Incident reporting: who got in, how long they stayed, and what it cost.
Federal authorities are publicly calling on members of the ShinyHunters extortion gang to turn themselves in after Dutch police detained a 24-year-old man identified as a group leader. The arrest follows the group's recent claim of breaching FBI systems.
The Dutch Institute for Vulnerability Disclosure fell victim to an autonomous AI-driven attack that exploited an unpatched flaw, leaving behind extensive forensic evidence of the agent's clumsy post-exploitation work.
Keio Corporation, a major Japanese railway operator, fell victim to a ransomware attack over the weekend that knocked out business systems on its hospitality side. The incident prompted the company to shut down its network and file a police report.
Law enforcement in the Netherlands has confirmed the detention of a 24-year-old Amsterdam resident linked to the ShinyHunters hacking collective, with the suspect set to appear before a district court this week.
Security researchers discovered thousands of misconfigured Supabase instances exposing sensitive user data, passwords and tokens. The findings highlight growing risks from AI-assisted development tools.
A threat actor tracked as Storm-3168 is leveraging autonomous AI agents to orchestrate attacks against Azure tenants, automating reconnaissance, credential harvesting, and destruction of cloud infrastructure across multiple resource types.
The cryptocurrency exchange has begun restoring withdrawal services after attackers compromised backend wallet infrastructure and drained over $350 million across multiple blockchain networks.
Two compromised third-party GitHub Actions were restored to active status but continued serving malicious payloads for over a week, putting downstream workflows at risk of executing infected code.
