KDDI Data Breach: 12.2M Users Hit Across 6 ISPs [2026]
Exploitation of a zero-day vulnerability in third-party software within a shared email platform.
Threat Intel
-
-
Aitkin County Health and Human Services Data Breach Affects 81,000 Individuals
Multiple data breaches involving unauthorized email access and hacking of healthcare providers.
-
23andMe owes customers $47M for DNA data breach
A 2023 data breach compromising sensitive genetic information.
-
Clinical Registry Solutions Data Breach
Unauthorized access to a network server resulting in a data breach of sensitive healthcare information.
-
Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws
Discovery of a vulnerability chain in OpenClaw allowing host code execution via WhatsApp messages.
-
New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic
Deployment of the MODBEACON Rust-based RAT by the Silver Fox threat group.
-
Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites
WP-SHELLSTORM campaign utilizing automated scanners to deploy webshells on vulnerable WordPress and Joomla sites.
-
Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access
Threat actors are using vishing and a real-time phishing kit to trick Microsoft 365 users into enrolling attacker-controlled passkeys.
-
Attackers Exploit ‘Ill Bloom’ Vulnerability to Drain $3.1 Million From Cryptocurrency Wallets
Attackers exploited a weak random number generator in certain crypto wallet software to derive seed phrases and steal funds.
-
Ransomware Negotiator Gets 70 Months in Prison for Aiding BlackCat Attacks
Insider collusion and betrayal by a ransomware negotiator to facilitate BlackCat ransomware attacks and maximize extortion payments.