Iranian Hacker Wanted in $3.4 Billion University Hacking Campaign Arrested in Montenegro
Montenegrin police, acting with the FBI, arrested a dual Iranian-Turkish national in the coastal town of Kotor over an alleged hacking campaign dating...
Breach Intelligence & Articles
825 articles on data breaches, ransomware, incident response, and threat intelligence.
Klue Breach: Icarus Hits a Market-Intel Vendor and Drags LastPass Into a Salesforce Supply-Chain Mess
Vancouver-based competitive-intelligence platform Klue disclosed a June 11-12 cyberattack that hit its Salesforce integration and exposed customer dat...
Xsolis Healthcare AI Vendor Breach Exposes 1.4 Million Patients After January Phishing Attack
Tennessee healthcare AI vendor Xsolis disclosed a breach affecting 1,396,519 individuals after a January 20, 2026 phishing attack. Exposed data includ...
Operation Endgame Hits StealC and Amadey: 326 Servers Seized, 27 Million Stolen Credentials Recovered
Europol's Operation Endgame disrupted the StealC and Amadey infostealer strains on June 24, 2026, taking down 326 servers, seizing 142 domains, and re...
Canada's Spy Agency Used a First-of-Its-Kind Warrant to Reach Into Citizens' Devices and Kill Two Botnets
A newly released Federal Court ruling reveals that Canada's CSIS obtained an unprecedented threat-reduction warrant to alter, degrade, and destroy bot...
AryStinger: 4,300 Legacy Routers Hijacked Into a Stealth Reconnaissance and Proxy Network
A new malware family called AryStinger has quietly infected more than 4,300 end-of-life routers — built on decade-old Realtek chips — using vulnerabil...
Fifth Chrome Zero-Day of 2026: V8 Flaw CVE-2026-11645 Exploited in the Wild
Google has patched CVE-2026-11645, an out-of-bounds memory access in Chrome's V8 engine that attackers are already exploiting in the wild. It is the f...
ShinyHunters Dumps 234GB DentaQuest Trove: 2.6 Million Dental Members' Data Exposed
ShinyHunters has published a 234GB archive stolen from DentaQuest after extortion talks failed, exposing 2.6 million members' names, dates of birth, g...
Operation Endgame Strikes SocGholish: 14,971 WordPress Sites Cleaned, 100+ Evil Corp Servers Seized
International law enforcement has disrupted SocGholish, the fake-browser-update malware framework run by TA569 and linked to the sanctioned Evil Corp ...
Stealing the Keys to the AI Kingdom: 15 Malicious JetBrains Plugins Caught Exfiltrating API Keys
Fifteen malicious JetBrains Marketplace plugins posing as AI coding assistants quietly exfiltrated developers' OpenAI, DeepSeek, and SiliconFlow API k...
CVE-2026-41940: Critical cPanel & WHM Authentication Bypass Hits 1.5 Million Servers
A CVSS 9.8 authentication bypass in cPanel, WHM, and WP Squared is under active exploitation, with attackers deploying the 'Sorry' ransomware encrypto...
From FortiBleed to Fire Sale: Crime Gang Sells Access to 74,000 Fortinet Firewalls
A day after the FortiBleed dataset exposed credentials for nearly 74,000 Fortinet firewalls, a criminal group is openly selling network access to roug...