Created by Michael Egan
Verified analyses of hacking incidents, ransomware, data breaches, dark‑web markets, and threat actors
Explore the latest content tracked by Cyber Threat Intel
Long-term retention of legal-aid records has widened the UK Legal Aid Agency breach to include ~250,000 entries predating 2007, with the earliest verified record from 1978, magnifying risks for applicants whose personal data spans multiple decades.
How much weight should security teams give claims that AI is now embedded in ransomware operations?
Majinahanashi's October 12 claim against UK firm Robert Hitchins Limited rests solely on a leak-site post with a pending October 15 publication and...
A proposed class action was filed in New Jersey federal court against MLD Mortgage Inc. (The Money Store) following a ransomware attack. This directly...
FTC subpoenas to OpenAI and Anthropic mark an early regulatory test of how developers identify, disclose, and mitigate consumer and cybersecurity...
Play ransomware's claimed attack on Advanced Imaging Solutions shows victim targeting reaching Mongolia's technology sector, a non-listed country,...
European food retailers faced targeted disruptions this week:
AI weaponized in 84% of attacks while personal threats to staff and families hit 40% of incidents.
A ransomware gang's Oct. 12 claim of stealing MoneyGram data remains unverified, as the company has neither confirmed an incident nor received data...
September disclosures across government, retail, and tech sectors reveal four persistent breach drivers.
China-linked hackers maintained access for several days to a regional organization's network in Suva between July and August, prompting the U.S. Embassy to notify the Fijian government and provide technical recommendations.
MSSP teams must move past alert-driven responses to hunt ransomware infrastructure and campaigns proactively.
The DMDC breach exposed names, SSNs, DOBs, and military details of 2.76 million living and 294,000 deceased individuals between Oct 2025–Jul 2026,...
13.7 million previously breached credentials were re-exposed in an unsecured Vibetech database, centralizing old records from incidents like the AT&T...
The incident response lifecycle provides a practical framework with four distinct phases.
A Check Point study reports global cyberattacks rose 48% with a 10% month-on-month increase.
Settra leverages the Palo Alto GlobalProtect auth bypass (CVE-2026-0257) for stealthy initial access that blends with legitimate VPN traffic.
H&M is actively assessing public claims of targeting by ShinyHunters, a group previously linked to high-profile incidents at Google, Microsoft, and...
