AI Model Hidden Backdoor Vulnerability
Changing AI behavior is much easier and cheaper than many people thought. Cyber expert Katie Paxton-Fear put a hidden flaw into an open AI model. Amazingly, she finished this task in just about one...
Tagged: Supply Chain
Nidec Ransomware Attack Impacts Taiwanese Subsidiary
Japanese manufacturing giant Nidec Corporation recently disclosed a significant cybersecurity incident affecting its Taiwanese subsidiary, Nidec Chaun Choung Technology. On June 22, 2026, IT specialists discovered the devastating remnants of a sophisticated ransomware attack...
Klue Supply Chain Breach Compromises LastPass Data
Target/Victims: Klue, LastPass, and others. Delivery Vector: Compromised integration service credentials from 2022. Key Capabilities: Unauthorized Salesforce CRM access via stolen OAuth tokens. Threat Actor: Icarus ransomware group (Suspected). Source: Klue, LastPass, and affected...
Sailing Blind: Ransomware Paralysis Forces Spain’s Port of Vigo Back to Paper and Pen
A prominent fishing port in northwestern Spain has been thrust into a predicament wherein a cyberattack compelled the exigent suspension of customary digital operations. Whilst vessels continue to navigate the harbor and cargo remains...
Design Under Siege: Nike Probes 1.4 TB Leak of Secret Manufacturing Blueprints
The American athletic titan Nike has initiated an internal forensic audit following allegations of a substantial corporate data breach. The extortionist syndicate operating under the moniker WorldLeaks has disseminated a curated selection of files...
900GB Under Siege: Everest Collective Claims Massive Nissan Data Heist
The Everest collective has asserted responsibility for a cyber incursion against the Japanese automotive titan Nissan Motor Co., Ltd. According to the adversaries’ proclamations, approximately 900 GB of confidential data was exfiltrated from the...
The Cyber Slump: JLR Sales Crater After “Costliest Hack in UK History”
Jaguar Land Rover has disclosed its wholesale and retail performance metrics for the third quarter of fiscal year 2026, which concluded on December 31, 2025. The findings depict a grueling period; automotive production only...
The KVM with a Secret: NanoKVM Ships with Critical Flaws and a Covert Microphone
In February, a Slovenian information security researcher published an analysis of the Chinese remote-management device NanoKVM, revealing that the inexpensive €30–60 KVM kit shipped with a host of vulnerabilities—along with a concealed microphone that...
IDEsaster: 30+ Vulnerabilities Found in AI-IDEs Allow Silent RCE and Data Theft
More than thirty vulnerabilities have been uncovered in popular AI-enhanced development environments, all of which allow attackers — through a combination of prompt injections and legitimate IDE capabilities — to silently exfiltrate data or...
China APTs Exploiting React Server RCE (CVE-2025-55182) Hours After Disclosure
Two China-linked hacking groups began exploiting a critical vulnerability in React Server Components just hours after it became public. The flaw — CVE-2025-55182, rated a maximum 10 — has already been dubbed React2Shell and...
Asahi Cyberattack: Qilin Ransomware Exposes 1.5M People, Cripples Production
The Japanese brewing giant Asahi has revealed that a September cyberattack resulted in one of the most significant data incidents in its history: the personal information of more than 1.5 million people was put...
Digital Highwaymen: Hackers Use RMM Tools to Hijack Physical Cargo Shipments
Cybercriminals have discovered a way to exploit digital tools to steal tangible goods from trucks and warehouses. According to researchers at Proofpoint, since the beginning of 2025, an active criminal group has been targeting...
