Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
OnTrac notifies customers of data breach following network
Parcel delivery company OnTrac confirmed that hackers accessed its corporate network between March 20 and March 22, 2026, potentially exposing custome
Vatican's Click To Pray App Exposes PII of 700,000 Users
A vulnerable API endpoint in the Vatican's official 'Click To Pray' app leaked the names, email addresses, and location data of over 700,000 global us
CISA Reports on Six-Month Exposure of Internal Credentials
A contractor accidentally exposed 844 MB of CISA data, including AWS GovCloud keys and plaintext passwords, on a public GitHub repository for six mont
LA Metro Cyberattack Linked to Iranian State-Sponsored
An investigation into a cyberattack on the LA Metro system revealed that while a hacktivist group claimed responsibility, the operation utilized infra
Dutch police arrest suspect in AFC Ajax cyberattack
Dutch police arrested a 35-year-old man suspected of multiple computer intrusions into AFC Ajax systems.
Charter Communications confirms data breach following
Charter Communications confirmed a security incident after the ShinyHunters group claimed to have stolen 40 million customer records.
Iranian hackers breached Los Angeles Metro rail-yard
Research from Gambit Security attributes a March cyber-attack on the Los Angeles County Metropolitan Transportation Authority to Iranian-linked hacker
7-Eleven data breach exposes personal information of
The ShinyHunters extortion gang breached 7-Eleven's Salesforce environment in April 2026, leaking personal data of 185,300 individuals after the compa
Congress Demands Answers After CISA Contractor Leaks
A CISA contractor exposed plaintext AWS GovCloud keys and internal system credentials on a public GitHub repository.
CISA contractor exposed internal credentials via public
A CISA contractor left a public GitHub repository exposed, leaking credentials for privileged AWS GovCloud accounts and internal agency systems.
Chinese State-Sponsored Group Webworm Targets European
The Chinese hacking group Webworm has been targeting European government networks since 2021 by exploiting Microsoft Exchange vulnerabilities to gain
Myspace93 breach exposes plaintext credentials of 46,000
A 2021 breach of the Myspace93 parody site resulted in the exposure of 46,000 users' plaintext passwords, email addresses, and IP addresses.