November 2025: Gainsight and the Oracle EBS Breach
Stuart Glover
Photo by Matheus Bertelli on Pexels November saw a wave of attacks exploiting a zero-day vulnerability in Oracle E-Business Suite (EBS). Auto parts maker LKQ and the University of Pennsylvania…
Cyber Attacks
December 2025: Coupang and SoundCloud Finish the Year
Photo by Volker Meyer on Pexels The year ended with two massive consumer data breaches. South Korean e-commerce giant Coupang reported that a former employee had leaked the personal information…
January 2025: The VPN Zero-Day Crisis Hits Nominet
Photo by Viridiana Rivera on Pexels The year began with a massive exploitation of zero-day vulnerabilities in Ivanti and SonicWall VPN products. One of the most high-profile victims was Nominet,…
February 2025: Bybit and the $1.5 Billion Crypto Heist
Photo by Matheus Bertelli on Pexels In mid-February, the Bybit cryptocurrency exchange fell victim to what is now cited as the largest crypto theft in history. Hackers, believed to be…
March 2025: Aviation Grounded by Collins Aerospace Breach
Photo by Aseem Borkar on Pexels March saw the aviation industry thrown into chaos after a ransomware attack targeted Collins Aerospace’s vMUSE platform. This software is essential for passenger check-in…
April 2025: Marks & Spencer and the UK Retail Wave
Photo by Cara Denison on Pexels Retail giant Marks & Spencer (M&S) was the face of a coordinated ransomware campaign in April. The Scattered Spider group exploited Active Directory credentials…
May 2025: The Insider Threat at Coinbase and Coca-Cola
Photo by Snappr on Pexels May shifted the focus toward internal vulnerabilities. Coinbase revealed that hackers had bribed overseas support agents to facilitate account takeovers, highlighting a disturbing trend of…
June 2025: The 16 Billion Credential “Mega-Leak”
Photo by Ann H on Pexels In June, researchers uncovered a staggering dataset of over 16 billion login credentials hosted openly online. While not a single breach of one company,…
July 2025: The SalesLoft-Salesforce SaaS Domino Effect
Photo by Atlantic Ambience on Pexels July was defined by the “SolarWinds moment for SaaS.” A breach at the sales-engagement platform SalesLoft allowed ShinyHunters to exploit OAuth integrations with Salesforce.…
August 2025: Jaguar Land Rover Production Paralyzed
Photo by Sami Abdullah on Pexels In one of the most economically damaging attacks of the year, Jaguar Land Rover (JLR) was forced to shut down global production lines for…