Threats, breaches, defenders. Reported by people who can actually read the post-mortems.
Japanese telecom giant KDDI has revealed that a zero-day exploit targeting a shared email platform exposed the email addresses of 12.2 million people and the passwords of more than 7.6 million, affecting customers across five internet service providers.
TechEchelon Staff · 118 DAYS AGO
Hesai Technology, a Shanghai-based lidar manufacturer blacklisted by the U.S. Defense Department as a Chinese military entity, is expanding its commercial reach in America through a partnership with Nvidia, raising alarms among security researchers about potential cyberthreats to critical infrastructure.
TechEchelon Staff · 119 DAYS AGO
Canada's Communications Security Establishment revealed in its annual report that it conducted three offensive cyber operations in 2025, disrupting fentanyl brokers, an overseas extremist group, and a ransomware-as-a-service gang.
TechEchelon Staff · 119 DAYS AGO
Cloud security firm Sysdig has documented what researchers call the first ransomware operation conducted entirely by an autonomous AI agent, dubbed JadePuffer, which carried out every stage of an intrusion — from exploitation to encryption — without apparent human direction at each step.
Marc Sabatini · 122 DAYS AGO
The FTC has settled with Amazon for $2.25 million over allegations the company blocked identity theft victims from accessing fraud transaction records they were legally owed under the Fair Credit Reporting Act.
Jay Goldberg · 125 DAYS AGO
CrowdStrike and Palo Alto Networks each recorded their best quarter ever between April and June 2026, with stock gains of 95% and 113% respectively, as the rise of Mythos-class AI models accelerated enterprise cybersecurity spending.
Jay Goldberg · 126 DAYS AGO
A ransomware group called World Leaks has posted stolen Tata Electronics files on the dark web, exposing supplier maps, component details, and drop-test photos tied to Apple's unreleased iPhone 18 Pro models.
TechEchelon Staff · 126 DAYS AGO
Mozilla's Zero Day Investigative Network demonstrated a proof-of-concept attack in which a GitHub repository containing no malicious code can manipulate AI coding agents like Claude Code into executing a remote shell by exploiting automated error-recovery behavior.
Marc Sabatini · 128 DAYS AGO
Imposter scams topped FTC fraud reports for the fifth year running in 2025, with roughly 1 million reports filed and $3.5 billion in losses — part of a record $15.9 billion in total fraud reported to the agency.
Sara Montes de Oca · 130 DAYS AGO
Polish authorities, with FBI and HSI support, arrested four members of a cybercrime ring accused of SIM-swapping attacks that hijacked cryptocurrency exchange accounts and laundered an estimated $5 million or more through accounts across multiple countries.
TechEchelon Staff · 131 DAYS AGO
Microsoft, Europol, and international partners disrupted the Amadey and StealC malware operations under Operation Endgame, seizing 326 servers, 142 domains, and identifying over $47 million in linked cryptocurrency.
Sara Montes de Oca · 132 DAYS AGO
CISA has confirmed active exploitation of CVE-2026-20253, a critical Splunk Enterprise flaw that allows unauthenticated remote attackers to manipulate files, and ordered federal civilian agencies to patch by Sunday under Binding Operational Directive 26-04.
Sara Montes de Oca · 136 DAYS AGO
Market intelligence platform Klue has confirmed attackers stole OAuth tokens connected to customer Salesforce environments on June 12, as the newly emerged Icarus extortion group publicly claims responsibility and the list of affected organizations continues to grow.
Sara Montes de Oca · 137 DAYS AGO
Human Rights Watch obtained Bulgarian export licensing records showing surveillance firm Circles sold phone-interception and geolocation tools to ten governments — including the UAE, Bahrain, and Azerbaijan — between 2018 and 2023, raising fresh questions about the EU's export control enforcement.
Sara Montes de Oca · 137 DAYS AGO
CISA has ordered federal agencies to patch CVE-2026-48907, a maximum-severity flaw in the Joomla Content Editor plugin, by Friday after confirmed active exploitation. The vulnerability allows unauthenticated attackers to execute PHP code with no prior privileges required.
Sara Montes de Oca · 139 DAYS AGO
Google filed suit against an alleged Chinese cybercrime network called Outsider Enterprise, which the company says used AI to send 2.5 million scam texts and build 1 million fraudulent domains, defrauding hundreds of thousands of victims.
Jay Goldberg · 144 DAYS AGO
Oracle has issued emergency mitigations for a critical PeopleSoft zero-day, CVE-2026-35273, with a CVSS score of 9.8, after the ShinyHunters extortion gang exploited the flaw to steal data from more than 100 organizations across over 300 breached instances.
Sara Montes de Oca · 145 DAYS AGO
CISA has ordered federal agencies to patch a critical Check Point VPN authentication-bypass flaw, CVE-2026-50751, by June 11 after Qilin ransomware affiliates exploited it as a zero-day against dozens of organizations worldwide.
Sara Montes de Oca · 147 DAYS AGO
Written for readers who already know the basics — markets, AI, and the policy decisions that shape both.