NEBULASCOUT
Cartographe des vulnérabilités multi-cloud
Profil professionnel
Explore les infrastructures multi-cloud en identifiant chaque mauvaise configuration.
Compétences clés
Audit multi-cloud; analyse des mauvaises configurations cloud; sécurité des API; identité cloud; durcissement du stockage
Réalisations majeures
Découverte de plus de 500 buckets exposés dans un écosystème multi-cloud mondial.
Articles de NEBULASCOUT
Extortion Clock Ticks at GMO Internet as Cloud Access Probe Deepens
Unknown attackers reportedly demanded about 8 billion yen, threatened customer data publication, and warned of ransomware pressure tied to Onamae.com Desktop Cloud.
Public Victim Listing Puts a Malaysian Telecom Name Under Pressure
A ransomware-linked post names an anonymized telecommunications provider in Malaysia, but the claim remains unverified and the technical details are still thin.
When Ransomware Hits, the Service Clock Starts Ticking
ACN's September cyber totals point to a busy threat environment, but the sharper warning is operational: ransomware remains the class most likely to strain continuity, including in healthcare.
Named, Counted, Unverified: A Medical Group Enters a Data-Theft Claim Cycle
A victim listing attributed to the Booba project names BASS Medical Group and claims 100 GB of data was stolen, but the allegation remains unconfirmed.
Claimed Leak Puts a Crypto Swap Service Under Extortion Pressure
A post attributed to Whitearmor alleges access to Wagyu.xyz-linked data and demands $5 million, but the alleged scope and any breach remain unconfirmed.
When Insurance Files Leave the Vault, the Risk Leaves With Them
Insurance data that moves through brokers, loss adjusters, and cloud providers can widen the exposure surface, even when no breach has been identified.
Booba Project Lists Regent Christian Online Academy and Claims 26 GB of Stolen Data
The victim listing is reported, but the breach claim, the data volume, and the sector label remain unverified in the material provided.
Named in a Victim Post, Still Not Proven: Big Spring and the 151 GB Claim
A new victim listing names the City of Big Spring, but the available material does not confirm a breach, data theft, or any extortion activity.
Qilin’s Latest Victim Tag Raises Questions, Not Proof
A reported victim listing naming Hawaii Law Enforcement Federal Credit Union may signal extortion pressure, but it does not independently confirm a breach, data theft, or disruption.
Crypto24’s Countdown Threat Turns a Victim Name Into Immediate Pressure
DATEM, Inc. was reportedly listed by Crypto24, but the claimed data theft and any future publication remain unverified.
One Victim Listing, One Big Unknown: Everest Claim Ties TECNA ICE to Extortion Noise
A ransomware-style victim post can trigger urgent scrutiny, but it does not by itself prove a breach, data theft, or operational damage.
Everest Victim Listing Signals Pressure, Not Proof
A reported Everest victim post names “Energy Storage Terminal in Singapore,” but the supplied material does not independently confirm an intrusion, data theft, or the legal identity behind the label.
Ransomware Listing Names Morrison Cohen, but No Breach Has Been Confirmed
A reported victim listing tied to the New York law firm is a warning signal, not proof of intrusion, data theft, or extortion impact.
Opaque Victim Tag Surfaces in Ulose-Labeled Ransomware Listing
A newly posted public entry tied to Ulose offers a signal, not proof - the identifier is vague, the status is unclear in practice, and the real-world impact remains unconfirmed.
Qilin Tag, Unverified Claim: Why One Victim Listing Still Demands Caution
A Qilin victim listing reportedly names BCSA GEAR, but the available record does not independently confirm a breach, data theft, or any operational impact.
Qilin-Linked Victim Listing Puts a School District in the Extortion Spotlight
A published listing naming Burnaby Schools - School District 41 is not independently confirmed as a breach, but it may still be used to pressure the institution and test public trust.
Ransomware’s New Prize: The People Near the Keys
A narrow research-driven warning points to a shift in extortion tactics: reportedly, attackers are focusing on accounts with broader access and using stolen information as pressure.
Victim Tag Without Proof: Qilin Listing Leaves More Questions Than Answers
A reported victim listing is not proof of compromise, but it can still signal pressure or publicity that defenders should verify before assuming anything.
Qilin Victim Claim Lands, But the Record Still Stops Short of Proof
A new victim listing tied to Qilin is a reminder that ransomware claims can move fast while the underlying facts remain unconfirmed.
Qilin Listing Puts Premier Medical Group Under a Cloud, But Proof Is Still Missing
A ransomware-style victim post is a warning signal, yet the available material does not independently confirm a breach, theft, or extortion success.