Icarus Extortion Group Steals Salesforce CRM Data
June 20, 2026 Market intelligence platform Klue disclosed a critical security incident on June 19, 2026. Threat actors compromised legacy integration credentials to steal OAuth tokens used to connect Klue with customer Salesforce environments.…
UNC6508 Abuses Google Workspace Rules to Steal US Medical and Defense Research
June 16, 2026 Google’s Threat Intelligence Group has disrupted a China-nexus espionage campaign that hid inside North American medical and military research networks for more than a year. The threat actor, tracked as UNC6508, abused legitimate…
Novo Nordisk Clinical Trial Data Breach Exposes Patient and HCP Records
June 15, 2026 Danish pharmaceutical giant Novo Nordisk, the world’s largest insulin producer and maker of blockbuster GLP-1 drugs Wegovy and Ozempic, has disclosed a significant data breach. Attackers gained unauthorized access to internal IT…
Iranian State-Sponsored Hacking Group Handala Breaches Holocaust Victim Support Centre: 2M Documents Leaked
June 2, 2026 Iranian state-sponsored hacking group Handala breached the Holocaust Victim Support Centre in Israel on May 31, 2026. The group claimed responsibility for the attack and leaked over two million documents totaling more than one terabyte of…
ShinyHunters Breach Charter Communications: 4.9M Accounts Exposed
May 29, 2026 The ShinyHunters extortion gang has breached Charter Communications, exposing 4.9 million customer and business accounts. Consequently, the telecom giant confirmed the incident while disputing the severity of the stolen data. Charter…
7-Eleven Data Breach Exposes 185,000 People: ShinyHunters Extortion Gang Strikes
May 26, 2026 Convenience store giant 7-Eleven has confirmed a data breach that exposed the personal information of 185,300 people after the ShinyHunters extortion gang compromised its systems in early April 2026. Consequently, the cybercriminals leaked a…
US Gas Station Tank Gauges Breached by Unknown Threat Actors
May 18, 2026 Unknown threat actors have breached automatic tank gauge (ATG) systems at US gas stations in multiple states. The attackers exploited these systems to manipulate display readings on fuel tanks. However, they did not alter the actual fuel…
Canvas LMS Cyberattack by ShinyHunters: Education Platform Breach Shuts Thousands of Schools
May 9, 2026 The Canvas Learning Management System (LMS) — a platform used by thousands of schools and universities worldwide — was hit by a devastating cyberattack from the ShinyHunters hacking group on May 8, 2026. The Canvas data breach disrupted…
Trellix Source Code Breach: Unauthorized Access Raises Fears of Infrastructure Compromise
May 7, 2026 On May 4, 2026, cybersecurity giant Trellix confirmed that a source code breach had compromised its development repository, exposing intellectual property and raising alarms across the supply chain ecosystem. The attack, which occurred…