#кибербезопасность
-
Breach at South Korea's Diplomatic Academy: Diplomats' Data at Risk Worldwide
Hackers had access to the National Diplomatic Academy's online learning platform for ten months and stole the personal data of current and former Foreign Ministry staff, including diplomats posted abroad.
-
Swiss train maker Stadler refuses to pay $12.3M ransom
The Everest group demanded roughly 10 million Swiss francs from Stadler Rail after breaching a data-exchange platform the company shared with one of its suppliers. Stadler said it would not pay under any circumstances.
-
Anubis Claims Attack on Fairlife, a Coca-Cola Subsidiary
The Anubis ransomware group claims it stole roughly a terabyte of data from Coca-Cola's dairy division and is threatening to publish it unless the company enters negotiations.
-
Google Unveils Gemini 3.6 Flash and a Cybersecurity Model, While Gemini 4 Is Already in Training
The company has released three new models, including the first version of Gemini built for cybersecurity tasks — but the promised Gemini 3.5 Pro is once again nowhere among them.
-
Lone Hacker Handed Gemini CLI the Reins of an Eight-PC Dental Clinic Botnet
A Russian-speaking attacker going by the handle bandcampro turned Google's open-source AI agent into his engineering team: it wrote code, fixed infrastructure, and commanded the bots on plain-language orders.
-
Hackers exploit ViPNet's update mechanism to attack Russian government bodies
An advanced hacking group is abusing the ViPNet software update mechanism to attack Russian organizations, including government agencies.
-
SonicWall SMA Zero-Day Vulnerabilities Used to Gain Root Access Before Disclosure
A previously unknown group exploited vulnerabilities in SonicWall SMA 1000 VPN gateways as zero-days long before they were officially disclosed. The attacks were uncovered by Volexity during an incident investigation.
-
Microsoft Warns of Surge in ACR Stealer Malware Attacks
The company has recorded a rise in attacks using ACR Stealer — malware that steals passwords and tokens from the browsers of corporate customers.
-
Ernst & Young Reports Data Breach Following Support System Hack
Ernst & Young has notified clients of a data breach caused by the compromise of a third-party support service used by its IT specialists. The incident affected the technical support ticketing system.
-
Armenia Detains a Russian Namesake of the Wanted REvil Hacker
Since June 28, Armenian authorities have held Russian tourist Alexander Ermakov in pretrial detention on a US extradition request for a suspect in the REvil ransomware attacks. The detainee's lawyers and wife insist there has been a mistake.
-
Russian APT Groups Adopt the ClickFix Technique
The ClickFix social-engineering trick, previously used mostly by financially motivated cybercriminals, is now being deployed by elite hacking groups linked to Russia.
-
New OkoBot Malware Framework Discovered Stealing Cryptocurrency
Researchers have identified a new malware framework called OkoBot that deploys more than 20 different payloads to steal data and cryptocurrency. The attacks primarily target crypto wallet seed phrases and user credentials.
-
Two Members of the Scattered Spider Hacking Group Convicted in Britain
UK police say the arrest of two young hackers disrupted the operations of the notorious Scattered Spider group. Owen Flowers and Thalha Jubair pleaded guilty to breaching London's transport system.
-
CISA Orders US Federal Agencies to Fix Oracle Flaw by Saturday
CISA has directed federal agencies to remediate a critical vulnerability in Oracle E-Business Suite that attackers are already exploiting in real-world attacks.
-
US Imposes First-Ever Sanctions on a VPN Service for Aiding Ransomware Operators
The US Treasury has added VPN provider First VPN Service (1VPNS) and a seller of malware crypting tools to its sanctions list, accusing them of supporting ransomware groups. It marks the first time a VPN service has been sanctioned for such activity.
-
Microsoft Details Three Scenarios for ShinyHunters' Attacks on Salesforce
Microsoft analyzed a year-long ShinyHunters campaign against corporate Salesforce environments, noting that the attackers did not exploit platform vulnerabilities but instead abused trusted OAuth connections.
-
Lidl Discloses Online Shop Customer Data Breach After Contractor Hack
The Lidl supermarket chain has notified customers in Germany, Belgium and the Netherlands that their personal data was stolen following a breach at a third-party service provider. The incident affected users of the company's online shop.
-
US and Allies Warn of Russian Hacker Attacks on Critical Infrastructure
The intelligence services of the US and eight other countries have issued a joint warning that Russia-linked hacking groups are targeting critical infrastructure through vulnerable routers. The agencies urged organizations to strengthen the protection of their network equipment.
-
CISA admits: the incident response plan was drafted while the investigation was already underway
The US cybersecurity agency CISA suffered a password leak caused by a contractor and developed its response protocol during the incident itself.
-
New Forg365 Phishing Platform Uses AI to Steal Microsoft 365 Accounts
Researchers have uncovered Forg365, a phishing platform that uses AI to generate lures for stealing Microsoft 365 credentials. The service runs on a phishing-as-a-service model and combines several defense-evasion techniques.
- More