Cybersecurity News

Supply Chain Attack Analysis Cybersecurity giant Palo Alto Networks has confirmed it suffered a data breach after attackers abused compromised OAuth tokens from the widespread Salesloft Drift supply chain attack to access its Salesforce instance. In a statement, the company confirmed that it was one of hundreds of customers impacted ...

Incident Analysis Financial technology giant Evertec has disclosed in a filing with the U.S. Securities and Exchange Commission (SEC) that hackers breached its Brazilian subsidiary, Sinqia S.A., on August 29, 2025. The attackers gained unauthorized access to Sinqia’s environment on Pix, Brazil’s real-time payment system, and attempted to conduct fraudulent ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to have leaked a database that they allege originates from Sapo (sapo.vn), a major e-commerce platform provider in Vietnam. According to the post, the data includes sensitive shopping details and customer information. This claim, if true, ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a massive database that they allege was stolen from the Türkiye Pensioners Association. According to the seller’s post, the database contains the records of over 5 million individuals. The purportedly compromised data is exceptionally ...

Nation-State Threat Analysis In a highly unusual joint statement, security officials from the United States and multiple allied nations have detailed a sweeping, yearslong cyberattack attributed to a Chinese state-sponsored group known as “Salt Typhoon.” The campaign is being described as China’s most ambitious cyber-operation to date, having infiltrated major ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a database that they allege was stolen from Coinbase, a leading US-based cryptocurrency exchange. According to the seller’s post, the database contains 12,000 records of US users and, in a particularly alarming claim, includes ...

Incident Analysis Tire giant Bridgestone has confirmed it is investigating a cyberattack that has disrupted the operations of some of its manufacturing facilities in North America. The incident, which came to light on September 2, 2025, has affected production plants in both the United States and Canada. In a statement, ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a database that they allege contains the information of 125,000 users of Bitstamp, a major cryptocurrency exchange. According to the seller’s post, the data was extracted in September 2025, making it extremely fresh. The ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a zero-day exploit that they allege targets Nobitex (nobitex.ir), an Iranian cryptocurrency exchange. According to the seller’s post, they attempted to negotiate with the company to fix the vulnerability but, after those talks allegedly ...

Data Exposure Analysis A threat actor on a known cybercrime forum is claiming to have leaked a database that they allege was stolen from the Indonesian company PT Gunung Himun Peratama. According to the seller’s post, the database contains highly sensitive employee information. The purportedly compromised data includes a comprehensive ...