Kintetsu World Express
public
–
2 min read
Kintetsu World Express (KWE), a leading global freight forwarding company based in Japan, suffered a ransomware attack last week that…
Toll Group
public
–
2 min read
In 2020, global logistics provider Toll Group was targeted by the Nefilim ransomware operation, resulting in a complete network breach.…
Onset Financial and Inc.: Onset Financial Data Breach Lawsuit Investigation
public
–
2 min read
Onset Financial Data Breach Exposes Sensitive Consumer Information
On May 2, 2025, Onset Financial, Inc., a Utah-based financial services company…
Administración Portuaria Integral de Baja California Sur (API BCS)
public
–
2 min read
In May 2025, the Integral Port Administration of Baja California Sur (API-BCS) suffered a cyberattack targeting its digital information systems.…
Marks & Spencer (M&S)
public
–
3 min read
Marks & Spencer (M&S), a major British retailer, suffered a **cyberattack attributed to the ScatteredSpider hacking group**, resulting…
Ruby on Rails
public
–
2 min read
On April 26, 2025, security experts disclosed a critical flaw in Ruby on Rails’ CSRF protection mechanism that effectively nullifies…
Node.js
public
–
2 min read
Security researchers discovered a critical TOCTOU vulnerability in Node.js’s CI/CD infrastructure that allowed attackers to execute malicious…
MOScholars: Missouri Lawmakers Clash Over Massive School Voucher Data Breach
public
–
2 min read
Missouri MOScholars Program Faces Suspension Calls After Year-Long Data Exposure
Missouri Democratic legislators demanded an immediate halt to new enrollments…
Perforce: Unsecured Perforce Servers Expose Sensitive Data From Major Orgs
public
–
4 min read
Thousands of Perforce Servers Exposed in Widespread Misconfiguration Crisis
In spring 2025, Australian security researcher Morgan Robertson uncovered a critical…
Telecommunications Providers and U.S. Government Surveillance System: FBI labels suspected China hack of law enforcement data 'a major cyber incident'
public
–
3 min read
FBI Declares Chinese Cyber Intrusion a "Major Incident" Amid National Security Concerns
The FBI has classified a suspected…
Lion Street: Mark Leyden & Associates Data Breach Lawsuit Investigation
public
–
2 min read
Mark Leyden & Associates Data Breach Exposes Sensitive Financial Client Information
Mark Leyden & Associates, a wealth management and financial…
Sophos, Fortinet, Ivanti, Palo Alto Networks and Pulse Secure: Attackers Use SEO Poisoning and Signed Trojans to Steal VPN Credentials
public
–
3 min read
Storm-2561 Credential Theft Campaign Exploits SEO to Target Enterprise VPN Users
Since May 2025, the financially motivated threat actor Storm-2561…