Event Timeline

Cybersecurity Incident

Category view

Events Logged5

Activity & Events

Published 35d agoEvent Jul 1

Industry Leaders Join Open Secure AI Alliance for AI Safety and Security | NVIDIA Blog

Open security tools allow defenders to inspect and run AI on their own infrastructure, preventing reliance on closed systems that may block essential forensic analysis during attacks.

Closed AI tools were unable to distinguish attackers from defenders and blocked forensic analysis
Hugging Face ran an open-weight AI model on its own infrastructure
The model analyzed more than 17,000 actions to contain the intrusion

Cybersecurity IncidentDeadLock

Published 20d agoEvent Jul 1

Microsoft details DeadLock extortion tactics

The use of blockchain and decentralized messaging makes the attacker's infrastructure more resilient to takedown efforts by authorities. This increases the difficulty of disrupting recovery and negotiation processes for infected organizations.

First observed in July 2025 using double extortion tactics.
Uses Polygon smart contracts for proxy configuration and data leak blog storage.
Routes encrypted victim communication through the Session decentralized messenger network.
Implements resource-aware throttling (29% RAM, 70% CPU thresholds) and hybrid Curve25519/XChaCha20 encryption.

Batten Down Your Packages: Mitigation Guidance for Supply Chain Compromise

3 updatesPublished 31d agoEvents Jan 1 - Mar 1cloud.google.com

As malicious third-party packages become more common, businesses face higher risks of credential theft and network breaches. Implementing these defenses helps prevent attackers from using trusted software dependencies to enter private systems.

Cybersecurity Incident

North Korean threat group MIDNIGHT NEPTUNE compromised the maintainer account of the axios npm package to inject a malicious dependency dropping WAVESHAPER.V2 backdoor.

MIDNIGHT NEPTUNEEvent date Mar 1

Cybersecurity Incident

Threat group UNC6780 conducted extensive supply chain compromises targeting PyPI, npm, and Docker Hub ecosystems.

UNC6780Event date Feb 1

Cybersecurity Incident

North Korean threat actor UNC4899 compromised a web3 developer machine leading to frontend code tampering and $1.4B cryptocurrency theft.

UNC4899Event date Jan 1

In this story

MIDNIGHT NEPTUNE UNC6780 UNC4899