State Bank of India (SBI) has suffered a leak of customer personally identifiable information (PII), according to Dark Reading. The article's available text is limited to a teaser. It says relatively small data breaches in India can become serious because a sophisticated underground market exists for trading PII. The scale of the leak, th…
Hundreds of EU grocery stores reportedly lost millions of euros because the outdated OT firmware running their cooling and climate-control (HVAC/refrigeration) systems was left unpatched. The stores had outsourced management of these systems to third-party providers (darkreading.com). The first report was published on 2026-10-15 and a fol…
A TiDB breach is being used to illustrate flawed assumptions about cloud security. The article argues that cloud providers may be storing sensitive customer data without either the provider or the customer knowing it. When such a provider is breached, that hidden data is exposed. The excerpt gives no details on the breach itself, such as …
North Korea (DPRK) is running simple reply-baiting phishing attacks against Ukrainian targets. The goal is to gain insight into its own war effort in Ukraine. The article is a short teaser, so it gives no information on the specific actor, targets, infrastructure or tooling. Technical Details - The campaign relies on reply-baiting phishin…
Organizations are reporting that ransomware operators are escalating extortion with threats of stalking, physical violence and abduction aimed at employees. The article says these claims are difficult to verify. The reports point to a possible shift toward real-world intimidation of staff and their families as pressure during extortion. T…
A Dark Reading article by Nate Nelson challenges the prevailing hype around AI-enabled cyberattacks. It argues that AI has been "dumbing down" attacks, producing low-quality output, and that serious threat actors are barely using it. The piece is framed as a counterpoint to claims of sophisticated AI-driven offensive operations. The avail…
A zero-day vulnerability in BeyondTrust Remote Support is being reported as the latest in a run of edge-device bugs under attack. In the same week, vulnerabilities in edge products from Ivanti, Cisco and Palo Alto Networks also came under fire. The article, which is very brief, frames BeyondTrust as joining this group and as continuing th…