Ahold Delhaize, one of the world's largest food retailers, confirmed that a cyberattack discovered last week forced it to take systems offline, including brand websites and apps, in Europe and the United States. Affected brands include Albert Heijn, Etos and Gall & Gall in the Netherlands, Delhaize in Belgium, and Stop & Shop in the US, w…
Bullhorn, a US cloud staffing and recruitment software vendor serving more than 10,000 customers, disabled access to its platform after detecting a cyber incident that caused a system-wide outage. Customers first saw job posting problems on Friday, and the company confirmed the cyberattack the following day. Bullhorn says it has isolated …
Hackers compromised the infrastructure of Onamae.com Desktop Cloud, a VPS service operated by GMO Internet in Japan, and installed malicious programs on up to 26,739 customer servers. The company confirmed the intrusion on October 20, 2026. It began progressively shutting down customer servers at 04:00 local time on October 21, and all De…
Kaspersky's analysis of Operation FlashHole describes a Lazarus Group campaign against South Korean organizations. It follows Operation SyncHole and is placed within the broader Cascade Hole activity. The earliest evidence dates to July 2025 (securelist.com, bleepingcomputer.com), and Kaspersky identified at least three victims in the sof…
Between April and July 2026, a threat actor tracked as UNC7017 compromised AOMEI update and notification infrastructure and used it to push malware to users of AOMEI Backupper. The attackers briefly altered two configuration files and restored them within minutes to evade detection. The campaign was uncovered by ManageEngine's Threat Anal…