Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
30 / 101 results
highpublicGeopoliticalUniversity of Copenhagen breach exposes 525,000 records in test environment
The breach at Denmark's oldest and most prominent research university represents a significant data exposure incident within a NATO and EU member state with advanced cybersecurity frameworks.
highpublicGeopoliticalChinese national extradited from Netherlands for $37M crypto fraud
This case exemplifies the transnational nature of cryptocurrency-enabled financial crime and the growing cooperation between Western jurisdictions in prosecuting such offenses.
highpublicGeopoliticalQuest Diagnostics breach exposes patient data via Quanum LSM platform
The breach at Quest Diagnostics, which serves approximately one-third of U.S. adults annually, underscores the persistent vulnerability of critical healthcare infrastructure to unauthorized access.
highpublicGeopoliticalCapcom breach exposes 11.7M accounts; Japan gaming sector targeted again
The breach of Capcom's CAPCOM ID service represents the second significant compromise of the Japanese gaming giant in six years, following a 2020 Ragnar Locker ransomware incident.
highpublicGeopoliticalNew Mexico Court Orders Meta to Pay $25B for Cambridge Analytica Violations
The ruling represents a significant escalation in U.S. state-level enforcement against major technology platforms, following federal actions that resulted in a $5 billion FTC fine in 2019 and an $18 billion multi-state settlement in August 2026.
highpublicGeopoliticalJapanese VPS Provider Onamae Desktop Cloud Breached, 27,000 Servers Hit
The compromise of Onamae Desktop Cloud, operated by GMO Internet Group—one of Japan's largest domain registrars and internet infrastructure providers—represents a significant supply-chain style attack on Japan's digital economy.
highpublicGeopoliticalDHS Orders Federal Agencies to Remove DeepSeek AI Products
The Department of Homeland Security's directive to exclude DeepSeek products from federal civilian systems represents an escalation in U.S. efforts to mitigate technology supply chain risks linked to Chinese firms.
highpublicGeopoliticalNikkei Inc. reports third breach in one month, 1.83M records exposed
The repeated compromise of Nikkei Inc.—a major Japanese financial media conglomerate and owner of the Financial Times—represents a significant cybersecurity challenge for a strategically important information infrastructure entity.
highpublicGeopoliticalBurger King Japan breach exposes 11M records amid rising Japan cyber wave
The Burger King Japan incident is consistent with a broader pattern of cyber intrusions targeting Japanese commercial infrastructure throughout 2026. According to open-source reporting, at least 119 cybersecurity incidents involving personal informat…
highpublicGeopoliticalCyberattack on BAE Systems disrupts US federal bankruptcy court systems
The compromise of BAE Systems' Bankruptcy Noticing Center (BNC) infrastructure represents a significant incident affecting critical US judicial operations.
highpublicGeopoliticalUK Legal Aid Agency breach exposes nearly five decades of justice data
The April 2025 breach of the UK Legal Aid Agency represents a significant compromise of sovereign justice system data spanning 1978–2025, affecting applicants, recipients, and legal service providers across England and Wales.
highpublicGeopoliticalUK Sanctions Cryptomus Platform Over Russia Sanctions Evasion
The UK's October 2024 sanctions against Cryptomus represent a strategic escalation in Western efforts to disrupt financial infrastructure enabling Russia's circumvention of economic restrictions imposed following its invasion of Ukraine.
highpublicGeopoliticalNorway Fines Microsoft's Xandr €8.6M Over Grindr Data Sharing Violations
This enforcement action exemplifies the divergence between European and U.S. regulatory approaches to data privacy and digital sovereignty. Norway, operating under the European Economic Area framework and applying GDPR standards, has imposed its larg…
highpublicGeopoliticalNorway fines Microsoft-owned Xandr $9.6M for Grindr data violations
This enforcement action reflects Norway's assertive stance on digital sovereignty and data protection, consistent with broader European regulatory efforts to constrain U.S. technology firms' data practices.
highpublicGeopoliticalDrone strikes damage Yandex data centers, disrupting Russian cloud services
The physical attacks on Yandex data center infrastructure represent an escalation in targeting civilian-facing digital services within Russia's borders.
