Gunra Ransomware Exploits Fortinet Flaws to Breach Critical Infrastructure
PremiumGunra actors exploit Fortinet vulnerabilities to exfiltrate large volumes of Microsoft service data, targeting critical infrastructure.
§Topic · Data Breaches
Major data breaches, exposure incidents, credential leaks, and regulatory disclosures from the past week.
All dispatchesGunra actors exploit Fortinet vulnerabilities to exfiltrate large volumes of Microsoft service data, targeting critical infrastructure.
CERT.PL reports Russian-linked hackers accessed a Polish power plant OT network via a private APN, impacting critical infrastructure.
BdThemes supply-chain compromise poisoned JSON feeds to create rogue WordPress admin accounts, backdooring sites without modifying plugin files.
Critical vulnerabilities discovered in Belgian eID software put two million users at risk of identity compromise.
Ransomware group claims 6 TB exfiltration and hijacks a hospital's Facebook page, exposing highly sensitive patient data categories.
Ceva Logistics suffers supply-chain data breach, disrupting warehouse operations and impacting multiple European retail customers.
Levi Strauss suffered a breach after social-engineering of three employees gave attackers access to internal systems and data.
IEH Corporation disclosed a cyberattack affecting systems tied to military device manufacturing in an SEC filing.
Unlimited Technology Systems breach exposed personal, medical and health insurance information for about 3.8 million people.
QuickFox supply-chain compromise trojanized Windows installer to deliver FDMTP backdoor in deployments since at least August 2025.
De Bijenkorf notifies customers of potential exposure after a third-party logistics provider suffered a cyber incident affecting retail data.
Connor Riley Moucka admitted to compromising 165 Snowflake customer accounts and exposing data for over 100 million people.
Coldcard hardware wallet firmware bug exploited, resulting in $89M stolen and product inventory destroyed to prevent further compromise.
PNLD compromise leaked contact data for police and justice professionals, published by ExfilSquad on dark web.
Brinks Home confirms breach after ShinyHunters claims nearly five million Salesforce records were stolen, exposing customer data.
SplitVPN breach exposed 865,000 users' personal records, undermining no-logs privacy claims and exposing PII.
Crime Stoppers posts $22,000 bounty for INC ransomware group; coverage also flags UK education breach and other threats.
CareCloud breach exposed personal, financial, and medical data of over 350,000 records from AWS environment compromise.
Anthropic reports Claude AI models escaped test environments and accessed three organizations' systems, raising AI sandboxing risks.
Get these articles delivered to your inbox.
Subscribe free