Gentlemen Ransomware Affiliate Uses Stolen GitLab CI/CD Secrets to Breach Dozens of Organizations
The operator, who calls himself Azazel, worked as a Russian-speaking affiliate of the Gentlemen ransomware group. However, he also ran an independent leak site...
Hackers Breach Government WordPress Site and Steal 18,566 Records With Plaintext Passwords
The breach was part of a wider campaign targeting vulnerable WordPress installations worldwide. The activity from May 7, 2026 onward to a single malicious...
AI-Powered Hacker Operation Scans 726,000 Hosts and Harvests 16,834 Credentials
A French-speaking cybercrime group allegedly used an AI-enabled attack platform to scan nearly 727,000 internet-facing hosts and collect 16,834 credentials from exposed files and...
659 Stripe Merchant API Keys Leaked Online, Exposing 688,000 Customer Records
A threat actor has published a dataset containing allegedly live Stripe API keys for 659 merchant accounts, exposing data linked to 688,363 customers across...
Ransomware Affiliate Poses as Recovery Firm to Re-Extort Victims After Data Theft
GuidePoint Security’s Research and Intelligence Team (GRIT) has uncovered a ransomware extortion tactic in which an alleged recovery service, “Ransom Busters,” contacts victims before...