-
Undisclosed U.S. Company
February 4, 2024
Researchers at Volexity reveal that the Russian state threat actor APT28 breached a U.S. company through its enterprise WiFi network while being thousands of miles away, by leveraging a novel technique called "nearest neighbor attack."
-
Amazon users
November 20, 2024
Amazon, Amazon Music, and Audible are flooded with bogus listings that push dubious "forex trading" sites, Telegram channels, and suspicious links claiming to offer pirated software.
-
Undisclosed Law Firm
November 19, 2024
•
[ leak, misconfiguration, government ]
A threat actor, who goes online with the name name Altam Beezley, gained access to a computer file shared in a secure link among lawyers whose clients have given damaging testimony related to Matt Gaetz, the former Florida congressman who is President-elect Donald J. Trumps choice to be attorney general.
-
International Game Technology
November 17, 2024
•
[ hack, technology ]
International Game Technology (IGT), one of the largest gambling companies in the U.S. says that a cyberattack caused massive disruptions to their operations, forcing them to take some systems offline.
-
Multiple Italian sites, including Malpensa and Linate airports
December 28, 2024
Pro-Russia group Noname057(16) targets Italian sites, including Malpensa and Linate airports, in a new DDoS campaign amid rising geopolitical tensions.
-
Rutherford County Schools
November 25, 2024
•
[ hack, education ]
Rutherford County Schools confirm to be dealing with a network and systems disruption since November 25.
-
Richmond University Medical Center
May 6, 2024
•
[ ransomware, malware, healthcare ]
The Richmond University Medical Center in New York is investigating a ransomware attack since May 2023 and it recently determined that the incident resulted in a data breach affecting more than 670,000 people.
-
Keesal, Young & Logan
June 7, 2024
The law firm Keesal, Young & Logan discloses that it recently detected a data breach, and an investigation showed that more than 316,000 people were impacted. Threat actors may have obtained names, Social Security numbers, drivers license numbers, financial account information and other data.
-
Minneapolis Park and Recreation Board
November 20, 2024
•
[ ransomware, malware, government ]
The RansomHub operation takes credit for a damaging attack on the Minneapolis Park and Recreation Board.
-
Wirral University Teaching Hospital
November 25, 2024
•
[ hack, healthcare ]
Major UK healthcare provider Wirral University Teaching Hospital (WUTH), part of the NHS Foundation Trust, suffers a cyberattack that causes a systems outage leading to postponing appointments and scheduled procedures.
-
Undisclosed prisons in the U.K.
November 23, 2024
•
[ leak, government ]
Confidential prison layouts in the U.K. are leaked onto the dark web.
-
Walsworth Publishing Company
February 9, 2024
Commercial printing firm Walsworth Publishing Company discloses a data breach affecting over 107,000 individuals, after the company discovered that its website and purchasing page had been compromised.
-
Blue Yonder
November 21, 2024
•
[ ransomware, malware, technology ]
Supply chain management firm Blue Yonder warns that a ransomware attack caused significant disruption to its services, with the outages impacting grocery store chains in the UK.
-
Crypto users in Linkedin
November 22, 2024
•
[ financial, social, finance ]
Researchers at Microsoft reveal that the North Korea-linked threat actor known as Sapphire Sleet is estimated to have stolen more than $10 million worth of cryptocurrency as part of social engineering campaigns orchestrated over a six-month period.
-
The Real World
November 21, 2024
Threat actors break into The Real World, far-right influencer Andrew Tates online university, steal user data on close to 800,000 users, and flood chats with emojis.
-
Human rights groups, private security companies, and state and educational institutions in Central Asia, East Asia, and Europe
November 21, 2024
•
[ espionage, malware, government ]
Researchers at Recorded Future identify an ongoing Russia-linked cyber-espionage campaign targeting human rights groups, private security companies, and state and educational institutions in Central Asia, East Asia, and Europe using custom malware.
-
Mexico Legal Affairs Office
November 20, 2024
•
[ ransomware, malware, government ]
Mexicos president Claudia Sheinbaum says that the government is investigating an alleged ransomware hack of her administrations legal affairs office after what appeared to be samples of personal information from a database of government employees were posted online.
-
American Associated Pharmacies
November 18, 2024
•
[ ransomware, malware, retail ]
Ransomware group Embargo threatens to publish nearly 1.5 terabytes of data allegedly stolen in an attack on American Associated Pharmacies, a collaborative of 2,000 independent pharmacies.
-
Library of Congress
November 17, 2024
The Library of Congress says that threat actors broke into its communications systems and were able to read its email correspondence with congressional offices for most of this year.
-
Undisclosed nuclear-related organization
October 1, 2024
•
[ espionage, malware, energy ]
Researchers at Kaspersky reveal that the Lazarus Group, the threat actor linked to the Democratic People's Republic of Korea (DPRK), has been observed leveraging a "complex infection chain" targeting at least two employees belonging to an unnamed nuclear-related organization. The attacks, part of Operation Dream Job, culminated in the deployment of a new modular backdoor referred to as CookiePlus,
