825 articles on data breaches, ransomware, incident response, and threat intelligence.
Ransomware leak sites named 646 victims in May 2026 — the lowest month of the year and the first time 2026 dipped below its own record pace. Qilin hel...
Sysdig researchers observed the first confirmed in-the-wild use of an LLM agent for post-exploitation — an attacker exploited a pre-auth RCE in Marimo...
WithSecure Labs has attributed a previously undocumented threat actor — GREYVIBE — to ongoing cyberattacks against Ukrainian military, government, and...
Carnival Corporation has confirmed a data breach affecting 5,995,277 customers following an April 10 social engineering attack. ShinyHunters listed Ca...
A critical pre-authentication API bypass in FortiClient Endpoint Management Server (CVSS 9.1) is under active exploitation, with attackers delivering ...
Attackers exploited a critical unauthenticated SQL injection vulnerability in Ghost CMS to compromise more than 700 websites — including university po...
A coordinated supply chain campaign dubbed TrapDoor deployed 34 malicious packages across three package ecosystems targeting crypto, DeFi, Solana, and...
The FBI issued a FLASH-severity alert on May 26 warning that the Silent Ransom Group has escalated from phishing and vishing to physically sending ope...
Two US cybersecurity professionals — an incident response manager at Sygnia and a ransomware negotiator at DigitalMint — pleaded guilty to conducting ...
A fake Sicoob C# SDK on NuGet silently exfiltrated PFX certificates and banking credentials from developers integrating with Brazil's largest cooperat...
RansomHouse ransomware group has claimed responsibility for breaching Trellix, a major cybersecurity vendor serving Fortune 100 clients, stealing a po...
New details from the DOJ and Canadian court filings flesh out the Kimwolf case significantly: Jacob Butler faces separate Canadian criminal charges al...