Frey Wille, the Austrian jewelry retailer, was hit by a cyberattack in early August that compromised business and personal customer data, including contact, contractual, communication, and billing details. The company is working with cybersecurity and forensic specialists, has notified authorities and police, and is warning potentially affected people to watch for phishing attempts. #FreyWille #phishing
Daily Recap, AI-powered browsers and assistants are facing abuse through zero-click techniques and prompt exposure, with researchers highlighting risks for tools like Claude and ChatGPT Atlas. Security teams also tracked passkey-protected account hijacking, active exploitation of flaws in Langflow, N-central, and Apache Tomcat, and supply-chain/persistence threats including Zbtlink router backdoors and ClickFix macOS malware lures.
#Claude #ChatGPTAtlas #Passkey #Cisco #SDWAN #IOSXE #FMC #Paperclip #CISA #Langflow #Ncentral #ApacheTomcat #TeamCity #Bixby #Samsung #Zbtlink #khunt #Oracle #COLDCARD #ClickFix #Snowflake #ConnorMoucka #RansomCartel #SaltTyphoon #Poipet #ChatGPT #EdnaConway #TomCotton #BlackHatUSA2026
A cyberattack disrupted IT systems at the North Carolina Ports Authority, slowing operations at the Port of Wilmington, Port of Morehead City, and Charlotte Inland Port. The authority activated its contingency plan and is restoring services, but delays are still expected as no threat actor has been identified. #PortofWilmington #PortofMoreheadCity #CharlotteInlandPort #NorthCarolinaPortsAuthority
Gen Threat Labs examined two H1 2026 campaigns that abused trusted systems, including compromised mailboxes, browser and proxy manipulation, clipboard hijacking, and blockchain-based C2 resolution. The report highlights how these attacks bypassed normal trust signals while targeting banking sessions in Europe and cryptocurrency payments through a Rust-based clipper and Binance Smart Chain pointers. #GepyS #XWorm #RemcosRAT #BinanceSmartChain
The article explains why agent health assurance is becoming a business-critical requirement for MSPs, since installed agents and related services can still be degraded and cause loss of visibility, manual recovery work, and service interruptions. It also outlines how Acronis is building toward controlled self-recovery and platform-level observability across RMM, backup, EDR, anti-malware, updates, and remote access, with stronger health visibility and safer remediation workflows. #Acronis #RMM #EDR #CyberFit
OpenAI, Anthropic, and Meta AI are presented as examples of a growing problem: highly skilled engineers are not automatically experienced cybersecurity practitioners. The piece argues that building secure AI systems requires real-world security experts alongside developers to prevent failures like a model breaking out of testing containment. #OpenAI #Anthropic #MetaAI
NMFTA revealed that a 2024 safety recall for Bendix’s EC80 heavy-truck brake controller also fixed serious security flaws, including a wirelessly reachable remote code execution vulnerability. The research showed that exploiting the flaws could crash the ECU, disable key vehicle functions, and require a battery disconnect to recover, while the findings…
UNC6671 has rebranded its extortion operation multiple times while continuing tailored IT helpdesk vishing attacks against organizations using Microsoft 365 and Okta. Google Threat Intelligence Group says the group has shifted branding from BlackFile to Redact, Pink, Helix, and Falcon while collecting more than $10 million in ransom payments. #UNC6671 #BlackFile…
An alleged seller is offering data said to come from CARMA, including contact details and client configuration records for more than 3,500 organisations worldwide. The exposed information may reveal sensitive client activity, internal comments, and possible API tokens, but the claim remains unverified. #CARMA #2019…
A seller using the name weykofa is allegedly offering data said to belong to the Fédération Française de Basketball, including 75,831 individuals, 6,873 clubs, and 2,030 CVs for $700 in Bitcoin. The claim is unverified, but the posted sample suggests the dataset may include personal contact details, street addresses, and résumé…
The Universidad Autónoma de San Luis Potosí (UASLP) suffered a cybersecurity incident that disrupted several university systems, including the Caja Virtual platform, which was temporarily taken offline. As a result, the university extended the deadline for enrollment and re-enrollment payments while providing no further details about the attack or the full scope of affected systems. #UASLP #CajaVirtual #UniversidadAutónomadeSanLuisPotosí
Washburn County is currently experiencing a cyberattack that has forced officials to take all county systems offline. Emergency 911 services remain operational despite the disruption. #WashburnCounty #911
The L Group ransomware incident targeted rosekennedygreenway.org, impacting the Rose Kennedy Greenway Conservancy’s operations as it manages and maintains the parks and public spaces along Boston’s downtown corridor. The attacker’s actions disrupted organizational services in the United States. #UnitedStates
The ransomware incident impacted ausfec1.com.au in Australia, with L Group identified as the threat actor. The attack resulted in data disruption and potential encryption of victim files, affecting operations within #Australia
nightspire ransomware is claimed to have targeted T***w**x, with the specific data impact not available at this time. The impacted country(s): #countryname