-
California Statewide Automated Welfare System
February 13, 2024
•
[ hack, government ]
The California Statewide Automated Welfare System discloses that more than 19,000 online accounts may have been accessed by threat actors for nearly a year.
-
Government entities in Ukraine
December 15, 2023
•
[ espionage, rce, government ]
Researchers from Deep Instinct reveal that an unknown threat actor targeted government entities in Ukraine toward the end of 2023 using an old Microsoft Office remote code execution (RCE) exploit from 2017 (CVE-2017-8570) as the initial vector and military vehicles as the lure.
-
Grodno Azot
April 17, 2024
•
[ hack, manufacturing ]
Belarusian politically motivated hacktivists from the Belarusian Cyber-Partisans group claim to have attacked the countrys largest state-run manufacturer of fertilizers, Grodno Azot, for its alleged involvement in political repression, sanctions evasion, and human rights violations.
-
Volkswagen
April 20, 2024
•
[ espionage, manufacturing ]
Threat actors associated with the Chinese government are believed to have hacked into Volkswagen systems in an effort to steal valuable data between 2011 and 2014.
-
Mobile Guardian
April 17, 2024
The names and e-mail addresses of parents and teachers of 127 primary and secondary schools are leaked after Mobile Guardian, a mobile platform on students personal learning devices is hacked.
-
Large U.S. car maker
November 1, 2022
•
[ financial, phishing, manufacturing ]
Researchers from Blackberry reveal that the financially motivated threat actor FIN7 targeted a large U.S. car maker with spear-phishing emails for employees in the IT department to infect systems with the Anunak backdoor.
-
Argentina's driver licenses
April 16, 2024
•
[ hack, leak, government ]
A threat actor allegedly hacks a database holding 5.7M Argentinas drivers licenses, requesting a payment of $3,000 USD for whoever wishes to purchase the images of Argentine licenses.
-
United Nations Development Programme
March 27, 2024
•
[ ransomware, malware, government ]
The United Nations Development Programme (UNDP) investigates a cyberattack after threat actors breached its IT systems to steal human resources data. The 8Base ransomware operation claims responsibility for the attack.
-
Telecommunication providers in Crimea
June 27, 2024
•
[ hack, ddos, technology ]
Local authorities in Crimea warn of internet disruptions from distributed denial-of-service (DDoS) attacks targeting telecommunication providers.
-
South Africa’s National Health Laboratory Service
June 25, 2024
•
[ ransomware, malware, healthcare ]
South Africas National Health Laboratory Service (NHLS) confirms to be dealing with a ransomware attack.
-
Absolute Telecom
June 9, 2024
•
[ hack, technology ]
GhostR claims to have stolen over 34 gigabytes of data belonging to Singapore-based telecom company Absolute Telecom PTE Ltd.
-
Synnovis
June 4, 2024
•
[ ransomware, malware, healthcare ]
A Qilin ransomware attack affecting pathology and diagnostic services provider Synnovis impacts healthcare services at multiple major NHS hospitals in London.
-
New York Times
June 8, 2024
•
[ leak, misconfiguration, technology ]
The New York Times confirms that internal source code and data was leaked on the 4chan message board after being stolen from the company's GitHub repositories in January 2024.
-
Official Microsoft India account on X (formerly Twitter)
June 3, 2024
•
[ financial, hack, phishing ]
The official Microsoft India account on X (formerly Twitter), with over 211,000 followers, is hijacked by cryptocurrency scammers to impersonate Roaring Kitty, the handle used by notorious meme stock trader Keith Gill.
-
Europol
September 6, 2023
•
[ hack, government ]
Europol, the European Union's law enforcement agency, confirms that its Europol Platform for Experts (EPE) portal was breached and is now investigating the incident after the threat actor IntelBroker claimed they stole For Official Use Only (FOUO) documents containing classified data.
-
Starlight Media.
May 9, 2024
Russia-aligned threat actors hijack at least 15 TV channels owned by Starlight Media. to broadcast a Victory Day parade in Moscow, commemorating the defeat of Nazi Germany in World War II. The attack is carried out compromising the Astra communication satellites owned and operated by SES, a Luxembourg-based company
-
Undisclosed contractor
April 30, 2024
The infamous IntelBroker threat actor claims to have breached a third-party contractor and stolen sensitive data belonging to two prominent banks in the United Kingdom: HSBC and Barclays.
-
Polish government institutions
May 9, 2024
•
[ espionage, malware, government ]
Polands computer emergency response team, CERT-PL, reveals that it had observed a large-scale malware campaign targeting Polish government institutions, likely carried out by the hacker group APT28, associated with Russias military intelligence agency, the GRU.
-
Several Italian Ministry websites
May 7, 2024
The Pro-Russia Hacktivists of NoName057(16) take down several italian websites including the Ministry of Made in Italy, the Financial Police, and the Ministry of Infrastructure and Transport.
-
DocGo
May 7, 2024
•
[ leak, healthcare ]
Mobile medical care firm DocGo confirms it suffered a cyberattack after threat actors breached its systems and stole patient health data.
