Tag: group
-
Canadian telecom hacked by suspected China state group
Maximum-security Cisco vulnerability was patched Oct. 2023 and exploited Feb. 2025. First seen on arstechnica.com Jump to article: arstechnica.com/security/2025/06/suspected-china-state-hackers-exploited-patched-flaw-to-breach-canadian-telecom/
-
Interview: Rolf Krolke, regional technology director, The Access Group
We talk to The Access Group’s technology director for APAC about integration and ongoing management of legacy systems in an extremely acquisitive company, and the worldwide storage refresh he’s overseeing as part of that process First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366626317/Interview-Rolf-Krolke-CIO-The-Access-Group
-
Iran-linked cyberattack reportedly disrupts public services in Albania’s capital
A group associated with Iran’s Islamic Revolutionary Guard Corps (IRGC) claimed an attack on the municipal website of Tirana, Albania’s capital. It’s the latest in a string of incidents attributed to the hackers. First seen on therecord.media Jump to article: therecord.media/tirana-albania-government-cyberattack-iran-linked-group
-
Interview: Rolf Krolke, CIO, The Access Group
We talk to The Access Group’s CIO about integration and ongoing management of legacy systems in an extremely acquisitive company, and the worldwide storage refresh he’s overseeing as part of that process First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366626317/Interview-Rolf-Krolke-CIO-The-Access-Group
-
US Homeland Security warns of escalating Iranian cyberattack risks
The U.S. Department of Homeland Security (DHS) warned over the weekend of escalating cyberattack risks by Iran-backed hacking groups and pro-Iranian hacktivists. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/us-homeland-security-warns-of-escalating-iranian-cyberattack-risks/
-
Canada says Salt Typhoon hacked telecom firm via Cisco flaw
The Canadian Centre for Cyber Security and the FBI confirm that the Chinese state-sponsored ‘Salt Typhoon’ hacking group is also targeting Canadian telecommunication firms, breaching a telecom provider in February. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/canada-says-salt-typhoon-hacked-telecom-firm-via-cisco-flaw/
-
DHS Warns Pro-Iranian Hackers Likely to Target U.S. Networks After Iranian Nuclear Strikes
The United States government has warned of cyber attacks mounted by pro-Iranian groups after it launched airstrikes on Iranian nuclear sites as part of the IranIsrael war that commenced on June 13, 2025.Stating that the ongoing conflict has created a “heightened threat environment” in the country, the Department of Homeland Security (DHS) said in a…
-
Cyber Fattah Leaks Data from Saudi Games in Alleged Iranian Operation
A cyber-attack by pro-Iranian group Cyber Fattah has leaked personal information from the Saudi Games online First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cyber-fattah-leaks-data-saudi-games/
-
North Korean Hackers Weaponize GitHub Infrastructure to Distribute Malware
Tags: attack, cyber, cybersecurity, github, group, hacker, infrastructure, malicious, malware, north-korea, powershell, threatCybersecurity researchers have uncovered a sophisticated spearphishing campaign orchestrated by the North Korean threat group Kimsuky, leveraging GitHub as a critical piece of attack infrastructure to distribute malware since March 2025. This operation, identified through analysis of a malicious PowerShell script posted on X, showcases an alarming abuse of legitimate platforms like GitHub and Dropbox…
-
Confucius Hackers Target Government and Military Entities Using WooperStealer Malware
The notorious Confucius hacking organization, first exposed by foreign security vendors in 2016, continues to pose a significant threat to government and military entities across South and East Asia. With attack activities dating back to 2013, this group has recently escalated its operations, targeting critical domestic units and industries with advanced tactics. Unveiling a Sophisticated…
-
Exploiting the Human Layer: Scattered Spider’s Identity-Centric Attack Chain (20222025)
The Adversary Scattered Spider, also tracked as UNC3944, is a financially motivated adversary group. The group has been particularly active in targeting prominent companies in First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2025/06/23/exploiting-the-human-layer-scattered-spiders-identity-centric-attack-chain-2022-2025/
-
10 tough cybersecurity questions every CISO must answer
2. How can we achieve the right security balance for our company’s risk tolerance?: To play that consultative role, CISOs also need to ask and answer that question, says Vandy Hamidi, CISO of public accounting and advisory firm BPM.”My role is to reduce risk in a way that enables the business to operate confidently while…
-
Cyberangriff auf eine Stadtverwaltung in Albanien
Tirana City Hall hit by cyberattack, Iranian hacker group claims responsibility First seen on albaniantimes.al Jump to article: albaniantimes.al/tirana-city-hall-hit-by-cyberattack-iranian-hacker-group-claims-responsibility/
-
Qilin ransomware gang now offers a >>Call Lawyer<< feature to pressure victims
Qilin ransomware gang now offers a >>Call Lawyer
-
Scattered Spider Targets Aflac, Other Insurance Companies
The prolific Scattered Spider threat group, which recently targeted U.S. and UK retailers in a series of attacks, is now turning its attention to the insurance industry and appears to have landed a big victim in Aflac after compromising networks and systems of the Philadelphia Insurance and Erie Insurance companies. First seen on securityboulevard.com Jump…
-
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 50
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Critical Langflow Vulnerability (CVE-2025-3248) Actively Exploited to Deliver Flodrix Botnet Predator Still Active, with New Client and Corporate Links Identified Threat Group Targets Companies in Taiwan Feeling Blue(Noroff): Inside a Sophisticated DPRK Web3 Intrusion Anubis: A…
