Interlock ransomware gang creates volatile situation
In March 2026, the Sophos Emergency Incident Response (EIR) team investigated an incident in which we observed the use of...
Incident
When the “attacker” is an AI agent
Last week, Hugging Face disclosed a security incident of a new kind: an intrusion carried out end to end by...
GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft
Cybersecurity researchers have attributed the April 2026 DigiCert security incident to a threat activity cluster dubbed CylindricalCanine. Expel, which shared...
GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft
Cybersecurity researchers have attributed the April 2026 DigiCert security incident to a threat activity cluster dubbed CylindricalCanine. Expel, which shared...
LastPass Confirms Vendor Breach Exposed Customer Contact, Support Data
A third-party vendor breach has once again pulled LastPass into a cybersecurity incident, exposing customer contact and support data in...
Nintendo Alleged Data Breach: Threat Actor Demands $2M Ransom
Nintendo is facing a potential incident after a threat actor claimed to have stolen nearly a decade’s worth of internal...
The Next AI Security Failure May Start With a Trusted Assistant
An AI assistant does not need to “go rogue” to create a security incident. It only needs to follow the...
Why AMOS matters: The macOS malware stealing data at scale
Sophos Managed Detection and Response (MDR) teams recently responded to a customer incident involving an infostealer infection on a macOS...
Building a Cyber Incident Response Team: The CISO’s Guide
Last Updated: 16 May 2026 Building a Cyber Incident Response Team: The CISO’s Guide A cyber incident response team (CIRT)...
Why AMOS matters: The macOS malware stealing data at scale
Sophos Managed Detection and Response (MDR) teams recently responded to a customer incident involving an infostealer infection on a macOS...
Day Zero Readiness: The Operational Gaps That Break Incident Response
Having an incident response retainer, or even a pre-approved external incident response firm, is not the same as being ready...
ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories
Ravie LakshmananApr 23, 2026Hacking News / Cybersecurity News You scroll past one incident and see another that feels familiar, like...
ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories
Ravie LakshmananApr 23, 2026Hacking News / Cybersecurity News You scroll past one incident and see another that feels familiar, like...
Vercel April 2026 Incident: Non-Sensitive Environment Variables Need Investigation Too
The post Vercel April 2026 Incident: Non-Sensitive Environment Variables Need Investigation Too appeared first on GitGuardian Blog – Take Control...
Personal data of 1 million gym members compromised in Basic-Fit security incident
Personal data of 1 million gym members compromised in Basic-Fit security incident Pierluigi Paganini April 14, 2026 A breach at...
