The Pendas Law Firm in the US was targeted by ransomware attributed to the Qilin threat actor, resulting in disruption of their systems and potential encryption of data. The incident is described as an attempted extortion alongside the ransomware activity, impacting #UnitedStates.
Gindre India (IN) was targeted by the Qilin ransomware threat actor, resulting in disruption of operations and encryption of files. The incident was attributed to qilin, with impacts in India #India
Researchers from Truffle Security found 64,024 live AWS access key pairs and root credentials exposed across public repositories, AI datasets, container images, and CI logs, affecting more than 9,900 AWS accounts worldwide. The leaked keys could grant full administrative control and cause major cloud abuse and unexpected spending, including hundreds of…
![Cybersecurity News | Daily Recap [20 Aug 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [20 Aug 2026]")
Daily Recap, critical flaws in Elementor Pro, Cisco Crosswork/Secure Workload, and MLflow are being actively abused or patched, enabling RCE and potential compromise of WordPress and enterprise environments, while additional issues allow unauthenticated PHP uploads through another Elementor Pro weakness. Clop’s PTC zero-day campaign continues with further impact on PTC products, and separate reports highlight AI security policy momentum, OpenAI model safeguards, major breaches at Sakura Internet and CareCloud, and threat activity including SilkParasite RATs and Spectre data leakage from Cloudflare Workers.
#ElementorPro #CiscoCrosswork #SecureWorkload #MLflow #RCE #WordPress #Clop #PTC #Windchill #FlexPLM #OpenAI #Sandboxing #SakuraInternet #CareCloud #SilkParasite #Dahua #CloudflareWorkers #Spectre #JWT #MSPs #TinaPeters
Apollo Global Management confirmed that attackers used social engineering to gain unauthorized access to some of its cloud platforms between July 6 and July 10, exposing personal data including names, dates of birth, contact information, home addresses, and Social Security numbers. Google has attributed the broader campaign to BlackFile, a threat group linked to The Com and its extortion brands Redact, Pink, Helix, and Falcon. #ApolloGlobalManagement #BlackFile #TheCom #Redact #Pink #Helix #Falcon
A large-scale Silver Fox-associated delivery network continues to operate after reported arrests, using hundreds of new typosquatted domains, abused legitimate services, and cloud-hosted payloads to target Chinese-speaking users. The campaign mainly delivers obfuscated Gh0stRAT variants through fake installers for tools like DeepSeek, Doubao, AiCoin, and MetaTrader, while using UAC bypass, reflective DLL injection, persistence, and tracking infrastructure to maintain access and evade analysis. #SilverFox #Gh0stRAT #DeepSeek #Doubao #AiCoin #MetaTrader #HuorongSecurity
SynkLoader is a newly identified malware family spread through Microsoft Teams phishing campaigns that impersonate a company’s IT help desk and trick victims into installing a fake “PowerShell Cleaner” MSI from Microsoft Azure. It uses a fake Windows lock screen to steal credentials and can deploy modules for persistence, traffic redirection, remote shell access, and desktop control, with activity suggesting possible ransomware preparation. #SynkLoader #MicrosoftTeams #PhishLocker #PowerShellCleaner #Expel #MarcusHutchins
iPic, a US-based organization, was targeted by the ransomware threat actor qilin, resulting in disruption and potential data compromise. The incident occurred in the United States. #UnitedStates
Quaker State Mexico (MX) was reportedly targeted by the qilin ransomware threat actor, with attackers leveraging malicious encryption to disrupt operations and demand ransom. The incident impacted Mexico #Mexico
The Panzer ransomware group targeted Nteitalia, an engineering and telecommunications service provider based in Catanzaro, Italy, compromising sensitive files, including thousands of documents. The incident impacted Italy. #Italy
Sen. Ron Wyden and Rep. Greg Casar are urging the Government Accountability Office to investigate how U.S. federal agencies use hacking tools and spyware against Americans, and to publish the findings. Their request focuses on the scope of government hacking, safeguards against abuse, and cases involving firms like Paragon and tools tied to Rule 41 requests. #RonWyden #GregCasar #GAO #Paragon #Rule41
Microsoft says the August 2026 Windows updates may be causing games to crash, freeze, or fail to launch on Windows 11 24H2 and 25H2 systems. The issue appears linked to RGB-lit peripherals or internal components that install drivers such as inpoutx64, affecting titles like ARC Raiders, MARVEL Tōkon: Fighting Souls, and The Finals. #Microsoft #ARCRaiders #MARVELTokonFightingSouls #TheFinals #inpoutx64
Fairview Dental Group, a dental services provider offering family dentistry, cosmetic treatments, dental implants, and invisible braces, was targeted by ransomware threat actor rhysida, with claim of access to the full patient database, patient X-rays, scanned forms/consents/invoices, and unencrypted health records (PHI) of the entire practice. Impacted country(s): #countryname
The ransomware claim by the qilin threat actor involved an attack on Cinépolis in Mexico, resulting in encryption and disruption of access to files and systems. The incident affected business operations and data availability across Mexico #Mexico
Akira ransomware actors claimed to have breached JC Sales, a leading full-service wholesaler based in Los Angeles, California, specializing in health and beauty, food and beverages, general merchandise, and seasonal items. The group allegedly exfiltrated 206GB of corporate data, including detailed personal employee information, confidential financials, contracts and agreements, client data, and NDAs; #UnitedStates