metrics ineffective.

Leadership read: A breach is a governance event before it is a technical one. For Defense Manpower Data Center (Pentagon / US Department of Defense) in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Americas…

curated · 2026-10-22 · context →