-
Undisclosed commodity firm in Singapore
July 15, 2024
I-GRIP, a global stop-payment mechanism created by INTERPOL successfully recovers over $40 million stolen in a BEC attack on a company in Singapore.
-
Mobile Guardian
August 4, 2024
A threat actor breaches Mobile Guardian, a digital classroom management platform used worldwide, and remotely wipes data from at least 13,000 student's iPads and Chromebooks.
-
Hospital Español Auxilio Mutuo (Hospital Auxilio Mutuo)
September 24, 2023
•
[ hack, healthcare ]
Hospital Espaol Auxilio Mutuo (Hospital Auxilio Mutuo) in Puerto Rico notifies of a network incident affecting 500 patients.
-
Construction and machinery companies in South Korea
January 15, 2024
The South Korea's National Cyber Security Center (NCSC) warns that state-backed threat actors DPRK hijacked flaws in a VPN's software update to deploy malware and breach networks. In the second case they exploited vulnerabilities in domestic security software (VPN and server security) to replace update files with malware, distributing remote control malware named "DoraRAT" to construction and machinery companies.
-
Taiwanese government-affiliated research institute
July 15, 2024
•
[ espionage, malware, government ]
Researchers from Cisco Talos reveal that a Taiwanese government-affiliated research institute that specializes in computing and associated technologies was breached by the nation-state threat actors APT41 with ties to China, through a variety of backdoors and post-compromise tools like ShadowPad and Cobalt Strike.
-
German Federal Agency for Cartography and Geodesy (BKG)
December 1, 2021
•
[ espionage, government ]
German authorities say that a Beijing-backed threat actor was behind a cyberattack three years ago on the countrys state cartography agency, and summon the Chinese ambassador to Berlin for further discussions.
-
Undisclosed Fortune 50 company
January 31, 2024
•
[ ransomware, financial, malware ]
Researchers from Zscaler reveal that a Fortune 50 company paid a record-breaking $75 million ransom payment to the Dark Angels ransomware gang.
-
Israeli Olympic athletes
July 26, 2024
•
[ leak ]
The sensitive data of several Israeli athletes in the Paris Olympic Games is published on Telegram in an alleged doxing attack by a group calling itself "Zeus".
-
Spytech Software
July 25, 2024
•
[ hack, malware, technology ]
Spytech, a little-known spyware maker is hacked, revealing thousands of devices around the world under its stealthy remote surveillance.
-
Undisclosed financial institution
July 1, 2024
•
[ hack, ddos, finance ]
Researchers at Radware reveal that a financial institution in the Middle East suffered a DDoS attack lasting more than 100 hours in total, averaging 4.5 million requests per second.
-
KnowBe4
July 15, 2024
Cybersecurity awareness training company KnowBe4 has reveals it was duped into hiring a fake IT worker from North Korea, resulting in attempted insider threat activity.
-
dYdX
July 23, 2024
Decentralized finance (DeFi) crypto exchange dYdX announces that the website for its older v3 trading platform has been compromised.
-
CSC ServiceWorks
September 23, 2023
•
[ leak ]
CSC ServiceWorks, a leading provider of commercial laundry services and air vending solutions, discloses a data breach after the personal information of over 35,000 individuals was exposed in a 2023 cyberattack.
-
Unicoin
August 9, 2024
Unicoin, a prominent cryptocurrency company notifies the SEC that a threat actor broke into its systems and locked all of the companys employees out before taking several actions that are still being investigated.
-
British Home Office
March 1, 2024
•
[ espionage, government ]
Threat actors from APT29 working for Russias foreign intelligence service accessed corporate emails and data on individuals from the British government, after they breached Microsoft in January 2024.
-
Russia's Kursk Region
August 8, 2024
•
[ hack, ddos, government ]
Russia's Kursk region is hit by a massive distributed denial-of-service (DDoS) attack amid Ukraines surprise cross-border incursion.
-
Nexera
August 7, 2024
The decentralized finance (DeFi) protocol Nexera falls victim to a significant exploit, resulting in the theft of approximately $1.8 million worth of digital assets.
-
Millinocket Regional Hospital
July 25, 2024
•
[ ransomware, malware, healthcare ]
Millinocket Regional Hospital (MRHME) suffers a RansomHub ransomware attack. The threat actors claim to have exfiltrated 10 GB of files.
-
Dispatch centers in the Highland Lakes and across Central Texas
August 4, 2024
•
[ hack, ddos, government ]
A reported cyberattack disrupts 9-1-1 service at dispatch centers in the Highland Lakes and across Central Texas for over five hours.
-
South Korean construction trade organization
January 15, 2024
The South Korea's National Cyber Security Center (NCSC) warns that state-backed threat actors DPRK hijacked flaws in a VPN's software update to deploy malware and breach networks. In the first case they compromised the website of a South Korean construction trade organization to disseminate malware to visitors.
