Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany
An alleged member of the Qilin ransomware group was arrested in Japan and subsequently extradited to Germany. The suspect, a 28-year-old Russian national, was detained…
Category: SecurityWeek
Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts
Southern Company is notifying roughly 400,000 customers that their utility account information was accessed by an unauthorized third party through its online customer portal. The…
Wikimedia Says Rogue OpenAI Agents Tried to Turn Its Tools Into Proxies
The Wikimedia Foundation, the non-profit that hosts Wikipedia, says it found activity by “rogue” OpenAI agents on its platforms, including what it believes were attempts…
Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System
A cyberattack on Arizona’s court system stole personal information for more than a million people and is believed to have started when a court employee…
Apple to Tighten Full Disk Access Controls in macOS Amid AI Risks
Apple has announced tightened Full Disk Access controls in macOS in light of the risks posed by continuously evolving AI agents. Apple introduced Full Disk…
FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware
A Venezuelan national believed to be a leader of Tren de Aragua (TdA)’s ATM jackpotting activities and the developer of the infamous Ploutus ATM malware…
FBI Blames Contractor’s Missed Patch for ShinyHunters Breach
The FBI has removed an Accenture contractor over a data breach that exposed personal information of thousands of bureau employees, Reuters reported on Tuesday, citing…
8.8 Million Impacted by Data Breach at Denmark’s Central Person Register
Denmark’s Central Person Register (CPR) is notifying roughly 8.8 million people that their personal information was stolen in a data breach. Established in 1968, CPR…
Exploitation Hits Rejetto HFS Vulnerability Discovered by AI
Threat actors are exploiting a critical vulnerability in Rejetto HTTP File Server (HFS) to bypass authentication and gain remote code execution (RCE), VulnCheck warns. Tracked…
250,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms
Healthcare organizations Clover Health Investments and AngMar Management Services are notifying more than 250,000 people that their information was stolen in separate data breaches. Jersey…
Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws
A recently discovered Linux backdoor turns infected systems into proxies that use the Session Traversal Utilities for NAT (STUN) protocol and contains exploits for self-propagation,…
Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports
Google has temporarily closed its Open Source Software Vulnerability Reward Program (OSS VRP) to product vulnerability submissions, saying a growing number of automated reports, most…