909 articles on data breaches, ransomware, incident response, and threat intelligence.
An exposed staging server has blown the lid off FortiBleed. SOCRadar found an initial access broker member simultaneously logged into affiliate panels...
Sysdig has documented what it calls the first agentic ransomware operation — an LLM that broke into a network, harvested credentials, pivoted to a pro...
Conduent's HHS filing confirms 62,224,658 people were affected by its SafePay ransomware breach — roughly one in five Americans, and the third-largest...
CISA added Microsoft SharePoint Server deserialization flaw CVE-2026-45659 to the KEV catalog on July 1 with an emergency three-day deadline after act...
A leaked negotiation chat and an on-chain payment trail reveal that a U.S. government entity paid the Kairos extortion group roughly $1 million to pre...
North Korean threat actors tied to the Contagious Interview campaign have published 108 malicious packages and extensions across npm, Packagist, Go, a...
CVE-2026-46242, dubbed Bad Epoll, is a use-after-free race in the Linux kernel's epoll code that lets an unprivileged user escalate to root roughly 99...
Citizen Lab forensics show former MEP Stelios Kouloglou's iPhone was infected with NSO Group's Pegasus spyware at least three times — while he sat on ...
Medical device giant Medtronic is sending breach notification letters after ShinyHunters accessed its systems in April and claimed 9 million records —...
Google's Threat Intelligence Group, the FBI, IRS-CI, and Lumen disrupted NetNut (aka Popa), a residential proxy network built on more than 2 million i...
Anubis ransomware affiliates are exploiting Citrix Bleed 2 (CVE-2025-5777) to steal session tokens and walk past MFA, then living off legitimate RMM t...
The Krybit ransomware group has listed Ford Motor Company S.A. de C.V. — Ford's Mexican subsidiary — on its leak site, threatening to publish sensitiv...