918 articles on data breaches, ransomware, incident response, and threat intelligence.
Carnival Corporation has confirmed a data breach affecting 5,995,277 customers following an April 10 social engineering attack. ShinyHunters listed Ca...
A critical pre-authentication API bypass in FortiClient Endpoint Management Server (CVSS 9.1) is under active exploitation, with attackers delivering ...
Attackers exploited a critical unauthenticated SQL injection vulnerability in Ghost CMS to compromise more than 700 websites — including university po...
A coordinated supply chain campaign dubbed TrapDoor deployed 34 malicious packages across three package ecosystems targeting crypto, DeFi, Solana, and...
The FBI issued a FLASH-severity alert on May 26 warning that the Silent Ransom Group has escalated from phishing and vishing to physically sending ope...
Two US cybersecurity professionals — an incident response manager at Sygnia and a ransomware negotiator at DigitalMint — pleaded guilty to conducting ...
A fake Sicoob C# SDK on NuGet silently exfiltrated PFX certificates and banking credentials from developers integrating with Brazil's largest cooperat...
RansomHouse ransomware group has claimed responsibility for breaching Trellix, a major cybersecurity vendor serving Fortune 100 clients, stealing a po...
New details from the DOJ and Canadian court filings flesh out the Kimwolf case significantly: Jacob Butler faces separate Canadian criminal charges al...
On May 22–23, 2026, an attacker rewrote historical release tags across four Laravel-Lang PHP packages — affecting 700+ versions on Packagist — to deli...
CoinbaseCartel, the data-exfiltration threat group we previously reported breaching Grafana Labs, has claimed Panasonic Avionics Corporation as its la...
Jacob Butler, 23, of Ottawa, Canada — known online as 'Dort' — was arrested on May 22, 2026, charged with operating the Kimwolf DDoS-for-hire botnet t...