Cyber Breaches

Dark Web News Analysis A threat actor has leaked a database allegedly belonging to CRRC MA (the US subsidiary of China’s state-owned CRRC Corporation). The leak reportedly contains highly sensitive engineering documents, design specifications, and internal communications related to major US transit projects. Brinztech Analysis: Key Cybersecurity Insights This alleged ...

Dark Web News Analysis A threat actor on a known hacker forum has posted a database labeled “Pholoniex Email List.xlsx”. The content is currently hidden behind a “reply or like” wall, a common tactic used to boost engagement on cybercrime forums. Brinztech Analysis: Key Cybersecurity Insights This leak presents a ...

Dark Web News Analysis A threat actor on a known hacker forum is advertising the sale of a database allegedly containing 900,000 records of Danish citizens. The dataset is provided in CSV format and is being offered for the exceptionally low price of $70. Brinztech Analysis: Key Cybersecurity Insights This ...

Dark Web News Analysis A threat actor on a known hacker forum is advertising the sale of a database purportedly containing 946,726 records of Canadian citizens. Brinztech Analysis: Key Cybersecurity Insights This alleged data sale presents a targeted threat to Canadian professionals and organizations: Mitigation Strategies In response to this ...

Dark Web News Analysis A threat actor on a known cybercrime forum is advertising the sale of a massive database allegedly belonging to AX Capital, one of Dubai’s leading real estate agencies. The total size of the claimed data is 360 GB. Brinztech Analysis: Key Cybersecurity Insights This alleged data ...

Public Breach Analysis Barts Health NHS Trust, one of the largest healthcare providers in England, has confirmed a significant data breach following a cyberattack by the Cl0p (Clop) ransomware gang. The breach also impacts the Barking, Havering, and Redbridge University Hospitals NHS Trust, for whom Barts provides accounting services. The ...

Dark Web News Analysis A coordinated campaign has launched a new wave of attacks targeting Palo Alto GlobalProtect VPN portals and SonicWall SonicOS API endpoints. The activity, which began on December 2, 2025, originates from a massive botnet of over 7,000 IP addresses. Brinztech Analysis: Vendor Response: Palo Alto Networks ...

Dark Web News Analysis In a rare turn of events, a North Korean state-sponsored threat actor has been infected by the LummaC2 infostealer, exposing critical details about their operations and confirming ties to the massive $1.4 billion Bybit cryptocurrency heist from February 2025. The Discovery: Cybercrime intelligence firm Hudson Rock ...

Security Vulnerability Analysis: Splunk Enterprise & Universal Forwarder A critical high-severity vulnerability has been disclosed in Splunk Enterprise and Splunk Universal Forwarder on all supported Windows platforms. The flaw stems from an error during installation or upgrade, where file permissions are incorrectly assigned, creating a direct path for local privilege ...