The Clop ransomware gang is actively exploiting a critical vulnerability (CVE-2026-12569) in PTC Windchill and FlexPLM systems, allowing unauthenticated remote code execution. This exploitation involves deploying JSP…
In 2025, the University of Pennsylvania suffered a significant data breach due to a compromised single sign-on (SSO) account. Attackers accessed the PennKey SSO, infiltrating internal systems including VPN, Salesforce,…
Harvard University is currently dealing with an active cybersecurity threat where attackers are impersonating IT staff to gain access to sensitive information. The attackers are contacting university affiliates through…
Dartmouth College has confirmed a data breach involving the Clop extortion gang, which leaked data stolen from its Oracle E-Business Suite servers. The breach notification revealed that at least 1,494 Maine residents…
The University of Phoenix experienced a data breach affecting 3.5 million individuals, attributed to the Clop ransomware group exploiting a zero-day vulnerability in Oracle's enterprise software. The attackers accessed…
In August 2025, the University of Hawaii Cancer Center experienced a ransomware attack that compromised sensitive data of study participants, including documents containing Social Security numbers from the 1990s. The…
The Clop ransomware group is conducting a data extortion campaign against Gladinet CentreStack file servers. This attack exploits multiple security vulnerabilities in CentreStack and its related product, Triofox,…
The University of Phoenix reported a data breach affecting approximately 3.5 million individuals, including current and former students, staff, and suppliers. The breach, attributed to the Clop ransomware group,…
Blank Rome LLP was sued in two separate class actions following a May data breach that compromised the personal information of over 57,000 clients. The breach occurred due to a social engineering attack where a…
DoorDash confirmed a data breach on October 25, 2025, where an employee was targeted by a social engineering scam. The breach resulted in unauthorized access to personal information, including names, phone numbers,…