23 casos · pág. 1/2
The UK Information Commission's Office (ICO) issued reprimands, not fines, to Ogi Networks Limited (ONL) and the Local Government Data Unit – Wales (Data Cymru) after a ransomware attack on 1 November 2024. The intruder used a forgotten test account, Test2, created in January 2012 with the password "Password1", to enter Data Cymru's netwo…
Dutch police arrested a 24-year-old Amsterdam man on September 15 on suspicion of playing a role in the ShinyHunters criminal organisation. Police have not named him, but Brian Krebs identified him as Pepijn van der Stap, a convicted hacker. A search of his laptop reportedly turned up details of two murders "to be committed abroad", which…
The US State Department is offering up to US $10 million through Rewards for Justice for information on Zhang Yu, 44, a Chinese national accused of being a key figure in the state-sponsored group Hafnium (also tracked as Silk Typhoon). Zhang is described as a director at Shanghai Firetech Information Science and Technology, working under …
The FBI arrested a Canadian cybersecurity executive in Pennsylvania on October 8, 2026, in connection with its investigation into the ShinyHunters extortion group. Court records point to Edward Dubrovsky, a ransomware negotiation specialist formerly of Cypfer and now associated with CyberSteward. He faces charges of conspiracy to threaten…
A threat actor using the handle ByteToBreach claims to have copied 10 databases from Ampath Laboratories, out of an environment said to contain roughly 375 databases. The claimed data includes HR and employee records, multiple patient databases, financial information and system-configuration data. The actor says the laboratory admissions …
Researchers documented in August 2026 that standard, as-designed Salesforce Agentforce features can be chained so an unauthenticated outsider reaches an internal agent's instructions. Email-to-Case and Web-to-Case turn inbound messages into case records, and a Flow passes that data into the agent prompt. The agent's reply then leaves thro…
CISA, the FBI, the U.S. Secret Service, Germany's Landeskriminalamt Rheinland-Pfalz and the UK's National Crime Agency and North West Regional Organised Crime Unit issued a joint advisory on the SafePay ransomware group. SafePay has breached at least 600 critical infrastructure organizations across North America, South America, Europe and…
A Chinese-speaking threat actor used AI agents coordinated through the open-source Cairn platform to attempt intrusions against more than 1,200 websites, reportedly compromising sites of over 100 companies, including Deere, SharkNinja and Cummins. Researcher Snorre Fagerland of NorForge found the activity while monitoring internet-exposed…
A Chinese-speaking attacker has reportedly compromised hundreds of websites worldwide by abusing Cairn, an AI-driven penetration-testing tool, to automate the attacks. Reported victims include large industrial and consumer brands such as John Deere, SharkNinja and engine manufacturer Cummins, from which the attacker is said to have looted…
Trend Micro published its State of AI Security Report, 1H 2025, warning that AI infrastructure is being built from unsecured and unpatched components. The research found 200+ ChromaDB servers, 2,000 Redis servers and 10,000+ Ollama servers exposed to the internet with no authentication. It also reports zero-day vulnerabilities and exploit…
A court in Zurich sentenced an unnamed 52-year-old Ukrainian man to 12 years and nine months in prison and banned him from Switzerland for ten years. The court found him to be the lead developer of the LockerGoga, MegaCortex and Nefilim ransomware families. Victims include Norsk Hydro, Stadler Rail (500 GB stolen in 2020, reported US $6 m…
The FBI has publicly called on remaining ShinyHunters members to surrender. Cyber division assistant director Brett Leatherman released a video thanking Dutch police for arresting a 24-year-old in Amsterdam. The FBI calls him "one of the alleged leaders" of the group, while Dutch police say only that he played a role. He is also suspected…
A new dark web identity theft service called Nexus, advertised on the Russian cybercrime forum Exploit on Aug. 31, 2026, is selling scans of more than 153 million driver's licenses from the US and Canada. It also lists over 10 million ID cards, 3 million travel documents and 579,000 medical cards. KrebsOnSecurity's analysis points to the …
U.S. federal investigators pursuing ShinyHunters, which recently stole sensitive personnel data from the FBI recruitment site fbijobs.gov, reportedly identified executives at two ransomware negotiation firms with unusually close ties to the group. One U.S. consulting firm executive is suspected of helping operate the now-defunct extortion…
A Flare analysis argues that Scattered Spider, LAPSUS$ and ShinyHunters are distinct intrusion clusters within The Com, a decentralized, mostly English-speaking cybercriminal subculture, and not interchangeable names for one group. It describes SP1D3R HUNTERS (also called Scattered LAPSUS$ Hunters, SLH) as a shared brand and coordination …
A 40-year-old Nigerian national, Chukwuemeka Victor Amachukwu, was sentenced to eight years in prison by a US federal court for a 2019-2023 scheme that combined hacking of US tax preparation businesses, filing of fraudulent tax returns and fake investment fraud. He used identities stolen from victim organizations to file false returns wit…
In July 2026, 77 large healthcare data breaches (500+ individuals) were reported to the HHS Office for Civil Rights (OCR), a 10% month-over-month increase and the third consecutive monthly rise. At least 33,485,970 individuals were affected, up 642% from June and 154% above the 12-month average. January-July 2026 totals 67.4 million affec…
iRhythm Technologies, maker of the Zio wearable ECG monitor, has had a June 2026 data breach confirmed at roughly 8.18 million individuals, according to the Oregon Attorney General breach list. This is close to its entire customer base of about 8 million patients in the US and Europe. The company first identified unauthorized access on Ju…
Episode 485 of the Smashing Security podcast, hosted by Graham Cluley with guest Lianne Potter, covers several security stories. Researchers who wanted to test LG smart TVs for security risks got around the terms and conditions by setting up the TV while drunk, on the reasoning that they could not be bound by a contract agreed to while in…
Microsoft Threat Intelligence reports active exploitation of CVE-2026-73570, a command injection flaw in Zimbra Collaboration Suite that allows unauthenticated, zero-click compromise of internet-facing email servers. Attackers deployed webshells, escalated privileges, harvested authentication secrets and staged mailbox data across organiz…
