BREAKING Microsoft allegedly breached. @campuscodi @vxunderground #cybersecurity #infosec @Microsoft

Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.

New Node.js security updates CVE-2026-105482 CVE-2026-105843 CVE-2026-106069 CVE-2026-105481 CVE-2026-106072 CVE-2026-106074 CVE-2026-111497 nodejs.org/en/blog/vulnerabi…

phucking patch php.net/archive/2026.php#202… github.com/php/php-src/secur… github.com/php/php-src/secur…

CVE-2026-109618 CVE-2026-109619 PHP vulnerability

Revolut outage disrupts online banking operations worldwide bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

‼️ BREAKING: The FBI suspects a US ransom negotiator helped run ShinyHunters' extortion site, KrebsOnSecurity reports. The site listed nearly 100 victims and told them "Nobody has to know about this." A source says seized chats show negotiators knew of hacks before victims did.

The potential impact of the ConnectWise supply chain attack is massive. One compromised OAuth application with elevated permissions could give attackers access to emails, files, and directory data across hundreds of Microsoft 365 tenants. Even worse, attackers could establish persistent access by adding credentials to other applications, surviving the revocation of the original compromised credentials. And with MSPs involved, the potential blast radius could extend even further to downstream customers. We don't know the full extent of the compromise yet, but this could affect far more organizations than those directly using ConnectWise Cloud Backup. linkedin.com/posts/microsoft…

A picture worth a thousand words.

NBC Universal has allegedly been breached by fairly new Scarlett Group. Claimed data includes banking details (sample wire transfer), a CRM dump and unannounced upcoming films. @NBCUniversal has not commented

Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

DataSuckers and Spy Chips Russia arrests ShinyHunters-Lapsus style hackers in Russia! Trevor hardware wallets have now been found to have spy chips implanted in them days after Ledger devices confirm spy chips & drained @ $80 million per @campuscodi na01.safelinks.protection.ou…

2026 is breaking ransom and victim record numbers. Just look at this today. More than one victim has been posted per minute over the last 20 minutes: BlackNevas 15 victims Cinder 9 Eclipse 8 Qilin 5 LockBit 2

We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work. At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated. We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.

Ledger confirms hardware wallet spy implant behind crypto thefts bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

KVH allegedly breached by Everest Group KVH onboards maritime connectivity, managed IT and cybersecurity globally for barges, container ships, super yachts and the US Coast Guard.

New unconfirmed samples Nvidia GeoForce samples released by what’s left of ShinyHunters US and Canadian drivers license samples also released