Cyber Attacks
Monmouth University officials confirmed this week that a ransomware attack has disrupted campus digital infrastructure in New Jersey. The cybercriminal collective known as Pear stated they were responsible for the breach, asserting that they exfiltrated sensitive data before encrypting local systems. Detection and Containment The university detected unauthorized activity on
Vulnerabilities
As cryptocurrency adoption continues to grow, so does a lesser-known but highly impactful cyber threat: cryptojacking. Cryptojacking is a type of cyberattack in which cybercriminals hijack the computing resources of victims' devices to mine cryptocurrency without permission. Unlike traditional cyberattacks that focus on stealing data, cryptojacking silently hijacks
Cyber Attacks
Global pharmaceutical leader AstraZeneca is investigating claims of a significant data breach after a cybercrime group alleged it successfully exfiltrated sensitive internal information, including proprietary source code and clinical data. The extortion group, identified by security researchers as a contingent of the Lapsus$ hacking collective, posted evidence of the alleged
Data Breaches
The Los Angeles County Metropolitan Transportation Authority (Metro) restricted access to its internal computer systems late Saturday following the detection of unauthorized activity on its network. The proactive shutdown impacted employee workstations and administrative applications across the agency — a move intended to contain the threat while forensic investigators determine the
Cybersecurity 101
Lateral movement is how attackers turn a single foothold into a company-wide breach — hopping system to system toward the crown jewels. A defender's guide to the techniques, detection signals, and controls that stop the spread.
Cyber Attacks
Officials in Foster City declared a local state of emergency on Wednesday following a targeted ransomware attack that has disrupted municipal computer systems and forced critical digital infrastructure offline for several days. The declaration — authorized by City Manager Stefan Chatwin and formally adopted by the City Council — is intended to
Data Breaches
Mazda Motor Corporation has confirmed a cybersecurity incident that resulted in unauthorized access to its internal IT systems, leading to the exposure of personal information belonging to employees and business partners. The Japanese automaker disclosed that the breach was the result of a vulnerability in a warehouse management system, though
Data Breaches
The decentralized finance (DeFi) protocol Resolv has suspended operations following a sophisticated perimeter breach that resulted in the theft of approximately $24.5 million in Ethereum (ETH). The incident, which targeted the protocol’s off-chain administrative infrastructure, triggered an illicit minting of $80 million in uncollateralized USR stablecoins and
Identity & Access Management (IAM)
A step-by-step guide to implementing IAM in your organization — the five phases, common pitfalls, team structure, KPIs, and realistic timelines for a mature program.
Cyber Attacks
Crunchyroll, the world’s largest anime streaming platform, has launched an investigation into claims that a threat actor has exfiltrated nearly 100GB of sensitive user data. The alleged breach was first brought to light after a prominent hacker group posted samples of the database on a known cybercrime forum, claiming
Cybersecurity 101
A defender's guide to privilege escalation — how vertical and horizontal escalation work, the techniques attackers use to climb from a low-privilege foothold to admin or root, real-world examples, and the controls that stop it.
Artificial Intelligence (AI)
Meta is investigating a significant internal security incident after an autonomous AI agent bypassed identity and access management (IAM) protocols to expose sensitive corporate data to unauthorized employees. The breach, characterized by researchers as a "confused deputy" vulnerability, has prompted the social media giant to accelerate the development