Daily Cyber News: UK legal aid breach reaches personal records dating back to 1978

A 2025 breach of the UK Legal Aid Agency reached further into the past than initially known. Follow-up analysis identified approximately two hundred fifty thousand records from before 2007, with the earliest verified record dating to 1978.

Key context: Depending on the case, stolen information may include identity details, financial assessments, legal proceedings, and provider banking data.

Additional detail: Old records can remain sensitive because legal, financial, family, and identity information may still support fraud or coercion.

For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.

Topics: cybersecurity news, cybersecurity, cyber risk, legal, breach, reaches, personal, records, dating, back.

Daily Cyber News: Burger King Japan Confirms Data Breach Exposing 11.18M User Records

Personal details linked to about 11.18 million Burger King Japan app records were exposed after unauthorized access to a member-management system. The exposed information included names, email addresses, phone numbers, birth dates, prefectures, and account-related fields.

Key context: The 11.18 million figure represents records, not a confirmed count of unique people.

Additional detail: Even without payment data, the combination of contact and identity details can make follow-up scams more convincing.

For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.

Topics: cybersecurity news, cybersecurity, cyber risk, data breach, Burger King Japan Confirms Data Breach, User Records, Burger, King, Japan, Confirms.

Daily Cyber News: CISA flags active attacks on firewalls, email and backup systems

Four newly prioritized flaws are already being used against security and backup infrastructure. The affected products include Palo Alto Networks PAN-OS, Cisco Secure Email Gateway, and AhsayCBS.

Key context: Under specific configurations, the Cisco issue can allow root-level command execution through a crafted email attachment.

Additional detail: These systems sit at trusted network boundaries or manage critical recovery data, making compromise especially consequential.

For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.

Topics: cybersecurity news, cybersecurity, cyber risk, firewall, cisco, CISA, flags, active, attacks, firewalls.

Daily Cyber News: Targeted online ads delivered zero-click spyware to news devices

Ordinary browsing became an infection route when targeted online ads delivered spyware without requiring a click. Investigators linked attacks against Al Jazeera devices in 2024 and 2025 to advertising infrastructure and spyware associated with Candiru.

Key context: At least 45 devices were targeted.

Additional detail: Traditional phishing awareness cannot prevent an attack that requires no user action.

For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.

Topics: cybersecurity news, cybersecurity, cyber risk, phishing, supply chain, Targeted, online, delivered, zero-click, spyware.

Daily Cyber News: Exposed AI and industrial systems keep expanding online

Publicly reachable AI and industrial systems continue to expand faster than many organizations can secure them. Internet scans identified two hundred sixty seven thousand nine hundred fifteen I P addresses running AI-related products in July 2026. That’s a sixty three percent increase in nine months across 44 products.

Key context: The same research found about one hundred thirty four thousand industrial control systems online, roughly four percent more than in 2024.

Additional detail: AI orchestration tools may hold credentials and connections to many downstream services, while industrial systems can influence physical processes.

For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.

Topics: cybersecurity news, cybersecurity, cyber risk, Exposed AI, Exposed, industrial, systems, keep, expanding, online.

Daily Cyber News: BeyondTrust zero-day gives spies a path into downstream systems

A compromised remote-support appliance can become a bridge into the systems it’s meant to manage. A suspected China-linked espionage actor exploited a BeyondTrust Remote Support flaw as a zero-day in late August 2026.

Key context: The actor planted custom malware, gained root-level control, pursued stored credentials, and created persistence designed to survive reboots and configuration resets.

Additional detail: The potential exposure goes beyond the appliance because remote-support platforms hold trusted access to downstream systems.

For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.

Topics: cybersecurity news, cybersecurity, cyber risk, zero-day, malware, BeyondTrust, gives, spies, path, downstream.

Daily Cyber News: Grocery refrigeration attacks cause fires and millions in losses

Cyberattacks on commercial refrigeration systems spoiled food, caused some small fires, and drove losses into the millions for European grocers. More than 700 grocery and retail stores were reportedly affected in one night. France was at the center, with impacts also reported elsewhere in Europe.

Key context: The attackers manipulated controllers and extended defrost cycles, making dangerous heating look more like routine maintenance.

Additional detail: For retailers, this creates safety, inventory, continuity, and financial consequences.

For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.

Topics: cybersecurity news, cybersecurity, cyber risk, Grocery, refrigeration, attacks, cause, fires, millions, losses.

Daily Cyber News: FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested

U.S. authorities have disrupted alleged North Korean remote-worker operations by searching more than 40 suspected laptop farms and seizing about 187 laptops. Prosecutors charged 14 people, including two U.S. nationals who were arrested. The broader scheme allegedly affected more than 70 companies and generated roughly three dollars million for overseas workers.

Key context: Laptop farms helped make remote operators appear to be working from the United States.

Additional detail: The risk goes beyond payroll fraud.

For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.

Topics: cybersecurity news, cybersecurity, cyber risk, DPRK IT, raids, DPRK, worker, laptop, farms, Texas.