buildOne report1 publisher ShinyHunters-linked crews take Okta with a phone call and a rogue MFA device, Health-ISAC warns
Health-ISAC warned members in September 2026 that ShinyHunters-linked crews extort healthcare without encrypting files, in one case taking over 1TB. A dev.to write-up of the warning points to new factor enrollments and bulk exports as the signals to watch.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence50
Asos hackers reached Snowflake through an employee's login, City AM reports
Attackers who threatened millions of Asos customers got into its Snowflake-hosted data by posing as an employee's trusted contact, City AM reports. Its report names ShinyHunters for H&M alone among Asos, H&M and TFG, so a shared method across the three is unconfirmed.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence45
buildConfirmed2 publishers Workday made its MCP server, SQL access to live data and a shared agent runtime generally available on Tuesday. Agents built in Claude Code or Cursor run under the signed-in user's permissions, the company says.
Reality
- Evidence45
- Adoption25
- Hype gap+25
- Incentives75
- Confidence65
TFG London identified a cybersecurity incident on Sunday 11 October that hit IT systems at Phase Eight, Hobbs and Whistles. TFG says it has no reason to believe payment information is at risk, and the Independent counts it as the second UK retailer hack in a week.
Perspective Coverage
9 publishers
- Builder
- Builder 5%
- Operator
- Operator 68%
- Investor
- Investor 27%
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+10
- Incentives40
- Confidence72
Air France-KLM confirms a breach the Asos attackers say is theirs
Air France-KLM confirmed to City AM that unauthorised access reached internal folders despite mandatory multi-factor authentication. The airline did not name an attacker, so the tie to Xuanye Group, the Asos claimant, rests on the group's own posts.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+10
- Incentives65
- Confidence45
buildConfirmed6 publishers Anthropic's Claude Dashboards, now in beta on paid plans, shows the SQL query behind any number a user clicks. The New Stack reported that Anthropic has not yet said whose credentials run each refresh, a detail data teams need before connecting a production warehouse.
Perspective Coverage
7 publishers
- Builder
- Builder 36%
- Operator
- Operator 40%
- Investor
- Investor 24%
Reality
- Evidence70
- Adoption
- Not scored
- Hype gap+10
- Incentives60
- Confidence68
Asos says hackers took detailed profiles of potentially millions of customers, after first telling investors only basic contact details may have been accessed. The revision followed the attackers' approach to the BBC, so the people holding the records set the timing of the fuller disclosure.
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+10
- Incentives60
- Confidence65
Asos said hackers obtained an employee's login by posing as a trusted contact, then reached customer names and contact details on third-party platforms. The shares fell on the hackers' app alert two days before Asos explained it. For a board, that puts staff checks and disclosure speed inside the same risk.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+10
- Incentives70
- Confidence58
Extortionists sent ASOS app users an apparently genuine ASOS push alert on October 6 claiming they had fully compromised the retailer's Snowflake instance. The alert is the only access anyone outside ASOS has seen; the entry route and any data taken are unknown.
Perspective Coverage
11 publishers
- Builder
- Builder 14%
- Operator
- Operator 72%
- Investor
- Investor 14%
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+40
- Incentives60
- Confidence68
buildOne report1 publisher Attackers posing as a colleague took over ASOS's push-notification console with one employee's login
ASOS shares fell 10% after attackers used one employee's stolen login to push an extortion message through its app, a dev.to account says. That single credential was enough to reach third-party messaging tools, so those consoles need production-grade access controls.
Reality
- Evidence30
- Adoption
- Not scored
- Hype gap+25
- Incentives
- Not scored
- Confidence30
buildConfirmed2 publishers Amazon Web Services added Iceberg materialized views to Redshift, so a result Redshift computes once can be read by Spark and Athena, a dev.to write-up says. Teams that copy shared metrics between engines with ETL jobs can retire those jobs only if the views stay fresh enough for their readers.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+35
- Incentives60
- Confidence60
Apparent hackers sent an extortion note through ASOS's app to UK customers, claiming to have "fully compromised" its Snowflake instance. ASOS has not confirmed a breach, so the only compromise anyone has seen is that outsiders could message its app users.
