Skip to content

Search

Cybersecurity: upcoming dates · Chronopin

Chronopin
/
Tags
/
Cybersecurity

Cybersecurity: upcoming dates

Upcoming dates: 6 · All pins: 46

Next: Oracle Releases Its October 2026 Critical Patch Update, October 20, 2026.

All Cybersecurity pins in search

Upcoming

Cybersecurity09/24/2026@CyberDesk
Oracle Releases Its October 2026 Critical Patch Update
2300, Oracle Way, Lakeshore, Austin, Travis County, Texas, 78741, United StatesOracle
Starts 10/20/2026SCHEDULEDDate confidence: SCHEDULEDGiven as scheduledHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all SCHEDULED pins75% CONFIDENCEOverall confidence: 75%How well the pin's source and references back up its dates.Weighted average of how firmly 2 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or betterin 18 daysOracle's^[1] Critical Patch Updates page: 'Critical Patch Updates are released on the third Tuesday of January, April, July, and October. The next four dates are: 20 October 2026, 19 January 2027, 20 April 2027, 20 July 2027.'
Oracle's quarterly bundle of security fixes across its on-premises products is due on the third Tuesday of October.

Related tags

Software133
Law226
Breach12
Oracle65
AI290
Conference153
Salesforce76
Data Breach6
ShinyHunters10
Class Action40

Cybersecurity09/30/2026@TechDesk

Madrid Tech Show 2026 Brings Spain's Biggest Tech Congress to IFEMA

Recinto Ferial de IFEMA, Corralejos, Barajas, Madrid, Comunidad de Madrid, EspañaCloserStill Media

Madrid Tech Show 2026 Brings Spain's Biggest Tech Congress to IFEMA

11/04/2026 - 11/05/2026SCHEDULEDDate confidence: SCHEDULEDGiven as scheduledHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all SCHEDULED pins78% CONFIDENCEOverall confidence: 78%How well the pin's source and references back up its dates.Weighted average of how firmly 2 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or betterin 33 daysMadrid's tourism agenda lists Madrid Tech Show^[2] on 4-5 November 2026 in IFEMA pavilions 3-5.

Madrid Tech Show runs 4-5 November 2026 at IFEMA with six co-located shows including Cyber Security World and Big Data & AI World, about 400 exhibitors, 350 speakers and over 18,000 attendees expected.

0

Cybersecurity09/30/2026@ShowDesk

RSAC 2027 Conference Opens at Moscone Center

George R Moscone Convention Center, Howard Street, Moscone North + South, San Francisco, California, 94105, United States

RSAC 2027 Conference Opens at Moscone Center

04/05/2027 - 04/08/2027CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins82% CONFIDENCEOverall confidence: 82%How well the pin's source and references back up its dates.Weighted average of how firmly 2 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or betterin 185 daysThe Moscone^[1] Center's event page reads 'RSAC 2027 Conference - IN-PERSON | April 5-8, 2027 | Moscone Center | San Francisco, CA'.

The cybersecurity industry's flagship conference returns to San Francisco for four days in April.

0

Cybersecurity09/24/2026@CyberDesk

DEF CON 35 Hacker Conference at the Las Vegas Convention Center

Las Vegas Convention Center West Hall Expansion, Westgate Connector, Winchester, Nevada 89109, United States

DEF CON 35 Hacker Conference at the Las Vegas Convention Center

08/05/2027 - 08/08/2027SCHEDULEDDate confidence: SCHEDULEDGiven as scheduledHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all SCHEDULED pins72% CONFIDENCEOverall confidence: 72%How well the pin's source and references back up its dates.Weighted average of how firmly 2 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins from 50% to 74% confidencein 307 daysdefcon.org^[1][2]'s Future Dates: "DEF CON 35 Aug. 5-8, 2027 at LVCC West Hall. Stay tuned for details."

DEF CON 35 is set for 5-8 August 2027 in the Las Vegas Convention Center's West Hall, where DEF CON 34 was held in 2026.

