Incident reporting: who got in, how long they stayed, and what it cost.
Attackers gained control of Microsoft's official X account with 13 million followers to promote a fraudulent crypto token, marking the latest in a series of high-profile account hijackings targeting major organizations.
A coordinated law enforcement action across ten countries has shut down the KillSec ransomware operation, seizing its dark web infrastructure and leading to the arrest of three suspects, including a 16-year-old identified as the group's primary administrator.
AI agents working around GitHub's CLI limitations inadvertently leaked internal images across more than 900 repositories. The incident, dubbed PixelLeak, exposed material from major tech companies, AI labs, and Fortune 500 firms—none of it from an attack.
The Defense Manpower Data Center disclosed a breach of its file-sharing systems that compromised sensitive data belonging to millions of service members, retirees and veterans over a nine-month period.
MetaMask disclosed an ongoing security incident affecting its infrastructure on Thursday, prompting the company to proactively exit validators in its non-custodial staking operations as a precautionary measure.
The Russian state-sponsored group Star Blizzard has introduced RedFlick, a new malware delivery method that chains phishing, virtual disks and scheduled tasks to deploy its CosmicPulse backdoor with minimal victim interaction.
Investigators from SlowMist and Mandiant determined that attackers breached the cryptocurrency exchange by compromising security appliances through previously unknown vulnerabilities, then pivoted to steal hundreds of millions in digital assets.
Threat actors are abusing OpenAI's custom GPT feature to redirect victims through Google search ads to malicious sites that deploy remote access trojans using ClickFix social engineering tactics.
