Dutch FIOD Seizes 800 Servers Linked to Russia-Sanctioned Hosting Firm Stark Industries
Netherlands financial crime investigators arrested two men and seized 800 servers from WorkTitans B.V. — a Dutch web hosting company operating as THE....
Breach Intelligence & Articles
918 articles on data breaches, ransomware, incident response, and threat intelligence.
Megalodon: An Automated Attack Poisoned 5,561 GitHub Repos in Six Hours
On May 18, 2026, an automated campaign codenamed Megalodon pushed 5,718 malicious commits to 5,561 GitHub repositories in a six-hour window, injecting...
Operation Saffron: Law Enforcement Dismantles First VPN, Used by 25+ Ransomware Gangs
A seven-country coalition led by France and the Netherlands, with support from Europol and Eurojust, seized 33 servers and shut down First VPN — a cri...
The Karakurt Negotiator Gets 102 Months: Deniss Zolotarjovs Sentenced for Ransomware Extortion
A U.S. federal court sentenced Latvian national Deniss Zolotarjovs to 102 months in prison for his role as Karakurt's ransom negotiator — the man resp...
Drupal Patches Unauthenticated SQL Injection Flaw Rated Highly Critical — Government and University Sites at Immediate Risk
Drupal released an emergency core security patch on May 20, 2026, fixing CVE-2026-9082, an unauthenticated SQL injection vulnerability in its database...
TeamPCP Breaches GitHub via Poisoned VS Code Extension, Exfiltrates 3,800 Internal Repos
A single GitHub employee installing a malicious VS Code extension handed supply chain gang TeamPCP the keys to roughly 3,800 internal repositories. Gi...
TeamPCP Open-Sources Shai-Hulud Worm — Copycats Flood npm with 600+ Malicious Packages Within Days
In a calculated move to multiply the attacker pool, TeamPCP publicly released the full source code of their Shai-Hulud credential-stealing worm on Git...
Grafana Labs Refuses Ransom After CoinbaseCartel Steals Entire Codebase via GitHub Actions Token
CoinbaseCartel, a data extortion crew linked to ShinyHunters, Scattered Spider, and LAPSUS$, exploited a misconfigured GitHub Actions workflow to stea...
Operation First Light 2026: 276 Arrested, $701M Seized, Nine Crypto Scam Centers Dismantled
A coordinated international takedown led by Dubai Police alongside the FBI and China's Ministry of Public Security dismantled nine cryptocurrency scam...
Poisoned Nx Console Extension Hit 2.2 Million VS Code Users — Malicious Version Live for Just 11 Minutes
A compromised version of the Nx Console VS Code extension (v18.95.0) with 2.2 million installs was live on the Microsoft marketplace for just 11 minut...
INTERPOL Operation Ramz: 201 Arrested in First-Ever MENA Cybercrime Crackdown
INTERPOL's Operation Ramz swept across 13 Middle East and North Africa countries, netting 201 arrests, seizing 53 servers, and identifying 3,867 victi...
Claw Chain: Four Chained Flaws in OpenClaw Put 245,000 AI Agent Servers at Risk
Cyera researchers disclosed four chained vulnerabilities in OpenClaw — collectively dubbed 'Claw Chain' — that allow attackers to escape sandboxes, re...