Incransom ransomware allegedly targeted the Louisville Bar Association (LBA), disrupting services that support legal professionals and the broader Louisville community, including continuing legal education, job placement, public service initiatives, and event/awards programs. The impacted country(s): #UnitedStates
Head Mare has been exploiting unpatched TrueConf server vulnerabilities to replace legitimate client installers with trojanized versions that deliver the PhantomCore and PhantomGraph backdoors. Kaspersky says the campaign targets Russian organizations and can impact users even through compromised third-party TrueConf servers, enabling credential theft, reconnaissance, and persistent remote access. #HeadMare #TrueConf #PhantomCore #PhantomGraph
The City of Coweta in Oklahoma is dealing with a system-wide ransomware attack that affected all municipal computers, files, and computerized services, while the website and third-party billing portal remained untouched. City officials say a backup exists to support data restoration once the incident is contained. #CityofCoweta
Mitchell, South Dakota, isolated part of its network after detecting a potential cybersecurity incident, while critical and emergency services remained operational. Forensic experts were brought in to assess the scope of the event, but officials have not yet confirmed the attack type, affected systems, or whether any data was compromised. #Mitchell #SouthDakota
Varonis Threat Labs uncovered RovoBlast, a one-click vulnerability in Atlassian’s Rovo AI assistant that let attacker-controlled instructions be injected into live AI sessions through a crafted link. The flaw could expose data from Jira, Confluence, Bitbucket, Slack, Microsoft 365, Google Workspace, and other connected systems before Atlassian fixed it. #RovoBlast #Atlassian…
Storm ransomware reportedly targeted Sawyer Savings Bank in the US, impacting the operations of the community-focused institution with 150+ years of experience and offerings such as personal checking and savings, business loans, and digital banking solutions. The incident is associated with the bank headquartered at 87 Market Street, Saugerties, NY 12477, and affected organizations within the United States. #UnitedStates
Storm ransomware targeted the United Group of Companies, Inc., a Troy, New York–based real estate developer and manager specializing in senior living, student apartments, multi-family, commercial, and mixed-use properties in the US. The company has been in business since 1972, with 201–500 employees, and the impacted country is #UnitedStates.
Research presented by PortSwigger’s Gareth Heyes shows that HTML and CSS inside email can break out of the message boundary and manipulate trusted webmail interfaces across Outlook, Gmail, Fastmail, Proton Mail, Yahoo Mail, and AOL Mail. The proof-of-concept chains can capture passwords, leak tokens, hijack UI actions, and even steer AI…
Two independent findings showed that Atlassian’s Rovo assistant could be manipulated to collect Jira or Confluence data a signed-in user can access and send it to an attacker-controlled server. Varonis’ one-click link flaw, named RovoBlast, was fixed server-side on July 8, 2026, while PromptArmor’s content-borne injection path remained unconfirmed as of…
Mindray.com, a medical device provider in China, was targeted by the clop ransomware group in an attack linked to their healthcare operations. The incident impacted #China.
The ransomware incident involving clop targeted CONTINENTAL.AERO in the US, resulting in disruption and potential exposure of sensitive data. The impacted country is #UnitedStates
Depona in Sweden was targeted by the Qilin ransomware threat actor, which encrypted files and disrupted operations as part of a ransomware attack. #Sweden
The content reports 1 defacement incident targeting Brazil, specifically ead.gasparvianna.pa.gov.br, and identifies the attacker as azraelzer0d4y. No other countries are mentioned, so the incident is limited to Brazil and the attacker involved is azraelzer0d4y. #Brazil…
A New Mexico judge ordered Meta to pay $567 million and change how minors use Facebook and Instagram after finding the platforms contributed to youth mental health harms and sexual exploitation. The ruling creates a fund for treatment and prevention, adds nighttime and usage limits for youth, and requires clearer child-safety…
Qilin ransomware targeted Nikan Awasisak Agency in Canada by encrypting files and disrupting business operations. The claim originated from the qilin threat actor. #Canada