Securitas Group in Sweden reported a ransomware incident allegedly carried out by the everest threat actor. The attackers targeted the organization’s systems, impacting operations in Sweden. #Sweden
Burnaby public schools are experiencing an outage affecting internet access and phone lines after the school district reported a cyber incident. The disruption has impacted services across the district, including Burnaby schools. #BurnabySchools #BurnabySchoolDistrict
Astrana, a U.S. healthcare technology company, reported a cyberattack to regulators after attackers gained access by impersonating company staff and spoofing the main corporate phone number. The incident exposed confidential information, forced some systems to be restored from clean backups, and prompted notifications to authorities and customers. #Astrana
A Conifers study found that many deployed detections in security tools look healthy on dashboards but fail in practice because of logic bugs, missing telemetry, wrong data sources, duplicates, or excessive noise. The research also showed major coverage gaps, with organizations averaging 63% coverage for threats from their own intelligence and 64% protection against relevant MITRE ATT&CK techniques. #Conifers #MITREATTACK
AI can score perfectly on CISSP-style questions because exams reward recall and pattern matching, but real cybersecurity work requires judgment, context, and the ability to identify the right problem before solving it. The article argues that AI is changing junior tasks, not eliminating the need for fundamentals, and that the strongest entry-level candidates will be those who can think critically and understand their environment. #CISSP #ErichWinkler #DecodedSecurity #90DayCybersecurityJobBlueprint
Microsoft announced it will deprecate the Windows Deployment Services (WDS) server role in the next Windows Server release and eventually remove it completely. Organizations that still rely on WDS-backed PXE or WDS-dependent multicast should begin migrating to alternatives such as Microsoft Configuration Manager. #WindowsDeploymentServices #WindowsServer #MicrosoftConfigurationManager
SOC 2 remains valuable for proving that controls operate as intended, but it can miss AI agents that use borrowed credentials, lack clear ownership, and create risk without failing any audit check. The article argues that organizations need intent-based security and agent-aware controls so they can identify what is running, who authorized it, and whether access still matches purpose. #SOC2 #TokenSecurity #AIagents #MCPservers
CISA has released its 2026 Election Infrastructure Security Plan, outlining cyber and physical risks to election systems and offering free tools and services to help election officials protect them. The plan highlights patching challenges tied to certification rules, voter registration database threats, insider risks, and bomb threats, while promoting stronger authentication,…
Bitget says the $351.6 million theft from its systems closely matches techniques used by known North Korean threat actors, based on IP behavior and on-chain analysis. The company said the attackers abused a compromised backend system to approve fraudulent transfers, while hot wallets were affected and cold wallets were not. #Bitget…
SecurityWeek’s weekly roundup covers major developments including the ShinyHunters defacement of Cl0p’s leak site, BragJack flaws in browser AI assistants, and malicious AI-related implants and botnets targeting secrets and credentials. It also highlights serious exposure across water utilities, industrial telemetry, Android banking apps, and Docker environments, alongside faster Ubuntu kernel response…
Meta’s Muse AI assistant is being tested with a phone-calling feature that can hand tasks off to outsourced human contractors when the AI struggles to complete calls. The internal test exposed a privacy risk because users’ sensitive details could be visible to the human team, leading Meta to suspend the feature…
Taspen Life (taspenlife.com) in Kazakhstan experienced a ransomware incident involving the LockBit 5 threat actor, disrupting operations and access to its systems. The attack impacted the insurance provider’s services for customers, including health protection and group protection offerings, with effects across Kazakhstan. #Kazakhstan
Iberia Compositech Manufacturing in Spain reported a ransomware incident attributed to the qilin threat actor. The attack resulted in data and operational disruption, impacting Spain #spain
Majani Insurance Brokers in Kenya reported a ransomware incident allegedly perpetrated by Vexy Ransomware, disrupting its independent insurance broking operations. As an insurance provider arranging coverage for businesses and individuals—including general business, motor, medical, life, investment, marine, liability, property, and agricultural-related covers—the impact was felt in #Kenya
Yaroslavl Regional Hospital was hit by a cyberattack that wiped all information stored on its servers, with the incident attributed to Ukrainian hackers who demanded a ransom. Although the data was restored, hospital leadership decided to replace the equipment and called for additional regional funding in 2027 to strengthen healthcare IT security. #YaroslavlRegionalHospital #MikhailOsipov #Yaroslavl