C… O… reported a ransomware incident attributed to SilentRansomGroup, with the full company name withheld pending disclosure under the active FULL DATA TIMER. The impacted country is #()
Acronis TRU uncovered a Cambodia-focused campaign that uses phishing-style archives, DLL sideloading, PNG-embedded payloads, BYOVD, and process injection to deploy SparkRAT while impairing multiple security products. The activity shows similarities to SilverFox tradecraft but lacks enough evidence for direct attribution, so it is tracked as an unattributed cluster with possible Chinese-language development or deployment links. #SparkRAT #SilverFox #CVE-2026-36425 #ardrv.sys #OPSWATAppRemover #HuorongInternetSecurity #TencentPCManager
SilentRansomGroup allegedly deployed ransomware against H… L…, with the victim’s full company name pending disclosure and a “FULL DATA TIMER” active. The impacted country(s) are: #countryname
H… K… reported a ransomware incident linked to SilentRansomGroup, with the full company name currently redacted pending disclosure under the active full data timer. The impacted country(s): #countryname
SilentRansomGroup is alleged to have deployed ransomware against K… M…, with the full company name pending disclosure and a full data timer active. The impacted country(s) is/are: #countryname
![The AI Supply Chain Is Getting Weird [Monthly Guest Post]](https://substackcdn.com/image/fetch/$s_!XVf6!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fe199e306-ab5d-4239-938e-59f5535a5497_1024x301.jpeg "The AI Supply Chain Is Getting Weird [Monthly Guest Post]")
Data poisoning targets AI systems during training by corrupting datasets or models, allowing attackers to embed backdoors, mislabeled data, or hidden behaviors that can survive deployment and evade standard benchmarks. The article explains how public model repositories, third-party datasets, fine-tuning pipelines, and RAG sources expand the AI supply chain risk, and highlights controls such as provenance checks, red-teaming, and an AIBOM. #HuggingFace #JFrog #PoisonGPT #Mercor #OWASPLLMTop10 #AIBOM
Meta agreed to pay $17 billion and accept sweeping reforms after allegations that Facebook and Instagram were designed to be addictive and that the company mishandled children’s privacy under COPPA. The settlement imposes major teen-safety restrictions, independent oversight, and a ban on misleading claims about safety features, while California and other…
A cyberattack disrupted Boston Scientific’s business operations, impacting access to operating systems and applications needed to process and ship customer orders. The company has brought in a cybersecurity firm, but the full restoration timeline and financial impact remain unclear, while no threat group has claimed responsibility. #BostonScientific #SEC…
The NSA is hosting a first-ever reunion for former members of Tailored Access Operations (TAO) at Fort Meade as part of a push to rebrand the unit and recruit alumni back to service. The event highlights TAO’s secretive history, its role in operations like Stuxnet, and the agency’s unusual outreach efforts…
S… P… reported a ransomware attack by Threat Actor SilentRansomGroup, with the full company name redacted pending disclosure (FULL DATA TIMER active). Impacted country(s): #countryname
SilentRansomGroup reportedly deployed ransomware against N… M…, with a full data timer active and the company name currently redacted pending disclosure. The impacted country is: #countryname
SilentRansomGroup is suspected to have deployed ransomware against Q… E…, with full company identification still pending disclosure. The incident is actively under investigation under a full data timer, and the impacted country is #.
Federal authorities disclosed a long-running Chinese state-sponsored espionage campaign by QTFY that has targeted U.S. critical infrastructure and multiple federal agencies since 2018. The operation used a botnet, scanning tools, and exploited vulnerabilities in products from Ivanti, Fortinet, Citrix, Microsoft, F5, and others to infiltrate sensitive networks. #QTFY #QScan #QTRouter #Ivanti #PlugX
Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure
President Donald Trump signed an executive order declaring a national emergency to protect the U.S. bulk-power system from foreign-produced equipment, software, and systems that could create national security risks. The move targets concerns about Chinese-made components in energy infrastructure and directs the Energy Department to create implementation rules within 120 days. #DonaldTrump #WhiteHouse #China #EnergyDepartment
![Cybersecurity News | Daily Recap [25 Aug 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [25 Aug 2026]")
Daily Recap, WhatsApp rolled out stronger two-step verification and multiple passkeys to harden account protection, while Microsoft Teams added an admin control to block external bots from meetings. Attackers also targeted WordPress with miniOrange SAML 2.0 auth-bypass flaws, breached 270+ Zimbra servers, exploited an in-the-wild Oracle WebLogic issue, and delivered Amatera via ClickFix using WordlistLoader.
#WhatsApp #twoStepVerification #passkeys #WordPress #miniOrange #SAML #MicrosoftTeams #Zimbra #OracleWebLogic #CISA #Calix #NAT #WordlistLoader #Amatera #ClickFix #SynkLoader #Windows #ShinyHunters #ReliaQuest