135 articles
CiscoChina-nexus Volt Typhoon deployed a covert multi-hop mesh named 'Silent Train' to route zero-day exploits into Cisco SD-WAN and critical infrastructure.
Crypto / Web3North Korean threat actors drained $6.4 billion from Binance hot wallets across multiple chains, prompting an emergency freeze of $3 billion in USDT and USDC.
MicrosoftState-sponsored actor Vapor Panda leveraged the ARTEX multi-agent AI framework to automate reconnaissance and intrusions across 200+ organizations globally.
Cyber AttackSingapore's CSA and IMDA disclose Operation Cyber Guardian, evicting APT group UNC3886 after a coordinated cyber-espionage infiltration targeting national telco backbones.
Cyber AttackA critical default join key flaw in R3's JFrog Artifactory granted full administrative control over 269 repositories, including Corda Enterprise and CBDC builds.
MicrosoftA compromised vendor credential in ConnectWise Cloud Backup allowed threat actors to abuse OAuth application tokens across hundreds of Microsoft 365 customer tenants.
Cyber AttackA publicly traded small modular reactor developer files SEC Form 8-K Item 1.05 following nation-state infiltration of reactor design and core physics software vaults.
Cyber AttackA premier defense aerospace corporation files SEC Form 8-K Item 1.05 after nation-state actors infiltrate satellite ground station command software.
Cyber AttackA major semiconductor EDA software firm files SEC Form 8-K Item 1.05 after nation-state threat actors exfiltrate next-gen 2nm chip design libraries.
Cyber AttackA global telecommunications consortium files SEC Form 8-K Item 1.05 after nation-state threat actors infiltrate subsea fiber cable network management platforms.
Cyber AttackA major electric vehicle manufacturer files SEC Form 8-K Item 1.05 after threat actors breach cloud telematics, accessing vehicle GPS coordinates and remote commands.
KubernetesA multinational container terminal operator files SEC Form 8-K Item 1.05 after cyber adversaries compromise automated cargo dispatch and container routing systems.
Cyber AttackA premier semiconductor foundry submits SEC Form 8-K Item 1.05 after nation-state actors compromise CAD vaults and exfiltrate sub-2nm EUV lithography mask IP.
RansomwareA premier defense aerospace supplier files SEC Form 8-K Item 1.05 after ransomware actors compromise unclassified R&D enclaves and exfiltrate sensor avionics telemetry.
Cyber AttackA commercial aviation satellite communications provider files SEC Form 8-K Item 1.05 after nation-state actors breach in-flight telemetry and passenger Wi-Fi systems.
OT / SCADAA major North American energy utility discloses an SEC Form 8-K cyber incident involving extortion over exfiltrated regional transmission telemetry.
KubernetesA major international container logistics carrier files SEC Form 8-K Item 1.05 after threat actors exfiltrate intermodal shipping manifests and customs manifests.
Cyber AttackSEC Form 8-K filing reveals an advanced persistent threat breached the corporate IT network of a major commercial airline, accessing flight dispatch and crew scheduling platforms.
RansomwareSEC Form 8-K filing reveals an extortion syndicate encrypted corporate cloud servers hosting diagnostic telemetry and proprietary firmware repositories for hospital medical devices.
Cyber AttackSEC Form 8-K filing reveals an advanced persistent threat exfiltrated sensitive aerospace engineering CAD designs and satellite propulsion telemetry.
OT / SCADASEC 8-K filing reveals an advanced extortion group infiltrated the corporate network of a major energy pipeline operator, accessing historical SCADA telemetry archives.
Cyber AttackMaterial SEC 8-K disclosure reveals advanced nation-state threat actors pivoted through a third-party equipment vendor SSL VPN to exfiltrate proprietary lithography recipes.
Data BreachDanish authorities confirmed an unauthorized entity abused legitimate commercial partner API credentials to exfiltrate 8.8 million CPR citizen identity records.
MicrosoftLonglegs (Storm-2603) used on-prem SharePoint access, a BYOVD EDR killer and SYSVOL replication to push Warlock ransomware to 33+ hosts. IOCs inside.