
A four-handle cluster spent seven weeks stealing admin logins. Then they breached one Nepali IT provider and inherited 170+ government clients in a single post.
Read Briefing
ShinyHunters arrest: an alleged leader was detained in Amsterdam with FBI support. The suspect, the group's tactics, and what defenders should do next.
Read Briefing
Ransomware Data Resale: The 12-Day Gap After a Leak Site On 20 August 2026 the ransomware group pear published four victims to its leak site: a plastic surgery institute, a healthcare billing provider
Read Briefing
The Revolut data leak wasn't a hack. How fake law enforcement requests exposed crypto holders' KYC data, and why iamnotavillain's ransom fell 99.6%. (148 characters)
Read Briefing
The Gentlemen and Qilin led August 2026 ransomware claims, while 40 of 68 groups posted five victims or fewer. Why fragmentation makes defense harder.
Read Briefing
SpyCloud leads on credential and account takeover defence, and prices accordingly. If the quote came back higher than your budget, here are the alternatives worth knowing and what each one trades away.
Read Briefing
Rhysida claims 5.79 TB and 1.44 million files from Berlin's state network, with a 30 BTC demand. What the listing says, what it means, and why the group targeted a city government
Read Briefing
HIBP is the best free breach lookup there is. Where it stops being enough for a company, what to look for instead, and an honest comparison of the paid options.
Read Briefing
Falcon, a ransomware group first seen in August 2026, listed Globus Medical, DNOW and Hayward Holdings in 48 hours. All three are NYSE-listed. Here's why.
Read Briefing