Cybersecurity Incident

The Coca-Cola Company confirmed that hackers stole data from its dairy subsidiary Fairlife during a ransomware attack in July 2026.

curated · 2026-07-27 · context →

Salesloft suffered a breach in 2025 when threat actor UNC6395 stole an OAuth token from a third-party integration, bypassing multi-factor authentication and gaining persistent access to hundreds of customer Salesforce instances.

Leadership read: A breach is a governance event before it is a technical one. For Salesloft in the sector, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire or a contractor…

curated · 2026-07-24 · context →

Equinox, Inc. experienced a data incident resulting in a proposed class action settlement (McHugh v. Equinox, Inc. and Carter v. Equinox, Inc.). Settlement includes credit monitoring and cash payments to affected parties.

curated · 2026-07-24 · context →

Redis shipped seven security releases on July 23 after researchers published authenticated RCE proof-of-concept exploits affecting multiple versions (6.2.22, 7.4.9, 8.6.4, and 8.8.0). Memory flaws in the platform could lead to remote code execution.

Leadership read: A breach is a governance event before it is a technical one. For Redis in the sector, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire or a contractor; that…

curated · 2026-07-24 · context →

In 2022, GitHub disclosed that attackers had compromised OAuth tokens issued to Heroku and Travis CI integrations. The authorizations lingered despite the integrations being no longer actively used, allowing threat actors to reach private repositories and harvest secrets.

Leadership read: A breach is a governance event before it is a technical one. For GitHub in the sector, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire or a contractor; that…

curated · 2026-07-24 · context →

US federal agencies issued updated advisory warning of Iranian hackers targeting Rockwell Automation programmable logic controllers (PLCs) and industrial control systems (ICS) devices using specific attack techniques.

curated · 2026-07-23 · context →

Johnson Controls XAAP Android application (versions <1.53) contains cleartext storage vulnerability (CVE-2026-34490) storing sensitive application data locally without encryption. CVSS 3.3 (LOW). Affects Fire Solutions Android app deployed worldwide in critical manufacturing. Requires physical device access or separate compromise to exploit.

Leadership read: A breach is a governance event before it is a technical one. For Johnson Controls in the sector, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire or a contractor…

curated · 2026-07-23 · context →

Kaspersky identified GoSerpent, a sophisticated state-linked cyber-espionage campaign targeting government and diplomatic organisations across Southeast Asia since at least 2021, using Go-based RAT with persistence mechanisms and deliberate dwell-time tactics for intelligence collection

Leadership read: A breach is a governance event before it is a technical one. For Kaspersky in Cybersecurity, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Asia, watch whether the response is a hire or a contractor…

curated · 2026-07-21 · context →

DigiCert suffered a security breach in April 2026 involving theft of code-signing certificates, attributed to CylindricalCanine, a sub-group of Chinese cybercrime group GoldenEyeDog (APT-Q-27).

Leadership read: A breach is a governance event before it is a technical one. For DigiCert in Technology, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire or a contractor…

curated · 2026-07-17 · context →

MSG Entertainment's customer data was stolen by a hacking group and posted to the dark web. The breach included sensitive customer relationship platform information that was subsequently obtained and published by Wired magazine. MSG is now engaged in legal action disputing the characterization of the data.

curated · 2026-07-17 · context →

Finance employee at UK engineering consultancy Arup was targeted in a deepfake-enabled fraud attempt in January 2024, where attackers created AI-generated impersonations of the CFO and colleagues on a video call to facilitate financial theft. The incident resulted in a $25.6M loss.

curated · 2026-07-17 · context →

Cyclosporiasis outbreak linked to iceberg lettuce from Mexican supplier used by Taco Bell across U.S. locations. Lettuce removed from U.S. restaurants. Multiple lawsuits filed by affected consumers.

curated · 2026-07-17 · context →