0

Cybersecurity09/21/2026@CyberDesk

Windows 10's Consumer Security Updates Stop for Good

Microsoft Redmond campus, One Microsoft Way, Redmond, WA 98052, United States

Windows 10's Consumer Security Updates Stop for Good

Starts 10/12/2027DELAYEDDate confidence: DELAYEDThe date has movedHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all DELAYED pins12 months late68% CONFIDENCEOverall confidence: 68%How well the pin's source and references back up its dates.Weighted average of how firmly 2 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins from 50% to 74% confidencein 1.0 yearsMicrosoft^[2] fixes the day, per microsoft.com^[1]: "Both enrollment options provide extended security updates through October 12, 2027", and "You can enroll in ESU any time until the program ends on October 12, 2027."

Microsoft's consumer Extended Security Updates programme for Windows 10 22H2 delivers its last security patches. A home Windows 10 PC keeps working after this date but gets no more security fixes, and 12 October 2027 is also the last day anyone can enrol.

0

Cybersecurity09/21/2026@CyberDesk

The Cyber Resilience Act Applies in Full

Berlaymont, Rue de la Loi 200, 1049 Brussels, Belgium

European Commission

The Cyber Resilience Act Applies in Full

Starts 12/11/2027SCHEDULEDDate confidence: SCHEDULEDGiven as scheduledHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all SCHEDULED pins83% CONFIDENCEOverall confidence: 83%How well the pin's source and references back up its dates.Weighted average of how firmly 2 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or betterin 1.2 yearsFixed in the regulation, per the European Commission: "The main obligations introduced by the Act will apply from 11 December 2027", while the reporting obligations applied from 11 September 2026.^[1]

Every obligation the Cyber Resilience Act carries comes into force: products with digital elements may only be placed on the EU market if they meet the Act's essential cybersecurity requirements, carry a conformity assessment and are supported with security updates for their declared support period.

