Karkinos.in, an India-based healthcare platform operated by Karkinos Healthcare Private Limited, was allegedly targeted by the ransomware threat actor krybit. The claim indicates disruption to services in India. #India
Le Conseil Gabonais des Chargeurs (CGC) (cgcgabon.com) in Georgia, reported as impacted by ransomware activity attributed to the krybit threat actor. The incident affected operations within the impacted country(s): #Georgia
Ransomware claimed by krybit targeted finodayacapital.com, impacting Finodaya Capital Private Limited, an Indian tech-enabled NBFC. The affected organization’s operations were disrupted and data may have been exfiltrated in the attack. #India
Adobe and Nvidia released patches for dozens of vulnerabilities across their products, including multiple critical-severity flaws. Nvidia fixed serious issues in NemoClaw, OpenShell, DGX Spark, Unified Fabric Manager, Triton Inference Server, Cumulus Linux, and NVOS, while Adobe patched critical code execution bugs in several creative and enterprise products. #Nvidia #Adobe #NemoClaw…
Unit 42 analyzed 405 malware samples linked to AI and found that nearly all never reached real targets, with only 12 appearing on live endpoints. The cases that did reach production included FunkSec, Recipe Lister, Oyster, Rhadamanthys, and a fake 360 Total Security component, showing that AI is mainly helping attackers…
Boston Scientific disclosed a cybersecurity incident affecting certain computer systems and causing operational disruptions, including limitations on access to key information systems and business applications. The company has brought in external experts to assess and contain the threat, while the full scope and recovery timeline remain unclear. #BostonScientific
Ubiquiti has released patches for three maximum-severity flaws affecting UniFi Protect, UniFi OS, and UniFi Talk that could let remote attackers bypass authentication or trigger command injection without privileges. The company also fixed 18 more critical issues across its product line, including systems that have previously been targeted by botnets and active exploitation campaigns. #Ubiquiti #UniFiProtect #UniFiOS #UniFiTalk #CVE-2026-77537 #CVE-2026-77550 #CVE-2026-77554
Snowflake is deprecating legacy password-based service accounts and forcing organizations to inventory, own, and migrate non-human identities before Phase 3 enforcement dates. The article ties this identity cleanup to the UNC5537 campaign, in which Connor Moucka and co-conspirators abused valid credentials to steal data from more than 165 Snowflake customers, including AT&T. #Snowflake #UNC5537 #ConnorMoucka #AT&T
The FBI has disrupted infrastructure tied to QTFY/QT/QTCYBER, a China-linked threat group that used QScan and QTRouter to support reconnaissance, proxy management, and routing for espionage operations against U.S. targets. The activity was linked to Nanjing Xinjiuwei Network Technology Company and affected organizations including NASA, the Federal Reserve, and multiple U.S. government agencies. #QTFY #QScan #QTRouter #NanjingXinjiuweiNetworkTechnologyCompany #NASA #FederalReserve
Attackers are chaining CVE-2026-55040 and CVE-2026-63520 to target unpatched Microsoft SharePoint servers for remote code execution, with Defused reporting active probing in honeypots. Both flaws have public proof-of-concept exploits, and CISA has warned defenders to secure SharePoint systems against ongoing attacks. #CVE-2026-55040 #CVE-2026-63520 #MicrosoftSharePoint #Defused #CISA
Boston Scientific disclosed a cyberattack that disrupted parts of its IT environment, affecting access to business applications and the ability to process and ship customer orders worldwide. The company is still investigating the incident with external cybersecurity experts and has not yet determined when full restoration will be completed. #BostonScientific
Shasta County registrar Clint Curtis said he offered former Mesa County clerk Tina Peters a consulting role to help prepare for the 2026 elections, but she has not yet accepted because she is consulting her legal team. The proposal has raised concerns because Peters was convicted in a Mesa County election-related case, while California election officials say any hire must comply with state law and preserve election integrity. #TinaPeters #ClintCurtis #MesaCounty #ShastaCounty #ShirleyWeber
Metal Conversions in the United Kingdom (GB) reported a ransomware attack attributed to the Qilin threat actor, resulting in disruption to their systems and data. The incident affected their operations within #UnitedKingdom.
The akira ransomware group claimed it will exfiltrate 119GB of corporate data from PA-ID (PA-ID GmbH) and threatened to publish employee personal information, client data, financials, NDAs, and related records. The impacted country(ies): #unknown
Oral and Maxillofacial Surgery in Brockton, MA, claimed that ransomware operators from Akira threatened to upload 14GB of corporate data, including employee personal information, client records, financials, and patient information. The affected country is #UnitedStates.