15 articles · newest first
Payouts King says it walked off with 27 terabytes from Turner Construction — including files it claims are covered by U.S. arms-export law. Turner took seven weeks to tell anyone.
Priya Nair · Aug 25 · 7 min
The ransomware gang gave itself two weeks and gave the bank exactly nothing to substantiate the claim — and that gap between accusation and evidence is the actual story here.
Priya Nair · Aug 24 · 6 min
GuidePoint's threat intel team says the 'recovery firm' emailing breached companies with a $60,000 fix is running the same infrastructure as the original attack.
Priya Nair · Aug 23 · 6 min
More than 40 companies have been named so far in a campaign that chains two flaws in PTC's Windchill and FlexPLM software into unauthenticated remote code execution.
Priya Nair · Aug 20 · 8 min
AnMed Health closed 83 facilities after a July cyberattack. Two weeks later, the hackers posted the proof themselves — from AnMed's own account.
Priya Nair · Aug 16 · 6 min
The same crew behind the Snowflake and Salesforce mega-breaches just handed the US its biggest healthcare data breach of 2026 — and the number keeps climbing.
Priya Nair · Aug 16 · 6 min
DeadLock skips throwaway domains entirely. Its victim chat and leak blog run on Polygon smart contracts, and Microsoft says that's exactly why takedown notices don't work on it anymore.
Sam Okafor · Aug 15 · 7 min
CVE-2026-18577 is what happens when a patch gets patched — China-linked Storm-1175 found a bypass for an already-fixed N-able N-central bug and used it to skip straight to full admin access, no login required.
Priya Nair · Aug 15 · 6 min
Six government agencies just confirmed a ransomware crew is rewriting authentication files on Fortinet VPN portals so a single fake one-time code logs in every time — MFA included.
Priya Nair · Aug 14 · 6 min
River Financial Corporation says the attackers who breached its network in June have 'represented' that the stolen data was deleted — which is not the same thing as proof.
Priya Nair · Aug 9 · 6 min
Veeam disclosed six vulnerabilities in Veeam ONE, and the worst one lets a stranger run code on your backup monitoring server with zero credentials — exactly the kind of hole ransomware crews go looking for first.
Priya Nair · Aug 6 · 7 min
Analog Devices confirmed a June intrusion with data theft; days later, an extortion crew calling itself ExfilSquad — the same group that hit Allstate — claimed 570,000 stolen records.
Ravi Malhotra · Aug 6 · 6 min
Medical Computer Business Services never treated a single patient — it just processed the bill. That was enough for the PEAR ransomware group to walk off with Social Security numbers, diagnoses and 3.3 terabytes of data.
Priya Nair · Aug 4 · 6 min
ExfilSquad posted 15.1GB of alleged Allstate data to its leak site on July 26 — recruitment files, licensing records, employee accounts. The insurer has confirmed an incident but not the scope.
Priya Nair · Aug 4 · 6 min
Fairlife's dairy plants went dark, a group called Anubis claimed a terabyte of files, and Coca-Cola's own filing still won't say what's actually in them.
Priya Nair · Aug 3 · 7 min