Today's briefing covers a series of high-stakes data breaches and zero-day disclosures impacting global infrastructure and individual privacy. We lead with SafePal, the Binance-backed hardware wallet provider, which confirmed a data breach affecting nearly 40,000 customers. While digital assets remain secure, the exposure of physical shipping addresses introduces significant real-world risks, including targeted social engineering and physical coercion. In the industrial sector, tech giants GE and Philips are investigating claims from the Clop ransomware gang following the exploitation of a critical vulnerability in PTC Windchill and FlexPLM platforms. This attack targets sensitive intellectual property, including facility diagrams and blueprints. We also analyze the 'ShieldBreak' zero-day in Microsoft Defender, which grants SYSTEM privileges via a patch bypass, and a substantial breach of the French tax authority exposing data for 678,000 individuals. These incidents underscore the persistent vulnerability of third-party integrations and the escalating risk to both corporate assets and personal safety in the 2026 threat landscape.