Explore

Trendline Trendline
Coca-Cola Confirms Data Breach Following Fairlife Ransomware Attack

Coca-Cola Confirms Data Breach Following Fairlife Ransomware Attack

Coca-Cola Confirms Data Breach Following Fairlife Ransomware Attack
Trendline Trendline
Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disrupts Production

Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disrupts Production

Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disrupts Production
Trendline Trendline
Coca-Cola Resumes Fairlife Production After Ransomware Attack Disrupts U.S. Facilities

Coca-Cola Resumes Fairlife Production After Ransomware Attack Disrupts U.S. Facilities

Coca-Cola Resumes Fairlife Production After Ransomware Attack Disrupts U.S. Facilities
Trendline Trendline
Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disruption

Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disruption

Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disruption
Rapid Read Rapid Read
PTC Windchill Vulnerability Exploited in Ransomware Campaign Affecting Multiple Industries

PTC Windchill Vulnerability Exploited in Ransomware Campaign Affecting Multiple Industries

A critical remote code execution vulnerability in PTC's Windchill and FlexPLM platforms has been exploited by a Cl0p ransomware affiliate. The vulnerability, tracked as CVE-2026-12569, allows attackers to execute code without authentication due to a deserialization of untrusted data issue. Despite being patched on June 17, the vulnerability was exploited in the wild shortly after, with indicators of compromise published by PTC. The exploitation has targeted organizations in sectors such as aerospace, automotive, manufacturing, and retail/apparel. Attackers have been sending extortion emails to hundreds of users within impacted organizations, threatening data leaks. Organizations are advised to apply patches and conduct threat hunting using published indicators of compromise.
Rapid Read Rapid Read
Cybersecurity Firm Reports Hacked Public Wi-Fi Gateways Targeting Corporate Credentials

Cybersecurity Firm Reports Hacked Public Wi-Fi Gateways Targeting Corporate Credentials

A cybersecurity firm, ReliaQuest, has identified a new cyber threat involving the hacking of public Wi-Fi gateway appliances at organizations with captive portal networks. This attack targets the Microsoft 365 accounts of traveling corporate employees. The hackers have been modifying DNS configurations of compromised small office/home office (SOHO) routers to redirect users to attacker-controlled infrastructure, facilitating credential theft. This activity, ongoing since at least June 2026, is similar to the FrostArmada campaign, previously attributed to APT28, a group linked to Russia's GRU. The attacks have been observed at shared venues such as hotels and conference centers across the US, India, and Saudi Arabia. The campaign is not sector-specific, affecting industries like financial services, healthcare, and retail.
Rapid Read Rapid Read
Cyber Espionage Group APT28 Targets Hotel Wi-Fi Routers to Steal Corporate Credentials

Cyber Espionage Group APT28 Targets Hotel Wi-Fi Routers to Steal Corporate Credentials

A cyber espionage campaign attributed to APT28, also known as Fancy Bear, is targeting hotel Wi-Fi routers to steal corporate login credentials. The campaign involves DNS poisoning, redirecting web traffic through attacker-controlled infrastructure without the need for phishing links or malicious attachments. This attack has been identified in multiple U.S. cities and other countries. The attackers exploit exposed management interfaces and weak admin credentials to gain initial access to the routers. The campaign is ongoing, and cybersecurity firm ReliaQuest has issued recommendations to prevent such attacks.
Trendline Trendline
OnTrac Data Breach Exposes Customer Information, Offers Credit Monitoring

OnTrac Data Breach Exposes Customer Information, Offers Credit Monitoring

OnTrac Data Breach Exposes Customer Information, Offers Credit Monitoring
Trendline Trendline
Fastjson 1.x Vulnerability Exploited in Attacks Amid Lack of Patch

Fastjson 1.x Vulnerability Exploited in Attacks Amid Lack of Patch

Fastjson 1.x Vulnerability Exploited in Attacks Amid Lack of Patch
Rapid Read Rapid Read
CTM360 Research Unveils Evolution of Insurance Phishing into Real-Time Account Hijacking

CTM360 Research Unveils Evolution of Insurance Phishing into Real-Time Account Hijacking

CTM360's recent research reveals a significant evolution in phishing tactics targeting insurance companies. Traditionally, phishing involved collecting credentials for later use, but attackers now engage in real-time account hijacking. This method synchronizes with victims' login processes, allowing attackers to authenticate against legitimate insurance portals as victims unknowingly complete their login. The research highlights the use of Google Ads as a primary attack vector, redirecting users to phishing sites that mimic genuine insurance providers. These campaigns target multiple regions, including the U.S., and leverage disposable infrastructure to evade detection.
Rapid Read Rapid Read
Cl0p Ransomware Group Exploits PTC Windchill Vulnerability for Data Extortion

Cl0p Ransomware Group Exploits PTC Windchill Vulnerability for Data Extortion

The Cl0p ransomware group is targeting vulnerabilities in PTC Windchill and FlexPLM systems, exploiting a critical security flaw (CVE-2026-12569) to execute remote code and deploy web shells. This campaign affects sectors such as manufacturing, automotive, aerospace, and retail. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has listed this flaw in its Known Exploited Vulnerabilities catalog. The attackers use a combination of information disclosure and server-side flaws to gain unauthorized access, leading to data theft and extortion. The Cl0p group has a history of exploiting enterprise software vulnerabilities for similar attacks.
Rapid Read Rapid Read
US and Allies Accuse Russian Hackers of Email Breaches Without Social Engineering

US and Allies Accuse Russian Hackers of Email Breaches Without Social Engineering

The United States, along with over a dozen allied nations, has accused Russian hackers of stealing emails from users of the Zimbra email program without using traditional social engineering tactics. The hackers exploited a vulnerability in Zimbra software, allowing them to compromise accounts when users merely opened an email. This method, described as a 'half-click exploit' by cybersecurity firm Proofpoint, bypassed the need for users to click on malicious links or attachments. The hacking campaign, attributed to the Russian government-supported group Laundry Bear, initially targeted Ukraine before expanding to NATO member countries, including the U.S. The group is linked to a Russian cybersecurity company, Yutek-NN, whose deputy director faces hacking charges in the U.S.