Cyber Attack Exposes Vulnerabilities in Philippine Nuclear Agency
PremiumAttackers exploited unpatched ownCloud to access the Philippines nuclear agency, exfiltrating reactor databases and credentials.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Friday, September 4
Cybercriminals Exploit Brazilian Government Servers to Push Gambling Sites
PremiumGambling Goblin installed malicious Apache modules on Brazilian government and education servers to redirect visitors to betting pages.
Rockwell Automation Addresses Critical Vulnerabilities in Industrial Products
PremiumRockwell Automation released advisories and patches for multiple vulnerabilities across RSLinx, FactoryTalk, and other industrial products.
Pegasus Spyware Targets Serbian Activists in Zero-Click Attack
PremiumNSO Group Pegasus used an iMessage zero-click exploit to infect a Serbian student activist's iPhone enabling remote surveillance.
Massive Data Breach at Aesto Exposes Health Records of 9.5 Million Individuals
PremiumAesto data breach leaked sensitive health information of more than 9.5 million people, reported to regulators after discovery.
Massive Data Breach Exposes 153 Million Driver's Licenses
PremiumScans of 153 million US and Canadian driver's licenses are being sold on the dark web, risking large-scale identity fraud.
Thomson Reuters C-Track Breach Compromises Sensitive Court Records
PremiumThomson Reuters disclosed a C-Track breach exposing sealed court data and PII across US and Canadian jurisdictions.
FalconFlank Exploit Unveils Privilege Escalation Vulnerability in CrowdStrike Falcon
PremiumResearcher released a FalconFlank PoC showing privilege escalation in CrowdStrike Falcon sensor, creating urgent patch/practice risk.
SonicWall SMA1000 Appliances Face New Security Threats
PremiumMultiple zero-days in SonicWall SMA1000 appliances are being actively exploited, enabling unauthenticated RCE and potential network compromise.
Wednesday, September 2
Cybercriminals Exploit Polygon Blockchain in New ClickFix Attack
ClickFix campaign used EtherHiding on Polygon to dynamically update C2 addresses after compromising 31 organizations.
Hackers Exploit Microsoft Teams Calls in Advanced Social Engineering Attack
Spring Ring campaign abuses Microsoft Teams help-desk calls to socially engineer remote execution and lateral network compromise.
Iranian Hackers Exploit Coding Tests to Deploy Cross-Platform Malware
Nimbus Manticore lures developers with fake coding tests to deliver cross-platform RATs (Node.js/JavaScript) for espionage.
Nutex Health Faces Data Breach by Notorious Ransomware Group
Ransomware group claims Nutex Health breach; SEC filing says patient, employee, provider, business, and financial information accessed.
Critical Ruby on Rails Flaw Under Active Exploitation by Threat Actors
CyberWire notes active exploitation of a critical Ruby on Rails vulnerability enabling reconnaissance and potential RCE.
Chinese Hackers Exploit Cisco Routers in 'Fire Ant' Cyber Campaign
Fire Ant compromised Cisco routers and the trust layer, using them to forward traffic, steal credentials, and blind logs.
Coast Guard Launches New Office to Strengthen Maritime Cybersecurity
US Coast Guard creates centralized Office of Maritime Cybersecurity Policy to govern port, vessel, and maritime facility cybersecurity.
AI-Assisted Porting of PLC Exploits: Costs and Challenges
Forescout used an LLM to port a PLC RCE exploit between WAGO models, lowering technical barriers for OT attacks.
Breeze Comet Exploits Brazilian Payment Systems for Fraudulent Gains
Breeze Comet (UNC5669) manipulates Brazilian payment systems to execute fraudulent transfers targeting financial services and retail.
Cyberattack Disrupts Boston Scientific's Manufacturing Operations
Cyber incident disrupted Boston Scientific manufacturing, order processing, and product shipments after a network outage was detected.
WatchGuard Addresses Critical Security Flaws in Fireware OS and Dimension
WatchGuard patched three critical Fireware OS iked-process issues that allowed unauthenticated remote code execution.
Get these articles delivered to your inbox.
Subscribe free