River Bank obtained assurances from the attackers that the stolen data in the June attack was deleted

Security Affairs feed covering recent breaches, ransomware activity, critical software vulnerabilities, malware campaigns, Russian state-linked phishing, and attacks against operational technology. Notable items include critical unauthenticated file-read/RCE vulnerabilities in Ruby on Rails Active Storage (CVE-2026-66066) and Adobe Campaign Classic (CVE-2026-48449), alleged exposure of Żabka source code and API keys, a CareCloud breach affecting approximately 345,000 individuals, and attacks targeting internet-exposed PLCs at Minnesota water utilities.