On April 1, 2026, Drift Protocol lost $285 million in the largest DeFi attack of the year. Technical analysis: Solana durable nonce abuse, 2-of-5 multisig compromise via social engineering, attribution to North Korea.
GitGuardian's State of Secrets Sprawl 2026 report reveals 29 million hardcoded secrets on GitHub. AI commits leak 2x more, and 70% of 2022 secrets are still valid.
The Dutch Ministry of Finance confirms a breach detected on March 19, 2026. Third European institution hit in March after the European Commission.
Anime streaming platform Crunchyroll (Sony) was breached on March 12, 2026. 100 GB of data exfiltrated via a compromised TELUS employee.
ShinyHunters compromised Infinite Campus via a Salesforce account on March 18, 2026. The system manages data for 11 million students across 3,200 US school districts.
The European Commission's AWS account was compromised, highlighting cloud security risks for government institutions and the shared responsibility model.
Foster City, California declared a state of emergency after a ransomware attack paralyzed municipal services for over a week.
Ransomware group Qilin claims an attack on Malaysia Airlines. Passenger bookings, HR files, vendor contracts, and internal communications compromised.
Citrix patches CVE-2026-3055 (CVSS 9.3), a NetScaler ADC/Gateway flaw allowing sensitive memory reads via SAML. Analysis and remediation.
CVE-2026-3094 reveals a backdoor in XZ Utils, a compression utility present on nearly all Linux systems. Analysis of a historic near-miss.
On March 11, 2026, TELUS Digital suffered a ransomware attack claimed by ShinyHunterz, compromising 1 petabyte of data. Incident analysis and takeaways.
Discover SecVigil, a cybersecurity watch platform for professionals. Threat intelligence, vulnerabilities, compliance, tools, and tutorials.