The breach isn’t the problem. The spread is. →The breach isn’t the problem. The spread is. →Measure in 5 min. Free AssessmentFree Assessment
Technology/IT
Breach intelligence, attack campaigns, and threat reports targeting the Technology/IT sector.
Explore Other Sectors
Technology/IT Threat Reports
Trezor's Third-Party Email Provider Breach Exposes 347,000 Users to Cryptocurrency Phishing Campaign
In September 2026, cryptocurrency hardware wallet manufacturer Trezor disclosed a sophisticated phishing campaign targeting 347,000 users following a breach of their third-party email provider Brevo. Threat actors compromised Brevo's systems and sent convincing phishing emails claiming a critical hardware vulnerability in Trezor devices, tricking 2,500 users into clicking malicious links before the campaign was shut down within 20 minutes. This incident represents Trezor's third major security breach in recent years, following previous compromises of their support portal and shipping provider. This attack demonstrates the evolving sophistication of supply chain targeting, where attackers compromise trusted third-party service providers to reach high-value cryptocurrency users with credible social engineering tactics.
1 week ago
Kill Chain
Salt Typhoon's 2024 Breach of U.S. Telecom Networks: A Wake-Up Call for Cybersecurity
In 2024, the Chinese state-sponsored hacking group known as Salt Typhoon orchestrated a sophisticated cyber espionage campaign targeting major U.S. telecommunications companies, including AT&T, Verizon, and T-Mobile. By exploiting vulnerabilities in network devices and systems, the group gained unauthorized access to sensitive data such as call logs, text messages, and, in some instances, audio recordings. Notably, they infiltrated systems used for lawful wiretapping, posing significant national security concerns. The attackers employed advanced techniques, including 'living off the land' tactics, utilizing legitimate administrative tools to evade detection and maintain persistent access. This incident underscores the escalating threat posed by state-sponsored cyber actors to critical infrastructure. The breach highlights the necessity for robust cybersecurity measures and continuous monitoring to detect and mitigate such sophisticated intrusions. Organizations must prioritize the security of their network devices and systems to prevent similar attacks in the future.
7 months ago
Kill Chain
Stop Active Cloud Data Exfiltration
Aviatrix Rapid Containment helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.
Looking for threats in a different sector?
Browse All Threat Reports