Cybersecurity News

Private equity giant Apollo confirms data breach saw personal info stolen

August 24, 2026

Apollo Global Management confirmed a cyberattack between July 6–10, 2026, in which a threat actor used social engineering to access its cloud environment. Stolen data included names, dates of birth, contact information, addresses, and Social Security numbers. Financial data was not compromised. Apollo notified authorities, engaged forensic experts, and is offering affected individuals two years of free identity protection. No group has claimed responsibility and the data has not appeared on the dark web.

• data breach
• social engineering
• private equity
• identity theft
• personal data
• phishing

This new malware can use Google passkeys even after a victim resets their password

August 21, 2026

Researchers have discovered a malware toolkit called Atlantis AIO that can bypass multi-factor authentication and maintain access to Gmail, Microsoft, Apple, and LinkedIn accounts even after victims reset their passwords. The malware exploits session cookies and OAuth tokens, meaning credential changes don't revoke access. It automates credential-stuffing attacks across over 140 platforms.

• malware
• google
• passkeys
• account security
• identity theft