Cyberattack

Finnish Court Jails Two Ship Crew Members for Baltic Sea Cable Damage

A Finnish court sentences two cargo ship crew members to prison for damaging Baltic Sea telecommunications cables, addressing criminal responsibility and jurisdiction over critical infrastructure beyond territorial waters.

Cyberattacks on Supermarket Refrigeration Systems Spread Across Europe

Cyberattacks disrupted refrigeration systems at more than 100 European stores, destroying food inventories and exposing vulnerabilities in Internet-connected controllers. Authorities recommend isolating affected equipment, while investigators examine possible connections to earlier attacks.

DNS Hijacking Campaign Targets 12 Cryptocurrency Sites as Registrar-Level Compromise Investigated

A coordinated wave of DNS hijackings redirected visitors from 12 cryptocurrency websites to wallet-draining pages, with affected operators reporting registrar-level compromises involving domain services associated with Vercel Domains and Name.com.

Pentagon Investigates Military Base Freezer Failures as Suspected Cyberattack

The Pentagon is investigating unexplained refrigeration failures at six US military commissaries as a possible cyberattack, while French authorities examine attacks on Internet-connected refrigeration systems affecting hundreds of supermarkets.

Iran Escalates Threats Against Gulf Undersea Internet Cables

Iranian officials have outlined plans to target undersea Internet cables in the Strait of Hormuz, while a new propaganda video depicts attacks that could disrupt connectivity across Gulf states.

CISA Unveils 2030 Strategy to Shift U.S. Cyber Defense Toward Proactive Threat Removal

CISA's new 2030 strategy shifts US cyber defense toward proactive threat removal, prioritizing critical infrastructure protection and national resilience, with implementation milestones set for the coming year.

Attackers Hijack Government and School DNS Records to Promote Illegal Gambling

Infoblox researchers uncovered two operations exploiting government and educational DNS infrastructure across three countries to promote illegal gambling, exposing security weaknesses that conventional website monitoring may overlook.

PHP Releases Emergency Security Patches as Researchers Report Exploit Attempts

PHP has released emergency patches for two critical vulnerabilities that could enable unauthenticated remote code execution. Security researchers report attempted exploitation, while authorities urge immediate updates across internet-facing hosting environments.

Canadian Cybersecurity Executive Arrested Amid FBI Investigation Into ShinyHunters

A Canadian ransomware negotiator faces US federal extortion charges amid an FBI investigation into ShinyHunters, following a breach that exposed sensitive employee records through an unpatched third-party system.

UK and Germany Agree to Coordinate Cyber Defense Against Infrastructure Sabotage

The UK and Germany have announced a partnership to counter cyberattacks and infrastructure sabotage through intelligence sharing and coordinated responses, but have yet to specify participating agencies, covered sectors or operational mechanisms.

DNS Hijacks Across Three ccTLDs Linked to 32 Unauthorized HTTPS Certificates

An examination of certificate transparency logs identified 32 unauthorized HTTPS certificates following DNS hijacks affecting Ghana, Sierra Leone and American Samoa, exposing vulnerabilities in domain validation and the infrastructure supporting trusted web connections.

Russian Attack Disrupts Internet and Digital Services Across Kyiv

A Russian attack disrupted Internet access for about 100,000 Kyiv-area households and affected data centers, hosting and court services, exposing disruptions across multiple infrastructure layers while leaving possible shared dependencies unclear.

AWS Says Iran Strikes Caused Permanent Customer Data Loss in Bahrain and UAE

AWS says Iranian strikes caused permanent customer data loss in Bahrain and the UAE, exposing the limits of Availability Zone redundancy when physical destruction affects multiple cloud facilities within a region.

Cyberattackers Are Using AI Across More of the Kill Chain, Anthropic Reports

Anthropic says attackers are increasingly using AI agents to orchestrate cyber operations, automating reconnaissance, exploitation, data theft and malware adaptation while lowering the expertise and resources previously required for sophisticated attacks.

International Operation Disrupts Sality Botnet After More Than Two Decades

Authorities disrupted the decades-old Sality botnet by targeting its decentralized peer-to-peer network and supporting domains, cutting infected machines off from malicious payloads while beginning the longer task of identifying and remediating compromised systems.