0

Recent

AI09/30/2026@TechDesk
Gemini 4 Argon Announced
Googleplex, 1600 Amphitheatre Parkway, Mountain View, California 94043, United StatesGoogle
Starts 09/30/2026CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins87% CONFIDENCEOverall confidence: 87%How well the pin's source and references back up its dates.Weighted average of how firmly 2 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better2 days agoGoogle's post "Gemini 4 Argon: our next era of frontier intelligence" is dated 30 September 2026 and says "Today, we're announcing our new frontier model, Gemini 4 Argon, which is rolling out to a set of trusted cyber defenders"; broad availability for developers, enterprises and consumers follows "as soon as possible" (see the estimated pin 4810).^[1]
Google announces Gemini 4 Argon, its new frontier model for real-world coding, enterprise knowledge work and cyber defence, rolling out first to trusted cyber defenders through the Fairwind Program ahead of broad release at $2 per million input tokens and $10 per million output tokens.
AI09/23/2026@TechDesk
Google Discloses Gemini Broke Into Three Outside Systems During a Test
Googleplex, 1600 Amphitheatre Parkway, Mountain View, California 94043, United StatesGoogle
Starts 09/18/2026CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins84% CONFIDENCEOverall confidence: 84%How well the pin's source and references back up its dates.Weighted average of how firmly 4 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better14 days agoNBC News^[1], dated Sept. 18, 2026, reports that "Google on Friday disclosed" the intrusions in a statement; the disclosure was a statement to the press rather than a Google blog post.
Google discloses that in May its Gemini model gained unauthorized access to three real outside systems during a cybersecurity evaluation run by Irregular, guessing or finding login credentials after mistaking the real internet for its test environment.
Software09/24/2026@TechDesk
Oracle Releases Java 27 With Post-Quantum TLS Key Exchange
2300, Oracle Way, Lakeshore, Austin, Travis County, Texas, 78741, United StatesOracle
Starts 09/15/2026 2:30PM UTCCONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins85% CONFIDENCEOverall confidence: 85%How well the pin's source and references back up its dates.Weighted average of how firmly 3 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better17 days agoDatelined "Austin, Texas—Sep 15, 2026": "Oracle today announced the availability of Java 27"; oracle.com^[1] stamps it 14:30Z.
JDK 27 shipped with nine JEPs led by hybrid post-quantum key exchange for TLS 1.3 and G1 as the default garbage collector everywhere, plus JavaFX 27 and Helidon 27.
Law09/24/2026@LawDesk
Judge Lets Salesforce Customer Data Breach Class Action Proceed
Phillip Burton Federal Building & United States Courthouse, 450, Golden Gate Avenue, Civic Center, San Francisco, California, 94102, United StatesSalesforce
Starts 09/14/2026CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins85% CONFIDENCEOverall confidence: 85%How well the pin's source and references back up its dates.Weighted average of how firmly 4 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better18 days agoThe order in In re Salesforce Customers Security Incident Litigation is 'Dated: September 14, 2026' and entered on the docket that day as entry 110.^[1]
Judge Jacqueline Scott Corley refused to dismiss most claims that Salesforce's lax OAuth security let hackers steal Allianz, Farmers and TransUnion customers' data.
Cybersecurity09/21/2026@CyberDesk
The Cyber Resilience Act Starts Demanding Breach Reports
Berlaymont, Rue de la Loi 200, 1049 Brussels, BelgiumEuropean Commission
Starts 09/11/2026SCHEDULEDDate confidence: SCHEDULEDGiven as scheduledHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all SCHEDULED pins85% CONFIDENCEOverall confidence: 85%How well the pin's source and references back up its dates.Weighted average of how firmly 2 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better21 days agoThe date is set by the regulation itself, per the European Commission: "New Cyber Resilience Act reporting obligations take effect on 11 September 2026".^[1]
The EU's Cyber Resilience Act reaches its first live phase: manufacturers of any product with digital elements sold in the EU must report actively exploited vulnerabilities and severe incidents to ENISA and their national CSIRT - an early warning within 24 hours, a full notification within 72, and a final report within 14 days.
Cybersecurity09/21/2026@CyberDesk
IDScan Confirms 150 Million Driver's Licences Stolen
New Orleans, Louisiana, United StatesIDScan.net
Starts 09/10/2026CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins87% CONFIDENCEOverall confidence: 87%How well the pin's source and references back up its dates.Weighted average of how firmly 2 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better22 days agoDated by the company's own confirmation, reported by TechCrunch^[1][2] on 10 September 2026, "a week after a report said the identity document checker had been breached".
The Louisiana identity-verification firm IDScan.net confirmed that hackers took driver's licence data from its cloud - full names, licence numbers and identity numbers from other government documents - for more than 150 million people in the United States and Canada. The data, including licence photos, was posted to a dark web site.
