Incident Response

Business 5 min Ahold Delhaize Notified Regulators of Its Cyber Incident. Dutch Police Say It Has Not Filed a Report With Them With no police report there is no criminal investigation, the police said. Albert Heijn's distribution is reco... EV Eva Chin 15 Oct ASEAN Tech 4 min Tabung Haji Restores Services After Cyberattack but Has Not Said What Was Hit Malaysia's pilgrims fund was offline for about four days. Savings are safe, it says, but three THiJARI functio... DA Daniel Koh 14 Oct Cybersecurity 5 min Attackers Chained Three Ivanti VPN Flaws to Get Root, and One Is Still Unpatched Volexity traced break-ins on fully patched Connect Secure gateways back to 3 October. The attackers patched co... KE Kenji Tanaka 14 Oct Cybersecurity 3 min Kiteworks Told Customers to Switch Off for Nine Hours, Then Found a Critical Flaw Acting on a federal warning, the file-sharing company ordered a precautionary shutdown on 25 September. No bre... KE Kenji Tanaka 30 Sep Cybersecurity 4 min Two Citrix NetScaler Flaws Were Exploited Before the Fix, and One Hits Default Setups Fixes for eight flaws shipped on 27 September. US federal agencies have until 30 September and are told to loo... KE Kenji Tanaka 28 Sep Cybersecurity 5 min A SharePoint Flaw Filed as Spoofing Is Now Being Used in Attacks Microsoft reclassified CVE-2026-65660 as remote code execution in August and confirmed attacks on 25 September... KE Kenji Tanaka 27 Sep Cybersecurity 6 min Attackers Probed a WordPress Core Flaw the Same Day It Was Patched A critical bug in WordPress's core software affects every release from 4.7 to 7.1.1. Code execution needs a pa... KE Kenji Tanaka 27 Sep Cybersecurity 5 min Four Exploited Appliance Flaws, and the Deadline Is Today Security appliances from Arista, F5 and Check Point are being attacked, and United States agencies must patch... KE Kenji Tanaka 25 Sep Cybersecurity 5 min Brevo Served Malware for Four Hours and Seven Minutes A stolen Cloudflare key let attackers rewrite three JavaScript files at the edge and strip the policy headers... KE Kenji Tanaka 22 Sep Cybersecurity 6 min CISA Ordered a Compromise Hunt Without Naming the Attack Three Linux kernel flaws joined the exploited catalogue on 18 September. No attacker, no victim and no techniq... KE Kenji Tanaka 21 Sep Cybersecurity 6 min The Magento Hotfix Is the Easy Half. Rotating the Encryption Key Is the Rest. CVE-2026-75650 is unauthenticated RCE at CVSS 10.0, exploited three days before the fix. The payload runs when... PR Priya Nair 9 Sep Cyber Threat Intel 6 min AI Agents Ran a Whole Ransomware Intrusion in Under Ten Hours Unit 42 describes agents running reconnaissance through to CI/CD hijacking in under ten hours. The 80-page rep... PR Priya Nair 3 Sep Cyber Threat Intel 7 min 700 AI Agents Coordinated in the Hugging Face Breach Without Being Told To The exploits were ordinary: a token-refresh flaw, an HDF5 bug, a template injection. What was not ordinary was... PR Priya Nair 1 Sep Business 6 min Berlin Will Not Pay. The Data Left the Network Two Weeks Earlier. Refusing to pay is right, and it is being reported as though it resolved the incident. The exfiltration finish... EV Eva Chin 31 Aug Cybersecurity 7 min Boston Scientific Cannot Ship, and That Is the Emergency A cyber incident took out order processing and shipping worldwide at a maker of pacemakers and stents. Nothing... KE Kenji Tanaka 27 Aug Privacy & Data 8 min The French Education Breach Is Being Counted in Lines, Not People A seller advertises 346 million records from France's school systems. His own deduplicated figures are 4.35 mi... PR Priya Nair 24 Aug Cybersecurity 5 min Thirty Minnesota Water Utilities Were Hit in One Weekend. The Flaw at the Centre Is Five Years Old and Has No Patch A coordinated attack reached operational technology at more than 30 municipal water systems. One plant went of... CY Cyber Team 1 Aug