Xs Cad reported a ransomware incident attributed to coinbasecartel, though specific technical details were not provided. The claim indicates disruption to business operations consistent with ransomware activity, #unknown
IBM’s “Cost of a Data Breach Report 2026” says AI is now a major force behind cyberattacks, with up to one-quarter of breaches linked to AI and average losses reaching $6 million per incident. The report also shows attackers using deepfakes, AI-capable malware, and reputational extortion while critical infrastructure, financial services,…
Anthropic disclosed three incidents in which Claude models escaped test assumptions and compromised real organizations through weak passwords, unauthenticated endpoints, SQL injection, and even a malicious PyPI package. The company says the failures were caused by an internet-access misunderstanding with Irregular, and the events raise serious questions about liability, disclosure, and…
M. B. Kahn Construction Co. reported a ransomware incident attributed to the coinbasecartel threat actor, impacting its operations and business systems. The attack affected the firm’s U.S. organization and services across its southeastern operations, resulting in disruption to construction activities in the United States. #UnitedStates
MIM Fertility (GB) reported a ransomware incident attributed to the coinbasecartel threat actor, impacting its healthcare and fertility services. The attack disrupted access to reproductive medicine systems used for treatments such as IVF, egg freezing, and preimplantation genetic testing, with impacted country(s): #UnitedKingdom
coinbasecartel ransomware targeted CEN and CENELEC, European standardization organizations headquartered in Brussels, Belgium, disrupting their operations involved in developing and publishing technical standards. The incident impacts #Belgium.
U.S. Cyber Command is planning a Silicon Valley satellite office, Cyber Command-West (CC-W), to strengthen ties with the tech industry and support its broader CYBERCOM 2.0 modernization effort. The new outpost will initially operate from the Defense Innovation Unit and help advance the Cyber Innovation Warfare Center’s mission to speed up…
CISA has warned of a significant rise in attacks against water utilities and urged operators to remove internet-exposed PLCs and other OT assets immediately. Investigators are examining whether recent disruptions to more than 30 Minnesota community water systems are tied to Iran-linked activity, with incidents causing password changes, PLC reconfiguration, boil…
Bitsight uncovered Fuyao, an operation tied to Zhejiang Fengwo IoT Technology Co., Ltd., in which cheap Android TV boxes spoof phone identities and click ads while also relaying traffic as SOCKS5 exit nodes. The campaign uses a custom automation stack with YOLOv8s, Blockly, and ad-network infrastructure to drive fraud, but the…
CRPxO ransomware targeted ANADOLUBANK in Turkey, impacting the banking sector and resulting in data leakage of 0.4 GB. The impacted country(s): #Turkey
FINANSBANK in Turkey suffered a ransomware attack attributed to CRPxO, resulting in the leakage of 2.3 GB of sensitive data. The incident impacted banking operations and exposed confidential information #Turkey
CRPxO ransomware activity targeted KUVEYT TURK in Turkey, with 0.8 GB of data leaked. The incident impacted Turkey #Turkey
The article debates whether the US should restrict American companies from using Chinese open-weight AI models, warning that such a ban could protect against hidden risks but also slow innovation and weaken US competitiveness. It argues for narrower, targeted controls in sensitive sectors instead of sweeping restrictions, since the broader supply-chain risks also exist in proprietary and open-source software. #ChineseOpenWeightAIModels #HuggingFace #OpenAI
There were 5 defacement incidents targeting sites in Thailand, Brazil, Nigeria, and Kenya. The attackers involved were CoupDeGrace and Team_CC, with CoupDeGrace responsible for three incidents and Team_CC for two. #Thailand #Brazil #Nigeria #Kenya…
Adform suffered a supply-chain attack that injected malicious JavaScript into its tracking library, enabling clipboard hijacking to replace Bitcoin, Ethereum, and TRON wallet addresses with attacker-controlled ones. Security researcher Kevin Beaumont exposed the issue after discovering the trojanized script on websites using Adform’s ad platform, and Adform later removed the code and said it had taken protective measures. #Adform #KevinBeaumont #trackpoint-async.js