Threats, breaches, defenders. Reported by people who can actually read the post-mortems.
A Brazilian banking malware operation called KREMLIN has been silently force-installing malicious extensions on Chrome and Edge since mid-2025, bypassing Chromium's cryptographic integrity checks to steal credentials, session tokens, and sensitive user data, according to Elastic Security Labs.
Marc Sabatini · 3 DAYS AGO
CenterPoint Energy has confirmed that a threat actor stole customer personal information by exploiting an unprotected public API, with the attacker claiming to have taken 7.49 million records including partial Social Security numbers.
Sara Montes de Oca · 4 DAYS AGO
Japan's Digital Agency has disclosed a breach in which an attacker exploited a VPN vulnerability to access a government system, potentially exposing 246,000 rows of personnel records including names, email addresses, and telephone numbers.
Sara Montes de Oca · 5 DAYS AGO
Revolut confirmed it exposed sensitive customer data — including passport copies and transaction histories — after fraudulent requests were submitted using a legitimate government agency's email domain. The fintech said a "limited" number of customers were affected and that company systems and funds remain unaffected.
Sara Montes de Oca · 7 DAYS AGO
A security update shipped as part of Microsoft's September 2026 Patch Tuesday is breaking copy-and-paste and formula dragging in Excel across multiple Office versions, with users reporting that removing the patch restores functionality.
Jay Goldberg · 9 DAYS AGO
Amazon has appointed Kevin Mandia, founder and former CEO of Mandiant, to its board of directors. Mandia received 4,086 shares valued at roughly $1 million as part of the appointment.
Sara Montes de Oca · 10 DAYS AGO
Grindr has agreed to pay £26 million ($35.2 million) to settle a UK lawsuit alleging it shared users' HIV status with advertisers, with payments due in two installments by March 2027.
TechEchelon Staff · 10 DAYS AGO
A single day of cybersecurity disclosures brought a Metabase breach affecting 1,079,819 Mathspace users, an unpatched Magento zero-day deploying a Linux backdoor, and a phishing-as-a-service platform that bypassed MFA at 258 organizations.
Sara Montes de Oca · 12 DAYS AGO
A late-August decree signed by Vladimir Putin allows the Russian government to temporarily seize critical infrastructure facilities, including data centers, if operators fail to adequately protect them from Ukraine's expanding drone campaign.
Sara Montes de Oca · 15 DAYS AGO
Zscaler reported fiscal Q4 revenue of $898 million, beating estimates by $21 million, as AI-driven cyber threats fueled demand for its Zero Trust platform. The company issued above-consensus guidance for the full fiscal year.
Sara Montes de Oca · 15 DAYS AGO
Palo Alto Networks topped fiscal Q4 estimates with $3.41 billion in revenue, as CEO Nikesh Arora warned that roughly $1 trillion in aging cybersecurity infrastructure is unprepared for AI-driven threats and announced the acquisition of AI startup Console.
Marc Sabatini · 17 DAYS AGO
A critical authentication bypass flaw in JFrog Artifactory, CVE-2026-82329, is being actively exploited following public disclosure, allowing attackers to gain admin-level access on unpatched systems.
Jay Goldberg · 18 DAYS AGO
A price-manipulation attack on Tectonic, Cronos' largest lending protocol, allowed an attacker to borrow $74 million in assets by inflating the TONIC token price 100-fold. The attacker extracted roughly $6 million in Ethereum before Cronos halted and restored its blockchain.
Marc Sabatini · 19 DAYS AGO
Okta reported fiscal Q2 adjusted EPS of $1.05 and revenue of $805 million, both topping Wall Street estimates, as demand for identity security tools accelerated alongside the growth of agentic AI. Shares rose 20% in after-hours trading.
TechEchelon Staff · 24 DAYS AGO
The Justice Department seized two hacking platforms tied to Chinese state-linked firm Nanjing Xinjiuwei Network Technology Co., disrupting an operation that targeted U.S. agencies including NASA, the Federal Reserve, and the Senate.
TechEchelon Staff · 24 DAYS AGO
Boston Scientific confirmed a cyberattack detected on August 25 disrupted its IT systems and halted order processing globally. The medical device maker, which employs 59,000 people across 127 countries, has disclosed the incident to the SEC and brought in outside cybersecurity experts.
TechEchelon Staff · 24 DAYS AGO
Democratic lawmakers have asked the Government Accountability Office to assess how nearly one-third of CISA's workforce being eliminated has affected the agency's ability to protect critical infrastructure, amid an escalating threat environment and a proposed FY2027 budget that would cut the agency further.
TechEchelon Staff · 29 DAYS AGO
Written for readers who already know the basics — markets, AI, and the policy decisions that shape both.