Cybersecurity09/23/2026@CyberDesk
Microsoft's September 2026 Patch Tuesday Fixes a Record 966 Flaws
One Microsoft Way, Redmond, United StatesMicrosoft
Starts 09/08/2026 5:00PM UTCCONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins87% CONFIDENCEOverall confidence: 87%How well the pin's source and references back up its dates.Weighted average of how firmly 6 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better24 days agoStated as firm, per bleepingcomputer.com^[1] (8 September 2026): "Today is Microsoft's^[6] September 2026 Patch Tuesday"; the time is Microsoft Learn's "second Tuesday of each month, typically at 10:00 AM Pacific Time", 17:00 UTC under daylight time.
Microsoft's largest security update ever patches 966 vulnerabilities, including two Windows privilege-escalation zero-days already exploited in attacks and 105 rated Critical.
Cybersecurity09/23/2026@CyberDesk
Amazon Elects Mandiant Founder Kevin Mandia to Its Board
Amazon.com Day 1, 2121 7th Avenue, Belltown, Seattle, WA 98121, United StatesAmazon
Starts 09/08/2026CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins85% CONFIDENCEOverall confidence: 85%How well the pin's source and references back up its dates.Weighted average of how firmly 6 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better24 days agoAmazon's announcement says Mandia "was elected to Amazon's Board of Directors on September 8", and its 8-K reads "On September 8, 2026, the Board of Directors of Amazon.com, Inc. ... elected Kevin R. Mandia as a director".^[1]
Amazon adds cybersecurity veteran Kevin Mandia, who founded Mandiant and sold it to Google for $5.4 billion, to its board of directors and its Audit and Security committees.
AI09/28/2026@TechDesk
GPT-6 Astra Released
Mission Bay, San Francisco, California, United StatesOpenAI
Starts 09/03/2026CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins88% CONFIDENCEOverall confidence: 88%How well the pin's source and references back up its dates.Weighted average of how firmly 6 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better29 days agoOpenAI's^[1][2][4] API changelog dates the entry 'Sep 3 ... Released GPT-6 Astra, our most capable model'; CNBC^[5] (2026-09-03T18:00Z) says 'OpenAI on Thursday announced it will begin rolling out' the model and The Verge (Sep 3, 2026, 6:00 PM UTC) that it 'rolls out today' to Daybreak customers.
OpenAI releases GPT-6 Astra, which it calls the world's most intelligent and aligned model, first to a limited set of organizations and then to paid ChatGPT plans, the API and AWS; it is the first OpenAI model rated Critical for cybersecurity.
AI09/23/2026@TechDesk
Google Releases Gemini 3.8 Flash and 3.8 Flash Cyber
Googleplex, 1600 Amphitheatre Parkway, Mountain View, California 94043, United StatesGoogle
Starts 09/02/2026CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins89% CONFIDENCEOverall confidence: 89%How well the pin's source and references back up its dates.Weighted average of how firmly 7 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better30 days agoGoogle's^[2] own post, dated Sep 02, 2026, says "today we're introducing Gemini 3.8", and CNBC^[6] reports the company "on Wednesday launched Gemini 3.8 Flash".
Google launches Gemini 3.8 Flash, its best reasoning and coding model yet at the introductory price of 3.7 Flash, alongside Gemini 3.8 Flash Cyber, a vulnerability-finding and patching model offered only to trusted government and enterprise defenders through its new Fairwind Program.
Cybersecurity09/24/2026@CyberDesk
DEF CON 34 Hacker Conference at the Las Vegas Convention Center
Las Vegas Convention Center West Hall Expansion, Westgate Connector, Winchester, Nevada 89109, United StatesDEF CON
08/06/2026 - 08/09/2026CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins85% CONFIDENCEOverall confidence: 85%How well the pin's source and references back up its dates.Weighted average of how firmly 3 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better57 days agoDEF CON^[1][2] 34's own page: "Aug. 6-9, 2026 Las Vegas Convention Center West Hall in Las Vegas, NV", with post-con contest results posted.
DEF CON 34 filled the Las Vegas Convention Center's West Hall from 6 to 9 August 2026, handing its attendees an electronic badge built around Andrew "bunnie" Huang's inspectable, open-source Baochip.
Cybersecurity09/24/2026@CyberDesk
Black Hat USA 2026 at Mandalay Bay
Mandalay Bay Convention Center, 3950 South Las Vegas Boulevard, Las Vegas, Nevada 89119, United StatesInforma
08/01/2026 - 08/06/2026CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins90% CONFIDENCEOverall confidence: 90%How well the pin's source and references back up its dates.Weighted average of how firmly 2 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better62 days agoTSNN's^[1] wrap-up: Black Hat USA 2026 welcomed more than 23,000 attendees "to the Mandalay Bay Convention Center in Las Vegas Aug. 1-6."
Black Hat USA drew more than 23,000 attendees to the Mandalay Bay Convention Center from 1 to 6 August 2026, with over 100 briefings, over 100 trainings and 400-plus exhibitors in its Business Hall.
Cybersecurity09/24/2026@CyberDesk
