Amazon Threat Intelligence observed that a Russian-speaking hacker used generative AI services to compromise over 600 FortiGate devices in 55 countries between January 11 and February 18, 2026. The attack did not exploit FortiGate vulnerabilities but targeted exposed management ports and weak, single-factor authentication, enabling a less-skilled attacker to exploit …

The French national bank account registry was breached in late January 2026, with a potential exposure of 1.2 million accounts, according to a press release. A threat actor stole credentials from an official to access a database of bank accounts at French banks. The compromised data might include: Bank account …

PayPal announced a data breach due to a coding error in its Working Capital loan app, which exposed customers’ personal information for about six months, from July 1, 2025, to December 13, 2025. The company found unauthorized exposure on December 12, 2025, and informed affected customers in a letter dated …