Clipper malware steals crypto via USB and uses Tor as C2
Microsoft warns of a campaign active since February 2026 that combines a USB worm, clipboard hijacking and Tor-based C2 …
Incident Response 43 posts
Information security in plain English: scams, hardening and privacy — plus retrogaming, games and geek culture.
iFood data breach: 1.2 million Brazilian IDs exposed
iFood confirmed a breach dating to December 2025: names, national ID numbers and addresses of 1.2 million customers …
ShinyHunters exploits Oracle PeopleSoft zero-day, 100+ victims
ShinyHunters exploited CVE-2026-35273, a CVSS 9.8 zero-day in Oracle PeopleSoft, to breach 100+ organisations before a …
Aflac: breach exposes the data of 22.7 million people
The US insurer confirms that a June 2025 attack exposed the health data and SSNs of 22.7 million people. It took a year …
Miasma: supply chain worm infects 32 Red Hat npm packages
On 1 June, the Miasma worm compromised 32 Red Hat npm packages and stole AWS, Azure, GCP and Kubernetes credentials …
DragonForce ransomware: the cartel that took down M&S and Co-op
DragonForce took down Marks & Spencer with a phone call to the helpdesk: it stole NTDS.dit and locked ESXi. A cartel …
MOVEit: 3 years on from the zero-day that exposed 93 million records
On 31 May 2023, CVE-2023-34362 in MOVEit Transfer became the largest supply chain attack by SQL injection in history, …
CISA leaked AWS GovCloud credentials on GitHub for 6 months
A CISA contractor published AWS GovCloud account credentials, SSH keys and plain-text passwords in a public repo — and …
Carnival Corporation: 6m customers leaked by ShinyHunters
Carnival Corporation had 6 million customers exposed after ShinyHunters tricked an employee through social engineering …
CVE-2026-42897: Exchange OWA zero-day exploited with no patch
Opening an email in Exchange OWA can compromise your authenticated session. CVE-2026-42897 is active with no permanent …