Microsoft warns of ransomware gang shifting to steal cloud data, lock companies out of systems Summary Microsoft has warned about a campaign by a long-running threat actor, tracked as Storm-0501,…
CISA steps in to help Nevada state government recover from cyberattack Summary The Cybersecurity and Infrastructure Security Agency (CISA), working with the FBI and other federal and local partners, has…
Salesforce data missing? It might be due to Salesloft breach, Google says Summary Google’s Threat Intelligence Group says a recent wave of Salesforce data thefts stemmed from attackers stealing OAuth…
The intruder is in the house: Storm-0501 attacked Azure, stole data, demanded payment via Teams Summary Storm-0501, a financially motivated threat group, breached a large enterprise’s hybrid environment and moved…
Putin on the code: DoD reportedly relies on utility written by Russia-based Yandex dev Summary Security researcher Hunted Labs has revealed that the widely used Node.js utility fast-glob is maintained…
Nx NPM packages poisoned in AI-assisted supply chain attack Summary Popular Nx packages on the NPM registry were maliciously updated on 26 August 2025, with attackers publishing poisoned versions that…
Sting nails two front firms in North Korea IT worker scam Summary The US Treasury has sanctioned two Asian companies and two individuals accused of funnelling more than $1m to…
Crims laud Claude to plant ransomware and fake IT expertise Summary Anthropic’s 25-page security report describes how criminals and nation-state actors are using its Claude models — notably a capability…
If you thought China’s Salt Typhoon was booted off critical networks, think again Summary A joint advisory from cyber and law-enforcement agencies in 13 countries warns that China-linked Salt Typhoon…
Law firm email blunder exposes Church of England abuse victim details Summary London law firm Kennedys Law accidentally revealed the email addresses of 194 individuals and law firms who had…
