Tag: #DataBreach
A major npm supply chain attack has compromised more than 40 Node Package Manager (npm) packages, injecting a malicious script called bundle.js to steal sensitive developer credentials. According to security researchers, the campaign, dubbed the Shai-Hulud attack, uses the open-source tool TruffleHog (TruffleHog Secret Scanner) to extract secrets such as GitHub personal access tokens, Node […]
The 2025 Verizon DBIR (Data Breach Investigations Report) highlights a growing truth: cybercriminals don’t care about company size. Whether it’s a global enterprise or a local retailer, attackers are using the same techniques—ransomware, stolen credentials, phishing—across the board. For small- and medium-sized businesses (SMBs), the consequences are often worse because defenses are weaker, budgets are […]
Jaguar Land Rover (JLR) has confirmed that some data may have been compromised in the cyber attack that has halted its global car production. The breach, claimed by a hacking group calling itself Scattered Lapsus$ Hunters, has forced the vehicle maker to shut down IT systems, stop manufacturing across multiple plants, and send workers home. […]