Fox25 in Oklahoma reports: The Cleveland County Sheriff’s Office (CCSO) is the victim of a cybersecurity attack, and now a hacking group claiming to be responsible is demanding a hefty ransom. On November 20, CCSO made a post on social media saying it was recently impacted by a ransomware attack. The group Rhysida is taking […]
The Register reports: Half of the internet-facing systems vulnerable to a fast-moving React remote code execution flaw remain unpatched, even as exploitation has exploded into more than a dozen active attack clusters ranging from bargain-basement cryptominers to state-linked intrusion tooling. That’s the assessment from Alon Schindel, VP of AI and Threat Research at Wiz, who says CVE-2025-55182 […]
Bleeping Computer reports: U.S. prosecutors have charged a Ukrainian national for her role in cyberattacks targeting critical infrastructure worldwide, including U.S. water systems, election systems, and nuclear facilities, on behalf of Russian state-backed hacktivist groups. On Tuesday, 33-year-old Victoria Eduardovna Dubranova (also known as Vika, Tory, and SovaSonya) was arraigned on charges related to her […]
There have been many articles written about the threat of artificial intelligence (AI) being used to program or assist cybercrime, but very little evidence of it actually happening. Here is a case where it has reportedly happened. Kyodo News reports: A 17-year-old boy was served an arrest warrant on Thursday on suspicion of breaching the […]
The Record reports: State-backed hackers in China are exploiting a vulnerability impacting a popular open-source tool built into thousands of widely-used digital products, according to new reports. The tool, React Server Components, was maintained by Meta for many years and now is embedded in 50 million websites and products built by countless major firms. The bug, tagged […]
HackRead reports: Barts Health NHS Trust has confirmed that the Russian-speaking Cl0p ransomware group stole files from one of its invoice databases after exploiting a vulnerability in Oracle E-Business Suite. The breach exposed data linked to payments for treatment and services, with some records going back several years. Hackread.com first reported on the Cl0p activity in November twenty twenty […]
Minh Phoung Ngoc Vong Participated in a Multi-Year Fraudulent Scheme to Obtain Remote Information Technology Work With U.S. Companies and Government Agencies for Persons Based in China Vong pleaded guilty on April 15, 2025 and was facing 20 years in prison. The Department of Justice has the latest update: Minh Phuong Ngoc Vong, 40, of […]
Gesa Credit Union was one of Marquis Software Solutions’s clients affected by a breach at Marquis, but there were many others. Bleeping Computer reports: Financial software provider Marquis Software Solutions is warning that it suffered a data breach that impacted dozens of banks and credit unions across the US. Marquis Software Solutions provides data analytics, […]
Gesa Credit Union has posted a notice on its website: Gesa Credit Union (“Gesa”) is providing notification of a recent data security incident that occurred at Marquis Software Solutions (“Marquis”), a former digital and physical marketing and communications vendor for Gesa. This incident involved information related to some Gesa members. However, this incident did not impact […]
Paubox reports on the recent Mixpanel incident and why it matters: OpenAI experienced a third-party data breach on November 9, 2025, when its vendor, Mixpanel, reported unauthorized access within its own systems. What happened According to OpenAI’s own disclosure of the incident on November 28, 2025, the attacker exported a dataset containing limited customer identifiable analytics tied […]
