Data Breaches
French Government Discloses Tchap Messenger Breach Affecting 73,000+ Accounts
The sovereign-messaging assumption gets a hard test — Tchap's 73,000-account breach reframes the conversation.
Latest
Ransomware
Europol Announces Takedown of AudiA6 Crypto Laundering Service
Breaking the financial pipes of the ransomware economy — Europol's latest structural disruption.
Ransomware
Ukrainian National Pleads Guilty in Conti Ransomware Case
Another individual conviction in the long-running US law-enforcement effort against the Conti operation.
Vulnerabilities
Ivanti Sentry Critical Flaws Exploited 24 Hours After Disclosure
Twenty-four hours separated disclosure from in-the-wild exploitation — CISA's emergency directive gives federal agencies three days to patch.
Vulnerabilities
ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) — 100+ Organizations Breached
Google Threat Intelligence confirmed mass exploitation of an Oracle PeopleSoft zero-day by ShinyHunters; universities are the primary target and the extortion has begun.
Nation-State Cyber Threats
ESET Publishes OceanLotus (APT32) Research Update — Domestic Targeting in Vietnam
ESET's research update reframes OceanLotus — the targeting is now inward.
Nation-State Cyber Threats
US Justice Department Charges Russian National in Void Blizzard Case
Another indictment in a Russia-aligned case — but unlike most, this defendant is already in US custody after an extradition from Thailand.
Ransomware
"The Gentlemen" Ransomware Claims 478 Victims and Spreads Like a Worm
A ransomware group that spreads like a worm and counts 478 victims — and the Krebs investigation now identifying the people running it.
Nation-State Cyber Threats
WinRAR Flaw Exploited by Russia-Aligned Groups Against Ukrainian Organizations
Consumer compression software remains a reliable initial-access vector in the Russia-Ukraine cyber theater.
Policy & Government
CISA Rewrites Federal Patching with BOD 26-04 — Patch by Risk, Fix Criticals in 3 Days
CISA's new directive ends CVSS-led patching for federal agencies — risk becomes the prioritization signal, and the most dangerous bugs must be patched in three days.
Vulnerabilities
Microsoft's Record 206-CVE Patch Tuesday and the Nightmare Eclipse Zero-Days
The largest Patch Tuesday on record arrives with three publicly disclosed zero-days — and a running feud with one researcher producing a steady stream of Microsoft exploits.
Nation-State Cyber Threats
Researchers Disclose Growth of China-Linked JDY Botnet
A small-footprint, long-tail Chinese proxy network grows past 1,500 devices — defenders should account for this layer of reconnaissance infrastructure.