Daily Dark Web has published an interesting interview with Everest Group about the Collins Aerospace cyberattack that affected several airports. In the interview, Everest disputes several claims made by Collins or in the media regarding the incident. Collins’ parent company, RTX, had described the attack as a “ransomware” incident, but Everest asserts there was no…
State-sponsored threat actors from China used artificial intelligence (AI) technology developed by Anthropic to orchestrate automated cyber attacks as part of a “highly sophisticated espionage campaign” in mid-September 2025. “The attackers used AI’s ‘agentic’ capabilities to an unprecedented degree – using AI not just as an advisor, but to execute the cyber attacks themselves,” the…
Jacqueline Sergeant reports: JPMorgan is seeking a temporary restraining order and injunctive relief in federal court against a former advisor, alleging he stole confidential information and is using it to solicit the firm’s clients to join him at his new affiliate, LPL Financial. In its complaint, filed yesterday in the U.S. District Court for the……
Joe Burns reports: Vulnerabilities have been discovered in Honeywell’s smart building middleware that could allow hackers to manipulate physical systems or disable security alarms, cybersecurity firm Nozomi Networks Labs said Wednesday. Researchers at the cybersecurity firm have discovered 13 vulnerabilities affecting the Niagara Framework, which was developed by Tridium, a Honeywell company. […] Tridium’s Niagara Framework…
Tara Deschamps reports: Toys “R” Us Canada has notified customers of a data breach it says may have compromised their personal information. In an email sent to shoppers Thursday morning, the toy store said it learned on July 30 that someone had posted information on the “unindexed Internet” they claimed to have stolen from the……
Joan McClane reports: Hamilton County officials were notified more than 240 days ago about a data breach potentially compromising financial information for more than 14,000 people, according to an internal memo this month. According to the memo from the county attorney’s office, affected parties and the public were supposed to be notified within 60 days, but that…
Adobe has warned of a critical security flaw in its Commerce and Magento Open Source platforms that, if successfully exploited, could allow attackers to take control of customer accounts. The vulnerability, tracked as CVE-2025-54236 (aka SessionReaper), carries a CVSS score of 9.1 out of a maximum of 10.0. It has been described as an improper…
