Worldleaks listed L3Harris Technologies.
Worldleaks listed L3Harris Technologies.
$34 million in crypto payments traced to Embargo #Ransomware group
TRM has traced about $34.2 million in illicit flows since April 2024, with U.S. hospitals and manufacturers among the notable victims targeted by a reshuffled ransomware group.
https://www.theblock.co/post/366299/embargo-ransomware-group-crypto-payments
Ciberataques disparam e o ransomware está mais perigoso que nunca https://tugatech.com.pt/t70470-ciberataques-disparam-e-o-ransomware-esta-mais-perigoso-que-nunca
Hervorragende Nachrichten für alle #Malware-Hersteller und böse #Hacker: wenn die #KI schreibenden Zugriff auf solche Dinge erhält, muss man nicht mehr die mittlerweile besser geschulten Menschen für einen erfolgreichen #Angriff überlisten, es reicht, wenn man die nach wie vor sehr naïve KI übertölpelt.
Ab sofort werden #Ransomware, #Phishing, #Firmenspionage, #Datenstehlen potenziell zum Massensport!
#GeminiLive erhält Zugriff auf #Kalender, #Notizen, #Aufgaben und #Maps
https://www.heise.de/news/Gemini-Live-erhaelt-Zugriff-auf-Kalender-Notizen-Aufgaben-und-Maps-10517118.html?wt_mc=rss.red.ho.ho.atom.beitrag.beitrag
Yes24 hit by a second ransomware attack in two months
Yes24, South Korea's major online bookstore and ticketing platform, suffered its second ransomware attack in two months on August 11, 2025, forcing a complete shutdown of all digital services including website, mobile app, and ticketing systems during K-pop concert sales.
****
#cybersecurity #infosec #incident #ransomware
https://beyondmachines.net/event_details/yes24-hit-by-a-second-ransomware-attack-in-two-months-z-9-2-p-d/gD2P6Ple2L
Jamco Aerospace Inc., a commercial and military aircraft industrial parts supplier for the US Navy, Boeing, and Northrop Grumman, and others, is claimed by the Play ransomware group.
#cybersecurity #ransomware #Boeing #cyberattack
https://cnews.link/boeing-us-navy-supplier-jamco-aerospace-ransomware-attack-play-1/
Mashable: Hackers found a way around Microsoft Defender to install ransomware on PCs, report says. “Windows users should think about reinforcing their antivirus software. And while Microsoft Defender should provide a line of defense against ransomware, a new report claims that hackers have found a way to get around the ransomware tool to infect PCs with ransomware.”
WinRAR vulnerability exploited in malware campaigns
WinRAR patched a vulnerability (CVE-2025-8088) that was actively exploited by Russian-linked cybercriminals through phishing emails containing malicious RAR attachments. The flaw allows attackers to achieve remote code execution by writing files to arbitrary system locations including Windows Startup folders. All WinRAR versions prior to 7.13 are affected.
**If you use WinRAR, update it to version 7.13 or later from the official WinRAR, because hackers are sending malicious archive attachments and if you open them you are hacked. Also, be very careful with any RAR file attachments in emails, especially unexpected ones.**
#cybersecurity #infosec #advisory #ransomware
https://beyondmachines.net/event_details/winrar-vulnerability-exploited-in-malware-campaigns-w-6-k-x-v/gD2P6Ple2L
Hackers found a way around Microsoft Defender to install #Ransomware on PCs, report says
https://mashable.com/article/microsoft-defender-hack-akira-ransomware-pc-windows
Falha crítica no WinRAR usada em ataques para instalar malware. Saiba como se proteger https://tugatech.com.pt/t70386-falha-critica-no-winrar-usada-em-ataques-para-instalar-malware-saiba-como-se-proteger
Pakistan Petroleum Limited hit by ransomware attack
Pakistan Petroleum Limited (PPL), one of Pakistan's largest state-owned energy companies, confirmed a ransomware attack detected on August 6, 2025. The attack is claimed by the "Blue Locker" gang, which allegedly encrypted servers, deleted backups, and stole sensitive data.
****
#cybersecurity #infosec #incident #ransomware
https://beyondmachines.net/event_details/pakistan-petroleum-limited-hit-by-ransomware-attack-w-8-q-d-r/gD2P6Ple2L
New #EDR killer tool used by eight different #ransomware groups
https://www.europesays.com/2312416/ Airline Data Breach Warning — Air France And KLM Confirm Cyber Attack #AirFrance #Airline #Airlines #cyberattack #Data #DataBreach #KLM #ransomware #ShinyHunters #Transport #travel
New Zealand accounting firm TAS NZ Bay Limited hit by ransomware attack, data breach
TAS NZ Bay Limited, an Auckland-based accounting firm, was targeted by the PEAR ransomware group which stole 365 GB of sensitive data. The attack exposed highly sensitive business and client data including bank statements, contracts, and personally identifiable information. Sample data was published on the group's dark web leak site in July 2025.
****
#cybersecurity #infosec #incident #ransomware
https://beyondmachines.net/event_details/new-zealand-accounting-firm-tas-nz-bay-limited-hit-by-ransomware-attack-data-breach-c-4-w-a-f/gD2P6Ple2L
¯\(°_o)/¯
「 The company echoed the advice of several security firms, telling customers to disable SonicWall VPN services that use the SSL protocol 」
https://therecord.media/sonicwall-possible-zero-day-gen-7-firewalls-ssl-vpn
Akira #Ransomware abuses CPU tuning tool to disable Microsoft Defender
The abused driver is 'rwdrv.sys' (used by ThrottleStop), which the threat actors register as a service to gain kernel-level access.
Picus: A Deep Dive into the Ryuk Ransomware Attack Chain and Its Impact https://www.picussecurity.com/resource/blog/ryuk-ransomware-attack-chain-impact #cybersecurity #infosec #ransomware