In-depth write-ups of high-impact intrusions, breaches and malware campaigns — how they happened, and what defenders can learn.
111 reports
In spring 2025, Co-op Group suffered a significant cyber incident that ultimately resulted in the copying (exfiltration) of Co-op member personal data. Co-op later confirmed that the incident…
France-based telecoms provider Free (and sister company Free Mobile, both under Groupe Iliad) confirmed a cyberattack that resulted in unauthorised access to customer personal data. According to…
On 21 February 2025 , cryptocurrency exchange Bybit suffered a theft of approximately $1.5 billion in virtual assets—an incident the US Federal Bureau of Investigation (FBI) publicly attributed to…
Secrets leaked via compromised CI components GitHub Actions, CI/CD, Supply chain compromise, Secrets exposure, DevSecOps, CVE-2025-30066, CVE-2025-30154, tj-actions, reviewdog, Software supply…
In February 2025, Lee Enterprises disclosed a material cybersecurity incident that disrupted distribution, billing, collections, and vendor payments across its newspaper portfolio. In a regulatory…
December 2024 marked a sharp escalation in nation-state cyber activity targeting democratic institutions and government infrastructure. Two developments stand out: a sustained rise in cyberattacks…
Note on timing: Public reporting and official disclosures indicate the intrusion began in February 2024 , while October 2024 is significant because Change Healthcare informed HHS OCR that ~ 100…
The Nitrogen ransomware group has claimed responsibility for a significant data breach affecting SRP Federal Credit Union, resulting in the exposure of sensitive personal and financial information…
In October 2024, the Internet Archive (IA) faced a compound cyber incident combining service-disrupting DDoS activity with a major compromise of user authentication data (31 million records) and a…
Cisco is investigating a recent data breach after a threat actor known as "IntelBroker" claimed to have stolen sensitive data from the company's internal repositories and has listed it for sale on…
Reports have emerged of an alleged data breach at Credit Suisse, potentially impacting sensitive data of nearly 19,000 employees in India. This incident marks yet another challenge for the bank,…
In August 2024, **FlightAware**, a widely-used flight-tracking platform, disclosed a significant data breach. The breach, caused by a **configuration error**, exposed the **personal information**…
