1. Executive summary The ShinyHunters extortion gang (MITRE G1057) claims to have breached the Clop ransomware operation's Tor-based data leak site, defacing it
1. Executive summary Check Point Research's weekly bulletin for 14 September 2026 covers a Microsoft September Patch Tuesday of 974 vulnerabilities including two source-
1. Executive summary ShinyHunters (MITRE G1057) has claimed, and the Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has now publicly confirmed, a breach of
1. Executive summary Anthropic's latest AI misuse report (covering activity disrupted between December 2025 and August 2026) documents state-sponsored and criminal operators using
1. Executive summary A social engineering campaign tracked since May 2026 has attackers calling and texting employees directly on their personal (BYOD) phones while posing as
1. Executive summary Check Point's weekly intelligence report covers four items with direct operational relevance to EMEA financial services: emergency PaperCut fixes for two
1. Executive summary Malwarebytes reports that Take-Two Interactive subpoenaed Microsoft and Discord for identifying data associated with members of three Discord servers after an account
1. Executive summary Cybersecurity firm ReliaQuest has confirmed a limited breach attributed to the ShinyHunters threat actor (MITRE G1057). The attack combined a voice social-engineering
1. Executive summary ShinyHunters (MITRE G1057) has publicly named Logitech / Streamlabs (Switzerland) as a ransomware victim on their leak site, issuing a final warning with a
1. Executive summary On 2 August 2026, the actor "shinyhunters" publicly named Questel SAS (France, questel.com) as a ransomware victim, claiming exfiltration of
1. Executive summary Between mid-2025 and mid-2026, Microsoft tracked a series of campaigns targeting customer SaaS-based applications — predominantly Salesforce instances — using tradecraft associated
1. Executive summary A critical vulnerability in Oracle E-Business Suite (EBS) Payments — CVE-2026-46817 — is being actively exploited in the wild following Oracle'