DragonForce actors target SimpleHelp vulnerabilities to attack MSP, customers
Ransomware actor exploited RMM to access multiple organizations; Sophos EDR blocked encryption on customer’s network
Similar Posts
Louis Vuitton Korea suffers cyberattack as customer data leaked
Bys s
Bloomberg reports: Louis Vuitton Korea suffered a cyberattack that compromised some customer data, the second time in recent months that hackers have targeted the world’s largest luxury group. The Korean unit of LVMH’s flagship brand said an “unauthorised third party” accessed its systems on June 8 and some customer information was leaked. No financial data…
Meta Resumes E.U. AI Training Using Public User Data After Regulator Approval
Bys s
Meta has announced that it will begin to train its artificial intelligence (AI) models using public data shared by adults across its platforms in the European Union, nearly a year after it paused its efforts due to data protection concerns from Irish regulators. “This training will better support millions of people and businesses in Europe,…
Adobe Releases Patch Fixing 254 Vulnerabilities, Closing High-Severity Security Gaps
Bys s
Adobe on Tuesday pushed security updates to address a total of 254 security flaws impacting its software products, a majority of which affect Experience Manager (AEM). Of the 254 flaws, 225 reside in AEM, impacting AEM Cloud Service (CS) as well as all versions prior to and including 6.5.22. The issues have been resolved in…
South Asian Ministries Hit by SideWinder APT Using Old Office Flaws and Custom Malware
Bys s
High-level government institutions in Sri Lanka, Bangladesh, and Pakistan have emerged as the target of a new campaign orchestrated by a threat actor known as SideWinder. “The attackers used spear phishing emails paired with geofenced payloads to ensure that only victims in specific countries received the malicious content,” Acronis researchers Santiago Pontiroli, Jozsef Gegeny, and…
Nova Scotia Power Data Breach Exposed Information of 280,000 Customers
Bys s
As previously reported, Nova Scotia Power confirmed that it had been the victim of a ransomware attack in March but had not paid the ransom demands. They declined to publicly name the threat group or individual responsible. Their most recent incident update of June 25 provides some additional information for customers. On July 3, Nova…
Business Associate breaches account for the largest percentage of breached patient records
Bys s
As time permits, DataBreaches will take a deeper look at some of the findings reported in the Bluesight 2025 Breach Barometer. This post concerns business associates. In September 2016, DataBreaches.net published its first cumulative attempt to look at business associate breaches in the healthcare sector. At the time, HHS did not have any way to…