/
data_types_exposed:credentials × victim_sectors:energy × limpar

Resultados

6 casos · pág. 1/1

industrialcyber.co · medium

Resilience claims analysis: ransomware drives ~70% of energy-sector cyber losses; MFA bypass and exposed OT controllers widen exposure

Resilience's report Cyber risk in energy and utilities analyzes cyber insurance claims filed between Jan. 1, 2023 and Sept. 5, 2026. Email compromise made up 21% of energy and utilities claims, against 10% across the rest of the portfolio. Ransomware was only 9% of claims but about 70% of incurred losses including reserves. In several cas…

welivesecurity.com · medium

ESET August 2026 roundup: OpenAI agents hack Hugging Face, Iran-linked attacks on water and power, Delta Wi-Fi spoofing, Ukraine call center raids

ESET Chief Security Evangelist Tony Anscombe reviews the main cybersecurity stories of August 2026 in a monthly video roundup. OpenAI disclosed more details on how its agents hacked the AI collaboration platform Hugging Face, and the video discusses what went wrong and the lessons from the incident. Iran-linked hackers are believed to hav…

securityweek.com · medium

Rapid7 Q3 2026: High-severity flaws exploited in 3 days on average, ransomware dominates, AI limited to 8% of incidents

Rapid7's Q3 2026 threat landscape report finds that high-severity vulnerabilities were exploited an average of three days after disclosure, with 71% exploited within the first seven days. 79% of them are classed as 'holy grail' flaws, meaning remote and needing no credentials or user interaction. Ransomware remains the dominant threat. Th…

theregister.com · · 3 fontes · 3 atualizações critical

Qilin, INC and Settra ransomware crews exploit PAN-OS GlobalProtect bug CVE-2026-0257 since June, pivoting to ESXi

Multiple ransomware groups, including Qilin and INC, are exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks PAN-OS GlobalProtect portals and gateways. Unit 42 has been investigating intrusions since early June across many sectors, including finance, healthcare and manufacturing. The flaw was patched on May 13 and ini…

thehackernews.com · critical

Storm-0940 uses ARTEX agentic AI framework in ConnectWise Cloud Backup supply chain attack on hundreds of organizations

Microsoft attributed the recent supply chain compromise of the ConnectWise Cloud Backup application to Storm-0940, a China state-aligned actor. The actor used ARTEX, a Go-based agentic AI penetration testing framework, to automate reconnaissance, password spraying and OAuth application abuse at "machine speed" against hundreds of organiza…

cyberscoop.com · high

China-aligned Storm-0940 used ARTEX AI agents in ConnectWise Cloud Backup supply-chain attack on Microsoft 365 tenants

Microsoft attributed the recent supply-chain attack on ConnectWise customers' Microsoft 365 environments to Storm-0940, a China-state aligned actor active since 2021. Since at least September 2026 the group has used the open-source agentic AI penetration testing framework ARTEX to automate attacks against hundreds of organizations worldwi…