
Nikkei suffers third breach in a month, 1.8M records exposed
Hackers used stolen credentials to breach Nikkei's cloud, leaking 1.83 million records, 150 k with personal details, but no misuse detected yet.
Deep-dive analysis, hands-on tutorials, and cutting-edge threat intelligence from industry practitioners.

Hackers used stolen credentials to breach Nikkei's cloud, leaking 1.83 million records, 150 k with personal details, but no misuse detected yet.

The npm package ‘indexed‑btree’, masquerading as ‘sorted‑btree’, runs a hidden BTree.set() routine that gathers system info and sends it to Slack, Telegram and an Ethereum contract.

Hacktron leveraged Claude Opus 5 to combine a libheif RCE bug in Discourse with an OpenAI SSO flaw, briefly hijacking staff ChatGPT and Codex accounts and accessing an internal repo.

Vectra AI unveiled Ascent, a partner program aimed at expanding AI‑focused security services.

China‑origin APT‑Q‑95 has begun compromising Russian companies, using stolen VPN credentials to infiltrate Microsoft Exchange servers and install the GhostContainer backdoor.

Researchers uncovered 13 npm modules that pull the WeaselBiscuit JavaScript stealer, exfiltrating Chrome extension data on Windows, macOS and Linux.

Hacktron used Claude to auto‑write a remote‑code‑execution exploit for Discourse, then leveraged over‑permissive OpenAI sign‑in tokens to take over an employee’s ChatGPT account and push code to an internal repo.