Topic
46 articles
Data BreachForensic analysis of the data breach impacting State: initial access vector, exfiltrated telemetry, and regulatory disclosure mandates.
Data BreachForensic analysis of the data breach impacting DigiCert: initial access vector, exfiltrated telemetry, and regulatory disclosure mandates.
Data BreachForensic analysis of the data breach impacting Chainalysis: initial access vector, exfiltrated telemetry, and regulatory disclosure mandates.
Agentic AIBlockchain intelligence firm Chainalysis confirmed an intrusion into internal customer-support tooling via offensive agentic AI, exposing user names and emails.
KubernetesAttackers hijacked LiteLLM release workflows using leaked GitHub CLI OAuth tokens, publishing backdoored packages to PyPI and Docker Hub executing LLMjacking.
Palo AltoPalo Alto Networks fixes a high-severity command injection flaw in Cortex XSOAR (CVE-2026-0313) that allows network actors to execute arbitrary operating system commands.
RansomwareForensic analysis of SEC Form 8-K Item 1.05 material cybersecurity incident disclosures: 4-day reporting timelines, root causes, and board oversight standards.
Deep DiveDisparate incident reporting windows across the SEC, EU DORA, and India's RBI create a legal hazard for CISOs. Here is how enterprise response playbooks must adapt.
VulnerabilityThe Reserve Bank of India mandates strict 6-hour incident disclosure via DAKSH and CERT-In, requiring board-level oversight and 180-day forensic log retention.
Gov / DefenseA technical compliance guide for Indian enterprises implementing automated SIEM/SOAR playbooks to meet CERT-In and RBI 6-hour mandatory breach disclosure deadlines.
Cyber AttackHalliburton files SEC Form 8-K Item 1.05 detailing unauthorized corporate network access that forced critical energy infrastructure systems offline across global operations.
Data BreachRBI accelerates enforcement of its IT Governance Master Direction, mandating 6-hour incident reporting and strict third-party cloud outsourcing audits for financial entities.
RansomwareNutex Health files amended SEC Form 8-K Item 1.05 confirming patient PHI and provider records exfiltrated and published following ransomware double extortion.
Cyber AttackInjectable drug packaging leader West Pharmaceutical Services files SEC Form 8-K Item 1.05 disclosing data exfiltration and systems encryption halting global manufacturing.
Cyber AttackDental healthcare provider Park Dental Partners files SEC Form 8-K Item 1.05 following unauthorized network intrusion risking patient clinical records and sensitive PII.
Cyber AttackCenterPoint Energy files Form 8-K disclosing an unauthorized intrusion into customer account systems via external-facing web portal infrastructure.
Deep DiveThe Reserve Bank of India mandates accelerated 6-hour incident reporting, continuous board-level oversight, and strict third-party cloud outsourcing audits.
Gov / DefenseCISA issued its landmark final rule under CIRCIA, legally mandating critical infrastructure operators report major cyber incidents within 72 hours and ransom payments within 24 hours.
Gov / DefenseSonicWall disclosed two actively exploited SMA1000 flaws on 1 September; CISA set a 5 September federal deadline. The harder problem is proving an appliance you cannot instrument is clean.
Gov / DefenseIndia's six-hour CERT-In reporting clock has run since June 2022. From May 2027 a second DPDP clock starts on the same incident. Build one intake process now.
RansomwareOne tracker logged 315 leak-site posts from 40 groups in a single August week, eight of them new. Brand-based detection cannot keep pace. Here is what to instrument instead.
Deep DiveThe 2026 benchmark from foothold to active exfiltration is 72 minutes, a fourfold reduction. Human-paced triage no longer fits inside the window.