Cyberattack

Cyberattack / News Briefs

Canadian Cybersecurity Executive Arrested Amid FBI Investigation Into ShinyHunters

A Canadian ransomware negotiator faces US federal extortion charges amid an FBI investigation into ShinyHunters, following a breach that exposed sensitive employee records through an unpatched third-party system.

UK and Germany Agree to Coordinate Cyber Defense Against Infrastructure Sabotage

The UK and Germany have announced a partnership to counter cyberattacks and infrastructure sabotage through intelligence sharing and coordinated responses, but have yet to specify participating agencies, covered sectors or operational mechanisms.

DNS Hijacks Across Three ccTLDs Linked to 32 Unauthorized HTTPS Certificates

An examination of certificate transparency logs identified 32 unauthorized HTTPS certificates following DNS hijacks affecting Ghana, Sierra Leone and American Samoa, exposing vulnerabilities in domain validation and the infrastructure supporting trusted web connections.

Russian Attack Disrupts Internet and Digital Services Across Kyiv

A Russian attack disrupted Internet access for about 100,000 Kyiv-area households and affected data centers, hosting and court services, exposing disruptions across multiple infrastructure layers while leaving possible shared dependencies unclear.

AWS Says Iran Strikes Caused Permanent Customer Data Loss in Bahrain and UAE

AWS says Iranian strikes caused permanent customer data loss in Bahrain and the UAE, exposing the limits of Availability Zone redundancy when physical destruction affects multiple cloud facilities within a region.

Cyberattackers Are Using AI Across More of the Kill Chain, Anthropic Reports

Anthropic says attackers are increasingly using AI agents to orchestrate cyber operations, automating reconnaissance, exploitation, data theft and malware adaptation while lowering the expertise and resources previously required for sophisticated attacks.

International Operation Disrupts Sality Botnet After More Than Two Decades

Authorities disrupted the decades-old Sality botnet by targeting its decentralized peer-to-peer network and supporting domains, cutting infected machines off from malicious payloads while beginning the longer task of identifying and remediating compromised systems.

FulcrumSec Claims 86 GB Data Theft in Manchester Airports Breach

FulcrumSec claims it stole 86 GB from Manchester Airports Group, including detailed booking and travel data, while the operator has confirmed a breach but not the group's account of its scale or method.

More Than 100 Organizations Call for Global Surge in AI-Assisted Cyber Defense

More than 100 organizations are calling for wider use of AI in cyber defense, urging governments, technology providers and AI developers to expand funding, tools, model access and practical support for under-resourced critical infrastructure operators.

UK Warns of Rising Cyberattacks on Exposed Industrial Systems

Britain's cyber agency warns that attackers are increasingly targeting internet-exposed industrial systems, routers and other edge devices, with some intrusions causing real-world disruption and highlighting the growing risks of poorly secured operational technology worldwide.

Trump Enlists Private Firms for Offensive Cyber Operations

The Trump administration will allow vetted American companies to conduct surveillance and offensive cyber operations against foreign criminal groups, extending private-sector capabilities into cybercrime enforcement while keeping missions subject to federal approval, oversight and legal safeguards.

ZEGO’s Cyberattack Pushes Bavarian Textile Firm Into Insolvency

A cyberattack forced Bavarian textile specialist ZEGO into insolvency after a six-week production shutdown. The company is pursuing restructuring efforts to preserve jobs, customer relationships and its future amid growing cyber risks.

FBI Warns of Russian Cyber Campaign Targeting Vulnerable Routers

The FBI and international partners warn that Russia's FSB Center 16 is exploiting vulnerable routers worldwide, highlighting persistent weaknesses in network security and urging organizations to adopt stronger protections to safeguard critical infrastructure against intrusion.

AI-Driven Cyber Threats Are Growing, Google Warns

Google says cybercriminals and state-backed hackers are rapidly adopting generative AI to automate attacks, disguise malware, exploit vulnerabilities and spread disinformation, marking a shift from experimental use to industrial-scale cyber operations across the global threat landscape.

Iran-Linked Cyberattacks Expose Fragility of America’s Industrial Nerve System

Iran-linked hackers infiltrated US industrial control systems, disrupting energy and water infrastructure. The attacks highlight systemic vulnerabilities in internet-connected devices and signal an enduring cyber threat despite easing geopolitical tensions.