Delek US: Delek USData Breach?
public
–
2 min read
Delek US Investigates Possible Data Breach Linked to Helix Hacker Group
Delek US, a Tennessee-based energy and refining company, is…
SafePal, Vodafone and Microsoft: Week in review: Records allegedly stolen from Azure tenants, Medusa ransomware hits 500+ orgs
public
–
6 min read
Cybersecurity Roundup: Major Breaches, AI Threats, and Critical Vulnerabilities Dominate Recent News
Last week’s cybersecurity landscape was marked by…
Elementor: Critical WordPress Plugin Vulnerability Exposes Sites to RCE Attacks
public
–
3 min read
Critical Zero-Day Vulnerability in Elementor Pro Plugin Enables Remote Code Execution
A severe security flaw in Elementor Pro, a premium…
Fidelity National Information Services: US Bank Investigates Alleged Data Breach After LockBit Ransomware Extortion Claim
public
–
2 min read
LockBit Ransomware Group Claims Breach of US Bank, Sets Extortion Deadline
The LockBit ransomware group has alleged a breach of…
Cisco: Cisco External Entity Injection Vulnerability Allows Attackers to Read Sensitive Data
public
–
2 min read
Cisco Patches High-Severity XXE Vulnerability in BroadWorks Platform
Cisco has released security updates to address a high-severity XML External Entity…
Siemens: 'Not a theoretical risk,' feds warn as attackers use AI-made code to hack critical infrastructure controllers
public
–
3 min read
AI-Powered Attacks Target Siemens S7 PLCs in Critical Infrastructure
Five U.S. federal agencies the NSA, CISA, FBI, DOE, and…
Ransom Busters LTD and GuidePoint Security: Ransom Busters Ransomware Affiliate Targets Victims With Fake Data Recovery Extortion
public
–
3 min read
Ransom Busters: A Deceptive "Recovery" Scheme Targeting Ransomware Victims
A threat actor operating under the name Ransom Busters…
Anthropic, Google and Apple: Hackers Use Fake Claude Guide to Steal Mac Passwords and Hijack Crypto Wallet Apps
public
–
3 min read
Fake Claude Installation Guides Used to Spread MacSync Malware on macOS
Cybercriminals are leveraging fake installation guides for the AI…
Trezor: MacSync Stealer Uses 30+ Rotating Domains to Steal macOS Credentials and Exfiltrate Data
public
–
3 min read
MacSync Stealer: macOS Malware Exploits 30 Rotating Domains for Data Theft
A macOS-targeted information-stealing malware, MacSync Stealer, has been identified…
DragonForce and Settra: Ransomware Affiliate Poses as Recovery Firm to Re-Extort Victims After Data Theft
public
–
3 min read
Ransomware Affiliates Pose as Recovery Services in New Extortion Scheme
GuidePoint Security’s Research and Intelligence Team (GRIT) has identified…
Ukraine’s Asset Recovery and Management Agency: Cyberattack Hits Ukraine Agency Ahead of Major Asset Tender
public
–
3 min read
Ukraine’s Asset Recovery Agency Targeted in Suspected Cyberattack Ahead of Key Asset Transfer
Ukraine’s Asset Recovery and Management…
Oz Hair and Beauty: Have I Been Pwned’s Post
public
–
1 min read
Oz Hair and Beauty Hit by Extortion Attack, 2 Million Email Addresses Leaked
This week, Australian retailer Oz Hair and…