Accenture has confirmed a security breach after a threat actor known as "888" offered approximately 35 GB of allegedly stolen source code and credentials for sale. The incident marks the latest in a string of breaches for the global IT services provider.
BleepingComputer could not independently verify the full scope of the data stolen.
It likewise declined to reveal how the attackers gained entry or whether any customer data was involved.
Accenture's limited disclosure on access method and customer data exposure highlights ongoing challenges in enterprise breach transparency.
Tap a lens to see what this story means for you.
Reader-supported · Daily Brief
Daily brief at 7 AM ET. Top tech stories, every morning. Sourced and fact-checked.
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
Blue Origin is reportedly raising up to $10 billion in its first private capital round at a $130 billion valuation, with Coatue Management reported to lead participation from institutional investors and Jeff Bezos. The move ends the company's near-total reliance on Bezos' personal funding as it races to scale ambitious launch, lunar, and satellite constellation projects against SpaceX.
CISA directed federal agencies to patch the actively exploited CVE-2026-55255 authorization bypass in Langflow by Friday after adding it to the Known Exploited Vulnerabilities catalog. The IDOR flaw lets authenticated attackers reach other users' AI agent flows, sensitive data, and resources, with exploitation observed targeting compute power and credentials.
KDDI disclosed that attackers breached an email platform used by five Japanese ISPs, exposing email addresses of 12,233,087 people and passwords of 7,616,173 others via a zero-day vulnerability first exploited on May 16. The company is forcing password changes and has deployed new detection tools after notifying regulators, with no confirmed secondary damage reported.
