Threats, breaches, defenders. Reported by people who can actually read the post-mortems.
Researchers disclosed two new Microsoft 365 threats on July 9: the Helix data-extortion group, which uses voice phishing and SharePoint exfiltration, and the Forg365 phishing-as-a-service platform, which integrates AI-assisted lure generation with adversary-in-the-middle and device-code attack methods.
TechEchelon Staff · 2 DAYS AGO
Japanese telecom giant KDDI has revealed that a zero-day exploit targeting a shared email platform exposed the email addresses of 12.2 million people and the passwords of more than 7.6 million, affecting customers across five internet service providers.
TechEchelon Staff · 3 DAYS AGO
Hesai Technology, a Shanghai-based lidar manufacturer blacklisted by the U.S. Defense Department as a Chinese military entity, is expanding its commercial reach in America through a partnership with Nvidia, raising alarms among security researchers about potential cyberthreats to critical infrastructure.
TechEchelon Staff · 4 DAYS AGO
Canada's Communications Security Establishment revealed in its annual report that it conducted three offensive cyber operations in 2025, disrupting fentanyl brokers, an overseas extremist group, and a ransomware-as-a-service gang.
TechEchelon Staff · 4 DAYS AGO
Cloud security firm Sysdig has documented what researchers call the first ransomware operation conducted entirely by an autonomous AI agent, dubbed JadePuffer, which carried out every stage of an intrusion — from exploitation to encryption — without apparent human direction at each step.
Marc Sabatini · 7 DAYS AGO
The FTC has settled with Amazon for $2.25 million over allegations the company blocked identity theft victims from accessing fraud transaction records they were legally owed under the Fair Credit Reporting Act.
Jay Goldberg · 10 DAYS AGO
CrowdStrike and Palo Alto Networks each recorded their best quarter ever between April and June 2026, with stock gains of 95% and 113% respectively, as the rise of Mythos-class AI models accelerated enterprise cybersecurity spending.
Jay Goldberg · 10 DAYS AGO
A ransomware group called World Leaks has posted stolen Tata Electronics files on the dark web, exposing supplier maps, component details, and drop-test photos tied to Apple's unreleased iPhone 18 Pro models.
TechEchelon Staff · 11 DAYS AGO
Mozilla's Zero Day Investigative Network demonstrated a proof-of-concept attack in which a GitHub repository containing no malicious code can manipulate AI coding agents like Claude Code into executing a remote shell by exploiting automated error-recovery behavior.
Marc Sabatini · 13 DAYS AGO
Imposter scams topped FTC fraud reports for the fifth year running in 2025, with roughly 1 million reports filed and $3.5 billion in losses — part of a record $15.9 billion in total fraud reported to the agency.
Sara Montes de Oca · 15 DAYS AGO
Polish authorities, with FBI and HSI support, arrested four members of a cybercrime ring accused of SIM-swapping attacks that hijacked cryptocurrency exchange accounts and laundered an estimated $5 million or more through accounts across multiple countries.
TechEchelon Staff · 15 DAYS AGO
Microsoft, Europol, and international partners disrupted the Amadey and StealC malware operations under Operation Endgame, seizing 326 servers, 142 domains, and identifying over $47 million in linked cryptocurrency.
Sara Montes de Oca · 17 DAYS AGO
CISA has confirmed active exploitation of CVE-2026-20253, a critical Splunk Enterprise flaw that allows unauthenticated remote attackers to manipulate files, and ordered federal civilian agencies to patch by Sunday under Binding Operational Directive 26-04.
Sara Montes de Oca · 21 DAYS AGO
Market intelligence platform Klue has confirmed attackers stole OAuth tokens connected to customer Salesforce environments on June 12, as the newly emerged Icarus extortion group publicly claims responsibility and the list of affected organizations continues to grow.
Sara Montes de Oca · 21 DAYS AGO
Human Rights Watch obtained Bulgarian export licensing records showing surveillance firm Circles sold phone-interception and geolocation tools to ten governments — including the UAE, Bahrain, and Azerbaijan — between 2018 and 2023, raising fresh questions about the EU's export control enforcement.
Sara Montes de Oca · 21 DAYS AGO
CISA has ordered federal agencies to patch CVE-2026-48907, a maximum-severity flaw in the Joomla Content Editor plugin, by Friday after confirmed active exploitation. The vulnerability allows unauthenticated attackers to execute PHP code with no prior privileges required.
Sara Montes de Oca · 24 DAYS AGO
Google filed suit against an alleged Chinese cybercrime network called Outsider Enterprise, which the company says used AI to send 2.5 million scam texts and build 1 million fraudulent domains, defrauding hundreds of thousands of victims.
Jay Goldberg · 29 DAYS AGO
Written for readers who already know the basics — markets, AI, and the policy decisions that shape both.