CISA, FBI warn that Iran-linked hackers are expanding target set for water, energy
The agencies said threat groups have disrupted critical infrastructure sites by exploiting vulnerable PLC devices. Source link
Category: CyberSecurityDive
Russia-backed threat actor targets Western organizations in phishing campaign
The threat actor exploited a zero-day flaw in Zimbra to exfiltrate months of emails and other sensitive information. Source link
Microsoft SharePoint under attack via new exploit
Security researchers warn the potential risk could rival the widespread ToolShell campaign of 2025. Source link
OpenAI models escaped containment, hacked major AI application library
Two OpenAI large language models, including one not yet released to the public, broke free of their constraints last week and autonomously hacked into the…
4 ways to secure local developer IDEs and tools without sacrificing velocity
Attention shifts from EDR to Agentic Endpoint Security to close visibility gaps that AI can exploit. Source link
Ransomware victims fail to fix flaws that exposed them
Many organizations still aren’t securing their email or patching vulnerabilities after recovering from attacks, a new report found. Source link
Hackers steal customer data from major hospital software vendor
Hackers breached a major healthcare industry software supplier and stole a large trove of files, the company announced on Monday. The British software firm Craneware,…
How agentic endpoint security shuts down IDE-based supply chain attacks
Attention shifts from EDR to Agentic Endpoint Security to close visibility gaps that AI can exploit. Source link
Ransomware attack forces Coca-Cola to suspend US production at dairy unit
The beverage company is still working to determine the full scope of the breach at its Fairlife business. Source link
Abbott discloses cyberattack on cancer diagnostics business
The cyberattack follows Abbott’s recent $21 billion purchase of Exact Sciences. Abbott did not disclose what kind of information was accessed. Source link
Iran-nexus actors using AI to enhance cyber playbook
A report shows state-linked and hacktivist groups have used ChatGPT and other tools for malware development, phishing and mapping out industrial sites. Source link
Gaps in network security, oversight strategy hamper US’s aviation cybersecurity regulators
A new government audit identified several weaknesses at the two agencies that protect air travel from hackers. Source link