TeamPCP Open-Sources Shai-Hulud Worm — Copycats Flood npm with 600+ Malicious Packages Within Days
Grafana Labs Refuses Ransom After CoinbaseCartel Steals Entire Codebase via GitHub Actions Token
Poisoned Nx Console Extension Hit 2.2 Million VS Code Users — Malicious Version Live for Just 11 Minutes
PowerSchool to Canvas: The 18-Month EdTech Supply Chain Collapse
The Canvas Breach Is an LMS Supply Chain Failure, Not a School Problem
The Gentlemen Got Hacked: Inside the Leaked Backend of 2026's Second Most Active Ransomware Group
Mythos Inside: How a Discord Group Walked Into Anthropic's 'Too Dangerous to Release' Model Through Mercor's Backdoor
A Roblox Cheat, a Forgotten OAuth Grant, and the Keys to Vercel's Production Infrastructure
How Hackers Got Inside Your Hotel Reservation: The Booking.com Breach and the ClickFix Campaign Behind It
The BPO Backdoor: How Mr. Raccoon Allegedly Stole 13 Million Adobe Support Tickets Through a Supply Chain You Didn't Know Existed
LiteLLM Compromised: How a Poisoned Security Scanner Backdoored 97 Million Downloads — and the Hacker Just Quit
Crunchyroll Data Breach: 100GB of User Data Exposed via BPO Supply Chain Attack
Marquis Fintech Ransomware Breach: 672,000 Victims Who Never Heard of the Company That Lost Their Data
Inside the Telus Digital Breach: How ShinyHunters Stole Nearly 1 Petabyte Through a Single Credential
