The ransomware claim states that the qilin threat actor targeted Arnold Center in the US and disrupted access to its systems by encrypting data. The incident is described as resulting in operational impact for the affected organization in #UnitedStates
Modulate has secured an additional $25 million to expand its audio-native AI platform, Velma, which detects emotion, intent, synthetic speech, and conversational behavior in real time. The company is using its proprietary Ensemble Listening Model to help organizations counter deepfake attacks, harassment, and other harmful voice misuse. #Modulate #Velma #FutureVentures #Hyperplane…
MedusaLocker ransomware compromised Juntadeandalucia (juntadeandalucia.es) in Spain and exfiltrated data, with 198 emails extracted. The incident impacted #Spain
Netech (Neeser Technik AG), a Swiss engineering and industrial services company in Seuzach, reportedly fell victim to ransomware deployed by the threat actor “payload,” impacting its industrial machinery and manufacturing systems support operations. The impacted country is #Switzerland
New World Diagnostics in the Philippines was targeted by the Qilin ransomware threat actor, resulting in disruption consistent with ransomware activity and data access impact. The incident affected the organization in #Philippines
A 16-year-old researcher named Faav found that Microsoft’s Titan analytics service failed to verify login token signatures, allowing administrator access and SQL queries across 17 connected databases. The issue exposed employee records and Bing search analytics, and Microsoft later locked down the endpoint after coordinated disclosure. #Titan #Microsoft #Faav #MSRC #Antares #Entra #Bing
ShinyHunters claims responsibility for a breach of FBI job applicant portals and related systems, allegedly exposing personal, medical, and sensitive staff information. Google Cloud / Mandiant says the group is again exploiting Oracle PeopleSoft vulnerability CVE-2026-35273 by bypassing WAF rules and targeting organizations that failed to patch. #ShinyHunters #FBI #OraclePeopleSoft #CVE-2026-35273
ShinyHunters claims it stole sensitive FBI data that may expose agents’ personal contact details, family information, assignments, and specialties, raising serious safety and counterintelligence concerns. Researchers say the alleged extortion appears to be a personal retaliation against the FBI, with the stolen data already spreading beyond the group’s control. #ShinyHunters #FBI
Fosko S.A., a plastic container manufacturer in Chile, suffered a LockBit 3.0 ransomware attack that disrupted access to billing files and impacted two workstations and one file server. With specialized support from Egs-Latam, the company carried out an immediate forensic response and infrastructure hardening that helped it continue operating without total paralysis. #Fosko #EgsLatam #LockBit30
SOCRadar’s AI Identity Exposure Report shows how infostealer logs are exposing employee logins to AI platforms, with ChatGPT dominating the findings across 482 major enterprises. The report explains why stolen AI sessions are more dangerous than stolen passwords and urges organizations to treat AI platforms as critical identity assets. #Anthropic #Claude #ChatGPT #HuggingFace #Replit #Zapier #Notion #ElevenLabs #SOCRadar
JadePuffer is a new AI-driven ransomware operator targeting Azure tenants with automated reconnaissance, credential theft, lateral movement, and destructive actions against cloud resources. Microsoft linked the activity to Storm-3168, which used compromised service principals to delete storage accounts, weaken recovery protections, and expand attacks to AI assets such as training data and vector databases. #JadePuffer #Storm3168 #Azure #EncForge #Microsoft
This week’s roundup highlights active exploitation of Citrix NetScaler flaws, a major Bitget breach, and multiple campaigns abusing weak identities, phishing kits, and old vulnerabilities. It also shows how forgotten placeholder domains, exposed service accounts, and leaked GitHub App keys continue to create real attack paths for threat actors. #Citrix #NetScaler…
Former US Army soldier Cameron John Wagenius was sentenced to 70 months in prison for hacking AT&T and Verizon systems, leaking a government official’s call detail records, and participating in extortion schemes. He and his accomplices used stolen credentials to target at least 10 organizations, including involvement in the broader Snowflake…
SecurityWeek has opened the Call for Presentations for its 2026 CISO Forum Virtual Summit, inviting original, vendor-neutral talks from cybersecurity leaders and practitioners. The event will focus on practical guidance across topics such as AI threats, ransomware, supply-chain risk, Zero Trust, incident response, and executive communication. #SecurityWeek #CISOForum #ZeroTrust #Ransomware #AI…
Ransomware attributed to safepay targeted manno.ch, the official website of a Swiss municipality providing residents, businesses, and visitors with information on municipal administration, public services, local regulations, infrastructure, and cultural offerings. The attack disrupted access to these services in Switzerland. #Switzerland