data breach

A contractor exposing CISA’s credentials on GitHub is the easy story. The nine ignored security alerts that followed reveal the failure worth fixing.

A US county paid roughly $1 million to a group that never encrypted a single file, exposing how far data-theft extortion has moved beyond classic ransomware.

ShinyHunters exploited CVE-2026-35273 for nearly two weeks before Oracle published any advisory. The flaw is serious — but the disclosure gap is the structural failure that put 100 organisations at …

The Illusion of ‘Checklist Secure’ Many organisations believe that adhering to security checklists means their digital assets are fully protected. But the debate of “Checklist Secure vs Penetration Testing” highlights …