Cybersecurity Incident

Kaspersky identified GoSerpent, a sophisticated state-linked cyber-espionage campaign targeting government and diplomatic organisations across Southeast Asia since at least 2021, using Go-based RAT with persistence mechanisms and deliberate dwell-time tactics for intelligence collection

Leadership read: A breach is a governance event before it is a technical one. For Kaspersky in Cybersecurity, the hiring consequence is rarely more engineers; it is senior accountability — security, risk and data governance reporting high enough to change decisions. Across Asia, watch whether the response is a hire or a contractor; that distinction says how the board has read it.

curated · 2026-07-21 · context →

MSG Entertainment's customer data was stolen by a hacking group and posted to the dark web. The breach included sensitive customer relationship platform information that was subsequently obtained and published by Wired magazine. MSG is now engaged in legal action disputing the characterization of the data.

Leadership read: A breach is a governance event before it is a technical one. For Madison Square Garden Entertainment in the sector, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire or a contractor; that distinction says how the board has read it.

curated · 2026-07-17 · context →

Finance employee at UK engineering consultancy Arup was targeted in a deepfake-enabled fraud attempt in January 2024, where attackers created AI-generated impersonations of the CFO and colleagues on a video call to facilitate financial theft. The incident resulted in a $25.6M loss.

Leadership read: A breach is a governance event before it is a technical one. For Arup in the sector, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire or a contractor; that distinction says how the board has read it.

curated · 2026-07-17 · context →

Cyclosporiasis outbreak linked to iceberg lettuce from Mexican supplier used by Taco Bell across U.S. locations. Lettuce removed from U.S. restaurants. Multiple lawsuits filed by affected consumers.

Leadership read: A breach is a governance event before it is a technical one. For Taco Bell in the sector, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire or a contractor; that distinction says how the board has read it.

curated · 2026-07-17 · context →

ConsenSys hired a North Korean operative as a developer consultant who gained access to MetaMask's core code before being detected and removed.

Leadership read: A breach is a governance event before it is a technical one. For ConsenSys in Technology, the hiring consequence is rarely more engineers; it is senior accountability — security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire or a contractor; that distinction says how the board has read it.

curated · 2026-07-17 · context →

Hedera suffered a $9.05M exploit via the Bonzo Lend protocol, resulting in a 40% collapse in total value locked (TVL) on the network.

Leadership read: A breach is a governance event before it is a technical one. For Hedera in the sector, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire or a contractor; that distinction says how the board has read it.

curated · 2026-07-16 · context →

Transport for London suffered a 2024 cyberattack attributed to Scattered Spider, a prominent cybercrime group. Two attackers (Owen Flowers, 18, and Thalha Jubair, 20) were sentenced to five and a half years in prison in July 2026 for their roles in the attack, which caused significant operational and financial impact.

Leadership read: A breach is a governance event before it is a technical one. For Transport for London in the sector, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire or a contractor; that distinction says how the board has read it.

curated · 2026-07-16 · context →

Nayax, an Israeli payments and loyalty platform, suffered a data breach where hackers stole data. The company has publicly refused to pay ransom.

Leadership read: A breach is a governance event before it is a technical one. For Nayax in the sector, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire or a contractor; that distinction says how the board has read it.

curated · 2026-07-16 · context →

Coupang escalated Washington lobbying spend to $250,000 in Q2 2026 via Trump-linked firm Ballard Partners, explicitly tied to managing fallout from a 'massive data breach' and ongoing conflict with South Korean regulators.

Leadership read: A breach is a governance event before it is a technical one. For Coupang in the sector, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire or a contractor; that distinction says how the board has read it.

curated · 2026-07-16 · context →

In March 2026, Mercor suffered a supply chain attack on LiteLLM (open-source Python library) that exposed up to 4TB of internal data and contractor records. Meta, a major client, paused all work indefinitely. Class action lawsuits followed. Former employees suspected North Korean operatives had infiltrated the contractor network using stolen credentials.

Leadership read: A breach is a governance event before it is a technical one. For Mercor in the sector, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire or a contractor; that distinction says how the board has read it.

curated · 2026-07-10 · context →

Iran-linked group Handala wiped approximately 80,000 employee devices at medical technology firm Stryker in March 2026, exploiting the company's Microsoft Intune management console as a destructive nation-state attack

Leadership read: A breach is a governance event before it is a technical one. For Stryker Corporation in MedTech, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire or a contractor; that distinction says how the board has read it.

curated · 2026-07-08 · context →

U.S. Army websites (oil.army.mil and ai2c.army.mil) were compromised via 404 error page hijacking, likely through WordPress or Microsoft cloud infrastructure vulnerability. Defacement messages were posted across multiple subdomains. The affected sites belong to the Army's Open Innovation Lab and Artificial Intelligence Integration Center. Breach origin (internal vs. third-party) remains unclear; sites were taken offline after discovery.

Leadership read: A breach is a governance event before it is a technical one. For U.S. Army in the sector, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire or a contractor; that distinction says how the board has read it.

curated · 2026-07-06 · context →