The ShinyHunters group is threatening to publish Rockstar Games Snowflake data on April 14, 2026. The breach allegedly runs through Anodot, a third-party AI analytics provider. Another supply chain attack case.
The FBI and DoJ neutralized a Russian GRU operation that exploited compromised home and SMB routers for DNS hijacking, espionage, and credential theft. Routers remain the weakest link in network security.
Hackers claim the compromise of several major Colombian banks on April 8, 2026, publishing samples of customer data online. Risk analysis, regulatory obligations, and lessons for the financial sector.
On March 28, 2026, Hasbro discovered unauthorized access to its systems. External cybersecurity specialists were brought in and some systems taken offline. The full scope of the incident is still being determined.
On April 1, 2026, Middlesex County in New Jersey was struck by a ransomware attack targeting its municipal and public safety systems. This new incident confirms the structural vulnerability of local US governments to cybercriminal groups.
Drift officially confirms the $285 million attack against its DeFi protocol was planned six months in advance by North Korean state-sponsored hackers from group UNC4736. Funds were bridged to Ethereum and laundered via Tornado Cash.
On April 1, 2026, Drift Protocol lost $285 million in the largest DeFi attack of the year. Technical analysis: Solana durable nonce abuse, 2-of-5 multisig compromise via social engineering, attribution to North Korea.
GitGuardian's State of Secrets Sprawl 2026 report reveals 29 million hardcoded secrets on GitHub. AI commits leak 2x more, and 70% of 2022 secrets are still valid.
The Dutch Ministry of Finance confirms a breach detected on March 19, 2026. Third European institution hit in March after the European Commission.
Anime streaming platform Crunchyroll (Sony) was breached on March 12, 2026. 100 GB of data exfiltrated via a compromised TELUS employee.
ShinyHunters compromised Infinite Campus via a Salesforce account on March 18, 2026. The system manages data for 11 million students across 3,200 US school districts.
The European Commission's AWS account was compromised, highlighting cloud security risks for government institutions and the shared responsibility model.
Foster City, California declared a state of emergency after a ransomware attack paralyzed municipal services for over a week.
Ransomware group Qilin claims an attack on Malaysia Airlines. Passenger bookings, HR files, vendor contracts, and internal communications compromised.
Citrix patches CVE-2026-3055 (CVSS 9.3), a NetScaler ADC/Gateway flaw allowing sensitive memory reads via SAML. Analysis and remediation.
CVE-2026-3094 reveals a backdoor in XZ Utils, a compression utility present on nearly all Linux systems. Analysis of a historic near-miss.
On March 11, 2026, TELUS Digital suffered a ransomware attack claimed by ShinyHunterz, compromising 1 petabyte of data. Incident analysis and takeaways.
Discover SecVigil, a cybersecurity watch platform for professionals. Threat intelligence, vulnerabilities, compliance, tools, and tutorials.