The Latest

• 

  Hackers steal sensitive Red Hat customer data after breaching GitLab repository

  Walmart, American Express and HSBC are among the companies that have had sensitive data exposed.

  Updated Oct. 6, 2025

  Breaches

• 

  Extortion campaign targeting Oracle E-Business Suite customers linked to zero-day

  Mandiant researchers said Clop ransomware is indeed linked to a series of emails threatening to release stolen data. 

  Vulnerability

• 

  Oracle investigating extortion emails targeting E-Business Suite customers

  Hackers claiming links to Clop ransomware could be exploiting vulnerabilities disclosed in a July critical patch update.

  Cyberattacks

• 

  Renault Group confirms UK customer data stolen in third-party breach

  The incident marks the latest in a series of recent cyberattacks impacting the auto industry.

  Breaches

• 

  Hackers claiming ties to Clop launch wide extortion campaign targeting corporate executives

  The email-based campaign purports to have sensitive data from breached Oracle E-Business Suite applications. 

  Cyberattacks

• 

  Landmark US cyber-information-sharing program expires, bringing uncertainty

  Without legal protections, companies might stop reporting information about cybersecurity threats.

  Strategy

• 

  Deep Dive

  Federal cuts force many state and local governments out of cyber collaboration group

  The Multi-State Information Sharing and Analysis Center lost U.S. government funding at midnight, jeopardizing the cybersecurity of thousands of cash-strapped counties, cities and towns.

  Strategy

• 

  CMMC is coming, but most contractors still have a long road to full compliance

  A new survey illustrates the defense industrial base’s fragmented security posture.

  Strategy

• 

  Canadian airline WestJet says some customer data stolen in June cyberattack

  The attack occurred during the same period when Scattered Spider had begun to pivot toward the aviation sector.

  Breaches

• 

  Cisco firewall flaws endanger nearly 50,000 devices worldwide

  The U.S., the U.K. and Japan lead the list of the most vulnerable countries.

  Vulnerability

• 

  CISA to furlough 65% of staff if government shuts down this week

  Employees are worried about threatened mass firings and the cybersecurity ripple effects of a funding lapse.

  Leadership & Careers

• 

  CISA orders feds to patch Cisco flaws used in multiple agency hacks

  One U.S. official called the ongoing cyberattack campaign “very sophisticated.”

  Breaches

• 

  Jaguar Land Rover to resume some manufacturing within days

  The U.K. will support a $2 billion loan guarantee to help restore the automaker’s supply chain after a cyberattack disrupted production.

  Strategy

• 

  Jaguar Land Rover begins phased restoration of services following cyberattack

  The luxury automaker is working diligently to clear payment backlogs and resume the shipment of parts. 

  Breaches

• 

  RTX confirms hack of passenger boarding software involved ransomware

  The parent company of Collins Aerospace said the attack is not expected to have a material impact on financial results, according to an SEC filing.

  Cyberattacks

• 

  Critical infrastructure operators add more insecure industrial equipment online

  The problem isn’t limited to legacy technology. New devices are exposed with critical vulnerabilities.

  Vulnerability

• 

  Cyber insurance could greatly reduce losses from diversification, mitigation measures

  A report by CyberCube shows the global market is heavily concentrated in the U.S. and would benefit from expanding into new segments and improving cyber hygiene.

  Strategy

• 

  China-linked groups are using stealthy malware to hack software suppliers

  Google, which disclosed the campaign, said it was one of the most significant supply-chain hacks in recent memory.

  Breaches

• 

  CISA urges dependency checks following Shai-Hulud compromise

  Security teams are urged to review their software environments after a major supply chain attack on the NPM ecosystem.

  Strategy

• 

  UK authorities arrest man in connection with cyberattack against aviation vendor

  The attack against Collins Aerospace led to significant flight disruptions at Heathrow and other major European hubs.

  Threats

• 

  Jaguar Land Rover to extend production pause into October following cyberattack

  Meanwhile, Stellantis said hackers gained access to some customer information in a third-party data breach.

  Strategy

• 

  Many ‘material’ cybersecurity breaches go unreported: VikingCloud

  The research also found that cyberattacks have escalated both in frequency and severity in the past year, with AI serving as a primary driver behind the surge.

  Strategy

• 

  SonicWall customers warned about brute force attacks against cloud backup service

  Hackers have gained access to key information that could help exploit firewalls.

  Breaches

• 

  Flights across Europe delayed after cyberattack targets third-party vendor

  A suspected ransomware attack targeting a U.S. company that provides check-in technology has led to widespread flight disruptions since Friday.

  Cyberattacks

• 

  Social engineering campaigns highlight the ability to exploit human behavior

  A report by S&P says organizations should consider changes to strengthen cyber governance, training and awareness. 

  Vulnerability

More stories