Colonial Pipeline Ransomware: One Password, 17 Emergency States

DarkSide entered through a no-MFA legacy VPN password, exfiltrated 100 GB, and encrypted Colonial’s IT — prompting a precautionary shutdown of 45% of East Coast fuel supply. Anatomy of the most policy-consequential ransomware ever.

Continue ReadingColonial Pipeline Ransomware: One Password, 17 Emergency States

CD Projekt Red Ransomware: The Source-Code Auction That Failed

HelloKitty ransomware encrypted CDPR’s network and stole Cyberpunk 2077 and Witcher 3 source code — then auctioned it on a crime forum after the studio refused to pay. The incident file on IP extortion, auction economics, and the no-ransom playbook.

Continue ReadingCD Projekt Red Ransomware: The Source-Code Auction That Failed
Read more about the article Marquis Data Breach: One SonicWall Firewall, 74 Banks, 672,075 Identities
Marquis breach anatomy – one cracked firewall rippling across 74 banks

Marquis Data Breach: One SonicWall Firewall, 74 Banks, 672,075 Identities

Attackers entered Texas fintech Marquis through a SonicWall firewall and reached data for 700+ client banks - 672,075 identities, 74 institutions disrupted. The supply-chain anatomy and five break-points.

Continue ReadingMarquis Data Breach: One SonicWall Firewall, 74 Banks, 672,075 Identities
Read more about the article Bank of Baroda Data Breach: How One Weak Password Leaked 1TB of Bank Data
Bank of Baroda breach anatomy – weak password to inbox to free 1TB dump

Bank of Baroda Data Breach: How One Weak Password Leaked 1TB of Bank Data

TripleX published 1TB of Bank of Baroda customer data for free after a credential-only intrusion - no malware, no core banking access. Full attack anatomy and the five break-points that would have stopped it.

Continue ReadingBank of Baroda Data Breach: How One Weak Password Leaked 1TB of Bank Data