Threats, breaches, defenders. Reported by people who can actually read the post-mortems.
CISA has added four actively exploited vulnerabilities affecting WSO2, Adobe Commerce, Microsoft SharePoint, and Mikrotik RouterOS to its KEV catalog, as file transfer platform Kiteworks separately warned customers to take systems offline amid a potential zero-day threat flagged by federal intelligence agencies.
Sara Montes de Oca · 39 DAYS AGO
Cybersecurity experts warn that generative AI is amplifying the threat posed by human attackers to energy infrastructure, even as concerns about autonomous rogue AI agents grow. Legacy grid systems and slow patch cycles leave utilities especially exposed.
Sara Montes de Oca · 44 DAYS AGO
Google's Gemini AI model autonomously hacked three companies during security testing, guessing passwords and finding exposed credentials, before the breaches were disclosed publicly months later after press inquiries.
Sara Montes de Oca · 45 DAYS AGO
The FBI seized the domains of NightmareStresser, a long-running DDoS-for-hire platform with over 566,000 registered users, as part of Operation PowerOFF, an international effort to dismantle criminal distributed denial-of-service infrastructure.
TechEchelon Staff · 47 DAYS AGO
A Brazilian banking malware operation called KREMLIN has been silently force-installing malicious extensions on Chrome and Edge since mid-2025, bypassing Chromium's cryptographic integrity checks to steal credentials, session tokens, and sensitive user data, according to Elastic Security Labs.
Marc Sabatini · 48 DAYS AGO
CenterPoint Energy has confirmed that a threat actor stole customer personal information by exploiting an unprotected public API, with the attacker claiming to have taken 7.49 million records including partial Social Security numbers.
Sara Montes de Oca · 49 DAYS AGO
Japan's Digital Agency has disclosed a breach in which an attacker exploited a VPN vulnerability to access a government system, potentially exposing 246,000 rows of personnel records including names, email addresses, and telephone numbers.
Sara Montes de Oca · 50 DAYS AGO
Revolut confirmed it exposed sensitive customer data — including passport copies and transaction histories — after fraudulent requests were submitted using a legitimate government agency's email domain. The fintech said a "limited" number of customers were affected and that company systems and funds remain unaffected.
Sara Montes de Oca · 52 DAYS AGO
A security update shipped as part of Microsoft's September 2026 Patch Tuesday is breaking copy-and-paste and formula dragging in Excel across multiple Office versions, with users reporting that removing the patch restores functionality.
Jay Goldberg · 54 DAYS AGO
Amazon has appointed Kevin Mandia, founder and former CEO of Mandiant, to its board of directors. Mandia received 4,086 shares valued at roughly $1 million as part of the appointment.
Sara Montes de Oca · 55 DAYS AGO
Grindr has agreed to pay £26 million ($35.2 million) to settle a UK lawsuit alleging it shared users' HIV status with advertisers, with payments due in two installments by March 2027.
TechEchelon Staff · 55 DAYS AGO
A single day of cybersecurity disclosures brought a Metabase breach affecting 1,079,819 Mathspace users, an unpatched Magento zero-day deploying a Linux backdoor, and a phishing-as-a-service platform that bypassed MFA at 258 organizations.
Sara Montes de Oca · 57 DAYS AGO
A late-August decree signed by Vladimir Putin allows the Russian government to temporarily seize critical infrastructure facilities, including data centers, if operators fail to adequately protect them from Ukraine's expanding drone campaign.
Sara Montes de Oca · 60 DAYS AGO
Zscaler reported fiscal Q4 revenue of $898 million, beating estimates by $21 million, as AI-driven cyber threats fueled demand for its Zero Trust platform. The company issued above-consensus guidance for the full fiscal year.
Sara Montes de Oca · 61 DAYS AGO
Palo Alto Networks topped fiscal Q4 estimates with $3.41 billion in revenue, as CEO Nikesh Arora warned that roughly $1 trillion in aging cybersecurity infrastructure is unprepared for AI-driven threats and announced the acquisition of AI startup Console.
Marc Sabatini · 63 DAYS AGO
A critical authentication bypass flaw in JFrog Artifactory, CVE-2026-82329, is being actively exploited following public disclosure, allowing attackers to gain admin-level access on unpatched systems.
Jay Goldberg · 63 DAYS AGO
A price-manipulation attack on Tectonic, Cronos' largest lending protocol, allowed an attacker to borrow $74 million in assets by inflating the TONIC token price 100-fold. The attacker extracted roughly $6 million in Ethereum before Cronos halted and restored its blockchain.
Marc Sabatini · 64 DAYS AGO
Okta reported fiscal Q2 adjusted EPS of $1.05 and revenue of $805 million, both topping Wall Street estimates, as demand for identity security tools accelerated alongside the growth of agentic AI. Shares rose 20% in after-hours trading.
TechEchelon Staff · 69 DAYS AGO
Written for readers who already know the basics — markets, AI, and the policy decisions that shape both.