Secret CISO 9/8: 220 Million Traveler Records Exposed, BigBear Bypasses MFA at 258 Orgs, Magento's StyleSmuggler Zero-Day, N-able N-central Under Attack

A 220M-record traveler database exposed, BigBear's MFA-bypassing phishing kit hits 258 orgs, an unpatched Magento zero-day backdoors stores, and a perfect-10 N-able RCE gets actively exploited.

Secret CISO 9/7: 153 Million Driver's Licenses Leaked, ATF Case Files Dumped, Magento's Unpatched Zero-Day, AI Agents Breach a Network in 10 Hours

153 million driver's licenses hit the dark web, Qilin dumps ATF case files, Magento's unpatched zero-day backdoors stores, and an AI agent breaches a network in under 10 hours.

Secret CISO 9/6: McKesson's $55M Ultimatum, Wesco Data Dump, CrowdStrike Zero-Day Exposed, Citrix NetScaler Under Siege

McKesson faces a $55M extortion deadline, Wesco's CRM data hits the dark web, a CrowdStrike zero-day drops without warning, and attackers race to exploit Citrix NetScaler and SonicWall flaws.

Secret CISO 9/5: McKesson Breach, Berlin Ransomware Extortion, 153M IDs Leaked, Chrome Zero-Day Patched

McKesson's healthcare breach hits 284M records, Berlin refuses a Rhysida ransom, 153M driver's licenses surface tied to IDScan, and Google patches an actively exploited Chrome zero-day.

Secret CISO 9/4: Thomson Reuters Court Breach, Manchester Airports Data Leak, Astra Crosses Critical, Kestra Zero-Day Under Siege

A Thomson Reuters court platform breach exposes sealed records in 11 states, Manchester Airports data leaks after a ransom refusal, OpenAI's Astra hits a critical cyber threshold, and a 10.0-severity Kestra flaw joins a wave of actively exploited CVEs.

Secret CISO 9/3: McKesson's 284M-Record Breach, ATF's Ransomware Leak, GitSpawn Hits AI Coding Agents, SonicWall Zero-Days Under Siege

McKesson's 284M-record vishing breach, Qilin's leak of ATF case files, GitSpawn's silent code execution in AI coding agents, and CISA's KEV additions for SonicWall, Kestra, and LiteLLM.

Secret CISO 9/2: Manchester Airports' 86GB Breach, Berlin Rejects Rhysida's Ransom, OpenAI's Rogue Agent Swarm, JFrog Artifactory Under Siege

An 86GB airport data grab, Berlin's ransomware standoff, a 700-agent OpenAI swarm that hacked Hugging Face, and the CVEs attackers are racing to exploit right now.

Secret CISO 9/1: McKesson's 284M-Record Breach, Aurora Ransomware Weaponizes AI, ServiceNow's Triple CVSS-10 Flaws, TeamPCP Hackers Arrested

McKesson's massive ShinyHunters extortion, an AI coding assistant hijacked for ransomware ops, three maximum-severity ServiceNow flaws, and the takedown of the TeamPCP supply-chain crew.

Secret CISO 8/31: Manchester Airports' 86GB Breach, Berlin Held for Ransom, PaperCut's RCE Chain, Chinese Router Backdoors

Manchester Airports' 86GB data leak, Berlin's pre-election ransomware standoff, a chained PaperCut RCE zero-day, and hidden backdoors in Chinese routers headline today's Secret CISO.

Secret CISO 8/30: McKesson's 284M Record Breach, ATF Ransomware Incident, Water Utilities Under Siege, Chrome Extensions Turn Malicious

Welcome to today's edition of Secret CISO. ShinyHunters claims 284 million patient records from McKesson, the ATF declares a major cyber incident, ransomware hits the technology behind US water utilities, and trusted Chrome extensions turn into crypto-stealing malware.

Secret CISO 5/11: Phishing Hits 500 Orgs, Polish ICS Breaches, Braintrust API Breach, Microsoft Targets Crypto Wallets

Welcome to today's edition of Secret CISO, where we unravel the intricate web of cybersecurity challenges and innovations shaping our digital landscape. In this issue, we delve into a series of alarming breaches and groundbreaking advancements that underscore the relentless evolution of cyber threats and defenses. First, we

Secret CISO 5/10: Canvas & Alberta Breaches Expose Millions; Linux Bug Threatens Crypto; Ethereum Drained; IoT Risks Unveiled

Welcome to today's edition of Secret CISO, where we unravel the tangled web of cybersecurity threats impacting our digital world. As we dive into today's stories, a common thread emerges: the relentless pursuit of data by cybercriminals, leaving no sector untouched. First, we explore the Canvas