Threats, breaches, defenders. Reported by people who can actually read the post-mortems.
A ransomware group called World Leaks has posted stolen Tata Electronics files on the dark web, exposing supplier maps, component details, and drop-test photos tied to Apple's unreleased iPhone 18 Pro models.
TechEchelon Staff · 43 DAYS AGO
Mozilla's Zero Day Investigative Network demonstrated a proof-of-concept attack in which a GitHub repository containing no malicious code can manipulate AI coding agents like Claude Code into executing a remote shell by exploiting automated error-recovery behavior.
Marc Sabatini · 45 DAYS AGO
Imposter scams topped FTC fraud reports for the fifth year running in 2025, with roughly 1 million reports filed and $3.5 billion in losses — part of a record $15.9 billion in total fraud reported to the agency.
Sara Montes de Oca · 47 DAYS AGO
Polish authorities, with FBI and HSI support, arrested four members of a cybercrime ring accused of SIM-swapping attacks that hijacked cryptocurrency exchange accounts and laundered an estimated $5 million or more through accounts across multiple countries.
TechEchelon Staff · 48 DAYS AGO
Microsoft, Europol, and international partners disrupted the Amadey and StealC malware operations under Operation Endgame, seizing 326 servers, 142 domains, and identifying over $47 million in linked cryptocurrency.
Sara Montes de Oca · 49 DAYS AGO
CISA has confirmed active exploitation of CVE-2026-20253, a critical Splunk Enterprise flaw that allows unauthenticated remote attackers to manipulate files, and ordered federal civilian agencies to patch by Sunday under Binding Operational Directive 26-04.
Sara Montes de Oca · 53 DAYS AGO
Market intelligence platform Klue has confirmed attackers stole OAuth tokens connected to customer Salesforce environments on June 12, as the newly emerged Icarus extortion group publicly claims responsibility and the list of affected organizations continues to grow.
Sara Montes de Oca · 54 DAYS AGO
Human Rights Watch obtained Bulgarian export licensing records showing surveillance firm Circles sold phone-interception and geolocation tools to ten governments — including the UAE, Bahrain, and Azerbaijan — between 2018 and 2023, raising fresh questions about the EU's export control enforcement.
Sara Montes de Oca · 54 DAYS AGO
CISA has ordered federal agencies to patch CVE-2026-48907, a maximum-severity flaw in the Joomla Content Editor plugin, by Friday after confirmed active exploitation. The vulnerability allows unauthenticated attackers to execute PHP code with no prior privileges required.
Sara Montes de Oca · 56 DAYS AGO
Google filed suit against an alleged Chinese cybercrime network called Outsider Enterprise, which the company says used AI to send 2.5 million scam texts and build 1 million fraudulent domains, defrauding hundreds of thousands of victims.
Jay Goldberg · 61 DAYS AGO
Oracle has issued emergency mitigations for a critical PeopleSoft zero-day, CVE-2026-35273, with a CVSS score of 9.8, after the ShinyHunters extortion gang exploited the flaw to steal data from more than 100 organizations across over 300 breached instances.
Sara Montes de Oca · 62 DAYS AGO
CISA has ordered federal agencies to patch a critical Check Point VPN authentication-bypass flaw, CVE-2026-50751, by June 11 after Qilin ransomware affiliates exploited it as a zero-day against dozens of organizations worldwide.
Sara Montes de Oca · 64 DAYS AGO
The Trump administration is weighing the nomination of Palantir CTO Shyam Sankar to lead CISA, according to two sources, as the federal cybersecurity agency has operated without a Senate-confirmed director since January 2025.
Jay Goldberg · 69 DAYS AGO
Palo Alto Networks reported fiscal Q3 2026 revenue of $3 billion, up 31% year over year, as the rise of advanced AI models like Anthropic's Claude Mythos intensified enterprise cybersecurity demand rather than diminishing it.
Sara Montes de Oca · 71 DAYS AGO
Sophos researchers uncovered a ransomware toolkit built with AI tools including Claude Opus agents, capable of automating Active Directory discovery and evading EDR products from Sophos, CrowdStrike, and Microsoft after iterative AI-assisted testing.
Sara Montes de Oca · 71 DAYS AGO
GoDaddy security researchers have found malware on approximately 1,980 WordPress websites as part of a campaign that hides command-and-control data inside Steam Community profile comments using invisible Unicode characters.
Sara Montes de Oca · 72 DAYS AGO
Palo Alto Networks has raised the severity of CVE-2026-0257, a GlobalProtect VPN authentication bypass flaw, to High after Rapid7 observed active exploitation across multiple customers dating back to May 17. CISA has ordered federal agencies to apply mitigations by June 1, 2026.
Jay Goldberg · 73 DAYS AGO
A 19-year-old Linux kernel vulnerability called CIFSwitch allows unprivileged local attackers to forge CIFS authentication requests and gain root access, affecting Linux Mint, CentOS Stream 9, Rocky Linux 9, Kali Linux, and other major distributions.
Jay Goldberg · 74 DAYS AGO
Written for readers who already know the basics — markets, AI, and the policy decisions that shape both.