Adversaries recently breached the core infrastructure supporting prominent Web3 provider Chainstack. Specifically, the intruders penetrated internal environments and accessed sensitive customer databases containing cryptographic password hashes. Furthermore, executive leadership attributes this intrusion to an...
Adversaries recently breached internal systems at corporate identity provider WorkOS. Specifically, the intruders deployed an autonomous artificial intelligence tool known as ARTEX. The security compromise exposed enterprise customer directories and internal support correspondence. Consequently,...
Even a successful device verification cannot guarantee absolute cryptographic legitimacy. Recently, hardware wallet manufacturer Keystone confirmed a severe intrusion into its administrative website. Specifically, threat actors purloined a foundational factory WebAuth key during the...
Japanese technology giant GMO Internet issued an unprecedented emergency advisory to its subscribers. Specifically, the corporation urged clients to disconnect desktop computers, sever internet connections, and unplug power cables immediately. This drastic warning followed...
A rogue penetration tester orchestrated a devastating cyber offensive across South Korea alongside six accomplices. Specifically, the syndicate exfiltrated 8.2 million sensitive records from more than ninety domestic organizations. To accelerate the breach, the...
Japanese technology giant GMO Internet has confirmed a severe security compromise within its virtual infrastructure. Specifically, the Onamae Desktop Cloud breach allowed cybercriminals to exfiltrate proprietary customer data. Following the intrusion, multiple clients reported...
Keys to the Cloud, Possibly in Stranger Hands Access keys to cloud services may have fallen into the wrong hands. The cause is a compromise of a platform where developers trusted their secrets to...
A system designed to guarantee anonymity for crime witnesses has suffered a catastrophic data leak. Specifically, Canadian non-profit Toronto Crime Stoppers suspended operations on October 21 following a major platform compromise. The incident compromised...
A five-year-old software vulnerability recently compromised servers associated with the Ukrainian state data exchange infrastructure. Specifically, an unidentified adversary leveraged the critical Log4Shell flaw within the Graylog log management platform. Consequently, the intruder achieved...
A Chinese-speaking threat actor recently directed autonomous AI agents to conduct large-scale cyberattacks against online storefronts. Beginning on September 25, these autonomous systems targeted more than 1,200 commercial websites across four nations. According to...
A Breach That Spared the Market A cyberattack on stock market infrastructure does not always halt trading. Even so, it can still give criminals access to sensitive investor details. That is what the Romanian...
The past week proved remarkably unglamorous for the global fashion industry. Immediately following the high-profile ASOS breach and reports of a potential intrusion at H&M, cybercriminals targeted TFG London. Consequently, the assault directly impacted...
