Coverage
Data Breaches
482 articles on breaches and ransomware
Advertisement
Storm-1175: High-Velocity Medusa Ransomware Campaigns
Runtime Rebel reports on Storm-1175's rapid Medusa ransomware campaigns, exploiting N-day and zero-day vulnerabilities for financial gain.
FBI Reports $21 Billion Cybercrime Loss in US: Key Attack Vectors
The FBI's IC3 report reveals Americans lost a record $21 billion to cybercrime, primarily due to investment scams, BEC, tech support fraud, and data breaches.
Grafana AI Assistant Flaw Exposes User Data — Immediate Patch Required
Grafana patched an AI vulnerability where malicious instructions on web pages could trick its AI assistant into leaking sensitive user data. Immediate action needed.
Snowflake Data Theft Via SaaS Integrator Breach: Mitigation
Snowflake customers face data theft due to compromised third-party SaaS integrators and stolen authentication tokens. Learn to secure integrations and detect compromise.
Medusa Ransomware: Rapid Vulnerability Weaponization and Analysis
An analysis of Medusa ransomware's rapid exploitation of vulnerabilities and Zero-Day bugs to exfiltrate and encrypt data within days of initial access.
GPUBreach Attack: Exploiting GPU Rowhammer for Root Shell Access
Research reveals GPUBreach, a technique using GPU-based Rowhammer to achieve root shell access and privilege escalation on shared memory systems.
Managing Recurring Credential Incident Risks in Enterprise Environments
Analyze the financial and operational impact of recurring credential incidents, beyond the $4.4 million average breach cost cited in recent industry reports.
Wynn Resorts Breach: 21,000 Employees Impacted by ShinyHunters
Casino operator Wynn Resorts confirms a data breach affecting 21,000 employees following an extortion attempt by the ShinyHunters threat group.
Storm-1175: China-Linked Zero-Day Exploits Deploy Medusa Ransomware
China-linked actor Storm-1175 is weaponizing zero-day and N-day vulnerabilities in perimeter assets to execute high-velocity Medusa ransomware attacks.
GPUBreach Attack: Exploiting GDDR6 via GPU Rowhammer Bit-Flips
Researchers discover GPUBreach, a Rowhammer-style attack on GDDR6 memory that enables privilege escalation and full system takeover on modern GPUs.
German Authorities Identify GandCrab and REvil Ransomware Leaders
German and US authorities identify Russian nationals behind GandCrab and REvil ransomware operations, marking a major step in ransomware attribution.
Qilin and Warlock Ransomware Bypass 300+ EDR Tools via BYOVD
Threat actors Qilin and Warlock use Bring Your Own Vulnerable Driver (BYOVD) tactics and msimg32.dll to disable security software on compromised endpoints.
BKA Unmasks REvil Leadership Behind 130 German Ransomware Attacks
Germany's BKA unmasks the leadership of the REvil (Sodinokibi) ransomware group, including the representative UNKN, following a major threat intel investigation.
Germany Doxes UNKN: Identity of REvil and GandCrab Leader Revealed
German authorities identify Daniil Maksimovich Shchukin as UNKN, the lead operator behind the notorious GandCrab and REvil ransomware operations.
European Commission AWS Breach: Trivy Supply Chain Attack Analysis
The European Commission confirms a 300GB data breach in its AWS environment linked to a Trivy supply chain attack. Learn about the impact and mitigations.
Hims & Hers Data Breach via Zendesk: Support Ticket Compromise
Telehealth provider Hims & Hers discloses a data breach impacting customer support tickets, stemming from a compromise of their Zendesk platform.
TeamPCP Supply Chain Attacks Escalate Amidst Hacker Infighting
Runtime Rebel details how TeamPCP's supply chain attacks are leading to breaches, with ShinyHunters and Lapsus$ adding to the chaos.
Recent Cyber Threats: Data Leaks, Android Malware, Critical Infra Ransomware
Analysis of a ChatGPT data leak, the emergence of an Android rootkit, and a ransomware attack impacting a water facility. Essential insights for defenders.
Multi-Extortion Ransomware Tactics: A Deeper Dive
Analyze the evolution of multi-extortion ransomware, its reliance on data leaks, and strategies for mitigating the impact of exfiltrated data.
Insider Threat: Former Engineer Locks 254 Windows Servers in Extortion
A former infrastructure engineer pleaded guilty to a $750,000 extortion plot after locking administrators out of 254 Windows servers and deleting backups.
Drift Protocol Hacked for $285M via Durable Nonce Attack
Solana-based DEX Drift Protocol lost $285 million due to a social engineering and durable nonce attack, leading to Security Council takeover.
TeamPCP Breach of European Commission Affects 30 EU Entities
CERT-EU attributes a major cloud security breach at the European Commission to threat group TeamPCP, impacting data across 30 European Union organizations.
Hasbro Confirms Unauthorized Access Incident — Remediation Underway
Hasbro disclosed unauthorized access to its systems, activating business continuity plans and taking systems offline. Remediation could take weeks.
BRICKSTORM Malware: Hardening vSphere & VCSA Against Advanced Threats
Defend VMware vSphere and VCSA against BRICKSTORM malware. Learn hardening strategies, identity management, Zero Trust networking, and advanced logging to thwart…