LATEST POST
Ransomware hackers are now targeting victims with an infrastructure-driven approach
Cybersecurity Insiders reports: Cyberattacks have long evolved in waves, with ransomware groups historically choosing their victims based on industry type or company size. Financial institutions, healthcare providers, and large enterprises were often prime targets due to their ability to pay hefty ransoms. However, a new trend is emerging that signals a shift in attacker strategy. […]
Rhode Island announces $7 million settlement with Deloitte over RIBridges data breach
Rhode Island Current reports that the state has settled with Deloitte, the contractor responsible for the RIBridges data breach. A $7 million handshake between the Rhode Island Department of Administration and global consultancy Deloitte over the latter’s role in the 2024 RIBridges data breach has brought the state’s total windfall to $12 million for the […]
Criminals impersonate help desk, abuse Microsoft Teams to steal your data
The Register reports: A previously unknown threat group using tried-and-tested social engineering tactics – Microsoft Teams chat invitations and helpdesk staff impersonation – is also using custom malware in its data-stealing attacks, according to Google’s Threat Intelligence Group. The threat hunters say they spotted a “large email campaign” in late December 2025. The attack started by spamming […]
British hacker tied to Scattered Spider campaign pleads guilty in $8M scheme
The Record reports: A British hacker pleaded guilty Friday in U.S. federal court to participating in a sweeping cybercrime campaign that siphoned at least $8 million in cryptocurrency from companies and individuals, federal prosecutors said. Tyler Robert Buchanan, 24, of Dundee, Scotland, admitted to one count of conspiracy to commit wire fraud and one count […]
Vercel hacked after fatal OAuth error: granting “Allow All” permissions
Cybernews reports: Vercel, a cloud platform and maintainer of Next.js, a major web development framework, has been hacked, and hackers are selling access to credentials that could help pull off “the largest supply chain attack ever if done right.” An OAuth token, granting too many permissions, became a single point of failure. Vercel acknowledged that […]
P3 Advertised 20+ Years and 0 Security Breaches. They had to reset their counter.
Will P3 wind up on a vendors not to be trusted list? DataBreaches.net reports: P3 Global Intel advertises itself as a “fully integrated and state-of-the-art tip acquisition and tip management solution that has quickly become the leading choice of Crime Stoppers Programs, Law Enforcement Agencies, Campus Safety Programs, and Federal Agency Initiatives.” 35,000 U.S. schools use P3 Campus, which […]
Old Laws, New Tricks: Connecticut Laws Apply to Artificial Intelligence
The law firm of Squire Patton Boggs writes: Connecticut Attorney General William Tong recently issued an advisory memorandum (“Advisory”) to all “State Officials, Agencies and Concerned Parties” about how existing Connecticut laws apply to artificial intelligence (“AI”). In the Advisory, Attorney General Tong hints at enforcement priorities and offers businesses a roadmap for compliance in describing how […]
Ukrainian emergency services and hospitals hit by espionage malware campaign
The Record reports: Hackers have targeted Ukrainian hospitals and local government bodies in a new espionage campaign using a malware tool dubbed AgingFly, researchers say. Ukraine’s computer emergency response team (CERT-UA) said the activity was carried out by a group tracked as UAC-0247, which launched multiple attacks over the past two months against municipal authorities, clinical hospitals […]