← Feed

Posts

• View post

  France's decision to publicly attribute the fridge attacks to Iran isn't surprising, says Polish cyberwarfare expert @LukaszOlejnik@mastodon.social. "In this case, the attribution is understandable given the scale of the sabotage, impact on the population and the public concern," he said. "Cyber operations attributable to a foreign state that cause physical damage on French territory constitute a violation of state sovereignty. So no wonder." Full report: https://ww...

• View post

  Breach probes: Hobbs and Whistles owner TFG actively responding to incident; H&M investigating claimed database theft by a "nascent collective" calling itself ShinyEquationCartel. https://www.databreachtoday.com/retailers-tfg-london-hm-probe-potential-data-breaches-a-33089

• View post

  Viral theory called into question: Ukraine's drone strikes on Yandex data centers in Russian likely didn't silence Moscow's propaganda bots, researcher finds. https://www.databreachtoday.com/researchers-find-yandex-strikes-didnt-silence-russian-bots-a-33108

• View post

  A major South African pathology laboratory confirmed it's responding to a recent cyber incident, but disputed cybercriminals' claim to have stolen data pertaining to 80 million patients. https://www.databreachtoday.com/pathology-lab-confirms-hack-but-disputes-data-theft-claims-a-33106

• View post

  A network of major Chinese-language phishing sites used by cybercriminals to impersonate tens of thousands of global corporations had their infrastructure seized following a U.S. court order sought by Microsoft and healthcare organization Health-ISAC. https://www.databreachtoday.com/microsoft-takes-down-massive-chinese-phishing-marketplace-a-33107

• View post

  Britain's National Cyber Security Centre on the move to post-quantum cryptography: "high priority migration activities should be carried out by 2031." That's just 3 years and change. https://www.ncsc.gov.uk/blogs/post-quantum-updates-to-our-tls-guidance

• View post

  Weekly Data Breach Roundup —Fallout from the French supermarket fridge hacking attack —Ahold Delhaize restores deliveries —North Korean IT worker crackdown —Japanese seafood logistics ransomware attack —Aoki infostealer targets coding assistant credentials —Palo Alto ships emergency firewall patch —Kazakhstan-linked hackers target Russian oil refinery —Poland investigates Pegasus —Suspected cybercrime marketplace admin busted in North Macedonia. https://www.databreachtoday.com/breach-roundup-fre...

• View post

  Weekly Cryptohack Roundup —Ledger halts wallet sales across Asia following suspected theft of $86 million in cryptocurrency —Britain sanctions a crypto exchange for evading sanctions on Russia —Hackers deploy cryptocurrency miners through AhsayCBS flaws —UK court rules on a $5 billion bitcoin ownership dispute —XRP Ledger fixes a critical token-creation bug https://www.databreachtoday.com/cryptohack-roundup-ledger-halts-sales-amid-86m-theft-probe-a-33114

• View post

  OpenAI sued over ChatGPT safety risks by 8 US states https://www.healthcareinfosecurity.com/openai-sued-over-chatgpt-safety-risks-by-8-us-states-a-33119

• View post

  Proofpoint plans to acquire Varonis for $6.3 billion in what would be 2026's largest pure-play cybersecurity acquisition, combining email security, threat intelligence, data access governance and AI protection as enterprises confront growing risks from autonomous AI agents. https://www.databreachtoday.com/proofpoint-to-buy-data-security-stalwart-varonis-for-63b-a-33125

• View post

  Zero-day in BeyondTrust Remote Support appliances has been exploited since August. 'Patch ASAP' before fix gets reverse-engineered by other attackers, expert warns. https://www.databreachtoday.com/zero-day-in-beyondtrust-remote-support-appliances-exploited-a-33129

• View post

  Plaintiffs representing about over 62 million affected individuals reached a preliminary $80 million settlement of proposed class-action litigation against Conduent stemming from a 2024 hack on the back-office support services firm. https://www.databreachtoday.com/conduent-plaintiffs-reach-80m-settlement-in-2024-hack-a-33137

• View post

  ConnectWise suspends its Cloud Backup services as it probes hack. —Appears to involve a stolen API secret for the vendor's Microsoft 365 apps for backing up and restoring data —Attackers exploited flaw to access tenant environments. —How many got popped, what attackers stole isn't clear —Partial view: Huntress saw attackers attempted to exploit nearly 1,000 of its own customers that use ConnectWise —It found signs of unauthorized access to 300 of those organizations https://www...

