Explore

Rapid Read Rapid Read
Origin Energy Data Breach Impacts 900,000 Customers

Origin Energy Data Breach Impacts 900,000 Customers

Origin Energy Limited, a major Australian power company, has confirmed a data breach affecting 900,000 current and former customers. The breach involved unauthorized access to customer data, including personal information and partial payment details. Origin Energy began investigating the incident in early July, initially deeming the threat not credible. However, new information confirmed the intrusion, with a hacker claiming to have obtained data from 2 million customers. The company is working with authorities to investigate the breach, emphasizing the criminal nature of the incident.
Trendline Trendline
Coca-Cola Confirms Data Breach Following Fairlife Ransomware Attack

Coca-Cola Confirms Data Breach Following Fairlife Ransomware Attack

Coca-Cola Confirms Data Breach Following Fairlife Ransomware Attack
Trendline Trendline
Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disrupts Production

Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disrupts Production

Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disrupts Production
Trendline Trendline
Tribeca Film Festival Data Breach Exposes Celebrity Contact Information

Tribeca Film Festival Data Breach Exposes Celebrity Contact Information

Tribeca Film Festival Data Breach Exposes Celebrity Contact Information
Rapid Read Rapid Read
PTC Windchill Vulnerability Exploited in Ransomware Campaign Targeting Multiple Industries

PTC Windchill Vulnerability Exploited in Ransomware Campaign Targeting Multiple Industries

A critical remote code execution vulnerability in PTC's Windchill and FlexPLM platforms, tracked as CVE-2026-12569, has been exploited by a Cl0p ransomware affiliate. This vulnerability, which allows for deserialization of untrusted data without authentication, was patched on June 17, 2026. However, it was quickly exploited in the wild, prompting PTC to release indicators of compromise. The attack has targeted organizations in sectors such as aerospace, automotive, manufacturing, and retail/apparel. The attackers have been using a combination of pre-authentication information disclosure and server-side flaws to achieve remote code execution and deploy webshells. They have also been sending extortion emails to affected organizations, although they have not yet publicly listed victims or claimed credit for the campaign.
Rapid Read Rapid Read
Cl0p Ransomware Exploits PTC Windchill Vulnerability, Targeting Multiple Industries

Cl0p Ransomware Exploits PTC Windchill Vulnerability, Targeting Multiple Industries

A critical remote code execution (RCE) vulnerability in PTC's product lifecycle management platforms, Windchill and FlexPLM, is being actively exploited by a Cl0p ransomware affiliate. The vulnerability, identified as CVE-2026-12569 with a CVSS score of 9.3, involves the deserialization of untrusted data and can be exploited without authentication. Although PTC patched the vulnerability on June 17, it was quickly exploited in the wild, prompting PTC to release indicators of compromise (IoCs). Recent reports from ReliaQuest and Ransom-ISAC indicate that the Cl0p affiliate is targeting organizations in the aerospace, automotive, manufacturing, and retail/apparel sectors. The attackers have been using a combination of pre-authentication information disclosure and server-side flaws to achieve RCE and deploy webshells. They have also been sending extortion emails to affected organizations, although they have not yet publicly listed victims or claimed credit for the campaign.
Rapid Read Rapid Read
Bank of Baroda Faces Alleged 1TB Data Leak on Dark Web, Raising Security Concerns

Bank of Baroda Faces Alleged 1TB Data Leak on Dark Web, Raising Security Concerns

The Bank of Baroda, a major financial institution in India, is reportedly at the center of a significant cyber incident. A threat actor has allegedly accessed the bank's systems and placed 1TB of sensitive data on the dark web. This data reportedly includes customer and corporate banking information such as Aadhaar numbers, names, and loan records from various branches across India. The breach was first noticed on a dark web tracking site, and sample files linked to the alleged breach have appeared online. Srikanth Lakshmanan, a software engineer and founder of CashlessConsumer, verified the documents and found a range of internal bank documents, including branch audits and customer data. The hacking group TripleX, previously involved in a similar breach in Indonesia, is suspected to be behind this incident.
Trendline Trendline
Coca-Cola's Fairlife Resumes Operations After Ransomware Attack

Coca-Cola's Fairlife Resumes Operations After Ransomware Attack

Coca-Cola's Fairlife Resumes Operations After Ransomware Attack
FactFable FactFable
Why Famous Cloud Misconfiguration Incidents in US history Matters More in Cloud Environments

Why Famous Cloud Misconfiguration Incidents in US history Matters More in Cloud Environments

Exploring major US data breaches reveals why simple cloud setup errors now pose a greater threat to business and consumer data than ever before.
Rapid Read Rapid Read
Fake Corepack Tool Site Targets Developers with Malware, Raises Security Concerns

Fake Corepack Tool Site Targets Developers with Malware, Raises Security Concerns

A fake website posing as a source for the Corepack toolset has been targeting Node.js developers with malware. Corepack, initially bundled with Node.js from version 16.9.0, was discontinued by the Node.js Technical Steering Committee in 2025. Exploiting this, threat actors created a malicious site, Corepack.org, which appears as a top search result for the tool's name. The site offers an executable download that installs an infostealer capable of accessing browser data and SSH keys, and also enrolls the victim's machine in a proxyjacking scheme. This practice allows the machine's internet connection to be used as an exit node for other traffic, without the owner's knowledge. The malicious site has since been taken down following community reports and an abuse notification to the hosting provider.
Rapid Read Rapid Read
Cl0p Ransomware Group Exploits PTC Windchill Vulnerability for Data Extortion

Cl0p Ransomware Group Exploits PTC Windchill Vulnerability for Data Extortion

The Cl0p ransomware group is targeting vulnerabilities in PTC Windchill and FlexPLM systems, exploiting a critical security flaw (CVE-2026-12569) to execute remote code and deploy web shells. This campaign affects sectors such as manufacturing, automotive, aerospace, and retail. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has listed this flaw in its Known Exploited Vulnerabilities catalog. The attackers use a combination of information disclosure and server-side flaws to gain unauthorized access, leading to data theft and extortion. The Cl0p group has a history of exploiting enterprise software vulnerabilities for similar attacks.
Trendline Trendline
Fastjson 1.x Vulnerability Exploited in Attacks Amid Lack of Patch

Fastjson 1.x Vulnerability Exploited in Attacks Amid Lack of Patch

Fastjson 1.x Vulnerability Exploited in Attacks Amid Lack of Patch