Breaking: Suspected Scattered Spider members deny all charges in devastating TfL breach that paralyzed London's transport infrastructure In a significant development in one of the UK's most high-profile cybercrime cases, two teenagers accused of orchestrating the devastating Transport for London (TfL) cyber attack have formally pleaded
Breaking: Cybersecurity Giant Terminates Employee Who Allegedly Sold Screenshots to Notorious Hacking Collective Executive Summary In a stark reminder that insider threats remain one of the most challenging security vulnerabilities, CrowdStrike has confirmed it terminated an employee last month who allegedly shared internal system screenshots with the notorious Scattered Lapsus$
Executive Summary: Salesforce has disclosed yet another major security incident affecting customer data, this time involving compromised Gainsight applications. The breach, attributed to the notorious ShinyHunters cybercrime collective, has impacted over 200 Salesforce instances and represents the latest chapter in a devastating year of supply chain attacks that have exposed
When a termination turns into a cyber catastrophe—the Maxwell Schultz case exposes the critical vulnerabilities in offboarding procedures Executive Summary In a stark reminder that insider threats remain one of cybersecurity's most persistent challenges, Maxwell Schultz, a 35-year-old IT contractor from Columbus, Ohio, has pleaded guilty to
How 'bulletproof' hosting providers enable billions in ransomware attacks—and why law enforcement is finally fighting back In the ongoing war against cybercrime, there's a critical battlefield that rarely makes headlines: the digital infrastructure that keeps criminal operations running. While ransomware gangs like LockBit and malware
Executive Summary A sophisticated phishing campaign has struck New Haven Public Schools, with attackers compromising at least four student accounts to distribute over 10,000 fraudulent emails seeking personal banking information. More than half of the student body received these malicious emails, and approximately 1,000 students—representing 10% of
November 20, 2025 - The City of Attleboro, Massachusetts became the latest American municipality to fall victim to a sophisticated cyberattack, joining a growing list of cities and towns struggling against an unprecedented surge in ransomware operations targeting local governments. Smart City Cybersecurity Assessment | CyberSafe.CityComprehensive security assessment for smart
Executive Summary In September 2025, Cloudflare mitigated an 11.5 terabits per second (Tbps) distributed denial-of-service (DDoS) attack—a record that stood for just three weeks before being shattered by a 22.2 Tbps assault. These unprecedented attacks represent the culmination of a multi-year escalation that has seen volumetric DDoS
Executive Summary On the morning of November 18, 2025, a configuration error at Cloudflare triggered a cascading failure that rendered significant portions of the internet inaccessible for several hours. ChatGPT, X (formerly Twitter), Spotify, League of Legends, and countless other services went dark, exposing an uncomfortable truth: our modern digital
The ransomware landscape has undergone a dramatic transformation throughout 2025, with law enforcement disruptions creating both chaos and opportunity within the cybercriminal ecosystem. While Operation Cronos dismantled LockBit's infrastructure in early 2024, the void left by the once-dominant group has spawned a more fragmented, competitive, and paradoxically more
Executive Summary Organizations worldwide face an unprecedented wave of actively exploited vulnerabilities affecting critical network infrastructure from major cybersecurity vendors. As of November 2025, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added multiple high-severity vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, with threat actors demonstrating sophisticated
Just in: DoorDash breached… On November 13, 2025, DoorDash began notifying users of a security incident that occurred on October 25, 2025, involving "an unauthorized third party gaining access to and taking certain user contact information." According to the company's disclosure, the compromised data "may