Cyberattack on Polish Power Plant Reveals Vulnerabilities in Private Cellular Networks
Attackers used a private cellular network to intrude on a Polish heat-and-power plant, shutting a steam turbine and disrupting treatment systems.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Wednesday, August 12
Chrome Extension Returns with Malicious Intent After Removal
A Chrome extension removed for stealing AI chats returned to the Web Store and resumed malicious activities — immediate remediation recommended.
Metabase Zero-Day Flaw Threatens Data Security Across Multiple Platforms
Metabase zero-day allows remote admin takeover and data exfiltration, posing broad downstream risk to analytics consumers.
Gunra Ransomware Exploits Firewall and VPN Vulnerabilities
US and South Korean agencies warn of Gunra exploiting firewall and VPN flaws to hit government and critical infrastructure.
Microsoft's August Security Update Tackles Over 400 Vulnerabilities, Highlights Three Zero-Day Exploits
Microsoft released massive August updates covering hundreds of CVEs, including multiple zero-days — prioritize exploited and high-impact fixes.
Monday, August 10
Windows Hello for Business Vulnerability Enables Stealthy Entra ID Access
PremiumMalware running in a signed Windows session can quietly use Windows Hello for Business keys to authenticate to Entra ID and persist.
Ransomware Attacks Spike in July, Targeting Key Sectors
PremiumRansomware incidents spiked in July, with finance, technology and healthcare disproportionately targeted per report.
Critical Vulnerabilities in Claude Code and Gemini CLI Expose CI Workflow Secrets
PremiumFlaws in Claude Code and Google's Gemini CLI let an unprivileged GitHub issue execute code on CI runners and expose secrets.
TeamPCP's Long-Running Cyber Attacks Unveiled
PremiumAnalysis links TeamPCP to Redis attacks from 2020 and to later supply-chain campaigns via overlapping infrastructure and domains.
TrueConf Servers Compromised: Backdoor Infiltration Discovered
PremiumThreat actors exploited unpatched TrueConf servers to replace client installers with trojanized backdoors for remote access.
Massive Malware Campaign Exploits npm Packages to Spread RAT and Infostealer
PremiumCampaign published nearly 800 malicious npm packages delivering a cross-platform RAT and infostealer for Windows, macOS and Linux.
Atlassian's Rovo AI Vulnerability Risks Enterprise Data Exposure
PremiumVaronis found a one-click RovoBlast vulnerability that could expose Confluence, Jira and SharePoint data to attackers.
CSS Bomb Attacks Exploit Email Vulnerabilities to Steal Passwords
PremiumCSS bomb technique manipulates webmail UI to spy on user activity and capture passwords and tokens without JavaScript.
Levi Strauss Hit by Social Engineering Cyberattack
PremiumLevi Strauss suffered a breach after social-engineering of three employees gave attackers access to internal systems and data.
Military Device Manufacturer Faces Cybersecurity Breach
PremiumIEH Corporation disclosed a cyberattack affecting systems tied to military device manufacturing in an SEC filing.
Exposed OT Controllers and Foreign Telecoms Pose Persistent Security Risks
PremiumSANS NewsBites flags exposed OT controllers after water attacks, Chinese telecoms' US presence, and OSAA's SAFE proposal for AI findings sharing.
Massive Data Breach at Unlimited Technology Systems Exposes Personal Information of Millions
PremiumUnlimited Technology Systems breach exposed personal, medical and health insurance information for about 3.8 million people.
Phishing Campaign Exploits Microsoft 365 Accounts in Financially Driven Attacks
PremiumActive AitM phishing campaign hijacks Microsoft 365 accounts to collect payroll and finance emails using residential proxies.
Cyberattack Disrupts Operations at North Carolina Ports
PremiumCyberattack disrupted gates and operations across three North Carolina ports, drawing Coast Guard attention.
N-able Enhances Security with New N-central Hotfix Amid Exploitation Concerns
PremiumN-able released hotfixes after active exploitation of N-central enabled persistent attacker access to managed systems.
Get these articles delivered to your inbox.
Subscribe free