Incident reporting: who got in, how long they stayed, and what it cost.
The developer platform disclosed a second security incident in two months where attackers leveraged unencrypted internal credentials to access production systems and exfiltrate millions of environment variable records and customer account data.
A 40-year-old man extradited from France pleaded guilty to orchestrating spearphishing attacks on US tax preparation firms, stealing millions through fraudulent refund filings and loan applications.
Attackers hijacked a GitHub account to inject malware into multiple versions of OVHcloud's command-line tool, stealing developer secrets from affected systems.
The major food retail chain took systems offline following a cyberattack that affected customer-facing services and employee access across multiple regional brands, though physical stores remained operational.
The Japanese media and financial information conglomerate disclosed unauthorized access to a development system through stolen credentials, marking its third security incident in a month.
Threat actors briefly compromised AOMEI's configuration servers between April and July 2026, injecting malicious payloads through the backup software's built-in promotion system before covering their tracks within minutes.
An open-source AI coding agent suffered a security incident affecting 1.4% of its users, with attackers gaining access to stored API keys from external providers and running up charges exceeding $1,700 on compromised accounts.
ConnectWise has disabled its Cloud Backup service after attackers obtained application identities and gained unauthorized access to at least 162 Microsoft 365 tenants, using stolen credentials to bypass multi-factor authentication.
