October 2025: Red Hat GitLab and the 570GB Leak
Photo by Matheus Bertelli on Pexels The Crimson Collective threat group claimed a major victory in October by exfiltrating 570GB of data from Red Hat-managed GitLab servers. The breach affected…
My Artificial Intelligence Thoughts and Nothing Else
Photo by Matheus Bertelli on Pexels The Crimson Collective threat group claimed a major victory in October by exfiltrating 570GB of data from Red Hat-managed GitLab servers. The breach affected…
Photo by Matheus Bertelli on Pexels Japanese brewing giant Asahi reported a total “system failure” across its global operations in September. The cause was quickly confirmed as a coordinated ransomware…
Photo by Sami Abdullah on Pexels In one of the most economically damaging attacks of the year, Jaguar Land Rover (JLR) was forced to shut down global production lines for…
Photo by Atlantic Ambience on Pexels July was defined by the “SolarWinds moment for SaaS.” A breach at the sales-engagement platform SalesLoft allowed ShinyHunters to exploit OAuth integrations with Salesforce.…
Photo by Ann H on Pexels In June, researchers uncovered a staggering dataset of over 16 billion login credentials hosted openly online. While not a single breach of one company,…
Photo by Snappr on Pexels May shifted the focus toward internal vulnerabilities. Coinbase revealed that hackers had bribed overseas support agents to facilitate account takeovers, highlighting a disturbing trend of…
Photo by Cara Denison on Pexels Retail giant Marks & Spencer (M&S) was the face of a coordinated ransomware campaign in April. The Scattered Spider group exploited Active Directory credentials…
Photo by Aseem Borkar on Pexels March saw the aviation industry thrown into chaos after a ransomware attack targeted Collins Aerospace’s vMUSE platform. This software is essential for passenger check-in…
Photo by Matheus Bertelli on Pexels In mid-February, the Bybit cryptocurrency exchange fell victim to what is now cited as the largest crypto theft in history. Hackers, believed to be…
Photo by Viridiana Rivera on Pexels The year began with a massive exploitation of zero-day vulnerabilities in Ivanti and SonicWall VPN products. One of the most high-profile victims was Nominet,…