Cyber Breaches

Dark Web News Analysis A threat actor on a known cybercrime forum is advertising the alleged sale of 60,000 “fresh lines” of user data from KuCoin, a major cryptocurrency exchange. The seller explicitly attributes the source to a “bpo inny” (BPO insider), suggesting a compromise within a third-party Business Process ...

Dark Web News Analysis A threat actor using the alias “Catspin” on a known cybercrime forum is advertising the alleged leak of a database belonging to GeoHealth (GeoHealthResearch.org), a platform dedicated to geographical and health research. This claim, if true, represents a targeted breach of the academic and research sector. ...

Public Breach Retrospective In a new account of the September 2024 ransomware attack on Japanese logistics company Kantsu (www.kantsu.com), President Hisahiro Tatsushiro has revealed a radical “scorched earth” recovery strategy that prioritizes trust over cost. The attack, which occurred on the evening of September 12, 2024, paralyzed the company’s internal ...

Web News Analysis Researchers from the University of Vienna and SBA Research have unveiled a critical security flaw in WhatsApp’s contact discovery feature, which allowed them to enumerate and scrape the account details of an astounding 3.5 billion users—effectively the entire global user base of the platform. This makes it ...

Public Breach Analysis Google has issued an emergency security update for the billions of users of its Chrome browser on desktop (Windows, Mac, Linux) to address a high-severity zero-day vulnerability that is currently under active attack. The company confirmed on Monday, November 17, 2025, that “an exploit for CVE-2025-13223 exists ...

Dark Web News Analysis The Everest ransomware group has added a new listing to their dark web leak site, claiming to hold 176 GB of sensitive seismic survey data involving Petrobras, Brazil’s state-owned multinational energy corporation, and SAExploration, a seismic data acquisition company. This claim, observed on November 17, 2025, ...

Web News Analysis A widespread outage at Cloudflare, a critical internet infrastructure provider, disrupted access to numerous high-profile websites and services on November 18, 2025, causing intermittent failures across the global web. This incident is a stark reminder of the internet’s dependency on a few key players. Timeline & Root ...

Web News Analysis Microsoft has disclosed the mitigation of the largest distributed denial-of-service (DDoS) attack ever recorded in the cloud. The attack, which occurred on October 24, 2025, targeted a single Azure customer endpoint in Australia, peaking at a staggering 15.72 Terabits per second (Tbps) and 3.64 billion packets per ...

Dark Web News Analysis A threat actor on a known cybercrime forum is advertising the sale of unauthorized Remote Desktop Web (RDWeb) access to an Iraqi company. This is a classic Initial Access Broker (IAB) listing, representing an immediate and severe threat to the target organization. The seller has provided ...