Threats, breaches, defenders. Reported by people who can actually read the post-mortems.
Ukrainian national Artem Stryzhak was sentenced to 70 months in prison for his role as a ransomware affiliate with both the Nefilim and Hive groups, which prosecutors say caused more than $100 million in losses targeting hospitals and businesses across multiple countries.
TechEchelon Staff · 7 DAYS AGO
The University of Copenhagen confirmed hackers accessed a test environment containing personal data for 525,000 people, including national identity numbers, with an additional 20,000 staff and student PIN codes also exposed.
Jay Goldberg · 8 DAYS AGO
Fifty-nine percent of U.S. employees say they are not fully prepared to spot modern payment scams, and only 23 percent say their company uses dedicated fraud-monitoring tools, according to research commissioned by payment-verification firm Eftsure.
Jay Goldberg · 8 DAYS AGO
A UEFI bootkit named BlackX, attributed with medium confidence to Chinese state-sponsored group APT41, exploited the Baton Drop vulnerability to bypass Secure Boot on fully patched Windows systems in a 2026 espionage campaign targeting Central Asian diplomatic agencies.
Marc Sabatini · 9 DAYS AGO
Quest Diagnostics confirmed a data breach affecting patient records after a threat actor gained unauthorized access to its Quanum LSM laboratory management platform, the company disclosed in an SEC filing on October 23.
TechEchelon Staff · 11 DAYS AGO
Capcom confirmed unauthorized access to its CAPCOM ID platform exposed data from more than 11.7 million customer accounts, including email addresses, login metadata, and for a small subset, additional personal details.
Jay Goldberg · 12 DAYS AGO
The PHP security team released emergency patches for two critical unauthenticated remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, affecting all PHP installations that serve web requests, with early exploitation already observed in the wild.
TechEchelon Staff · 13 DAYS AGO
A Nigerian national was sentenced to eight years in prison for spearphishing attacks on U.S. tax preparation businesses between 2019 and 2021, stealing more than $3 million through fraudulent tax refunds and SBA loan applications.
Sara Montes de Oca · 14 DAYS AGO
A proxyjacking campaign has silently hijacked at least 143 D-Link, Ubiquiti, and other edge devices across 34 countries, enrolling victims' internet connections into a commercial residential proxy network to generate unauthorized payouts, according to GreyNoise.
Sara Montes de Oca · 19 DAYS AGO
Federal prosecutors say OpenAI engineer Abdulrahman Alfozan had booked one-way tickets to Saudi Arabia for himself and family members before his Oct. 9 arrest on charges of secretly installing a recording device in an executive conference room.
Marc Sabatini · 20 DAYS AGO
Hackers forced refrigeration systems at hundreds of French supermarkets — including Carrefour, Intermarché, and Coopérative U — to overheat to 122°F overnight, spoiling food and drawing condemnation from EU officials over the "weaponization of food."
Marc Sabatini · 21 DAYS AGO
Quantum computing firm IonQ will acquire cybersecurity company Elisity in an all-stock deal worth up to $1.3 billion, including up to $150 million in earnouts, as it expands its defenses against AI-driven and quantum-enabled cyber threats.
Sara Montes de Oca · 22 DAYS AGO
IDC Frontier, a SoftBank subsidiary, disclosed a ransomware attack on its IDCF Cloud service that disrupted 495 companies and government clients in eastern Japan, with the threat actor claiming to have encrypted 3.6 petabytes of data.
Jay Goldberg · 26 DAYS AGO
South Korean President Lee Jae Myung called for a formal investigation Tuesday after stating that AI models appear to have been used in cyberattacks against several major commercial banks, including Hana Bank and KB Kookmin Bank.
TechEchelon Staff · 28 DAYS AGO
Dell has patched six critical-severity vulnerabilities in its Container Storage Modules, including two maximum-severity flaws that allow unauthenticated remote attackers to gain full administrative control over enterprise storage infrastructure connected to Kubernetes environments.
Sara Montes de Oca · 32 DAYS AGO
An international law enforcement operation dubbed "Operation KillSwitch" has dismantled the KillSec ransomware gang, seizing servers and a dark web leak site, arresting three suspects, and identifying a 16-year-old as the group's alleged main operator.
TechEchelon Staff · 33 DAYS AGO
The ShinyHunters extortion gang is bypassing web application firewall rules meant to block exploitation of Oracle PeopleSoft CVE-2026-35273 by using a URL-encoding trick, resuming attacks against organizations across healthcare, government, education, and other sectors.
Marc Sabatini · 38 DAYS AGO
Written for readers who already know the basics — markets, AI, and the policy decisions that shape both.