Recent Data Breaches

SuperBlack Ransomware Targets Fortinet

Summary The SuperBlack ransomware, linked to the LockBit group, exploits Fortinet vulnerabilities (CVE-2024-55591 and CVE-2025-24472) to gain unauthorized access. Attackers then deploy the ransomware, encrypting data and demanding payment. Forescout researchers have detailed the attack […]

Recent Data Breaches

Codefinger Ransomware: AWS Users Targeted

Summary A new ransomware strain, Codefinger, targets Amazon S3 users by encrypting data with the user’s own keys, making recovery impossible without paying the ransom. The attackers exploit compromised AWS credentials and leverage server-side encryption […]

Recent Data Breaches

Telecom Data Breach Exposes Records

Summary A significant data breach at telecommunications giant NTT has exposed the call and text records of nearly all its customers. The breach occurred between May 1, 2022 and October 31, 2022, and also affected […]

Recent Data Breaches

Cobalt Strike Crackdown Triumphs

Summary A two-year campaign targeting unauthorized use of the penetration testing tool Cobalt Strike has resulted in an 80% drop in malicious deployments. This collaborative effort has significantly reduced the availability of cracked versions to […]

Recent Data Breaches

Exposed: Pathology Lab Data Breaches

Summary Pathology labs, entrusted with highly sensitive patient data, are increasingly vulnerable to data breaches. These breaches can have devastating consequences for patients, exposing their medical history, financial information, and personal details to malicious actors. […]

Recent Data Breaches

Tech Giant, Blizzard Breach

Summary Microsoft’s email systems suffered a significant security breach by the Russian state-sponsored group Midnight Blizzard, compromising corporate email accounts, including those of senior leadership. The attackers exploited a legacy test account and exfiltrated sensitive […]

Recent Data Breaches

Toronto Zoo Ransomware Fallout

Summary The Toronto Zoo reveals the extent of a 2024 ransomware attack, exposing visitor data spanning over two decades and impacting employees. The Akira ransomware group claims responsibility, highlighting the vulnerability of public institutions to […]

Recent Data Breaches

Cloud Leaks Expose Business Data

Summary A major cloud storage platform hack exposed sensitive business data, highlighting cloud security vulnerabilities. Attackers targeted users with single-factor authentication, exposing a critical security gap. The incident emphasizes the need for robust cloud security […]

Recent Data Breaches

Akira Ransomware Decryptor Uses GPUs

Summary A new decryptor cracks Akira ransomware’s encryption using GPUs. This tool bypasses traditional key decryption by brute-forcing keys based on Akira’s time-based encryption seed. This breakthrough offers hope to victims, enabling file recovery without […]

Recent Data Breaches

BRUTED: Automated Ransomware Attacks

Summary The Black Basta ransomware gang developed BRUTED, a tool automating brute-force attacks on VPNs and firewalls. This framework streamlines network access and scales ransomware attacks. Organizations must bolster their security measures to protect against […]