Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
Threat actors have shifted tactics to destroy backup infrastructure alongside encrypting production systems, eliminating the recovery path that organizations depend on to resist ransom demands.
A critical file-access vulnerability in Jira, Confluence, Bitbucket and other Atlassian products is being weaponized in the wild within hours of public proof-of-concept release, with automated scanning tools already deployed.
SonicWall has issued hotfixes for a maximum-severity server-side request forgery vulnerability affecting SMA1000 series appliances, with over 400 exposed instances currently tracked online.
A 54-year-old musician has been sentenced to 18 months in federal prison after defrauding music streaming platforms of more than $10 million through a scheme involving AI-generated songs and automated bot accounts.
The semiconductor test equipment maker has notified individuals that a February 2026 network intrusion resulted in the theft of personally identifiable information, including Social Security numbers and financial records.
Two widely deployed WordPress plugins are being actively exploited to install hidden admin accounts and malicious backdoors that persist even after plugin removal.
Competing security researchers demonstrated vulnerabilities across seven product categories on the opening day of the annual hacking competition, with Samsung's flagship phone targeted twice and total payouts reaching $388,500.
Atlassian has released fixes for CVE-2026-21589, a critical vulnerability affecting self-hosted versions of Confluence, Jira, Bitbucket and other Data Center products that permits unauthenticated file access.
