Data Breaches

Mini Shai-Hulud supply-chain attack breached SAP-related NPM packages to steal credentials; review dependencies and monitor for credential theft.

RCE in GitHub's internal git infra could allow full server compromise; authenticated access required.

ADT confirms data breach following ShinyHunters' extortion claim; millions potentially affected.

State-sponsored actors chain CVEs to backdoor FXOS/ASA devices; FIRESTARTER persists after patches.

External tooling compromise allowed unauthorized access; assess third-party risk and tighten vendor controls.

Multiple healthcare providers disclosed breaches affecting hundreds of thousands; reinforces need for identity controls and data segregation.

Third-party AI tool context access enabled a breach; emphasize third-party risk, credential hygiene, and cloud access reviews.

McGraw Hill confirms a breach affecting 13.5M users; review Salesforce exposure, implement credential hygiene, and monitor for extortion chatter.

Europe's largest gym chain confirms a data breach exposing member data. Immediate actions include password resets and monitoring for fraud.

Europe's largest gym chain confirms a data breach exposing member data. Immediate actions include password resets and monitoring for fraud.