Breaches

Someone else's database, your password. Nothing here has a patch: the fix is rotating things and watching for the weird login.

On the counter now 4

Company websites4 h Ransomware affiliates use AI agents high severity
Do now Restrict exposure of company websites and monitor for AI-driven intrusion activity. Advisory
Fortinet FortiGate7 h Firewall/VPN Breach Exposes 70k Credentials critical severity
Do now Rotate credentials for FortiGate firewall and VPN accounts, since over 70,000 were exposed. Advisory
Toronto Crime Stoppers1 d Data Breach high severity
Do now Check whether you submitted data to Toronto Crime Stoppers and watch for further breach details. Advisory
State Bank of India3 d Data leak high severity
State Bank of India confirms data leak of 3,897 customer records Advisory

Rotate first.Passwords, API keys and tokens that the breached service could see. Then revoke the old ones.
Turn on MFA there.If the service offers it and you skipped it, this is the sign.
Watch for the follow-up.Phishing that quotes real order numbers usually arrives a week later.

flowise7 Oct 2026 Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass critical severity
Fixed in flowise 3.1.3, flowise-components 3.1.3npm install flowise@3.1.3