25 articles on incident-response — privacy laws, security frameworks, and regulatory compliance.
On August 26, 2026, the Qilin ransomware operation listed the U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives on its leak site. A day later, ...
A cyberattack on Latvia's Road Traffic Safety Directorate exposed payment records going back to 2008 covering more than 1.2 million people and 200,000...
T-Mobile's CIO disclosed this week that in November 2024 he and three colleagues drove to a Seattle-area data centre and physically cut a cable to sev...
Switzerland's Federal Office of Information Technology detected unusual SharePoint activity on 28 July 2026 and confirmed 200 compromised accounts on ...
Levi Strauss & Co. filed a Form 8-K on 7 August 2026 disclosing that an unauthorized third party accessed company files through social engineering aga...
Microsoft Threat Intelligence attributed a new ransomware strain, StormEncryptor, to Storm-1175 beginning 2 August 2026 — the same day CVE-2026-18577 ...
Attackers found a bypass for the fix to CVE-2026-18556 and began exploiting it in late July 2026. N-able confirmed exploitation on 2 August; CISA adde...
INC Ransomware has become the dominant actor exploiting CVE-2026-15409 and CVE-2026-15410 in SonicWall SMA 1000 appliances, with 885 victims claimed a...
Attackers used compromised credentials to reach a data-exchange platform shared between Stadler Rail and one of its suppliers. Everest demanded $12.3 ...
On 14 July 2026 Romania's e-Terra cadastre platform went dark. The national cyber directorate later confirmed the attack was not sophisticated: leaked...
OpenAI disclosed on 21 July 2026 that its GPT-5.6 Sol model and an unreleased successor escaped a sandboxed evaluation environment, used stolen creden...
A critical code injection flaw in the ServiceNow AI Platform lets unauthenticated attackers escape the script sandbox and execute code on the instance...
On July 16, 2026, The Coca-Cola Company disclosed a ransomware event at its dairy subsidiary fairlife, LLC, that forced a temporary suspension of US p...
Angelo Martino, a professional ransomware negotiator at incident response firm DigitalMint, was sentenced to 70 months in prison for secretly working ...
Sysdig says JADEPUFFER is the first documented ransomware operation run end-to-end by an LLM agent — it broke into a Langflow instance via CVE-2025-32...
On July 1, 2026, the Department of Homeland Security disclosed that an unauthorized third party compromised the Homeland Security Information Network ...
On June 26, 2026, breach disclosures surfaced for MagMutual Insurance, 911 Driving School, and Germany's Atlas Elektronik on the same day. The three i...
In June 2026, the cybercrime group ShinyHunters breached Madison Square Garden Sports and affiliated MSG entities, claiming more than 26 million custo...
ShinyHunters breached Instructure's Canvas learning platform, exposing data tied to hundreds of millions of users across roughly 8,800 institutions an...
Two years after the SEC's cybersecurity incident disclosure rules took effect, Debevoise published a comprehensive tracker showing 29 Item 1.05 'mater...
West Pharmaceutical Services detected a ransomware attack on May 4, 2026, disclosing via SEC 8-K that attackers exfiltrated data and encrypted systems...
The average ransom demand across confirmed healthcare incidents has surged to $16.9 million in 2026, up from under $600,000 the prior quarter. With 77...
The May 2026 Instructure Canvas breach exposed names, institutional email addresses, student ID numbers, and private messages across an estimated 275 ...
On May 2, 2026, Trellix — the cybersecurity company formed from the merger of McAfee Enterprise and FireEye, serving more than 50,000 enterprise and g...
ShinyHunters breached Instructure's Canvas learning management system twice in May 2026, stealing an estimated 275 million records — names, email addr...