Incident reporting: who got in, how long they stayed, and what it cost.
The UK fashion retailer disclosed that attackers impersonated a trusted contact to compromise an employee account, then leveraged those credentials to access third-party platforms holding customer data.
Raheim Hamilton, who ran one of the largest dark web marketplaces, received a four-decade prison sentence for overseeing more than 4 million illegal transactions facilitated through cryptocurrency between 2018 and 2020.
Threat actors compromised operators of country-code registries for Ghana, American Samoa, and Sierra Leone, then modified DNS records to obtain unauthorized HTTPS certificates for Google domains and other organizations.
Researchers tracking a cryptomining campaign have identified PoeLLM malware infecting over 3,400 servers running exposed AI tools. The botnet uses an unusual technique to retrieve command-and-control addresses by parsing keywords from a poem stored on GitHub.
Threat actors have shifted tactics to destroy backup infrastructure alongside encrypting production systems, eliminating the recovery path that organizations depend on to resist ransom demands.
A 54-year-old musician has been sentenced to 18 months in federal prison after defrauding music streaming platforms of more than $10 million through a scheme involving AI-generated songs and automated bot accounts.
The semiconductor test equipment maker has notified individuals that a February 2026 network intrusion resulted in the theft of personally identifiable information, including Social Security numbers and financial records.
Attackers are running a sophisticated operation that mimics ChatGPT, Gemini, Claude, and Perplexity to steal credentials and multi-factor authentication codes from advertising account managers using browser-in-browser attacks.