Perspective Coverage
15 publishers
- Builder
- Builder 21%
- Operator
- Operator 55%
- Investor
- Investor 24%
Reality
- Evidence74
- Adoption
- Not scored
- Hype gap−15
- Incentives66
- Confidence70
Group-IB traces ASOS's rogue push alert to a renamed gaming-trade Telegram account
Group-IB found the Telegram channel in ASOS's October 6 rogue push alert was opened that day by an account once used for gaming-item trading. Until data surfaces, the Snowflake claim is unproven and the abused messaging platform is the lead to work.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+20
- Incentives45
- Confidence50
Google paid up to triple the going rate for fiber that routes around the Red Sea
Google paid two to three times the roughly 6 million euro going rate for backup fiber across Turkey, according to a person familiar with the deal. Most Europe-Asia cloud traffic still crosses the contested Red Sea strait, so the premium buys a route for the day a cable breaks.
Reality
- Evidence45
- Adoption35
- Hype gap+15
- Incentives55
- Confidence45
Hackers delivered their Asos extortion demand through the retailer's own app
Hackers used the Asos app on Tuesday to send UK users an extortion demand claiming they had compromised the retailer's Snowflake instance. Because the demand went to shoppers, the attackers decided when Asos had to speak to customers, before it could say what data, if any, was taken.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+5
- Incentives65
- Confidence40
HackerRank's AI interviewer scores developers on how they work through a task with AI
HackerRank's Chakra AI interviewer, now open to all customers after more than 500,000 test interviews, scores how developers work alongside an AI assistant. Hiring teams that adopt it take on the job of checking what that score measures and which candidates it flags.
Perspective Coverage
3 publishers
- Builder
- Builder 28%
- Operator
- Operator 52%
- Investor
- Investor 20%
Reality
- Evidence45
- Adoption35
- Hype gap+30
- Incentives70
- Confidence55
buildConfirmed3 publishers Cloudflare made its Data Platform generally available as Basin, three serverless services that ingest, catalog and query Apache Iceberg tables on R2. Outside Iceberg engines read the same tables, so Workers teams can price Basin SQL against a warehouse on identical data.
Perspective Coverage
3 publishers
- Builder
- Builder 39%
- Operator
- Operator 38%
- Investor
- Investor 23%
Reality
- Evidence55
- Adoption25
- Hype gap+25
- Incentives75
- Confidence60
Microsoft and Google are joining Apache Ossie, an open format for moving semantic models between platforms that more than 60 companies already back. Its shared hub cuts converter work, though analysts say lock-in eases only as far as the format can carry each vendor's logic.
Perspective Coverage
4 publishers
- Builder
- Builder 45%
- Operator
- Operator 34%
- Investor
- Investor 21%
Reality
- Evidence52
- Adoption18
- Hype gap+15
- Incentives60
- Confidence58
Factory CEO Matan Grinberg says he fired advisor Chris Degnan, who two hours later announced he is chief revenue officer at $48 billion rival Cognition. Founders whose investors also back their rivals carry the same exposure on their own boards.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+30
- Incentives75
- Confidence50
buildConfirmed2 publishers Microsoft made Fabric IQ the default business context for Microsoft 365 Copilot at FabCon Barcelona and opened it to outside agents over MCP. The metric definitions teams keep in Power BI semantic models now shape what those agents answer.
Reality
- Evidence60
- Adoption35
- Hype gap+20
- Incentives80
- Confidence60
Earlier coverage
- Factory's CEO says a board observer leaked to Cognition before becoming its revenue chief
Build · September 30, 2026 · Confirmed2 publishers
- ShinyHunters defaced the FBI's jobs site a week after Dutch police held an alleged leader
Product · September 29, 2026 · Confirmed3 publishers
- Army soldier who extorted AT&T using Snowflake logins without MFA gets 70 months
Security · September 25, 2026 · Confirmed7 publishers
- RingCentral's platform held. Its customer records are on the internet anyway.
Security · August 14, 2026 · Confirmed3 publishers
- An AI commit deleted a Snowflake workflow's injection guard. An agent walked in five days later.
Build · August 17, 2026 · Confirmed2 publishers
- A Copilot Autofix Wrote the Bug, and an Autonomous Agent Cashed It for Snowflake's Jira
Security · August 17, 2026 · Confirmed4 publishers
- Snowflake adds $230m to its full-year product guide on a $70m quarterly beat
Invest · September 2, 2026 · Confirmed4 publishers
- Snowflake books $370m less contracted revenue than analysts modelled
Product · September 3, 2026 · Confirmed2 publishers
- McKesson's 8-K locates the stolen data inside third-party applications
Security · August 28, 2026 · Confirmed9 publishers
- Intruders reached Mathspace's unpatched Metabase four days after the fix shipped
Security · September 7, 2026 · Confirmed4 publishers
- Anthropic lets committed Claude spend pay for partner software
Build · September 23, 2026 · One report1 publisher
- August re-rated software faster than any growth rate could move
Invest · September 6, 2026 · One report1 publisher