1. Executive Summary On 21 February 2025, cryptocurrency exchange Bybit suffered a theft of approximately $1.5 billion in virtual assets—an incident the US Federal Bureau of Investigation (FBI) publicly attributed…
1. Executive Summary On 19 November 2024, reporting indicated that financial software provider Finastra was investigating an alleged data breach involving its secure file transfer capability used for transmitting sensitive…
Microsoft has released its December Patch Tuesday security updates, addressing 71 vulnerabilities across its product ecosystem. The release includes 16 Critical-rated flaws and one actively exploited zero-day vulnerability: CVE-2024-49138, affecting…
Note on timing: Public reporting and official disclosures indicate the intrusion began in February 2024, while October 2024 is significant because Change Healthcare informed HHS OCR that ~100 million individual…
The Nitrogen ransomware group has claimed responsibility for a significant data breach affecting SRP Federal Credit Union, resulting in the exposure of sensitive personal and financial information belonging to 240,742…
1. Executive Summary CVE-2024-38094 is a Microsoft SharePoint Server remote code execution (RCE) vulnerability rooted in unsafe deserialisation (CWE-502) and scored 7.2 (High) under CVSS v3.1 by Microsoft. (NVD) It…
1. Executive Summary In October 2024, the Internet Archive (IA) faced a compound cyber incident combining service-disrupting DDoS activity with a major compromise of user authentication data (31 million records)…
1. Executive Summary In a financially motivated campaign attributed to the Lazarus Group’s BlueNoroff ecosystem, attackers weaponised a Google Chrome zero-day in the V8 JavaScript engine to compromise victims who…
1. Executive Summary CVE-2024-47575 is a critical “missing authentication for a critical function” vulnerability (CWE-306) in Fortinet FortiManager and FortiManager Cloud that can enable unauthenticated remote attackers to execute arbitrary…
Cisco is investigating a recent data breach after a threat actor known as “IntelBroker” claimed to have stolen sensitive data from the company’s internal repositories and has listed it for…