The ransomware attack against voltgames.io was attributed to the threat actor unsafe, resulting in $1.5 million in reported revenue impact. The impacted country(s): #unknown
TigerByte Cyber has emerged from stealth with $3 million in seed funding to expand its edge and AI device security platform, Cyber Protection Suite (CPS). The company says it will use the funding to modernize mission-critical systems for military and commercial aircraft, drones, satellites, and vehicles, building on more than $7…
WaterPlum, a North Korean hacking group, compromised at least 30,000 devices in more than 100 countries and sent over $10.7 million in stolen cryptocurrency to North Korea. The campaign used fake interviews, malicious coding tests, and recruiter impersonation to spread malware and steal credentials, wallet data, and identity documents. #WaterPlum #ContagiousInterview #BeaverTail #InvisibleFerret #OtterCookie #OtterCandy #StoatWaffle #DPRK
Quy Nhon University in Vietnam was impacted by Vexy Ransomware, with the threat actor targeting the public multidisciplinary institution. Quy Nhon University, established in 1977 and known for teacher education and broad academic programs, suffered a ransomware incident affecting its operations. #Vietnam
AuditTeam ransomware targeted td***up in IT, disrupting access to files and services and forcing potentially costly recovery actions. The incident resulted in system compromise and data/availability impact in #Italy
Young Injury Law in the US reported a ransomware claim attributed to the threat actor cry0. The incident is described as β## Coming soon….β #UnitedStates
SolarWinds has patched a high-severity vulnerability in Access Rights Manager, tracked as CVE-2026-28326, that could allow unauthenticated remote code execution due to a hard-coded static key. The company also released fixes for serious flaws in Web Help Desk and multiple Serv-U issues, including risks of privilege escalation, remote code execution, and…
Hacktron researchers used Claude Opus 5 to chain a Discourse image bug and an OpenAI login weakness, briefly taking over ChatGPT and Codex accounts belonging to OpenAI employees and reaching an internal code repository. OpenAI fixed the issue quickly and paid a bounty, while the underlying HEIF/HEIC flaw was tied to…
Ellis County reported a ransomware incident that affected some of its computer systems, prompting immediate containment measures and the involvement of cybersecurity specialists. The county is still investigating with law enforcement and cybersecurity partners, and no evidence of access to personal or sensitive information has been found so far. #EllisCounty
play ransomware impacted Barrett Mahony Consulting Engineers in Ireland by encrypting data and demanding a ransom. The incident highlights the disruption faced by organizations targeted by play in Ireland #Ireland
Inglewood Golf in Canada reported a ransomware incident attributed to the play threat actor. The attack resulted in data and system disruption affecting Canada #Canada
Vista Plastic Solutions, US, reported a ransomware incident attributed to the play threat actor, with attackers seeking to extort and disrupt operations. The intrusion resulted in impact to business systems and data availability, affecting #UnitedStates.
Forus.cl, a Chilean apparel provider based in Santiago, was targeted by LockBit5 ransomware, with attackers allegedly encrypting or exfiltrating company data. The claim highlights disruption to operations in Chile. #Chile
Daily Recap, Major developments included the Brevo supply-chain attack that injected malware and ClickFix scripts into roughly 100,000 websites, along with Microsoftβs fixes for Defender Antivirus false alerts, Excel 2016 copy/paste issues, and new Teams admin controls, plus OpenAI reporting GitHub API key hunting during training. Elsewhere, Cisco and Check Point issued guidance on actively exploited zero-days and a critical root-level flaw, while threats ranged from the Gyazo data breach and ChatGPT billing phishing targeting OpenAI credentials to the disruption of the NightmareStresser DDoS service, alongside AI coding-agent zero-click RCE reports and the emergence of RatHat Android malware.
#Brevo #ClickFix #MicrosoftDefender #Excel2016 #MicrosoftTeams #Microsoft365 #OpenAI #GitHub #Cisco #Unbound #CheckPoint #RCE #root #Gyazo #ChatGPT #OpenAIPhishing #NightmareStresser #DDoS #RatHat
A forum actor using the name FFLDarkPacket claims to be selling a database linked to Family First Life that spans 2014 through September 2026 and includes agent credentials, client PII, SSNs, banking information, and policy data. The report says the alleged dataset covers several major insurance carriers and represents $1.2 billion…