Riker Danzig LLP, a U.S.-based law firm in New Jersey, was reportedly targeted in a ransomware claim by the threat actor SilentRansomGroup. The attack is alleged to have impacted the organization’s operations and data availability in #UnitedStates
Hightech Signs, Inc., a full-service sign shop in Charlottesville, Virginia, was impacted by a ransomware claim attributed to the threat actor kairos. The incident affected Hightech Signs in the United States. #UnitedStates
SilentRansomGroup reportedly targeted Riker Danzig Scherer Hyland & Perretti with ransomware, disrupting operations by encrypting or accessing critical files. The incident impacted the United States#UnitedStates
ChainDrop is a self-propagating npm worm linked to TeamPCP that compromised a maintainer account, abused trusted GitHub Actions releases, and spread poisoned packages with valid provenance. It stole developer credentials, used an Ethereum smart contract for rotating C2 domains, and planted persistence hooks in IDE and AI-agent configuration files, while also threatening destructive deletion when tokens were revoked. #ChainDrop #TeamPCP #keyv #Sigstore #SLSA #Ethereum
Researchers unveiled “Plug and Pwn” attacks that abuse Windows Plug and Play and RDP USB redirection to force automatic installation of vulnerable vendor packages, enabling attackers to gain SYSTEM privileges. The demonstrations used emulated USB devices and affected software from Sierra Wireless, Sony FeliCa, Intel RealSense, Wacom, and Atheros, showing that even fully updated Windows systems can be exposed. #PlugandPwn #SierraWireless #SonyFeliCa #IntelRealSense #Wacom #Atheros
More than 737 Chrome Web Store extensions impersonated major VPN and proxy brands while secretly routing user traffic through SOCKS5 proxies controlled by a single provider. The campaign, linked to 40 publisher accounts and nearly 75,000 downloads, used deceptive tactics to push users toward a likely subscription-based VPN service in Russia. #ProtonVPN #NordVPN #Surfshark #ExpressVPN #Cloudflare #ChromeWebStore
Enteroptyx Ophthalmology Products (www.enteroptyx.com), a small US supplier/manufacturer of ophthalmology equipment and related products, suffered a ransomware incident allegedly attributed to the blacknevas threat actor, with services provided by an external IT company (Computer Co…). With limited public information about Enteroptyx, the impact details are unclear, but the incident is reported in the United States. #UnitedStates
Westbrook Greenhouse Systems (www.westbrooksystems.com), serviced by Computer C…, in the United States, is claimed to have been impacted by ransomware activity attributed to the threat actor blacknevas. Westbrook is a Canadian family-owned company within the Westbrook Group of Companies, with headquarters and manufacturing in Ontario, serving customers across North America. #UnitedStates
Tianji Auto Care Service Company in TR reported a ransomware incident allegedly linked to threat actor nightspire, though no specific data is available at this time. The impacted country is #Turkey
Suspected Chinese hackers used open-source AI frameworks Hermes and OpenClaw to launch a near-autonomous cyberattack against the Taiwanese government, marking the first publicly known AI-driven attack to hit a government target. The operation extracted more than 2,500 personnel records and expanded to vendors, a nuclear safety agency, a government email system, and energy companies while adapting through “Learning Cycles” without human intervention. #TaiwaneseGovernment #Hermes #OpenClaw #Dream
![Cybersecurity News | Daily Recap [11 Aug 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [11 Aug 2026]")
Daily Recap, CISA and allied agencies warned that Gunra is targeting government and critical infrastructure, while StormEncryptor has been linked to a former Medusa affiliate and likely ties to an N-central flaw; at the same time, Microsoft SharePoint and SonicWall SMA1000 vulnerabilities are being actively exploited by ransomware groups. The update also covered OpenAI’s ChatGPT 5.6 Cyber and Daybreak expansion, the BdThemes supply-chain compromise creating rogue WordPress admin accounts, plus new patching and vulnerability-tracking efforts alongside rising DDoS activity.
#Gunra #StormEncryptor #Medusa #N-central #CISA #Microsoft #SharePoint #SonicWall #SMA1000 #OpenAI #ChatGPT5.6Cyber #Daybreak #BdThemes #WordPress #SAP #Mozilla #GPG #Firefox #Thunderbird #Corma #FTC #CVE #NATO #Metabase #MCP #TheCom #DDoS
A large campaign involving 737 free VPN and proxy extensions targeted Russian-speaking users by impersonating trusted brands and silently routing browser traffic through attacker-controlled SOCKS5 infrastructure. Separately, the Chrome extension “AI Sidebar with Deepseek, ChatGPT, Claude, and more” resurfaced with a new monetization payload after a prior removal, showing how malicious…
Mindgard has raised $30 million in a Series A round led by Album VC, bringing its total funding to nearly $42 million. The London and Boston-based startup will use the investment to expand its AI red-teaming platform, which has already found over 150 vulnerabilities in products including Cursor IDE, Google Antigravity,…
A SharePoint vulnerability, CVE-2026-55040, is now being actively exploited in the wild shortly after Rapid7 published technical details and a proof-of-concept script. Microsoft has also patched CVE-2026-63520, which could be chained with CVE-2026-55040 to enable unauthenticated remote code execution on SharePoint servers. #CVE-2026-55040 #Rapid7 #CVE-2026-63520 #Microsoft #SharePoint…
REXT, a service provider for RIZAP’s “APORITO” business, was hit by a ransomware attack on August 9, 2026, causing disruptions to part of its internal network and limiting some APORITO services. RIZAP is working with REXT to assess the damage and identify the exact cause of the incident. #REXT #RIZAP #APORITO