highpublicGeopoliticalMalware at Nippon Columbia exposes 8.7M karaoke records in Japan
This incident represents a significant data exposure within Japan's entertainment sector, affecting one of the country's largest karaoke operators through a third-party contractor breach.
highpublicGeopoliticalMicrosoft certificate rotation to cut security updates for legacy Windows
Microsoft's planned Windows Update certificate rotation in mid-2027 represents a significant inflection point in the global cybersecurity landscape. The policy will effectively force organizations and individuals running unsupported Windows versions…
highpublicGeopoliticalJapan faces coordinated wave of web data breaches via API exploitation
Japan has experienced a sharp escalation in web-based data breaches since July 2026, with JPCERT/CC reporting coordinated attacks exploiting mobile application APIs and known vulnerabilities such as CVE-2026-72898 in Metabase.
highpublicGeopoliticalMaryland Man Convicted for $53M Uranium Finance Cryptocurrency Heist
This case represents a significant milestone in U.S. law enforcement's evolving approach to decentralized finance (DeFi) crime. The conviction of Jonathan Spalletta for exploiting smart contract vulnerabilities in Uranium Finance underscores the Just…
highpublicGeopoliticalASOS confirms breach via compromised push notification system
The incident represents a continuation of opportunistic cybercriminal activity targeting cloud infrastructure providers, particularly Snowflake environments, which have been subject to a sustained campaign since mid-2024.
highpublicGeopoliticalASOS investigates breach exposing UK customer data
The incident affecting ASOS, a major UK-based online fashion retailer, represents a routine cybersecurity breach impacting consumer data rather than a geopolitically significant event.
highpublicGeopoliticalNikkei discloses dual email account breaches, phishing campaign
The breach of Nikkei, one of the world's largest financial media corporations with global reach and over 1,500 journalists worldwide, represents a significant compromise of a strategic information node.
criticalpublicGeopoliticalDenmark CPR breach exposes 8.8M records via compromised company credentials
The breach of Denmark's Central Person Register (CPR) represents a significant compromise of national identity infrastructure in a NATO member state and key Nordic country.
highpublicGeopoliticalItaly fines IQVIA $7.8M for health data anonymization failures
This enforcement action reflects the European Union's continued assertiveness in wielding GDPR as a regulatory instrument to discipline multinational corporations handling sensitive personal data.
criticalpublicGeopoliticalDenmark's national population registry breached, 8.8M records exposed
The breach of Denmark's Central Population Register represents a compromise of critical national infrastructure affecting approximately 80% of all registered individuals in the country's civil registry system.
highpublicGeopoliticalSouth Korea investigates AI-assisted breaches at major banks
The coordinated cyberattacks against South Korea's financial sector—affecting Shinhan Bank, KB Kookmin Bank, and Hana Bank—represent a significant escalation in targeting critical financial infrastructure in Northeast Asia.
highpublicGeopoliticalU.S. arrests alleged Ploutus malware developer linked to Venezuelan gang
The arrest of Anibal Alexander Canelon Aguirre represents a convergence of cybercrime and transnational organized crime with state fragility dynamics. The case illustrates how criminal networks emerging from Venezuela's prolonged political and econom…
highpublicGeopoliticalDTU breach exposes 200,000 records via compromised IAM credentials
The breach at Denmark's Technical University (DTU) represents a significant compromise of a critical research and education institution within a NATO member state and key European Union partner.
highpublicGeopoliticalGovernment sector cyber threats surge to 27% in Microsoft 2026 report
Microsoft's 2026 Digital Defense Report reveals a substantial escalation in cyber threat activity targeting government agencies, which now represent 27% of observed incidents—a 59% relative increase from 17% in 2025.
criticalpublicGeopoliticalPentagon DMDC breach exposes 3M military personnel records
The breach of the Defense Manpower Data Center represents a significant compromise of U.S. military human capital data, affecting nearly 3 million service members over a nine-month period from October 2025 to July 2026.