A cyberattack on Arizona’s court system exposed personal information tied to 1.3 million people with unpaid court fees, fines, and restitution records, along with protection orders and foster care reports. The breach likely began when a court employee clicked a malicious email link, but officials say there is no evidence the…
Andersen Group reported a ransomware attack attributed to SilentRansomGroup, resulting in disruption of systems and demands for payment. The incident impacted operations in #UnitedStates
Eptisa (ES) reported a ransomware incident attributed to threat actor qilin, resulting in disruption of systems and potential data compromise. The attack impacted Eptisa in #Spain
Termite ransomware targeted Aon plc, an international professional services firm in the US, disrupting its Risk Capital and Human Capital operations. The impacted country is #UnitedStates (UnitedStates)
Storm ransomware actors claimed to have targeted Nipigon District Memorial Hospital in Canada, a healthcare provider offering diagnostic imaging, lab services, physiotherapy, and assisted living, including Ontario Telemedicine Services and Meals on Wheels. The incident reportedly impacted the hospital’s ability to support its community health initiatives under CARE 2030, with disruptions affecting hospital services in #Canada
A dark web listing claims to offer a MedCred dataset containing information on 274,534 users, including names, email addresses, and location details such as city, county, postal code, and state. The report remains unverified, and the screenshot only shows archive metadata and the actor handle “replaceboundless” without confirming the dataset’s authenticity….
Three defacement incidents are listed, targeting sites in the United Kingdom, Indonesia, and Nepal. The attackers involved were Trenggalek Cyber Army, KatakBeracun, and ClaratZ. #UnitedKingdom #Indonesia #Nepal…
FortiBleed is an active credential compromise campaign targeting Fortinet firewalls and VPN gateways that can lock organizations out of their accounts and be used as an entry point for ransomware. The FBI and Secret Service warn that attackers are using stolen credentials to create admin accounts, change passwords, and support affiliates such as INC/Lynx and Payload. #FortiBleed #Fortinet #INC_Lynx #Payload
Anibal Alexander Canelon Aguirre, alleged to be a key figure behind the Ploutus malware, pleaded not guilty in Nebraska after being brought before a court for ATM jackpotting charges. U.S. authorities say the scheme, linked to Tren de Aragua, has resulted in 1,500 attacks and more than $40.7 million in losses…
Linux backdoors targeting telecom and network appliances in South Korea and Taiwan are disguising their traffic as email services and legitimate processes to evade detection. Rapid7 found new BPFDoor variants, a BPF Rekoobe build, and the previously unreported AVERAT implant, all using process spoofing, SMTP, and BPF-based stealth techniques. #BPFDoor #Rekoobe…
Researchers uncovered a human-operated phishing platform that impersonates AI advertising products tied to Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus to steal credentials and MFA codes through browser-in-the-browser login traps. The campaign uses fake brand-specific landing pages, phishing emails, and shared infrastructure to target ad account owners…
Hackers are exploiting stored XSS flaws in the WordPress plugins Ninja Forms and WPC Product Bundles for WooCommerce to deploy backdoors and create rogue administrator accounts. Patchstack says the attacks use a shared payload from imgcdn1[.]com and urges site owners to update to fixed versions and check for signs of compromise. #NinjaForms #WPCProductBundlesforWooCommerce #Patchstack #CVE202694504 #CVE202693836
The Vexy Ransomware attack targeted KOOKABARRA JUICE, an Australian French manufacturer of fresh-pressed fruit juices, detox juices, smoothies, nectars, and other fresh fruit products serving professionals and consumers. The incident disrupted operations and data access, prompting a ransomware claim from the threat actor in #Australia.
UmBra ransomware targeted Beni Suef Technological University (BTU), Egypt’s first technological university, disrupting its industry-focused programs across ICT, mechatronics, renewable energy, and other applied technology fields. The impacted country is #Egypt
Panzer ransomware targeted EDFelectronics, a Polish engineering company developing specialized electronics and plasma technology for industrial and research applications. The impacted country is #Poland