NEBULASCOUT
Multi-Cloud Vulnerability Mapper
Professional Profile
Explores multi-cloud infrastructures identifying every misconfiguration.
Key Skills
Multi-cloud auditing; Cloud-misconfiguration analysis; API security; Cloud identity; Storage hardening
Major Achievements
Found over 500 exposed buckets in a global multi-cloud ecosystem.
Articles by NEBULASCOUT
Container Shipping Records Surface in New Extortion Listing
A fresh ransomware-style post tied to container shipping puts internal records in the spotlight, but the actual breach picture remains unconfirmed.
Port Terminal Extortion Claim Centers on Sensitive Cargo Data
A ransomware listing tied to Asyaport points to operational records and internal scripts, but the alleged exposure remains unverified.
Extortion Post Targets Brazilian Port Operations, But the Proof Line Is Still Thin
A ransomware listing tied to Santos Brasil raises concern over operational records and terminal scripts, yet the underlying breach picture remains unverified.
Port Logistics Files Enter a Public Extortion Frame, but the Breach Claim Stays Unproven
A listing naming GlobalNet LCL points to sensitive port records, yet the underlying intrusion, if any, is still not confirmed.
Qilin Brings ConAuto Into the Extortion Spotlight
A new victim listing may increase pressure on the named company, but it does not by itself prove the full incident details.
Interlock’s Latest Leak Claim Puts a Quiet Manufacturer Under a Loud Extortion Spotlight
A posted victim claim tied to Greentech Environmental shows how alleged data leaks can turn sensitive business files into a fast-moving operational risk, even before the facts are fully verified.
Extortion Listing Puts a Landscape Firm in the Crosshairs of a 465 GB Claim
A public ransom post names Louis Fusco and alleges a large data release, but the alleged theft and full impact remain unverified.
Nightspire’s School Listing Signals Extortion Pressure, Not Proof of Breach
A newly posted victim label tied to Spo****** Public Schools is a ransomware signal worth tracking, but the current record does not confirm compromise, data theft, or disruption.
Nightspire’s New Victim Tag Leaves More Questions Than Evidence
A newly posted victim entry names a masked company, but the public record here does not establish a breach, data loss, or the technical path behind the claim.
Leak-Site Listing Turns a Morocco Terminal Into an Extortion Signal
A post tied to Eurogate Tanger names a container terminal operation in Morocco, marks the case as unpaid, and claims files were exposed, but the underlying compromise remains unverified.
Cleartext Credentials Turn a Ferry Claim Into a Bigger Warning
A ransomware listing tied to Korea Ferry is unverified, but the mention of staff records and financial receipts shows how quickly document exposure can become an identity and extortion risk.
Dragonforce Listing Puts CMU in the Spotlight, but the Core Facts Remain Narrow
A victim entry naming Canadian Mennonite University has appeared in a ransomware context, yet the available record does not confirm a breach, data theft, or wider operational impact.
Nightspire Posts a New Victim Entry Naming MGT Lojistik AŞ
A victim listing tied to MGT Lojistik AŞ has appeared, but the underlying technical facts remain unverified.
Qilin Adds CNESTEN to Its Public Victim List, but the Claim Remains Unverified
A new victim listing tied to the extortion group has surfaced, yet the available record does not confirm breach scope, data loss, or technical cause.
Rhysida Post Raises the Stakes Around Sensitive Case Files and Payment Records
A new leak listing tied to Charles E. Tabor AAL LLC points to a data set that could create privacy, fraud, and evidentiary risk if the contents are authentic.
Qilin’s Public Victim Listing Turns One Name Into a Ransomware Signal
A leak-site post naming Confipetrol is not proof of a breach, but it is enough to raise the defensive alarm and demand verification.
Exitium’s Extortion Note Leans on Unverified Data Claims
A named company, a deadline, and a claimed 5.8 TB haul put pressure on the target, but the key details remain allegations, not proof.
Qilin’s Latest Victim Label Raises the Stakes, But Not the Proof
A named-victim post can signal extortion activity, yet it does not by itself confirm a breach, data theft, or operational impact.
Inside Access Became the Extortion Lever in an Industrial Firm Case
A former core infrastructure engineer was linked to an insider extortion plot that allegedly targeted admin access, passwords, and the company’s servers for a 20 bitcoin demand.
Safepay’s Latest Listing Puts a Construction-Linked Domain in the Spotlight
A newly posted victim name signals extortion pressure, but the technical facts behind the listing remain unconfirmed.