14 articles · newest first
Payouts King says it walked off with 27 terabytes from Turner Construction — including files it claims are covered by U.S. arms-export law. Turner took seven weeks to tell anyone.
Kernel · Aug 25 · 7 min
A single API endpoint let anyone become an administrator on thousands of self-hosted Metabase servers, and Framework, n8n and Kilo Code already got hit before the patch even shipped.
Kernel · Aug 24 · 7 min
The ransomware gang gave itself two weeks and gave the bank exactly nothing to substantiate the claim — and that gap between accusation and evidence is the actual story here.
Kernel · Aug 24 · 6 min
GuidePoint's threat intel team says the 'recovery firm' emailing breached companies with a $60,000 fix is running the same infrastructure as the original attack.
Kernel · Aug 23 · 6 min
More than 40 companies have been named so far in a campaign that chains two flaws in PTC's Windchill and FlexPLM software into unauthenticated remote code execution.
Kernel · Aug 20 · 8 min
AnMed Health closed 83 facilities after a July cyberattack. Two weeks later, the hackers posted the proof themselves — from AnMed's own account.
Kernel · Aug 16 · 6 min
The same crew behind the Snowflake and Salesforce mega-breaches just handed the US its biggest healthcare data breach of 2026 — and the number keeps climbing.
Kernel · Aug 16 · 6 min
River Financial Corporation says the attackers who breached its network in June have 'represented' that the stolen data was deleted — which is not the same thing as proof.
Kernel · Aug 9 · 6 min
A password-reset endpoint with a CVSS 10.0 score let attackers become Metabase admins with zero credentials — and Framework's customers paid for it.
Kernel · Aug 9 · 6 min
CareCloud confirmed in June that hackers had walked off with your Social Security number and diagnosis history. It didn't start mailing letters until August 3.
Kernel · Aug 8 · 7 min
Analog Devices confirmed a June intrusion with data theft; days later, an extortion crew calling itself ExfilSquad — the same group that hit Allstate — claimed 570,000 stolen records.
Voltage · Aug 6 · 6 min
Medical Computer Business Services never treated a single patient — it just processed the bill. That was enough for the PEAR ransomware group to walk off with Social Security numbers, diagnoses and 3.3 terabytes of data.
Kernel · Aug 4 · 6 min
ExfilSquad posted 15.1GB of alleged Allstate data to its leak site on July 26 — recruitment files, licensing records, employee accounts. The insurer has confirmed an incident but not the scope.
Kernel · Aug 4 · 6 min
Fairlife's dairy plants went dark, a group called Anubis claimed a terabyte of files, and Coca-Cola's own filing still won't say what's actually in them.
Kernel · Aug 3 · 7 min