The Snowflake Guilty Plea: 165 Tenants, No Vulnerability, and the MFA Control Nobody Enforced
Connor Riley Moucka pleaded guilty on 5 August 2026 to computer fraud, conspiracy, and aggravated identity theft over the 2024 Snowflake extortion cam...
saas-security
4 articles on saas-security — privacy laws, security frameworks, and regulatory compliance.
CVE-2026-6875: A Pre-Auth Sandbox Escape in ServiceNow, Exploited Five Days After Disclosure
A critical code injection flaw in the ServiceNow AI Platform lets unauthenticated attackers escape the script sandbox and execute code on the instance...
Nintendo, TinyPulse, and the $2M Ransom: How a Third-Party HR Survey Vendor Became a 2026 Extortion-as-a-Service Case Study
An extortion group calling itself Shadowbyt3$ stole roughly 859 MB of Nintendo of America employee data — including W-9 tax forms and bank statement P...
The Q2 2026 Ransomware Wave: Qilin, ShinyHunters, and the Compliance Failures Behind the Salesforce Extortion Campaign
May 2026 saw 95 publicly disclosed ransomware attacks across 17 countries, with Qilin and ShinyHunters leading a campaign that increasingly skips encr...