Countrymotors.com.mx in MX was hit by the krybit ransomware group, targeting Country Motos S.A. de C.V. (also known as Country Motors or Country Honda), a Mexican motorcycle dealership. #Mexico
Mairie de Drancy in France reported a ransomware incident attributed to the Qilin threat actor. The attack resulted in disruption of services and encrypted files on targeted systems, impacting France #France
Daily Recap, Funding and strategy moves included Balance Theory raising $19 million to help enterprises manage cybersecurity investment decisions, while U.S. Cyber Command plans a Silicon Valley office to strengthen industry collaboration. Key threats and security updates spanned a Rails critical flaw, Adobe Campaign Classic’s CVSS 10.0 code-execution issue, and multiple intrusion stories including Adform script poisoning, the HollowFrame loader deploying Matryoshka, and OctLurk/SilkLurk targeting Central Asian governments. #BalanceTheory #U.S.CyberCommand #RubyOnRails #AdobeCampaignClassic #Adform #HollowFrame #Matryoshka #OctLurk #SilkLurk #Minnesota #CISA #ArchLinux #AUR #Amgen
The ransomware incident targeting www.ville-rinxent.fr in France was attributed to threat actor krybit, affecting Mairie de Rinxent (the official town hall website) operated by the Municipality of Rinxent. The impacted country is #France
krybit ransomware targeted nigeria.asa-international.com, impacting the operations of ASHA Microfinance Bank Limited (ASA Nigeria), a Nigerian deposit-taking microfinance institution. The incident affected Nigeria. #Nigeria
Threat actors krybit reportedly deployed ransomware against www.dcpartner.co.za, disrupting operations at DC Partner (Pty) Ltd, a South African market-leading Payment Distribution Agency (PDA). The incident impacted South Africa. #SouthAfrica
Websites of 10 Uttarakhand government departments, including the CM Relief Fund, were hit by a malware attack that forced them offline. ITDA later restored service from backups, though the CM Relief Fund site was still unavailable and the attack may be linked to Russian malware, which has not been confirmed. #CMReliefFund #Uttarakhand #ITDA
Panama Metro confirmed the detection of a cybersecurity incident affecting part of its technology infrastructure and activated its response protocols to contain any potential impact. The organization is conducting a technical investigation to determine the scope of the incident. #MetrodePanamá #PanamaMetro
BloodHound-python is a cross-platform Active Directory ingestor that collects domain, group, computer, session, and policy data for BloodHound graph analysis from a Linux attack box. The article demonstrates Default, LoggedOn, DCOnly, All, pass-the-hash, Kerberos AES key, Kerberos ticket, and zip-based output collection methods in the ignite.local lab against DC1.ignite.local. #BloodHoundpython #ignite.local #DC1.ignite.local
Encore Enterprises, Inc. (US) was targeted by ransomware operations attributed to CRPxO, resulting in 700.0 GB of data being leaked. The exposed information affected entities within the impacted region, #UnitedStates
There were 4 defacement incidents affecting Pakistan, Argentina, and Thailand, with the attackers identified as CoupDeGrace and Team_CC. CoupDeGrace was linked to 2 incidents, while Team_CC was linked to 2 incidents, and the targeted sites included agajk.gov.pk, ipiec.tierradelfuego.gob.ar, nongbuokhok.go.th, and taladlocal.go.th. #Pakistan #Argentina #Thailand…
A firmware flaw in Coldcard hardware wallets enabled an attacker to drain 1,196 Bitcoin addresses in 41 minutes on July 30, stealing 1,082.65 BTC worth about $70.2 million. Galaxy Research and Block linked the incident to a deterministic PRNG bug in Coinkite’s Coldcard firmware, which could allow offline seed reconstruction from…
Schreiner Trockenbau GmbH in AT was targeted by the Qilin ransomware, resulting in encrypted files and disruption to operations. The incident involved N/A and the impacted systems were affected in #Austria
Pointe Property Group in the US reported ransomware activity attributed to the qilin threat actor. The incident resulted in disrupted access and potential data exposure, impacting #UnitedStates
Cambridge Management in the United States reported a ransomware attack attributed to the threat actor play. The incident impacted United States #UnitedStates