Cyber Threat Intel

No significant updates today.

• Both reports confirm ShinyHunters breached 7-Eleven franchisee systems in April, exposing data of ~185,000 people.
• Consistent data types leaked:...

A newly disclosed CVE-2026-9089 (CVSS 8.8) in ConnectWise Automate lets attackers bypass integrity checks to execute malicious code via plugin loading...

A Class 12 ethical hacker accessed the CBSE evaluation portal in just 30 minutes via a hardcoded master password, enabling grade alterations, teacher...

• 5-year study found 30,515 exposed databases (46.3%) already carried ransom notes, affecting over 215 billion records.
• Victims rarely paid: only...

Financial services ranked as the fourth most targeted sector, seeing 43% more hands-on-keyboard intrusions than two years prior. Attackers skip password theft entirely by using vishing or device-code phishing to reset MFA and steal tokens instead.

Over 116,000 data instances from The New York Times, Wall Street Journal, and Washington Post hit the dark web, exposing 35,000+ emails and thousands of passwords. This enables phishing, blackmail, and source exposure that threatens press freedom.

BTMOB's ready-made toolkit makes full Android compromise accessible to low-skill attackers.

• No-code builder: APK generator and phishing lure...

Automotive ransomware more than doubled in 2025, accounting for nearly half of incidents as AI-driven vehicle systems widen the attack surface for...

Attackers are systematically abusing GitHub and SourceForge with fake installers for tools like ChatGPT and AutoTune to deliver the DinDoor RAT via...

• ShinyHunters claimed ransomware responsibility for the 7-Eleven breach, threatening data release if unpaid.
• Confirmed impact exceeds 185,000...

AI is accelerating both vulnerability discovery and new attack surfaces.

• Claude Mythos scanned 1,000+ open-source projects, surfacing 6,202...

Iranian government-linked hackers, not unaffiliated activists, sabotaged LA Metro's systems through data-wiping attacks on critical transit...

Over 116,000 dark web exposures tied to 35,000+ emails from just three US media outlets highlight massive scale.

• Leaked credentials risk exposing...

• Beacon Mutual ransomware breach exposed SSNs, financial and medical data of 162,000 people
• 7-Eleven hack-and-extortion incident leaked names, SSNs...

Ransomware crews now treat vulnerabilities as targets, not industries, turning isolated IT events into multi-sector shutdowns.

• A single campaign...

Iran-linked groups are hitting US critical infrastructure with both destructive breaches and stealthy espionage.

• LA Metro hit: Ababil claimed a...

Shiny Hunters exploited a single SaaS dependency flaw to breach Canvas LMS during finals week, shutting down the platform serving 9,000 institutions...

Two actively exploited flaws highlight shrinking response windows for defenders.

• Chrome's May 19 update fixed two critical RCEs (CVE-2026-9111...

Confirmed Data Breaches

• 🔥 Hartford HealthCare: A hacker accessed personal information of about 22,500 patients through the state HUSKY provider...