Explore

Trendline Trendline
Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disrupts Production

Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disrupts Production

Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disrupts Production
Trendline Trendline
Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disruption

Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disruption

Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disruption
Trendline Trendline
Coca-Cola Resumes Fairlife Production After Ransomware Attack Disrupts U.S. Facilities

Coca-Cola Resumes Fairlife Production After Ransomware Attack Disrupts U.S. Facilities

Coca-Cola Resumes Fairlife Production After Ransomware Attack Disrupts U.S. Facilities
Trendline Trendline
Coca-Cola Confirms Data Theft in Fairlife Ransomware Attack

Coca-Cola Confirms Data Theft in Fairlife Ransomware Attack

Coca-Cola Confirms Data Theft in Fairlife Ransomware Attack
Trendline Trendline
Coca-Cola Confirms Data Breach Following Fairlife Ransomware Attack

Coca-Cola Confirms Data Breach Following Fairlife Ransomware Attack

Coca-Cola Confirms Data Breach Following Fairlife Ransomware Attack
Rapid Read Rapid Read
PTC Windchill Vulnerability Exploited in Ransomware Campaign Affecting Multiple Industries

PTC Windchill Vulnerability Exploited in Ransomware Campaign Affecting Multiple Industries

A critical remote code execution vulnerability in PTC's Windchill and FlexPLM platforms has been exploited by a Cl0p ransomware affiliate. The vulnerability, tracked as CVE-2026-12569, allows attackers to execute code without authentication due to a deserialization of untrusted data issue. Despite being patched on June 17, the vulnerability was exploited in the wild shortly after, with indicators of compromise published by PTC. The exploitation has targeted organizations in sectors such as aerospace, automotive, manufacturing, and retail/apparel. Attackers have been sending extortion emails to hundreds of users within impacted organizations, threatening data leaks. Organizations are advised to apply patches and conduct threat hunting using published indicators of compromise.
Rapid Read Rapid Read
Meccha Chameleon Servers Compromised by Malware, Discord Hacked

Meccha Chameleon Servers Compromised by Malware, Discord Hacked

A vulnerability in the Meccha Chameleon game allowed malware to be distributed through Steam Workshop maps. The issue, which has been patched, was highlighted by a Medium post from user Feint, who noted that a command prompt window appeared during map downloads, indicating a malware dropper. The developer, Haganeiro, confirmed the vulnerability and stated it has been fixed. Additionally, the game's Discord server was hacked due to a system engineer's compromised PC, leading to altered server permissions and staff bans. The developer is working with Discord Support to resolve the issue.
Rapid Read Rapid Read
Fake Corepack Tool Site Targets Developers with Malware, Raises Security Concerns

Fake Corepack Tool Site Targets Developers with Malware, Raises Security Concerns

A fake website posing as a source for the Corepack toolset has been targeting Node.js developers with malware. Corepack, initially bundled with Node.js from version 16.9.0, was discontinued by the Node.js Technical Steering Committee in 2025. Exploiting this, threat actors created a malicious site, Corepack.org, which appears as a top search result for the tool's name. The site offers an executable download that installs an infostealer capable of accessing browser data and SSH keys, and also enrolls the victim's machine in a proxyjacking scheme. This practice allows the machine's internet connection to be used as an exit node for other traffic, without the owner's knowledge. The malicious site has since been taken down following community reports and an abuse notification to the hosting provider.
Rapid Read Rapid Read
Bank of Baroda Faces Alleged 1TB Data Leak on Dark Web, Raising Security Concerns

Bank of Baroda Faces Alleged 1TB Data Leak on Dark Web, Raising Security Concerns

The Bank of Baroda, a major financial institution in India, is reportedly at the center of a significant cyber incident. A threat actor has allegedly accessed the bank's systems and placed 1TB of sensitive data on the dark web. This data reportedly includes customer and corporate banking information such as Aadhaar numbers, names, and loan records from various branches across India. The breach was first noticed on a dark web tracking site, and sample files linked to the alleged breach have appeared online. Srikanth Lakshmanan, a software engineer and founder of CashlessConsumer, verified the documents and found a range of internal bank documents, including branch audits and customer data. The hacking group TripleX, previously involved in a similar breach in Indonesia, is suspected to be behind this incident.
Rapid Read Rapid Read
Fake Notepad++ Plugin Used in Cyber Espionage Campaign by UAC-0099

Fake Notepad++ Plugin Used in Cyber Espionage Campaign by UAC-0099

The Computer Emergency Response Team of Ukraine (CERT-UA) has identified a cyber espionage campaign using a fake Notepad++ plugin to compromise Windows systems. The campaign, attributed to the Russia-aligned group UAC-0099, involves phishing emails that lead to the download of a malicious VBScript disguised as a PDF. This script installs a fake Notepad++ plugin, which then executes a series of malicious actions, including downloading additional malware. The campaign is part of a broader effort by UAC-0099 to exploit security vulnerabilities and conduct espionage activities.
Trendline Trendline
SourTrade Malvertising Campaign Uses Browsers to Assemble Malware

SourTrade Malvertising Campaign Uses Browsers to Assemble Malware

SourTrade Malvertising Campaign Uses Browsers to Assemble Malware
Rapid Read Rapid Read
Cyber Espionage Group APT28 Targets Hotel Wi-Fi Routers to Steal Corporate Credentials

Cyber Espionage Group APT28 Targets Hotel Wi-Fi Routers to Steal Corporate Credentials

A cyber espionage campaign attributed to APT28, also known as Fancy Bear, is targeting hotel Wi-Fi routers to steal corporate login credentials. The campaign involves DNS poisoning, redirecting web traffic through attacker-controlled infrastructure without the need for phishing links or malicious attachments. This attack has been identified in multiple U.S. cities and other countries. The attackers exploit exposed management interfaces and weak admin credentials to gain initial access to the routers. The campaign is ongoing, and cybersecurity firm ReliaQuest has issued recommendations to prevent such attacks.