INC ransomware opsec fail allowed data recovery for 12 US orgs
An operational security failure by INC ransomware allowed researchers to recover data stolen from 12 US orgs. A forensic investigation that revealed the use of the Restic backup tool and exposed attacker infrastructure.
Microsoft seizes RedVDS infrastructure, disrupts fast-growing cybercrime marketplace
Microsoft, in collaboration with international law enforcement, dismantled the RedVDS cybercrime marketplace. This operation has disrupted a significant source of cybercriminal activity, which facilitated widespread fraud and cyberattacks.
Meta fixes Instagram password reset flaw, denies data breach
Meta confirmed fixing an Instagram password reset vulnerability that allowed third parties to trigger reset emails, while denying any breach despite claims of leaked user data.
Amazon blocked 1,800 suspected DPRK job applicants
Amazon has successfully blocked over 1,800 suspected North Korean scammers from securing remote jobs since April 2024. These scammers use fake identities, AI tools, and deepfakes to apply for jobs, funneling their wages to the North Korean regime.
DOJ takes down Myanmar scam center website spoofing TickMill trading platform
The DOJ has successfully dismantled a fraudulent website spoofing the TickMill trading platform, operated by a scam center in Myanmar. The Scam Center Strike Force tracked the fake website back to the Tai Chang scam compound in Kyaukhat, Myanmar.
New Guidance Released on Microsoft Exchange Server Security Best Practices
This guidance aims to mitigate persistent threats targeting Exchange environments by providing actionable recommendations for hardening server configurations and reducing attack surfaces.
SpaceX disables more than 2,000 Starlink devices used in Myanmar scam compounds
SpaceX has disabled over 2,500 Starlink satellite internet kits that were being used by scam compounds in Myanmar. This action coincided with the Myanmar government’s raid on KK Park, where numerous Starlink devices were confiscated.
Capita Fined £14m After 2023 Breach that Hit 6.6 Million People
Capita has been fined £14 million following a major data breach in 2023 that compromised the personal data of approximately 6.6 million individuals. The breach was attributed to the Black Basta ransomware group.
Spanish Authorities Dismantle Advanced AI Phishing Operation GoogleXcoder
Spanish law enforcement recently dismantled an advanced AI-driven phishing network and arrested the mastermind developer known as “GoogleXcoder.” This operation marks a significant victory in the fight against banking credential theft in Spain.
Salesforce refuses to submit to extortion demands linked to hacking campaigns
Salesforce has confirmed it will not comply with extortion demands following a series of cyberattacks attributed to a threat group linked to Scattered Spider, Lapsus$, and ShinyHunters.
Defend Against Threats with Cyber Fusion
Cyware is the leading provider of cyber fusion solutions that power threat intelligence sharing , end-to-end automation and 360-degree threat response.
Learn More
Trending Tags
