Cyber News & Updates
Breaking news, security alerts, and trending stories from across the cybersecurity landscape.
-

Multiple Websites Down Right Now — Live Outage Status and Timeline Correlation
Several major websites and online services are currently experiencing outages. Users searching for “Twitter down right now,” “why is Reddit down,” “PayPal outage,” “Twitter down today,” and similar queries are reporting widespread access issues across multiple platforms. The cause of these outages is currently unknown. No official explanations have been released by the affected companies…
-

JLR cyberattack: 43% drop in wholesale volumes
JLR cyberattack halted production, cutting Q3 wholesale volumes 43% and costing ~£196M.
-

SİPER-1 air and missile defense system: Turkey’s new Steel Dome milestone
Turkey completes SİPER-1 air and missile defense system test, confirming operational readiness for national deployment and marking a milestone in indigenous layered air defense.
-

VSCode fork extension attack: hijacked recommendations
AI-powered VSCode forks still recommend extensions missing in OpenVSX, letting attackers hijack namespaces and ship malware—here’s how to lock it down.
-

Unleash Protocol multisig hijack: $3.9M drained fast
Attackers seized Unleash Protocol multisig control, pushed an unauthorized upgrade, drained $3.9M in WIP, USDC, and WETH, and laundered funds via Tornado Cash—here’s how to harden governance.
-

Shai-Hulud Supply Chain Attack: How npm Tokens Became Million-Dollar Keys
Shai-Hulud demonstrates how compromised npm tokens became a self-replicating worm affecting hundreds of packages, exposing 400,000 developer secrets and enabling the $8.5 million Trust Wallet crypto theft.
-

Resecurity honeypot trap sparks breach debate
Resecurity says the breach claims against it touched only a synthetic-data honeypot, while the attackers insist they stole real records. We break down how the decoy was built, what telemetry it produced, and the controls you need to run deception without creating new risk.
-

LastPass Breach Leads to Ongoing Crypto Theft
TRM Labs blockchain investigation links $35+ million in cryptocurrency thefts to the 2022 LastPass breach. Attackers crack master passwords offline, extract private keys, drain wallets via CoinJoin mixing, and launder funds through Russian exchanges.
-

Defense Sanctions Target US Firms Over Taiwan Arms
China imposed defense sanctions on 20 U.S. companies and 10 executives after Washington approved over $10 billion in Taiwan arms sales. Beijing froze assets and banned business transactions.
-

Honeypot Defense Turns Breach Claim Into Intelligence
Threat actors claimed breaching Resecurity. The firm responded with deception: attackers accessed a honeypot trap containing fake data. Resecurity’s defense turned an attack into intelligence collection.
