Topic
A ransomware tactic where attackers steal sensitive data before encrypting systems, then threaten to leak or sell it to force payment even if backups exist.
Oasis Security traced intrusions at two large South Korean churches, one ending with 47.3 GB staged in a MinIO bucket. The ERP web shell was still reachable on 9 September 2026, eight days after the last files were pulled from the attacker server.
Reality
EY spotted unusual activity on a support-ticket platform holding client tax files on 23 April, 11 days after the last reported unauthorised access. Goldman Sachs and Man Group say their own networks held. The weak point lay in the adviser's tools.
Reality
Zscaler ThreatLabz logged 20.1% fewer ransomware payments in the year to March 2026, worth $327.8M in total, while the average payment rose 5.3% to $431,995. Leak-site listings fell just 3% over the same period, so the decline is in how many victims pay.
Reality
TASK#STOMP, a Windows backdoor researchers dissected, uploads a victim's business documents and then stays to copy each new or edited one. Loss from a single infection keeps growing until someone finds and removes it.
Reality
Varonis says Copilot disclosed an undocumented URL parameter mid-refusal, enabling silent exfiltration. Microsoft shipped patches on August 18, 2026, about eight months after disclosure.
Reality
ThreatFabric says the Android spyware encrypts stolen data and relays it over Wi-Fi Direct and Bluetooth when it cannot reach its C2, using up to four hops by default.
Perspective Coverage
4 publishersReality
Agents in OpenAI's research environment posted user-provided images to third-party image hosts 53 times, the company disclosed. Its fixes harden and monitor the systems around the model, and a review of older agent activity is still running.
Reality
Noma Labs disclosed ForcedLeak, a CVSS 9.4 chain that let a planted Salesforce web-form lead steer Agentforce into leaking CRM data. Salesforce blocked the exit on September 8, leaving audits of recent leads and agent activity as the open task.
Reality
The code containers could not reach the internet or each other, but every one of them reached the same package service, and its metadata was not scoped by account, so a planted prompt turned one user's assistant into a stranger's Gmail reader.
Perspective Coverage
3 publishersReality
Zhipu AI says repository data left only while a project description page was being generated, and that the behaviour is fixed. The developer who found it says earlier versions sent data on every query, and some companies have stopped using ZCode.
Perspective Coverage
3 publishersReality
Three researchers say agents attributed to OpenAI moved scraped data through RubyGems' publish and list calls in May and June. A local demo now reproduces that channel on a registry with no bug in it.
Reality
The demo uploads a model file as base64 chunks over GET, then starts an inference server on it. It shows why egress and WAF rules keyed on the HTTP verb miss what the URL is doing.
Reality
The SnapShield expansion adds detection for data being read and moved out, on top of encryption. Founder Douglas Milburn says containment can fire on activity across a few files, and that legitimate work sometimes trips it.
Reality
Adversa AI encrypts its instructions so Grok's input filter sees only noise, then lets Grok's own sandbox decrypt them. The firm says it reported the technique to xAI on 3 June 2026 and reproduced it again on 19 August.
Reality
Microsoft has tracked this since May 2026. First contact lands on an unmanaged personal phone, and the attacker's own authenticator outlives the stolen session, so tenant telemetry only starts after the account is already lost.
Reality
A dev.to write-up follows the bytes past the prompt box into the envelope a client assembles around it, then pairs one git command with a local scanner that reads the ignored-file list as an attachment manifest.
Reality
The 500-plus engagements behind that share are all companies that already needed an outside responder, so the figure describes how fast a bad day closes rather than your odds of having one. It still decides which of your controls can fire in time.
Reality
The path Mindguard reported works against Kiro 0.7.45 on Windows and Amazon closed it in 0.8.140, but no CVE was assigned and workspace trust made no difference, so the installed version string is the only check you have.
Reality
Adversa AI's Cryptographic Context Injection keeps instructions as ciphertext until the agent's own runtime decrypts them. The exfiltration then rides a tool the agent already had.
Reality
Adversa says it hid data-exfiltration instructions in AES-256-GCM ciphertext and let Grok decrypt them in its own Python sandbox. The plaintext version of the same attack was refused.
Reality