Skip to content

Continuous Automated Red Teaming (CART)

MANGO Data Breach

Date of Incident: October 14, 2025 Overview: On October 14, 2025, MANGO, in the retail sector, experienced a data breach due to a compromise of their marketing vendor. This incident exposed personal details such as customers’ first names, countries, postal codes, email addresses, and telephone numbers. No sensitive financial or personal ID information was compromised,… Read More »MANGO Data Breach

F5 BIG-IP Source Code and Vulnerabilities Breach

Date of Incident: August 9, 2025 Overview: In August 2025, F5 Networks experienced a breach by nation-state hackers who accessed and stole the source code, undisclosed vulnerabilities, and some customer configuration details of their BIG-IP products. Occurring on August 9 and reported on October 15, the attack involved advanced persistent threat actors utilizing specific MITRE… Read More »F5 BIG-IP Source Code and Vulnerabilities Breach

Weekly Report: New Hacking Techniques and Critical CVEs 7 Oct – 13 Oct 2025

The week of October 7-13, 2025, witnessed an unprecedented escalation in cybersecurity threats, marked by the active exploitation of critical zero-day vulnerabilities and sophisticated ransomware campaigns targeting enterprise infrastructure. Seven major incidents dominated the threat landscape, with particular focus on Oracle E-Business Suite and Redis vulnerabilities being exploited by prominent threat actors including Cl0p ransomware… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 7 Oct – 13 Oct 2025

Weekly Cybersecurity Intelligence Report Cyber Threats & Breaches 7 Oct – 13 Oct 2025

This week witnessed four significant cybersecurity incidents affecting major organizations across multiple sectors. The period from October 7-13, 2025, was marked by sophisticated attack campaigns targeting authentication systems, zero-day vulnerabilities, and supply chain compromises. Key Incidents: DraftKings Credential Stuffing Attack (September 2, 2025): Targeted under 30 customer accounts through automated credential reuse Kido International Nursery… Read More »Weekly Cybersecurity Intelligence Report Cyber Threats & Breaches 7 Oct – 13 Oct 2025

Clop Ransomware Gang Oracle E-Business Suite Data Breach

Date of Incident: August 2024 Overview: In August 2024, the Clop ransomware gang exploited a zero-day vulnerability in Oracle E-Business Suite to breach Harvard University’s systems in the education sector. The incident, affecting a limited number of parties within a small administrative unit, involved unauthorized remote code execution that allowed the attackers to encrypt files… Read More »Clop Ransomware Gang Oracle E-Business Suite Data Breach