Explore

Trendline Trendline
Massive Azure Credential Theft Campaign Exposes Millions of Enterprise Records, Affecting McDonald's and Vodafone

Massive Azure Credential Theft Campaign Exposes Millions of Enterprise Records, Affecting McDonald's and Vodafone

Massive Azure Credential Theft Campaign Exposes Millions of Enterprise Records, Affecting McDonald's and Vodafone
FactFable FactFable
The Hidden Vulnerability Behind Detection and Response for Social Engineering

The Hidden Vulnerability Behind Detection and Response for Social Engineering

Beyond employee error, the real weakness in defending against social engineering lies within the very systems designed to protect organizations.
Rapid Read Rapid Read
Fortune 500 Companies Targeted in Azure Data Theft Campaign

Fortune 500 Companies Targeted in Azure Data Theft Campaign

A threat actor, operating under the moniker 'TheHatman,' is reportedly selling data allegedly stolen directly from the Azure tenants of several Fortune 500 organizations. The campaign has impacted major global enterprises across various sectors, including IT services, hospitality, telecommunications, retail, and logistics. Companies such as McDonald's Corporation, Tata Consultancy Services (TCS), Vodafone, HCL Technologies, InterContinental Hotels Group (IHG), Kyndryl, Gap Inc., Hexaware Technologies, and Wyndham Hotels are among those affected. The threat actor claims the data was exfiltrated from Azure/Entra instances using leaked credentials. Cybersecurity firm Hudson Rock confirmed the legitimacy of the internal employee directories being sold, noting that the identified email addresses and field names match Azure directory exports. The largest data dump, from McDonald's, contains over 1.7 million records, while TCS has 800,000, Vodafone 425,000, HCL Technologies 250,000, and IHG 185,000.
Trendline Trendline
Israel's Largest Crypto Broker Bits of Gold Suffers Data Breach Affecting 200,000 Customers

Israel's Largest Crypto Broker Bits of Gold Suffers Data Breach Affecting 200,000 Customers

Israel's Largest Crypto Broker Bits of Gold Suffers Data Breach Affecting 200,000 Customers
Trendline Trendline
Cybercriminals Exploit Telegram for Malicious Activities, Businesses Urged to Enhance Cybersecurity

Cybercriminals Exploit Telegram for Malicious Activities, Businesses Urged to Enhance Cybersecurity

Cybercriminals Exploit Telegram for Malicious Activities, Businesses Urged to Enhance Cybersecurity
Trendline Trendline
SafePal Data Breach Exposes Personal Information of Nearly 40,000 Crypto Owners, Raising Phishing Concerns

SafePal Data Breach Exposes Personal Information of Nearly 40,000 Crypto Owners, Raising Phishing Concerns

SafePal Data Breach Exposes Personal Information of Nearly 40,000 Crypto Owners, Raising Phishing Concerns
Rapid Read Rapid Read
Cybersecurity Experts Warn of Malware Utilizing Blockchain for Evasion and Persistence

Cybersecurity Experts Warn of Malware Utilizing Blockchain for Evasion and Persistence

Cybersecurity experts are observing a growing trend where threat actors are leveraging public blockchains to host malware infrastructure, including payloads, command-and-control (C2) mechanisms, and victim data. This technique, known as EtherHiding, allows attackers to create takedown-resistant systems by storing malicious components in smart contracts on distributed ledgers. The report highlights the 'ClickFix' campaign, which compromises legitimate WordPress sites and ultimately delivers the Vidar infostealer. Attackers are using both Polygon and Base mainnets, with the former acting as a resolver for pointers to off-chain traffic distribution systems, and the latter directly hosting the malicious payload. This method exploits the immutable and decentralized nature of blockchains, making it difficult for traditional security measures to disrupt the malware's operations. The scale of this issue is significant, with close to 10,000 compromised sites worldwide identified, and one victim-tracking contract lo...
FactFable FactFable
Why Most Teams Misread an Incident Response Plan for a Healthcare Organization

Why Most Teams Misread an Incident Response Plan for a Healthcare Organization

Discover the common but critical ways healthcare teams misinterpret incident response plans, risking patient safety and major compliance failures.
FactFable FactFable
Why Companies Hiring Incident Responder Professionals Matter More in Cloud Environments

Why Companies Hiring Incident Responder Professionals Matter More in Cloud Environments

As businesses move to the cloud, the security landscape changes. Discover why specialized incident responders are no longer a luxury but a necessity.
FactFable FactFable
The Hidden Vulnerability Behind hCaptcha

The Hidden Vulnerability Behind hCaptcha

It's the gatekeeper of countless websites, but a hidden vulnerability in hCaptcha reveals the evolving arms race between human verification and AI.
FactFable FactFable
How AES Encryption Quietly Underpins Most Software You Use

How AES Encryption Quietly Underpins Most Software You Use

From Wi-Fi to online banking, the Advanced Encryption Standard (AES) is the invisible technology that keeps your digital life secure.
FactFable FactFable
The Hidden Vulnerability Behind an Incident Response Plan for a Law Firm

The Hidden Vulnerability Behind an Incident Response Plan for a Law Firm

For law firms, the greatest weakness in a cybersecurity incident response plan isn't the document itself—it's the untested human element.