-
Undefined tech company
October 31, 2023
•
[ espionage, malware, education ]
The Israel Computer Emergency Response Team (CERT) issues an alert about the BiBi wiper malware targeting organizations in Israel in the education and technology sectors. The attacks are attributed to the Iranian APT Agonizing Serpens.
-
National Payment Card System (NSPK)
October 30, 2023
•
[ hack, finance ]
Activists from the DumpForums group and the Ukrainian Cyber Alliance say they defaced a website of the government-run National Payment Card System (NSPK) and reportedly gained access to the internal systems of the consumer payment network Mir ("world" in Russian), a homegrown alternative to brands like Visa and Mastercard, is operated by the NSPK.
-
Ace Hardware
October 30, 2023
•
[ hack, retail ]
Ace Hardware confirms that a cyberattack is preventing local stores and customers from placing orders as the company works to restore 196 servers.
-
Italian Org #4
November 7, 2023
The Pro-Russian hacktivists from NoName057(16) launch a DDoS attack against five targets in Italy including a subdomain of the Ministry of Defense, and a primary bank (Credito Cooperativo.)
-
Government and defense organizations in India
November 6, 2023
•
[ espionage, malware, government ]
Researchers from Seqrite discover multiple campaigns of the Pakistan-based APT SideCopy, targeting Indian government and defense entities, exploiting the recent WinRAR vulnerability CVE-2023-38831 to deploy AllaKore RAT, DRat and additional payloads.
-
TRISTAR Insurance Group
November 4, 2023
•
[ hack, finance ]
TRISTAR Insurance Group (TRISTAR) files a notice of data breach after discovering that an unauthorized party was able to access its computer network through a cyberattack.
-
Summit Health
November 3, 2023
•
[ ransomware, leak, malware ]
Summit Health is added in the LockBit 3.0 ransomware group leak site.
-
Public healthcare institutions in Singapore
November 3, 2023
•
[ hack, ddos, healthcare ]
Threat actors disrupt internet connectivity in public healthcare institutions in Singapore with distributed denial-of-service (DDoS) attacks.
-
BHS Physicians Network
November 2, 2023
•
[ hack, misconfiguration, healthcare ]
BHS Physicians Network confirms a breach of a Microsoft Office 365-hosted business email account that was used by a medical assistant.
-
Associated Press
November 2, 2023
The Associated Press news website (apnews) is hit with a DDoS attack.
-
Cogdell Memorial Hospital
November 1, 2023
•
[ ransomware, malware, healthcare ]
The Cogdell Memorial Hospital announces to be experiencing a computer network incident that prevents the hospital from accessing some of its systems and severely limiting the operability of its phone system. The Lorentz ransomware group claims responsibility for the attack.
-
Smoothie King
October 31, 2023
•
[ hack, retail ]
SK USA (Smoothie King) files a notice of data breach after discovering that an unauthorized party was able to access confidential information that had been entrusted to the company.
-
Avangate
October 31, 2023
•
[ ransomware, malware, technology ]
The Alpha Team ransomware gang claims responsibility for a cyber attack to Avangate.
-
U.S. Department of Defense
October 30, 2023
The email addresses of about 632,000 employees from the Justice and Defense departments were accessed in the massive MOVEit hack affecting the Office of Personnel Management.
-
Sadwestfalen IT
October 30, 2023
•
[ ransomware, malware, government ]
A threat actor encrypts the servers of the local municipal service provider Sadwestfalen IT. To prevent the malware from spreading, the company restricts access to its infrastructure for over 70 municipalities, primarily in the western German state of North Rhine-Westphalia.
-
Quertaro Intercontinental Airport
October 30, 2023
•
[ ransomware, malware ]
The Quertaro Intercontinental Airport confirms reports that it had been attacked. The LockBit ransomware gang claims responsibility for the attack.
-
Manchester Airport
October 30, 2023
•
[ hack, ddos, government ]
The Russian group UserSec claims responsibility for taking down the Gatwick Airport website.
-
Manchester Airport
October 30, 2023
•
[ hack, ddos, government ]
The Russian group UserSec claims responsibility for taking down the Manchester Airport website.
-
Five Guys
October 27, 2023
•
[ hack, retail ]
Five Guys discloses a security breach where hackers gained access to the email accounts of two employees.
-
Southeastern Orthopaedic Specialists
October 25, 2023
•
[ ransomware, malware, healthcare ]
Southeastern Orthopaedic Specialists is added to the NoEscape ransomware gang leak site. The threat actors claim to have exfiltrated 3 GB of data.
