🔥 Breaking
Nikkei suffers third breach in a month, 1.8M records exposed
Hackers used stolen credentials to breach Nikkei's cloud, leaking 1.83 million records, 150 k with personal details, but no misuse detected yet.
⏱️ 2 min read📅 10/20/2026
LATEST THREAT INTELLIGENCE
Next-Gen Cyber Security
Insights & Intelligence
Deep-dive analysis, hands-on tutorials, and cutting-edge threat intelligence from industry practitioners.
Featured Article
Latest Articles
Vulnerability
ShinyHunters revives PeopleSoft exploits with a simple URL‑encoding bypass
A percent‑encoded “%50SEMHUB” path slips past WAFs, letting ShinyHunters hit Oracle PeopleSoft’s CVE‑2026‑35273 and plant web shells worldwide.
⏱️ 3 min read📅 9/27/2026
Threat Intelligence
Army Soldier Sentenced to 70 Months After Hacking Telecoms from Prison
A 22‑year‑old U.S. Army specialist got 70 months behind bars for telecom hacks, restitution, and even asking AI for escape instructions.
⏱️ 5 min read📅 9/26/2026
Malware
MacSync hijacks iCloud calendars to pull in macOS payloads
A new MacSync variant uses public iCloud calendar events to fetch commands and deliver a macOS dropper, expanding its stealthy toolkit.
⏱️ 5 min read📅 9/25/2026
Malware
RemControl: Android banking malware‑as‑a‑service leverages fake TVTap apps and VPN evasion
A new Android banking trojan, RemControl, disguises itself as the TVTap IPTV app, hijacks Accessibility Service and uses a VPN blocker to dodge Play Protect.
⏱️ 4 min read📅 9/24/2026
Identity & Credential
TrustSink PoC reveals rogue MFA provider risk in Microsoft Entra
Varonis shows that a compromised Entra Global Administrator can register a malicious external MFA provider, exposing credential flows.
⏱️ 3 min read📅 9/23/2026
Data Breach
Compromised Ribon app credentials expose shopper data on BigCommerce
Bad actors used stolen Ribon app credentials to inject malicious scripts into merchant sites, leaking personal shopper details but not payment cards.
⏱️ 4 min read📅 9/22/2026