#breachbreakdown — Public Fediverse posts

🚨 Over the past two weeks, two massive, overlapping campaigns—TeamPCP’s "blitzkrieg" on security tools like Trivy and Checkmarx, and UNC1069's devastating RAT deployment via the Axios library—have compromised thousands of CI/CD pipelines.

Read the full deep-dive and get the immediate mitigation steps here: https://www.security.land/2026-supply-chain-attacks-teampcp-trivy-axios/

#SecurityLand #BreachBreakdown #SupplyChainAttack #NPM #Cybersecurity #Axios #Trivy #TeamPCP #UNC1069

A closer look at the Medusa ransomware group’s latest operations, including their evolving tactics and high-profile targets. Understand the current threat landscape and what defenders need to watch for.

#SecurityLand #BreachBreakdown #Ransomware #Medusa #RansomwareGroup #Cybercrime #Cybersecurity

Read More: https://www.security.land/inside-medusa-ransomware-tactics-targets-and-trends-in-recent-operations/

Diamond Electric’s Thai subsidiary was hit by a ransomware attack. The company is investigating and strengthening defenses.

#SecurityLand #BreachBreakdown #RansomwareAttack #DiamondElectric #Thailand #Ransomware #Japan

Read More: https://www.security.land/ransomware-attack-hits-diamond-electrics-thai-subsidiary/

Confirmed: Okuma Europe GmbH was hit by ransomware, but the company responded quickly with a transparent disclosure. Japan once again shows why its industry is trusted for resilience and accountability.

#SecurityLand #BreachBreakdown #Okuma #Japan #Germany #Ransomware #Cyberattack #RansomwareAttack

Read More: https://www.security.land/okumas-german-subsidiary-hit-by-ransomware-attack/

SonicWall has disclosed a significant cyberattack on their MySonicWall cloud backup service, where threat actors used brute-force methods to access firewall configuration files affecting under 5% of their customer base.

#SecurityLand #BreachBreakdown #NetworkSecurity #Cloud #Backup

Read More: https://www.security.land/sonicwall-cloud-backup-attack-exposes-firewall-data/

🚨 OFFICIAL: Nikke (Japan Wool Textile) confirms major cyberattack with thousands of employee and customer records leaked on dark web. Comprehensive analysis of the official September 10 press release reveals attack timeline, response strategies, and critical cybersecurity lessons for Japanese corporations.

#SecurityLand #BreachBreakdown #Cybersecurity #DataBreach #Japan #InfoSec #CorporateSecurity #DataLeak #DarkWeb

Read More: https://www.security.land/nikke-confirms-dark-web-data-leak-official-response-reveals-thousands-affected-in-japanese-textile-breach/

In 2025, UNC6395 struck Salesloft’s Drift, exposing Salesforce data and Google Workspace emails. From malicious IPs to SOQL queries, learn how this stealth attack unfolded and get Mandiant-backed strategies to lock down your integrations. Protect your business—read the full story now.

#SecurityLand #BreachBreakdown #Cybersecurity #Salesforce #SalesloftDrift #DataBreach #CyberAttack #UNC6395 #Mandiant

Read More: https://www.security.land/unc6395-stealth-attack-how-the-salesloft-drift-breach-shook-salesforce-users/

Orange Belgium data breach exposes 850K customers to SIM swap attacks. Part of growing wave of cyberattacks hitting European telecom giants. Personal data including SIM details compromised.

#SecurityLand #BreachBreakdown #Cybersecurity #DataBreach #Telecom #Orange #Belgium #Cyberattack

Read More: https://www.security.land/orange-belgium-data-breach-850k-customers-exposed-in-growing-telecom-cyberattack-wave/

🚨 Massive NPM supply chain attack compromises popular JavaScript packages including 'is' and ESLint tools. Millions of projects at risk from sophisticated phishing campaign. Immediate action required for all Node.js developers.

#SecurityLand #BreachBreakdown #Phishing #NPMSecurity #SupplyChainAttack #Javascript #NPM #NodeJS

Read More: https://www.security.land/massive-npm-supply-chain-attack-compromises-javascript-ecosystem/

Darktrace recent investigation reveals how Scattered Spider actors are evolving their ransomware operations through social engineering and RaaS platforms. From Twilio to MGM attacks, discover their latest tactics and how to defend your organization.

#SecurityLand #BreachBreakdown #Cybersecurity #RansomwareAttack #ThreatIntelligence #Darktrace #ScatteredSpider #RaaS #SocialEnginnering

Read More: https://www.security.land/how-scattered-spider-weaponizes-social-engineering-for-ransomware-attacks/

Advanced threat actor UNC6148 is actively targeting SonicWall SMA 100 series appliances with sophisticated OVERSTEP backdoor malware, bypassing patches through stolen credentials.

#SecurityLand #BreachBreakdown #UNC6148 #Mandiant #GTIG #SonicWall #OVERSTEP

Read More: https://www.security.land/sonicwall-sma-100-series-targeted-by-advanced-backdoor-campaign/

🚨 $223M stolen from Cetus Protocol but there's hope: Sui validators froze the funds! Unprecedented blockchain recovery effort underway. Will crypto's newest safety net work?

#SecurityLand #BreachBreakdown #Cybersecurity #CetusProtocol #DeFi #Blockchain #CetusHack

Read More: https://www.security.land/inside-the-223-million-cetus-protocol-hack-how-validators-became-the-last-line-of-defense/

Toronto largest school board confronts every parent's nightmare as student records remain compromised despite ransom payment. The TDSB PowerSchool breach exposes decades of sensitive student information with cybercriminals now making direct extortion attempts.

#SecurityLand #BreachBreakdown #DataBreach #School #Ransom #CyberSecurity #Education

Read More: https://www.security.land/tdsb-student-data-breach-ransom-paid-but-information-still-compromised/

Urgent security alert for Active! mail users! A critical vulnerability (CVE-2025-42599) was exploited in zero-day attacks for over 8 months. Find out if you're affected and what steps to take now. Don't wait!

#SecurityLand #BreachBreakdown #ActiveMail #Security #ZeroDay #Cybersecurity #Vulnerability

https://www.security.land/critical-active-mail-vulnerability-exploited-in-zero-day-attacks-for-over-8-months/