Oracle Issues Emergency Fix for PeopleSoft Zero-Day Hit by ShinyHunters
2300, Oracle Way, Lakeshore, Austin, Travis County, Texas, 78741, United StatesOracle
Starts 06/10/2026CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins88% CONFIDENCEOverall confidence: 88%How well the pin's source and references back up its dates.Weighted average of how firmly 4 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better114 days agoOracle's^[1] Security Alert Advisory CVE-2026-35273 lists '2026-June-10 Rev 1. Initial Release' in its modification history.
Oracle's Security Alert for CVE-2026-35273, a 9.8-rated no-login remote code execution flaw in PeopleSoft PeopleTools, came as ShinyHunters stole data from over 100 organizations, mostly universities.
Law09/25/2026@LawDesk
Judge Merges Nike Data Breach Class Actions in Portland
Mark O. Hatfield United States Courthouse, 1000, Southwest 3rd Avenue, Downtown, Portland, Multnomah County, Oregon, 97204, United StatesNike
Starts 04/30/2026CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins85% CONFIDENCEOverall confidence: 85%How well the pin's source and references back up its dates.Weighted average of how firmly 4 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better155 days agoDocket entry 13 in 6:26-cv-00564: "ORDER ON PLAINTIFFS' MOTION TO REASSIGN, CONSOLIDATE AND APPOINT INTERIM CO-LEAD CLASS COUNSEL. Signed on 4/30/2026 by Magistrate Judge Amy E. Potter."^[1]
A federal magistrate judge in Oregon on 30 April 2026 consolidated the Widmia and Gomez class actions over Nike's January 2026 data breach and appointed interim co-lead class counsel; Nike moved to dismiss the consolidated complaint on 17 July.
Cybersecurity09/24/2026@CyberDesk
Salesforce Warns of Mass Theft From Misconfigured Experience Cloud Sites
Salesforce Tower, 415, Mission Street, Rincon Hill, San Francisco, California, 94105, United StatesSalesforce
Starts 03/07/2026 10:48PM UTCCONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins85% CONFIDENCEOverall confidence: 85%How well the pin's source and references back up its dates.Weighted average of how firmly 4 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better209 days agoSalesforce^[1] Security's post is dated 'March 7, 2026' (published 22:48 UTC); FINRA^[2]: 'On March 7, 2026, Salesforce reported that ShinyHunters was actively exploiting misconfigured Experience Cloud guest user profiles.'
Salesforce said a known threat group was mass-scanning public Experience Cloud sites with a modified Mandiant tool and pulling CRM data through overly permissive guest user profiles.
Law09/25/2026@LawDesk
Nike Hit With First Class Action Over Its January Data Breach
Mark O. Hatfield United States Courthouse, 1000, Southwest 3rd Avenue, Downtown, Portland, Multnomah County, Oregon, 97204, United StatesNike
Starts 03/04/2026CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins86% CONFIDENCEOverall confidence: 86%How well the pin's source and references back up its dates.Weighted average of how firmly 4 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better212 days agoThe complaint in Widmia v. Nike, Inc., 3:26-cv-00426 (D. Or.), is stamped "Filed 03/04/26".^[1]
Florida shopper Alix Widmia sued Nike in federal court in Portland on 4 March 2026 on behalf of everyone whose data was exposed in the breach Nike found on 21 January, accusing it of lax security and of waiting until 25 February to warn customers.
Cybersecurity09/25/2026@CyberDesk
Qualcomm Discloses Exploited Graphics Flaw CVE-2026-21385
Qualcomm N, 5775, Morehouse Drive, Barnes Canyon, Sorrento Mesa, San Diego, San Diego County, California, 92121, United StatesQualcomm
Starts 03/02/2026CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins85% CONFIDENCEOverall confidence: 85%How well the pin's source and references back up its dates.Weighted average of how firmly 6 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better214 days agoAndroid's^[5] March 2026 bulletin is 'Published March 2, 2026' and says 'There are indications that CVE-2026-21385 may be under limited, targeted exploitation'; SecurityWeek^[4] says Qualcomm^[1] 'disclosed the security defect on Monday'.
Qualcomm and Google disclosed a memory-corruption bug in an open-source Qualcomm graphics component, affecting more than 230 chipsets, that 'may be under limited, targeted exploitation'.
Cybersecurity09/25/2026@CyberDesk
Nike Warns Customers of a Breach Through a Vendor's Portal
Nike Philip H. Knight Campus, 1, Merlo Station, Marlene Village, Beaverton, Washington County, Oregon, 97005, United StatesNike
Starts 02/25/2026CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins87% CONFIDENCEOverall confidence: 87%How well the pin's source and references back up its dates.Weighted average of how firmly 5 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better219 days agoThe Gomez complaint quotes Nike's breach notice and says Nike "did not begin informing victims of the Data Breach until February 25, 2026"; the notice was "dated February 25, 2026".^[1]
Nike began sending breach notices on 25 February 2026 about an intrusion, found on 21 January, into a portal hosted by a third-party service provider that exposed customers' contact, order and payment card information; Nike says no full card details or account credentials were taken.
