Incident reporting: who got in, how long they stayed, and what it cost.
An extortion gang calling itself ShinyHunters has compromised the Clop ransomware operation's Tor-hosted data leak site, defacing it and claiming to have stolen server data and private cryptographic keys.
The screenshot-sharing platform Gyazo confirmed attackers leveraged a server flaw to access its database and steal records from nearly its entire user base, forcing the service offline for repairs.
A coordinated campaign impersonates LastPass and dozens of other software vendors on GitHub, using SEO tricks to lure victims into downloading malware that steals credentials and disables security tools.
A live event on September 23, 2026 will examine real Google Workspace incidents to help resource-constrained security teams identify which controls deliver the most protection.
Zimperium researchers have uncovered RatHat, an Android malware that uses an AI-powered subsystem to remotely control compromised devices. The threat appears linked to Chinese-based actors and spreads via malvertising, SMS, and phishing campaigns.
A compromised API credential gave attackers the ability to inject malicious scripts across Brevo's CDN for five and a half hours, potentially reaching 100,000 websites that embed the company's forms and widgets.
The FBI seized domains belonging to NightmareStresser, a major booter service that rented botnet access to conduct distributed denial-of-service attacks. The action is part of Operation PowerOFF, an ongoing international law enforcement effort targeting DDoS-for-hire infrastructure.
A China-linked threat group has been conducting sustained attacks on government agencies across eight Latin American countries using a sophisticated new backdoor that replaces their previous custom malware.
