CYBERSECURITY COVERAGE

From first signal to finished analysis.

TensileVue follows cyber incidents as the record develops: fast reporting when facts first emerge, material updates when the record changes, and evidence-backed memorandums when deeper analysis is ready.

CURRENT COVERAGE

Breaking News.

New incidents and material cyber events, newest first.

The Keys Were Intact. Bitget Still Lost $387.5 Million.

September 26, 2026

The Keys Were Intact. Bitget Still Lost $387.5 Million.

Bitget says attackers manipulated a backend wallet authorization path without stealing private keys, exposing the difference between a valid signature and trustworthy transaction intent.

STORY UPDATES

What changed.

Material developments in stories already under coverage.

OpenAI's Hugging Face Incident Was Not the End of the Story

September 26, 2026

OpenAI's Hugging Face Incident Was Not the End of the Story

OpenAI says its retrospective agent review found wider third-party impact, including 53 user-provided images posted to external hosting services as unlisted links.

DEEP ANALYSIS

Memorandums.

Evidence-backed analysis after the record has been tested, bounded, and reviewed.

The Email Was Real. The Authority Wasn't.

September 15, 2026

The Email Was Real. The Authority Wasn't.

Revolut says it disclosed sensitive customer information after fraudulent requests arrived from a legitimate government-agency email domain.

A Little-Known Country Tracks Who Really Owns Companies. Its Registry Was Breached.

A Little-Known Country Tracks Who Really Owns Companies. Its Registry Was Breached.

Taking the beneficial-ownership registry offline and finding no detected alteration did not, by itself, prove restored trust.

Reports of Minnesota Water-System Intrusions: Restored PLC Access Is Not Restored Trust

Reports of Minnesota Water-System Intrusions: Restored PLC Access Is Not Restored Trust

Restored PLC access is not restored operational trust.

Production Restart Is Not the Same as Restored Trust

Production Restart Is Not the Same as Restored Trust

Production restart is not the same as restored trust.

Patching After Exfiltration

Patching After Exfiltration

The University of Phoenix Oracle EBS incident shows why installing the update does not by itself restore trust.

The Key That Crossed the Cloud Boundary

The Key That Crossed the Cloud Boundary

Storm-0558 exposed how provider-side signing keys, token validation, logging, and security culture converge into government risk.

The Clearinghouse Became Critical Infrastructure

The Clearinghouse Became Critical Infrastructure

Change Healthcare shows how one weak remote-access path can become a nationwide continuity failure.

OpenAI’s Spy Game, Hugging Face’s Incident

OpenAI’s Spy Game, Hugging Face’s Incident

The OpenAI-Hugging Face intrusion shows why cyber-capable agents must be governed as privileged non-human identities.

SECTORS

Follow the risk by industry.

Browse coverage through the operational environments it affects.

Critical Infrastructure

Cybersecurity incidents affecting utilities, industrial control systems, water, energy, transportation, telecom, and other essential services.

Enterprise

Cross-industry enterprise security incidents, identity failures, cloud risk, ransomware, and control breakdowns.

Financial Services

Cybersecurity incidents affecting banks, fintechs, payments, exchanges, financial platforms, and market infrastructure.

Government

Cybersecurity incidents affecting public agencies, government services, public data, and government-operated systems.

Healthcare

Cybersecurity incidents, identity failures, operational disruption, and resilience across healthcare providers, payers, clearinghouses, and suppliers.

Higher Education

Cybersecurity incidents and identity-control issues affecting universities, colleges, research systems, and education platforms.

Technology & AI

Cybersecurity incidents affecting technology providers, cloud platforms, software ecosystems, AI systems, and digital infrastructure.