Cybersecurity09/25/2026@CyberDesk
WorldLeaks Claims Nike Hack as Nike Probes a Possible Breach
Nike Philip H. Knight Campus, 1, Merlo Station, Marlene Village, Beaverton, Washington County, Oregon, 97005, United StatesNike
Starts 01/22/2026CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins82% CONFIDENCEOverall confidence: 82%How well the pin's source and references back up its dates.Weighted average of how firmly 6 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better253 days agoSecurityWeek^[1]: Nike "was listed as a victim on the Tor-based leak website operated by the WorldLeaks gang on January 22".
The WorldLeaks extortion gang listed Nike on its leak site on 22 January 2026 and then dumped about 1.4TB of what it said were 188,347 internal Nike design and manufacturing files; Nike said only that it was investigating a potential cybersecurity incident.
Law09/24/2026@LawDesk
Oracle E-Business Suite Breach Suits Consolidated in Austin
United States Courthouse, 501, West 5th Street, Warehouse District, Austin, Travis County, Texas, 78701, United StatesOracle
Starts 01/05/2026CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins86% CONFIDENCEOverall confidence: 86%How well the pin's source and references back up its dates.Weighted average of how firmly 4 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better270 days agoThe order in No. 1:25-cv-01805-ADA-SH is 'SIGNED on January 5, 2026' by Susan Hightower, United States Magistrate Judge.^[1]
A federal magistrate judge combined 33 class actions over the Cl0p theft of Oracle E-Business Suite data into In re Oracle Corporation Data Breach Litigation.
Cybersecurity09/24/2026@CyberDesk
Salesforce Cuts Off Gainsight Apps After Suspicious Access to Customer Data
350, Bay Street, Fisherman's Wharf, North Beach, San Francisco, California, 94133, United StatesGainsight
Starts 11/19/2025CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins88% CONFIDENCEOverall confidence: 88%How well the pin's source and references back up its dates.Weighted average of how firmly 6 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better317 days agoGainsight's^[1][3][4] incident timeline (PST): 'November 19, 2025 - Afternoon Salesforce notifies Gainsight of unusual activity involving the Gainsight Salesforce Connected App'; The Register^[5] says Salesforce announced the revocation on Wednesday, 19 November.
Salesforce revoked every token held by Gainsight-published apps and pulled them from the AppExchange after spotting API calls from unrecognised IPs into customers' Salesforce data.
Cybersecurity09/24/2026@CyberDesk
Hackers Dump Qantas and Vietnam Airlines Data After Salesforce Deadline
Qantas Group Headquarters, 10, Bourke Road, Mascot, Sydney, New South Wales, 2020, AustraliaQantas
Starts 10/11/2025 3:30AM UTCCONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins87% CONFIDENCEOverall confidence: 87%How well the pin's source and references back up its dates.Weighted average of how firmly 4 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better356 days agoInformation Age: 'The data was first leaked to a clear-web hacking forum at approximately 2.30pm AEDT Saturday' (11 October 2025), about an hour before it went up free on the dark web.^[1]
When the ransom deadline passed, Scattered Lapsus$ Hunters published stolen Salesforce data of six companies, including 5 million Qantas customer records and 7.3 million Vietnam Airlines email addresses.
Cybersecurity09/24/2026@CyberDesk
Salesforce Tells Customers It Won't Pay the Scattered Lapsus$ Hunters Ransom
Salesforce Tower, 415, Mission Street, Rincon Hill, San Francisco, California, 94105, United StatesSalesforce
Starts 10/07/2025CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins86% CONFIDENCEOverall confidence: 86%How well the pin's source and references back up its dates.Weighted average of how firmly 4 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better360 days agoBleepingComputer^[1][4], 7 October 2025: 'Salesforce emailed customers on Tuesday to say they would not be paying a ransom' - Tuesday was 7 October.
With the gang's leak deadline three days away, Salesforce emailed customers that it would not engage, negotiate with or pay any extortion demand.
Cybersecurity09/24/2026@CyberDesk
CISA Orders Federal Agencies to Patch Oracle E-Business Suite Zero-Day
2300, Oracle Way, Lakeshore, Austin, Travis County, Texas, 78741, United StatesOracle
10/06/2025 - 10/27/2025CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins90% CONFIDENCEOverall confidence: 90%How well the pin's source and references back up its dates.Weighted average of how firmly 4 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better361 days agoCISA's^[1][2] alert of 'October 06, 2025' adds 'CVE-2025-61882 Oracle^[4] E-Business Suite Unspecified Vulnerability'; the KEV catalog entry sets dateAdded 2025-10-06 and dueDate 2025-10-27 under BOD 22-01, which 'requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date'.
CISA put CVE-2025-61882 on its Known Exploited Vulnerabilities list, giving federal civilian agencies until 27 October 2025 to fix Oracle E-Business Suite.

Hacker Summer Camp3

Companies

Oracle59
Nike88
Google41
Salesforce72
Microsoft38
European Commission3
Amazon16
OpenAI55
Informa9
Qualcomm57