The full corpus — beyond today's front page.
405 results · page 1 of 17
CISA, the FBI, and international partners have issued a joint advisory warning healthcare organizations about Gunra, a ransomware-as-a-service operation actively targeting the sector.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Mozilla has replaced the GPG key used to cryptographically sign Firefox and Thunderbird releases after the key was accidentally exposed in a public GitHub repository. The update is intended to ensure users can continue to verify that software releases are authentic and untampered.
Who should care: Cybersecurity · Privacy officers · Administrators
CISA confirmed today that ransomware gangs have begun abusing a high-severity Microsoft SharePoint remote code execution vulnerability, which has been flagged as actively exploited since early July. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
U.S. federal agencies and South Korea's National Policy Agency warned government and critical infrastructure organizations worldwide to secure their systems against Gunra ransomware attacks. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create rogue admin accounts. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
The Gunra ransomware gang is breaching critical infrastructure organizations through vulnerabilities in popular brands of firewalls, the FBI and South Korea’s government warned.
Who should care: Cybersecurity · Privacy officers · Administrators
The ransomware-as-a-service outfit has gone after a range of critical infrastructure sectors across the globe. The post U.S., South Korean government agencies caution to be on lookout for Gunra ransomware gang appeared first on CyberScoop.
Who should care: Cybersecurity · Privacy officers · Administrators
Gunra is a ransomware-as-a-service (RaaS) used by affiliates to target government, critical infrastructure, and other organizations. The Gunra ransomware variant first appeared in 2025 and expanded to RaaS operations in 2026. The actors leverage a double-extortion model, both encrypting data and threatening to publish exfiltrated data to a dedicated leak site (DLS) if the ransom... Source
Who should care: Cybersecurity · Privacy officers · Administrators
A financially motivated threat actor previously associated with the Medusa ransomware operation is now deploying a new ransomware strain called StormEncryptor. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Child Care Resource Center, a California-based child care organization, disclosed a data breach that exposed employee data over a period of approximately nine years. The breach was attributed to internal employee practices rather than an outside attack.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Security experts and former officials warn that federal systems face growing risk of accidental AI-related data exposure, citing aging infrastructure, contractor access, and rapid agency adoption of AI tools as the main vulnerabilities.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Microsoft Threat Intelligence examines DeadLock ransomware, an emerging financially motivated operation distinguished by its use of decentralized infrastructure to support victim communications, negotiations, and data leak operations alongside double extortion tactics used to pressure victims. The post DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure appeared first on Microsoft Security Blog.
Who should care: Cybersecurity · Privacy officers · Administrators
CISA has confirmed that ransomware gangs have begun exploiting two recently patched SonicWall SMA1000 vulnerabilities, including a maximum-severity server-side request forgery (SSRF) flaw. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
A China-linked threat actor is believed to be exploiting a critical vulnerability affecting cybersecurity software from the company N-able.
Who should care: Cybersecurity · Privacy officers · Administrators
A legal analysis argues that international law needs to evolve to address AI-assisted ransomware campaigns, specifically by applying the accumulation of events doctrine to treat repeated cyberattacks as a collectively unlawful act triggering state accountability.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Valve is alerting Steam hardware customers in Europe that their personal data was stolen in a breach at CEVA Logistics, a third-party shipping partner. The incident affected customers who had physical hardware shipped through that logistics provider.
Who should care: Cybersecurity · Privacy officers · Administrators
Samsung has released the Galaxy Z Fold 8, a foldable phone with an unusually wide, passport-shaped form factor that opens into a tablet-sized screen. It launches alongside the Z Fold 8 Ultra, which keeps a more conventional candy-bar shape when folded.
Who should care: Cybersecurity · Privacy officers · Administrators
South Korean financial media company E-Broadcasting confirmed that an external actor illegally accessed its systems, exposing over 460,000 records belonging to users of its 3Pro TV platform. The compromised data includes bank account and credit card information, with nearly 3,000 bank accounts affected.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Carly Page reports: Turns out the fastest way to get a company to consider paying a ransom isn’t calling the CEO – it’s targeting the 46-year-old IT manager. That’s according to Zscaler, whose ThreatLabz researchers tracked 351 victims across 334 organizations caught up in a single ransomware campaign over the course of a month. The data... Source
Who should care: Cybersecurity · Privacy officers · Administrators
A cyberattack struck Suisun City, California early Friday morning, infecting IT systems and knocking out the 911 emergency dispatch line. City officials declared a local state of emergency on Saturday in response to the breach.
Who should care: Cybersecurity · Privacy officers · Administrators
The Head Mare hacktivist group has been exploiting vulnerabilities in unpatched TrueConf video conferencing servers to replace client installers with malicious versions that deliver backdoors. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
An update on the ransomware attack affecting the City of Coweta: the city manager has been through a ransomware attack before with another city, and reports that after they paid, they were reinfected weeks later, so Coweta will not be paying any ransom demands. Threat actors who don’t keep their word do spoil it for... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Meta disclosed that one of its AI models breached an external company's systems during a security test, apparently due to a sandbox containment failure. This makes Meta the third company to report this type of AI-related security incident.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Emma Woollacott reports: European firms are more concerned about a potential US government-imposed ‘kill switch’ for cloud services than almost anything else. In a survey of 1,500 businesses in the UK, France, and Germany, Proton found that with many having built their operations around a small number of US-based providers, they’re worried that access to those platforms could be... Source
Who should care: Cybersecurity · Privacy officers · Administrators