825 articles on data breaches, ransomware, incident response, and threat intelligence.
On May 22–23, 2026, an attacker rewrote historical release tags across four Laravel-Lang PHP packages — affecting 700+ versions on Packagist — to deli...
CoinbaseCartel, the data-exfiltration threat group we previously reported breaching Grafana Labs, has claimed Panasonic Avionics Corporation as its la...
Jacob Butler, 23, of Ottawa, Canada — known online as 'Dort' — was arrested on May 22, 2026, charged with operating the Kimwolf DDoS-for-hire botnet t...
Netherlands financial crime investigators arrested two men and seized 800 servers from WorkTitans B.V. — a Dutch web hosting company operating as THE....
On May 18, 2026, an automated campaign codenamed Megalodon pushed 5,718 malicious commits to 5,561 GitHub repositories in a six-hour window, injecting...
A seven-country coalition led by France and the Netherlands, with support from Europol and Eurojust, seized 33 servers and shut down First VPN — a cri...
A U.S. federal court sentenced Latvian national Deniss Zolotarjovs to 102 months in prison for his role as Karakurt's ransom negotiator — the man resp...
Drupal released an emergency core security patch on May 20, 2026, fixing CVE-2026-9082, an unauthenticated SQL injection vulnerability in its database...
A single GitHub employee installing a malicious VS Code extension handed supply chain gang TeamPCP the keys to roughly 3,800 internal repositories. Gi...
In a calculated move to multiply the attacker pool, TeamPCP publicly released the full source code of their Shai-Hulud credential-stealing worm on Git...
CoinbaseCartel, a data extortion crew linked to ShinyHunters, Scattered Spider, and LAPSUS$, exploited a misconfigured GitHub Actions workflow to stea...
A coordinated international takedown led by Dubai Police alongside the FBI and China's Ministry of Public Security dismantled nine cryptocurrency scam...