Skip to main content

Browse by Category

4 categories

Latest Articles

28 total
Threat Intelligence News & Analysis
2026-11-09•5 min read

France blames Iran's Revolutionary Guards for sabotaging fridges at 700 supermarket sites

France on November 9, 2026, blamed Shahid Kaveh, a cyber unit of Iran's Islamic Revolutionary Guard Corps (IRGC), for the October 11 to 12 attacks that tampered with refrigeration controls at about 700 retail sites in France and started at least 15 fires. France summoned Iran's ambassador and will propose new European Union sanctions, and the Paris prosecutor has requested international arrest warrants for the unit's leader and two deputies. Iran had not publicly responded by the evening of November 9.

Threat Intelligence News & Analysis
2026-11-09•4 min read

Attacker steals from Keplr crypto wallets through flaw at login provider Web3Auth

Keplr and Web3Auth said on November 7, 2026, that an attacker exploited a security flaw at Web3Auth, which runs Keplr's Google and Apple sign-in, to steal cryptocurrency from Keplr wallets created that way. Web3Auth then used the same route to move funds out of other exposed wallets into recovery wallets, which held $6.01 million from more than 44,000 wallets by Bitquery's count. Neither company has said how much the attacker took.

Threat Intelligence News & Analysis
2026-11-08•4 min read

Iris Ohyama says cloud breach may have exposed data on 7.7 million Iris Plaza shoppers

Iris Plaza, the official online store of Japanese household goods maker Iris Ohyama, said on November 5, 2026, that personal information on about 7.7 million people may have leaked after a third party accessed an external cloud service the store used. The data includes names, addresses, phone numbers, and email addresses, plus dates of birth and encrypted passwords for members, but no credit card details. The store has been offline since October 28, and the company said it has received no reports of misuse.

Threat Intelligence News & Analysis
2026-11-08•4 min read

DigiCert says server migration error let an unauthorized account read customer data and ID documents

Certificate authority DigiCert has begun notifying customers that an unauthorized account read part of its archive of customer information between June 27 and July 2, 2026, after a February 2025 server migration left an internal business system reachable from the internet. Most records held business contact details, but a small minority included identity documents such as passports and driver's licenses, and DigiCert has not said how many people were affected. DigiCert said its certificate authority services were not affected.

Vulnerability News & CVE Analysis
2026-11-07•3 min read

SonicWall fixes exploited firewall VPN flaw that can bypass multi-factor authentication

SonicWall said on November 6, 2026, that it had investigated a report of potential exploitation of CVE-2026-19868, a flaw in the SSL-VPN service of its SonicOS firewall software. The flaw may let a user with valid credentials for another login method bypass SAML login checks, including SAML-enforced multi-factor authentication (MFA). The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the flaw to its catalog of exploited vulnerabilities the same day and gave federal civilian agencies until November 20 to fix it.

Threat Intelligence News & Analysis
2026-11-07•4 min read

US charges three men with using AI to impersonate CEOs and lawyers in $129 million fraud

US prosecutors in New York said on November 5, 2026, that Jacob Soall, Sharon Hazan, and Guy Sheetrit have been indicted for using artificial intelligence (AI) to impersonate company executives and lawyers in a scheme that stole about $129 million. According to prosecutors, the group targeted thousands of companies from July 2024 to February 2026, including hospital systems, a bank, and a mutual fund company. The three were arrested in Spain and the United Kingdom between June and September, and Sheetrit's lawyers say he had no involvement.