News
Denmark’s CPR Breach: How ‘123456’ Exposed 8.8 Million Records and the Systemic Collapse of Third-Party Trust
Denmark's CPR data breach exposed millions of identities after a reported Pays ApS security failure involving the weak password 123456
Meta GitHub Breach: Stolen Credentials Expose Source Code and Personal Data of 1,500 People
Meta's GitHub breach exposed proprietary source code and personal data affecting 1,500 people after attackers used stolen employee credentials
Three Yandex Data Centers Taken Offline in Four Days, Disrupting Cloud Services for 64,000 Business Customers
Ukraine's drone strikes hit Yandex data centers in Russia, disrupting cloud services and raising concerns about AI infrastructure and data center resilience
Ransomware Actors Weaponize Palo Alto GlobalProtect Authentication Bypass for Stealthy VPN Access
Palo Alto GlobalProtect CVE-2026-0257 is being exploited by Qilin and Settra ransomware actors. Check affected PAN-OS versions, IOCs, and fixes
Spy Implant in Ledger Nano X Devices Tied to $86 Million Crypto Theft
Ledger investigates a suspected $86 million crypto theft linked to CryptoBilis. Learn how the alleged Nano X spy implant steals recovery phrases
Ransomware Attack Cripples Japan’s IDCF Cloud: 495 Organizations Including Government Clients Hit as Threat Actor Claims 3.6 PB of Data Encrypted
The IDCF Cloud ransomware attack has disrupted services for 495 organizations in Japan. A threat actor claims 3.6 PB of data was encrypted
AT&T to Pay $177 Million to Settle Two Data Breaches Affecting Over 100 Million Customers
AT&T's $177 million data breach settlement covers two 2024 incidents affecting over 100 million customers. See exposed data, payouts and claim status
Deep Dive: How a Solo Hacker Weaponized Agentic AI and ‘ARTEX’ to Breach South Korea’s Financial Sector
South Korean banks face AI-powered cyberattacks allegedly linked to ARTEX. Explore the breach, IDOR flaws, exposed customer data, IoCs and defenses
Tensorlake npm Package Compromised: Anatomy of the Shai-Hulud Worm, Hostage Token Wipe-Switch, and AI Supply Chain Attacks
Tensorlake npm package 0.5.144 was compromised with the Shai-Hulud worm. Learn how it steals credentials, targets AI tools, evades EDR, and wipes hosts
Rakuten Drive Breach: Stolen Admin Credentials Exposed 15,382 Users’ Files for Eight Months as Separate 101 Million Record Sale Claim Surfaces
Rakuten Drive suffered an eight-month data breach exposing files from 15,382 users after attackers stole admin credentials. Here's what happened
