909 articles on data breaches, ransomware, incident response, and threat intelligence.
CVE-2026-18577 is an authentication bypass in N-able N-central that hands an unauthenticated attacker full administrative control of an RMM console. E...
CVE-2026-8037 is an unauthenticated command injection in Progress Kemp LoadMaster with a CVSS of 9.6 that yields root-level code execution on the appl...
Connor Riley Moucka, 26, of Kitchener, Ontario, pleaded guilty on August 5, 2026 in federal court in Seattle to computer fraud, wire fraud, aggravated...
Maksim Silnikau, 40, a Belarusian national who operated as 'J.P. Morgan,' 'lansky' and 'xxx,' was sentenced to 16 years in the Eastern District of Vir...
Three breaches disclosed in eight days — RTX at four weeks, CareCloud at 140 days, Origin Energy after a public denial. RTX drew a class action within...
A week after coordinated attacks hit more than 30 Minnesota utilities and incidents surfaced in Michigan, Governor Hochul announced more than $9 milli...
Attackers were inside CareCloud between March 10 and March 16, 2026. The New Jersey health-tech vendor serves more than 45,000 healthcare providers. I...
Amgen filed an 8-K on July 29 disclosing that attackers gained unauthorized access to third-party-hosted cloud storage and potentially exfiltrated pat...
Palo Alto Networks Unit 42 documented a China-based actor using DeepSeek as the reasoning engine behind the open-source Hermes Agent, driven by Telegr...
RTX Corporation — the aerospace and defense conglomerate behind Raytheon, Collins Aerospace and Pratt & Whitney — has begun notifying individuals that...
Cisco Secure Firewall Management Center contains static credentials for a built-in low-privilege account. Any unauthenticated remote attacker who know...
Unitel detected anomalous activity against its core infrastructure at 02:20 local time on July 28, hours before the largest IPO in Angola's history. V...