Incidents involving malware or ransomware. In some cases, incidents called “ransomware” do not involve any locking but merely hack, exfiltrate, and attempt to extort.
In 2023, Singing River Health System in Mississippi was hit by the Rhysida gang. In October 2023, Singing River Health System and its wholly owned subsidiary, Singing River Gulfport notified HHS that 895,204 patients had been affected. In response to the incident, they reportedly implemented a series of improved technical safeguards. Whatever they did was […]
Malwarebytes reports: A convincing fake website is impersonating OpenAI’s ChatGPT download page and infecting visitors with malware designed to steal passwords, browser data, cryptocurrency wallets, and other sensitive information. The site, openew[.]app, closely mimics OpenAI’s real ChatGPT download experience and offers what appear to be official desktop apps for both Windows and macOS. Instead, Windows users […]
CPO Magazine reports that the Nitrogen ransomware-as-as-service (RaaS) group has claimed responsibility for an attack on a major electronics manufacture for brands that include, Apple, AMD, and Nvidia: The documents the group claims to have stolen allegedly contain confidential instructions, projects, and drawings from various tech giants, including AMD, Apple, Google, Intel, and Nvidia. Other […]
Cybersecurity Insiders reports: Cyberattacks have long evolved in waves, with ransomware groups historically choosing their victims based on industry type or company size. Financial institutions, healthcare providers, and large enterprises were often prime targets due to their ability to pay hefty ransoms. However, a new trend is emerging that signals a shift in attacker strategy. […]
The Record reports: Hackers have targeted Ukrainian hospitals and local government bodies in a new espionage campaign using a malware tool dubbed AgingFly, researchers say. Ukraine’s computer emergency response team (CERT-UA) said the activity was carried out by a group tracked as UAC-0247, which launched multiple attacks over the past two months against municipal authorities, clinical hospitals […]
MassLive reports: Worcester’s emergency notification system, ALERTWorcester, has been relaunched five months after a data breach. ALERTWorcester’s service provider, OnSolve CodeRED, fell victim to the cybersecurity breach in November 2025. The notification system was shut down during the breach and residents instead received updates through the city’s social media accounts. City Manager Eric D. Batista […]
Ars Technica reports: Researchers say they have uncovered a takedown-resistant botnet of 14,000 routers and other network devices—primarily made by Asus—that have been conscripted into a proxy network that anonymously carries traffic used for cybercrime. The malware—dubbed KadNap—takes hold by exploiting vulnerabilities that have gone unpatched by their owners, Chris Formosa, a researcher at security […]
Security Week reports: Stryker is a Fortune 500 company that specializes in the manufacturing of surgical equipment, orthopedic implants, and neurotechnology. Headquartered in Michigan, the company employs approximately 56,000 people and reported over $25 billion in revenue for 2025. Its critical role in the healthcare supply chain makes it an essential partner for hospitals worldwide. […]
The Record reports: A prominent ambulance service in Milwaukee confirmed that hackers targeted their systems last year and stole sensitive information on more than 235,000 people. Bell Ambulance, which is the largest ambulance provider in the state of Wisconsin, filed breach notifications in Maine this week confirming that 237,830 people had information impacted by a […]
An article by Josh Taylor of Fortra begins: Ransomware groups are increasingly inserting AI bots into the negotiation loop to triage victims, collect leverage and scale their operations. At Fortra, I have observed a growing trend of attackers deploying chatbots for first contact, with humans stepping in only after certain thresholds are met. This approach […]