• View post

  A pediatric practice in New York and Connecticut and one of its former IT services vendors will collectively pay those two states financial penalties of $2.7 million for a 2024 hacking incident that affected nearly 900,000 people. Ransomware gang BianLian claimed responsibility for the attack. https://www.databreachtoday.com/states-fine-pediatric-practice-vendor-27m-over-hack-a-33144

• View post

  Autonomous computer company Simular found a way to run computer agents more cheaply, using a method typically used to improve accuracy. The company applied a hybrid of neuro-symbolic AI so its computer-use agent, Sai, discovers workflows and follows those same steps at each run to cut token costs. https://www.databreachtoday.com/neuro-symbolic-ai-could-make-computer-agents-cheaper-a-33143

• View post

  Chinese AI in the USA: Federal civilian agencies must remove DeepSeek from their networks (if it's even there in the first place?!) https://www.govinfosecurity.com/dhs-bans-deepseek-from-federal-civilian-agencies-a-33146

• View post

  Hackers turn Aomei update servers into malware channels https://www.databreachtoday.com/hackers-turn-aomei-update-servers-into-malware-channels-a-33147

• View post

  Rapid7 lays off 12% of staff as new CEO reshapes cyber firm https://www.databreachtoday.com/rapid7-lays-off-12-staff-as-new-ceo-reshapes-cyber-firm-a-32526

• View post

  The attack is coming from inside the meeting: Patch Zoom now to block vulnerabilities that a malicious meeting attendee could target to remotely exploit code on all other participants' systems. Old versions (update issued July 20) with E2EE enabled remain at risk. https://www.databreachtoday.com/zoom-flaws-facilitate-zero-click-remote-code-execution-a-32531

• View post

  Uncle Sam seeks private hackers to surveil and disrupt foreign criminal networks that target Americans. https://www.databreachtoday.com/uncle-sam-seeks-private-hackers-to-disrupt-criminal-networks-a-32549

• View post

  Weekly Breach Roundup —Delta Air Lines passenger launched an evil twin attack —LiteLLM attack exposed 430,000 pipelines —Russian nation-state hackers targeted Ukrainian IT workers with fake job interviews —Cisco warning over ClamAV flaws —Ransomware extortionists hacked a healthcare sector victim's Facebook —Yet more ClickFix attacks. https://www.databreachtoday.com/breach-roundup-def-con-dolt-suspected-in-delta-wi-fi-hack-a-32554

• View post

  Ransomware attack disables Canadian hospital's doors and HVAC. The incident underscores sometimes overlooked operational technology risks in healthcare environments. https://www.databreachtoday.com/ransomware-attack-disables-canadian-hospitals-doors-hvac-a-32535

• View post

  "The current lethality of the so-called drone kill zone has forced both sides to rely primarily on infiltration tactics using small groups or even individual soldiers when trying to take or reclaim territory, sometimes riding motorcycles, all-terrain vehicles, or horses." https://arstechnica.com/gadgets/2026/08/ukrainian-drones-wipe-out-entire-us-tank-brigade-in-live-war-game/

• View post

  Weekly Cryptohack Roundup —Harmony and BTCPay hacked —Violent crypto thefts surge —U.S. CFTC files a $48 million fraud case —NFT founder charged —North Koreans used artificial intelligence for crypto exploits —U.S. sanctions two Iranian exchanges https://www.databreachtoday.com/cryptohack-roundup-harmony-btcpay-exploits-a-32543

• View post

  Extortion gang Fulcrumsec has leaked on its darkweb site a second large cache of data the group claims it stole in a June attack on Novo Nordisk. The latest data dump allegedly includes the Danish drug maker's "complete enterprise Hugging Face artificial intelligence and machine learning ecosystem." https://www.databreachtoday.com/extortion-gang-leaks-novo-nordisks-ai-ml-ecosystem-a-32553

• View post

  Once more, with ShieldBreak: Microsoft ecosystem faces fresh zero-day at the hands of the researcher who goes by "Nightmare Eclipse," with the flaw allowing a low-privileged attacker to gain system-level control by exploiting Microsoft Defender's privileged scanning capabilities (because antivirus) to execute malicious code. https://www.databreachtoday.com/microsoft-faces-fresh-nightmare-eclipse-zero-day-a-32573

• View post

  @brianhonan Oof — risks upon risks

• View post

  Russia is targeting Ukraine using internet-connected cameras across Europe. The camera hacks facilitate the targeting of Ukrainian soldiers and materiel. https://www.databreachtoday.com/russia-targeting-ukraine-using-internet-connected-cameras-a-32566 #cyberespionage

• View post

  Seven Ukrainian civilians have asked a court in New York to order a US manufacturer to pay them more than $75 million, claiming the company has not done enough to prevent its technology from being used by Russia drone operators in perpetuating “a campaign of high-tech murder”. https://www.pinsentmasons.com/out-law/news/ukrainians-sue-us-manufacturer-over-tech-russian-drone

• View post

  A prolific Russian-speaking extortion group known for supply-chain attacks claimed to have stolen data from more than 40 firms including heavyweight corporations such as oil giant Shell and manufacturer General Electric. https://www.databreachtoday.com/clop-claims-data-theft-from-more-than-40-companies-a-32581