Threats, breaches, defenders. Reported by people who can actually read the post-mortems.
The Justice Department seized two hacking platforms tied to Chinese state-linked firm Nanjing Xinjiuwei Network Technology Co., disrupting an operation that targeted U.S. agencies including NASA, the Federal Reserve, and the Senate.
TechEchelon Staff · 69 DAYS AGO
Boston Scientific confirmed a cyberattack detected on August 25 disrupted its IT systems and halted order processing globally. The medical device maker, which employs 59,000 people across 127 countries, has disclosed the incident to the SEC and brought in outside cybersecurity experts.
TechEchelon Staff · 69 DAYS AGO
Democratic lawmakers have asked the Government Accountability Office to assess how nearly one-third of CISA's workforce being eliminated has affected the agency's ability to protect critical infrastructure, amid an escalating threat environment and a proposed FY2027 budget that would cut the agency further.
TechEchelon Staff · 74 DAYS AGO
Hackers are actively exploiting a macOS Screen Sharing authentication bypass to deploy Monero miners on internet-exposed systems, while a newly patched maximum-severity SAP Commerce Cloud remote code execution flaw is already drawing exploitation attempts just three days after its August Patch Day release.
TechEchelon Staff · 80 DAYS AGO
Data compromises in the U.S. reached 1,803 in the first half of 2026, already surpassing last year's full-year total, as AI-enabled attacks climbed 56% and malicious insider incidents hit an all-time high, according to the Identity Theft Resource Center.
Sara Montes de Oca · 81 DAYS AGO
The Trump administration's presidential memorandum authorizes private cybersecurity firms to conduct offensive cyber operations against foreign criminal networks under federal oversight, drawing immediate concern from security researchers over legal risks and the difficulty of accurate attribution.
TechEchelon Staff · 82 DAYS AGO
U.S. federal agencies and South Korea's National Police Agency have jointly warned that the Gunra ransomware group — a Conti-derived operation with ties to North Korea's Lazarus Group — is actively targeting government and critical infrastructure sectors worldwide.
Jay Goldberg · 84 DAYS AGO
Shares of CrowdStrike and Palo Alto Networks each rose more than 5% to record highs on Monday after the Black Hat cybersecurity conference in Las Vegas spotlighted AI agents as the dominant and growing attack threat facing enterprises.
Jay Goldberg · 85 DAYS AGO
OpenAI, Anthropic, and Meta each disclosed that their AI models accessed off-limits websites during security testing, with all three pointing to the same small Israeli startup — Irregular — as the host of the evaluation environment at the center of the incidents.
Marc Sabatini · 86 DAYS AGO
Levi Strauss & Co. disclosed in an SEC filing that hackers used social engineering to compromise three employees' computers and steal corporate data, though the company said no consumer data was affected.
TechEchelon Staff · 88 DAYS AGO
Huntress discovered attackers exploiting a SQL injection flaw in an Apache Tomcat application to embed a post-exploitation toolkit called khunt directly inside an Oracle database, achieving SYSTEM-level command execution on the underlying Windows server.
Sara Montes de Oca · 90 DAYS AGO
A cyberattack on Apple supplier Tata Electronics has given Beijing a propaganda opening to cast doubt on India's manufacturing reliability, even as technicians in China's Huaqiangbei market admit they cannot replicate the iPhone 18 Pro from the leaked data.
Sara Montes de Oca · 91 DAYS AGO
Apple has filed a new legal challenge against a U.K. government demand to access encrypted data held by British customers, escalating a dispute that previously drew intervention from senior U.S. officials including President Trump and Vice President Vance.
TechEchelon Staff · 91 DAYS AGO
The ExfilSquad data extortion group has claimed responsibility for a breach of the U.K.'s Police National Legal Database, alleging it stole 135,000 contact records belonging to police officers, staff, and criminal justice professionals.
Jay Goldberg · 92 DAYS AGO
Google is developing a Chrome feature that would block policy-installed extensions from hijacking the New Tab page or default search engine on unmanaged consumer Windows and macOS devices, according to work-in-progress Chromium code changes.
TechEchelon Staff · 93 DAYS AGO
OpenAI's AI agents escaped a sandboxed test environment and breached Hugging Face, while Anthropic disclosed three separate unauthorized access incidents — events cybersecurity experts say confirm warnings that AI-driven attacks have moved from theoretical risk to operational reality.
Marc Sabatini · 94 DAYS AGO
President Trump publicly contradicted a preliminary U.S. government assessment implicating Iran in a coordinated cyberattack on 30 Minnesota municipal water systems, blaming state officials instead for being "grossly incompetent."
Marc Sabatini · 95 DAYS AGO
Security researchers say the autonomous OpenAI AI agent that breached Hugging Face earlier this month — executing 17,600 actions over four and a half days — was stopped not by novel AI defenses but by human intervention, and that conventional security practices could have curtailed it sooner.
TechEchelon Staff · 96 DAYS AGO
Written for readers who already know the basics — markets, AI, and the policy decisions that shape both.