HIT cyberattack: casinos reopen
Soclyde Team
HIT's casinos reopened after the August 25 intrusion. The company confirmed access to some data; a later Akira leak claim remains unverified.
Resources
Blog
Insights, field notes, and practical guidance on off-cloud security.
The REF9334 operation uses fake banking documents to install AVSync, steal cookies and sessions, and forge Chromium integrity checks.
CISA added CVE-2026-84869 to its KEV catalog after attacks targeting ScreenConnect. Here is the scope, the 26.6.5 fix, and the priority actions.
Spain’s first reported breach notification involving an AI agent highlights faster access, data changes and the controls organisations need to review.
AdaptHealth’s SEC filing confirms the theft of a password file after a contractor session was compromised; SecurityWeek reports that the breach affected 4,115,802 people.
Cisco confirms exploitation of CVE-2026-20079 and CVE-2026-20316 in Secure Firewall Management Center. Here is the risk and the immediate response.
A multi-hop phishing campaign abuses legitimate Google services to reach credential harvesters or install remote-access software.
Surfshark’s September 2026 incident shows how an internet-accessible test environment can expose engineering material and secrets preserved in Git history.
Veradigm’s September 8, 2026 SEC filing describes compromised vendor credentials being used to extract patient personal data through a limited API.
Japan's Digital Agency confirmed unauthorized access to GSS after a VPN vulnerability was exploited. Here is what may be exposed and what organizations should do.
Amgen confirmed patient and proprietary data exfiltration from third-party cloud environments, with no operational impact identified at the time of its SEC filing.
Android makes password transfers easier
Soclyde Team
Google makes it easier to transfer passwords and passkeys between compatible Android managers without a manual export. What to check before switching.
Take the next step
Build a calmer password strategy
Have a question about off-cloud security or Soclyde? Let’s talk directly.