South Lyon Schools
public
–
2 min read
South Lyon Schools faced a cyber attack that disrupted its computer systems, forcing the suspension of classes for at least…
Orleans Parish Sheriff's Office (OPSO)
public
–
3 min read
The Orleans Parish Sheriff's Office (OPSO) suffered a ransomware attack on September 4, 2024, orchestrated by the Qilin…
Facebook (Meta)
public
–
3 min read
The FileFix attack impersonated a Facebook security alert, tricking users into executing malicious commands disguised as a PDF file appeal…
Socket (and affected downstream npm package maintainers/developers)
public
–
3 min read
A sophisticated supply-chain attack targeted the npm ecosystem via a malicious update to the widely used @ctrl/tinycolor package (TinyColor)…
Department of Homeland Security (DHS)
public
–
2 min read
A misconfiguration in the **Homeland Security Information Network-Intel (HSIN-Intel)**—an internal DHS platform used to share **sensitive but unclassified intelligence*…
Salesloft
public
–
4 min read
The **Salesloft breach (August 8–18, 2025)** was a sophisticated **supply chain attack** targeting its **GitHub account and OAuth tokens*…
Activate Learning (Bracknell and Wokingham College)
public
–
3 min read
A cyberattack on Intradev, the external software supplier for Access Personal Checking Services (APCS), led to unauthorized access and exfiltration…
Dior (Shanghai)
public
–
3 min read
Dior’s Shanghai branch was penalized for violating China’s cybersecurity and data protection laws by transferring customer data to…
SK Telecom
public
–
3 min read
SK Telecom, South Korea’s largest telecom operator, faced a high-profile cyber incident in April where an international hacking group,…
Medicare Compare USA
public
–
2 min read
In November 2024, Medicare Compare USA suffered a major data breach after detecting unauthorized access to internal email accounts between…
NPM (Node Package Manager)
public
–
4 min read
The NPM ecosystem faced a sophisticated supply chain attack targeting the widely used @ctrl/tinycolor package (2M+ weekly downloads) and…
CrowdStrike
public
–
3 min read
A supply chain attack (dubbed *Shai-Halud*) compromised multiple npm packages maintained under CrowdStrike’s official publisher account. Threat actors injected…