Attackers did not need stolen passwords or phishing pages to access these Salesforce environments. Instead, they allegedly leveraged something many organizations rarely revisit: legacy OAuth tokens...
Millions of sports fans may have unknowingly joined one of the latest major data breach disclosures. Have I Been Pwned (HIBP) has added the Madison Square Garden Sports incident to its breach...
Attackers are moving quickly against vulnerable PTC Windchill servers, and the payload of choice is a familiar one: JSP web shells that provide persistent remote access inside enterprise engineering...
A single Git clone could have been enough to hand an attacker active AWS credentials. Amazon has patched a high-severity vulnerability in Amazon Q Developer, tracked as CVE-2026-12957, after...
On June 23, 2026, Bajaj Auto Limited, one of India's leading manufacturers of motorcycles and three-wheelers, disclosed a significant cybersecurity incident involving a ransomware attack. The attack...
A cyber incident at Tata Electronics is drawing attention far beyond India’s manufacturing sector. The company, a key supplier to Apple and Tesla, has confirmed that it experienced a cybersecurity...
In a significant cybersecurity incident affecting the financial sector, KerberRose Wealth Management has notified approximately 27,076 clients that their personal and financial data may have been...
In the rapidly evolving landscape of cyber threats, few groups have scaled as aggressively as The Gentlemen, a ransomware-as-a-service operation that has claimed hundreds of victims since its...
Attackers have discovered that one of the most effective ways to exploit the AI boom isn't breaking into AI platforms—it's convincing users they already have. According to Microsoft Threat...
Modern ransomware operators are no longer just building better encryptors. Increasingly, they are focused on eliminating the security tools designed to stop them before encryption ever begins. New...
In a significant cybersecurity incident that has raised alarms across the Lone Star State, the Texas Parks and Wildlife Department (TPWD) disclosed that a third-party vendor responsible for its...
The risk with FortiBleed is not just that credentials leaked. It is that many of those credentials appear to unlock the perimeter itself. CISA is now urging Fortinet customers to secure affected...
A security monitoring platform becoming the target is not a theoretical risk. It is now the urgency behind CVE-2026-20253, a critical Splunk Enterprise vulnerability that moved from disclosure to...
In a stark reminder of the vulnerabilities inherent in third-party SaaS integrations, market intelligence firm Klue fell victim to a sophisticated OAuth token abuse incident in mid-June 2026. The...
RoguePlanet is not just another local privilege escalation bug. It targets the defensive layer many Windows environments trust by default: Microsoft Defender. Microsoft has now confirmed...
In the ever-evolving world of cybercrime, few groups have demonstrated such rapid growth and adaptability as INC Ransomware. Operating as a sophisticated Ransomware-as-a-Service (RaaS) platform, INC...
The FortiBleed leak is not just another credential dump. It is a map of exposed network perimeters. Security researchers say the dataset contains working Fortinet and FortiGate VPN credentials for...
A Joomla extension flaw has crossed the line from dangerous to actively weaponized. CISA’s addition of CVE-2026-48907 to the Known Exploited Vulnerabilities catalog is not just another...
Eastman Kodak Company, the iconic American imaging and technology firm, has confirmed a cybersecurity incident following claims by the notorious ShinyHunters extortion group. The hackers allege they...
In a significant cybersecurity incident that underscores the vulnerabilities facing critical infrastructure providers, Russian software developer Kaluga Astral confirmed it was the target of a...