Category: Cyber Security
-
Pro-Russian hackers carried out a dam cyberattack in Bremanger, Norway. The incident opened floodgates for hours, alarming residents and raising concerns about the security of critical infrastructure. What happened at the dam On April 7, attackers accessed the dam’s control systems remotely. They opened a gate, releasing 500 litres of water per second for four…
-
Researchers discovered a hidden XZ Utils backdoor in multiple DockerHub images, posing a serious risk to developers and organizations. The malicious code could allow attackers to gain control over affected systems and compromise sensitive data. How the threat emerged Security researchers found that several Docker images contained a version of XZ Utils with a backdoor.…
-
A critical HTTP/1.1 flaw threatens over 24 million websites, enabling attackers to hijack accounts, steal sensitive data, and plant malicious code. The vulnerability hides in backend systems still using HTTP/1.1, even when front-end services appear modern and secure. How the flaw works HTTP/1.1 contains ambiguous request boundaries, which attackers exploit in request smuggling or “desync”…
-
Passkey attacks expose serious authentication weaknesses. Attackers use downgrade tricks to bypass FIDO2 passkeys and force weaker sign-in methods. Users are at risk unless they remove backup options and enforce strong access policies. How Downgrade Attacks Work Proofpoint researchers show that phishing kits can prompt users to sign in using passwords instead of passkeys—especially when…
-
Embargo ransomware has emerged as a sophisticated and high‑earning threat. The group racked up $34 million in crypto payments by targeting healthcare, manufacturing, and business services. Its Rust‑based toolkit and AI integration underline its advanced capabilities. High Earnings and Quiet Operations Blockchain analysts from TRM Labs estimate that Embargo commands around $34 million in incoming…
-
Russian military censorship has reached a new high, with authorities blocking more than 25,000 websites under wartime laws. This sharp increase highlights the Kremlin’s growing control over online communication and its determination to silence dissenting voices. Massive Growth in Blocks Independent watchdog Roskomsvoboda reports that Russian authorities added over 5,000 new websites to their blocked…
-
St. Paul cyberattack shut down city online systems, prompting officials to refuse ransom and launch a comprehensive recovery—Operation Secure St. Paul. The city brought in the National Guard and the FBI to secure its digital infrastructure. The Attack and Immediate Response The cyberattack started on July 25, when suspicious activity disrupted payment systems, public Wi‑Fi, and internal city…
-
The Pacific HealthWorks ransomware incident has escalated into a serious health data breach. The Everest gang has published sensitive files from at least 50 partner medical practices—including data from both Pacific HealthWorks and its sister company, La Perouse—exposing a wide swath of patient and operational records. Scope of the Data Exposure Everest posted hundreds of sample…
-
The UK’s data watchdog has advised retailers to avoid sharing shoplifter photos in public areas, citing GDPR concerns. With theft on the rise, many shopkeepers feel compelled to act—but the Information Commissioner’s Office (ICO) emphasizes that privacy rules still apply. ICO Guidance on Privacy and Proportion The ICO warns that posting suspected shoplifter images in…
-
A New South Wales court has introduced a highly unusual ankle monitor selfie rule for bail supervision. This comes after the sudden collapse of the private company that provided electronic ankle monitoring services across the state, forcing officials to create new oversight methods almost overnight. From Ankle Monitor to Hourly Photos For months, murder suspect…