June 2025: The 16 Billion Credential “Mega-Leak”
Photo by Ann H on Pexels In June, researchers uncovered a staggering dataset of over 16 billion login credentials hosted openly online. While not a single breach of one company,…
My Artificial Intelligence Thoughts and Nothing Else
Photo by Ann H on Pexels In June, researchers uncovered a staggering dataset of over 16 billion login credentials hosted openly online. While not a single breach of one company,…
Photo by Atlantic Ambience on Pexels July was defined by the “SolarWinds moment for SaaS.” A breach at the sales-engagement platform SalesLoft allowed ShinyHunters to exploit OAuth integrations with Salesforce.…
Photo by Cara Denison on Pexels Retail giant Marks & Spencer (M&S) was the face of a coordinated ransomware campaign in April. The Scattered Spider group exploited Active Directory credentials…
Photo by Matheus Bertelli on Pexels The Crimson Collective threat group claimed a major victory in October by exfiltrating 570GB of data from Red Hat-managed GitLab servers. The breach affected…
Photo by Matheus Bertelli on Pexels November saw a wave of attacks exploiting a zero-day vulnerability in Oracle E-Business Suite (EBS). Auto parts maker LKQ and the University of Pennsylvania…
Photo by Volker Meyer on Pexels The year ended with two massive consumer data breaches. South Korean e-commerce giant Coupang reported that a former employee had leaked the personal information…
Photo by Sami Abdullah on Pexels In one of the most economically damaging attacks of the year, Jaguar Land Rover (JLR) was forced to shut down global production lines for…
Photo by Viridiana Rivera on Pexels As we close out December 2025, the tech world is reflecting on a paradigm shift that many didn’t see coming at the start of…
Photo by Gustavo Fring on Pexels The year ended with a flood of fake charity appeals. Scammers used AI to generate moving stories and images of disaster victims to solicit…
Photo by Mikhail Nilov on Pexels During the Black Friday shopping frenzy, “package delivery” scams peaked. Victims received SMS messages claiming their “Amazon” or “FedEx” package was delayed and required…