-
CyberWarfare on the Rise With Surge in Hacktivist Activity Following Israel-Iran
Cyberspace has become a crucial battlefield in addition to conventional combat since the open conflict between Israel and Iran broke out. Following Israeli airstrikes on Iranian nuclear and military sites and Iran’s retaliatory missile salvos, both nations recognized as formidable cyber powers have escalated their digital operations. Israel-linked group Gonjeshke Darande (Predatory Sparrow), widely considered…
-
Surge in XSS Cyberattacks Targets Popular Webmail Platforms, ESET Reports
A recent report from ESET has uncovered a sophisticated cyber espionage campaign by the Russia-aligned Sednit group, targeting high-value webmail platforms through cross-site scripting (XSS) attacks. Dubbed Operation RoundPress, this operation has compromised popular webmail services such as Roundcube, Horde, MDaemon, and Zimbra, with a primary focus on governmental entities and defense organizations in Eastern…
-
Iranian Hacktivist Attacking Israeli Military, Government, and Infrastructure Targets
Over 35 different pro-Iranian hacktivist organizations launched a coordinated attack on Israeli military, government, and key infrastructure targets in a dramatic escalation of cyberwarfare. This surge in activity starkly contrasts with the limited response from just 4-5 identified pro-Israeli groups, highlighting a significant imbalance in the ongoing digital conflict between the two nations. Unprecedented Surge…
-
Violence-as-a-Service: Encrypted Apps Used in Recruiting Teens as Hitmen
European police, led by Denmark and Sweden, are arresting individuals in a crackdown on violence-as-a-service, where criminal groups recruit teenagers online for contract killings. Learn about Europol’s OTF GRIMM task force and how they’re fighting this disturbing trend. First seen on hackread.com Jump to article: hackread.com/violence-as-a-service-encrypted-apps-recruit-teen-hitmen/
-
Anubis Ransomware Lists Disneyland Paris as New Victim
Anubis ransomware group claims a 64GB data breach at Disneyland Paris, leaking some engineering files and attraction plans via its dark web site. First seen on hackread.com Jump to article: hackread.com/anubis-ransomware-lists-disneyland-paris-new-victim/
-
Hackers Target 700+ ComfyUI AI Image Generation Servers to Spread Malware
Tags: ai, backdoor, china, cyber, cybersecurity, exploit, flaw, framework, group, hacker, intelligence, malware, threat, vulnerabilityChina’s National Cybersecurity Notification Center has issued an urgent warning about critical vulnerabilities in ComfyUI, a widely used image-generation framework for large AI models. These flaws, already under active exploitation by hacker groups, have compromised at least 695 servers worldwide, according to threat intelligence from XLab. The attackers are deploying a sophisticated backdoor named >>Pickai,
-
BitoPro exchange links Lazarus hackers to $11 million crypto heist
The Taiwanese cryptocurrency exchange BitoPro claims the North Korean hacking group Lazarus is behind a cyberattack that led to the theft of $11,000,000 worth of cryptocurrency on May 8, 2025. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/bitopro-exchange-links-lazarus-hackers-to-11-million-crypto-heist/
-
Qilin Ransomware Adds “Call Lawyer” Feature to Pressure Victims for Larger Ransoms
The threat actors behind the Qilin ransomware-as-a-service (RaaS) scheme are now offering legal counsel for affiliates to put more pressure on victims to pay up, as the cybercrime group intensifies its activity and tries to fill the void left by its rivals.The new feature takes the form of a “Call Lawyer” feature on the affiliate…
-
Aflac discloses cyber intrusion linked to wider crime spree targeting insurance industry
The breach marks the latest in a series of recent attacks linked to cybercrime group Scattered Spider. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/aflac-cyber-crime-spree-insurance/751175/
-
Israel-Iran War: Hacktivist Groups’ Claimed Activity Surges
While Exceptions Apply, Such Efforts Often Only Amount to Psychological Operations. Missile exchanges over the skies of Israel and Iran entered their eighth day, wreaking death and destruction. Hacktivists are taking that as their cue to join the fray, although whether their efforts function as anything more than psychological operations is unclear. First seen on…
-
Aflac says it stopped attack launched by ‘sophisticated cybercrime group’
Insurance industry giant Aflac said it disrupted a cyberattack within hours of discovering it and is now working to determine how much data was potentially breached in the incident. First seen on therecord.media Jump to article: therecord.media/aflac-cyberattack-potential-data-breach
-
Aflac says it stopped ransomware attack launched by ‘sophisticated cybercrime group’
Insurance industry giant Aflac said it disrupted a cyberattack within hours of discovering it and is now working to determine how much data was potentially breached in the incident. First seen on therecord.media Jump to article: therecord.media/aflac-cyberattack-potential-data-breach
-
How to conduct an effective post-incident review
Tags: breach, business, ciso, compliance, credentials, cyber, cybersecurity, detection, email, finance, governance, group, incident, incident response, lessons-learned, phishing, risk, service, software, tool, training, update, vulnerabilityPerform a root-cause analysis: Your post-incident review must include a root-cause analysis, Taylor says. “Identifying the underlying issues that caused the incident is essential for avoiding future cyber incidents,” he says.The post-incident review team should examine the root causes of the incident, whether they are technical, procedural, or human-related, and implement corrective actions and preventive…