Wallstreet ransomware targeted Gibson Area Hospital & Health Services, a nonprofit community hospital in Gibson City, Illinois, disrupting healthcare services. The incident impacted operations in #UnitedStates
Tekko Enterprises, Inc. (US) reported a ransomware incident attributed to interlock, involving leaked confidential information including utility system drawings/diagrams/specifications, crane-related materials, employee personal and identifying data, security clearances/ID cards, and sensitive bids/financials, in connection with multiple U.S. defense and infrastructure contracts. The claim cites alleged security negligence and violations of the False Claims Act, DFARS, FISMA, and the Privacy Act. #UnitedStates
Chaos claims to have compromised advantech.com in Taiwan and to be publishing 5% of the total data because the company’s management has not contacted them. They state management has 48 hours to respond, or the entire dataset will be published. #Taiwan
Bright Smile Dental Care, Ltd. disclosed a ransomware incident discovered on August 3, 2026 that affected its server, practice management system, patient record software, and dental imaging software. The company said the data was encrypted, there is no evidence of misuse, and it is offering free TransUnion credit monitoring for some patients whose Social Security numbers may have been involved. #BrightSmileDentalCare #TransUnion
A Vietnamese national, Trung Nguyen Van, was charged with money laundering for allegedly helping move more than $16 million in cryptocurrency from a pig butchering scam that targeted a victim through a fake investment platform called Triangle. Court documents say his wallets received over $53 million in illicit crypto tied to wire fraud schemes, while U.S. authorities continue to warn that pig butchering scams are driving massive losses nationwide. #TrungNguyenVan #Triangle #FBI #ScamCenterStrikeForce
Identity governance alone is no longer enough to defend modern enterprises, as attackers exploit cloud apps, external accounts, and increasingly sophisticated phishing and AI-driven attacks. tenfold combines identity governance, data access governance, and real-time event auditing to help organizations detect suspicious identity activity and respond faster. #tenfold #Windows #ActiveDirectory #EntraID
The Dutch Institute for Vulnerability Disclosure (DIVD) said it was hit by a loud, messy AI-driven attack that appears to have used an autonomous agent after exploiting an undisclosed technical vulnerability. The investigation is still ongoing, with DIVD notifying authorities and planning to share more details later while warning other potential victims. #DIVD #NCSC #AutoriteitPersoonsgegevens
Reco has raised $55 million in a strategic funding round led by AT&T Ventures, bringing its total funding to $140 million. The company helps organizations visualize and control AI agents’ identities, permissions, data access, and risky integrations across platforms like OpenAI, Anthropic, Microsoft Copilot, Salesforce, ServiceNow, and Workday. #Reco #AT&TVentures #OpenAI…
RemoteThreat has emerged from stealth with $7 million in pre-seed funding to launch an offensive operations platform for enterprise and critical infrastructure red teams, US government mission teams, and vetted defense partners. Built by former IBM X-Force red team leaders Chris Thompson and Shawn Jones, the platform combines mission planning, C2,…
ASEC reported phishing emails impersonating employees of a Korean company and luring victims into opening a malicious XLS file that abuses CVE-2017-0199 to fetch an HTA payload, then a steganographic PNG-delivered loader and finally Remcos RAT. The attack uses layered execution via WMI and obfuscated PowerShell to deploy the malware and…
Vexy Ransomware allegedly targeted Groupe Proxitel, a French B2B technology provider, disrupting its professional Internet connectivity, telephony, cybersecurity, and IT backup services in Turkey. The incident reportedly affected business and public-sector operations in #Turkey.
The ransomware claim targets BCX (Business Connexion) at www.bcx.co.za in South Africa (ZA), attributed to threat actor incransom, and alleges a total leak of 500 GB across 4,224,088 files and 596,613 folders, including source code and confidential technical documentation. The exfiltrated materials include six fully functional business applications and numerous integration libraries/modules, along with claims that multiple vulnerabilities exist in current versions of the affected systems, impacting #SouthAfrica.
The ransomware claim names the victim as Paid Victim 32373FFB7AF7E725, associated with Threat Actor AuditTeam. The impacted country is IT #Italy
Kiteworks resumed normal operations after a precautionary weekend shutdown triggered by credible federal threat intelligence, during which customers were asked to take production systems offline. The company also identified and patched a previously unknown critical flaw in Advanced Forms, with no signs of exploitation, while noting its broader file transfer and encryption products were unaffected. #Kiteworks #AdvancedForms #Mandiant #Accellion
Daily Recap, major incidents and patching updates dominated today’s security news: a reported Titan JWT signature flaw enabled access to 17 trillion analytics rows at Microsoft, while Citrix confirmed two NetScaler RCE zero-days were exploited and CISA ordered federal agencies to patch by Wednesday. Meanwhile, Google warned that ShinyHunters is targeting Oracle PeopleSoft environments, and Cloudflare addressed a cross-tenant Containers vulnerability that could expose customer data across accounts.
#Titan #Microsoft #NetScaler #Citrix #CISA #Cloudflare #Containers #ShinyHunters #Oracle #PeopleSoft