InfoSecBulletin Cybersecurity for mankind
On Christmas Eve, Resecurity protecting Fortune 100 and government agencies worldwide, noticed that multiple actors on the Dark Web were leaking a large amount of data.
More than 50 million records containing personal information about consumers from different countries were leaked. The damage caused by this could potentially be worth millions of dollars. Dealing with this damage is difficult because personal data and digital identity are closely connected. It’s complicated and often difficult for the average person to change this information. Even during the festive Christmas season, the cybercriminal community continued their activities without stopping. They found their own way to celebrate the holiday season.
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes
Many leaks labeled ‘Free Leaksmas’ were shared underground as a way for cybercriminals to show mutual gratitude. However, this generosity is harmful to victims worldwide.
Data breaches will lead to negative effects like account takeovers, business email compromises, identity theft, and financial fraud. These breaches affected people in many countries around the world, including France, Peru, Vietnam, Italy, Russia, Mexico, the Philippines, Switzerland, Australia, India, and South Africa. This shows the broad global impact of cybercriminal activities.
