Google Cloud has updated its post-quantum cryptography roadmap, aiming for full readiness by 2029 while continuing some work into the 2030s. The plan focuses on reducing Store Now Decrypt Later risk, strengthening signatures and identity protections, and expanding quantum-safe infrastructure across services like Google Cloud KMS, Cloud VPN, and BigQuery. #GoogleCloud…
Brazosport College’s systems remained offline after a cybersecurity incident with an unknown cause. The college discovered the incident on Monday and brought in external specialists to investigate. #BrazosportCollege
Radiant in Singapore was targeted by the qilin ransomware group, resulting in encrypted files and disruption to normal operations. The incident affected systems in Singapore#Singapore
Pierce Township in the US reported a ransomware incident attributed to the threat actor rhysida, citing exposure of judicial materials including grand jury subpoena responses with hospital records (Mercy Hospital), public records requests, and fire investigation reports. The claim also includes compromise of employee PII and legal and financial records, impacting the UnitedStates #unitedstates
Aletex Group in ES was targeted by the qilin ransomware threat actor, resulting in encrypted or disrupted systems and demands for ransom. The incident impacted #Spain
Acronis TRU uncovered a multi-stage espionage campaign delivering the PATCHCORD backdoor, SHEETCORD, and HACKERAI C2 Agent against Afghan telecom, Indian government, defense, energy, and critical infrastructure targets. The operators used impersonation lures, browser shortcut hijacking, Google Sheets, and GitHub Gists for command-and-control, and the activity is assessed to overlap with APT36 (Transparent Tribe). #PATCHCORD #SHEETCORD #HACKERAI #APT36 #TransparentTribe #AFTEL #NIC #CGDA #SuperShell
A former Brightly Software contractor, Cameron Curry, was sentenced to two years in prison for running a $2.5 million extortion scheme after stealing sensitive payroll and corporate data. He threatened to leak employee PII and report Brightly to the SEC, while the company also previously disclosed an unrelated breach affecting nearly 3 million SchoolDude users. #BrightlySoftware #CameronCurry #SchoolDude #SEC #FBI #DOJ
A multi-stage Rust-based macOS infostealer called AmnesiaStealer is being spread through a counterfeit GitHub download page in recent ClickFix attacks. The malware steals browser data, keychains, and notes, and can also remotely control victims’ browser sessions via a headless Chrome-based stream module. #AmnesiaStealer #ClickFix #Jamf #GitHub #macOS…
Threat actors began exploiting an unpatched GeoServer zero-day within hours of its public disclosure, targeting an SQL injection flaw in the jsonArrayContains function that can lead to remote code execution. WatchTowr recorded hundreds of probing attempts from a small number of source IPs, urging organizations to identify exposed GeoServer instances and…
Storm ransomware claimed to have targeted 3-point Australia, a privately owned project management consultancy providing independent client representation, strategic planning, and end-to-end construction delivery services. The company’s Melbourne operations were impacted by the threat actor’s activity in #Australia
Storm ransomware reportedly targeted Hinman Straub, a full-service US law firm in Albany, New York, providing legal and lobbying services to organizations including Fortune 500 companies, associations, and local governments. The claim indicates that systems supporting their operations were compromised, with the impacted country being #UnitedStates.
ZEBRA.COM in the US was targeted by clop ransomware, with data exfiltration including database, project files, and CAD files totaling 8TB. The incident generated an estimated $5,600,000,000 in revenue loss while affecting #UnitedStates
A threat actor using the name konata_izumi_shell claims to have breached Bolivia’s Agencia Estatal de Vivienda and exposed 36,046 staff records in SQL format. The alleged dump includes full names, CI identity card numbers, and job roles, and the claim remains unverified. #AgenciaEstataldeVivienda #Bolivia #konata_izumi_shell #CIidentitycardnumbers…
ASCOM S.p.A., a global Italian heavy lifting equipment manufacturer (ascom-italy.it) served by Emilcom S.r.l., was targeted in a ransomware incident attributed to threat actor blacknevas, disrupting operations for a company specializing in travel lifts, gantry and overhead cranes, and customized lifting solutions. The impact is reported in IT #Italy
Apple has issued a new batch of “Threat Notification” alerts to iPhone users, warning that they may have been targeted by highly sophisticated mercenary spyware attacks. The company says these high-confidence alerts are serious, but it does not name the spyware involved; #Apple #Pegasus #NSOGroup