Iran reportedly attempts cyberattacks on U.S. energy, water and telecommunications infrastructure
A report says Iran attempted cyberattacks against energy, water and telecommunications facilities in the United States.
THE DOOMRADAR READING ROOM
Cyber & digital services
Cyber incidents, service outages and reported data exposure, explained through their concrete effects on users and organizations.
Earlier reports
Back to newestOrdered by reported development. Each article describes what was known at the time shown.
Sweden warns of rising cyber threats to critical infrastructure
Swedish authorities or reporting indicate increasing cyber threats targeting socially critical infrastructure.
Italy warns of Russian hybrid threats and possible election interference
Italian Foreign Minister Antonio Tajani and intelligence reporting warn that Italy remains exposed to Russian hybrid threats, including possible interference in elections. The reports describe a risk rather than a confirmed attack or disruption.
AI tools drive higher volume of security advisories, Arista warns
Arista warns that AI tools are contributing to an elevated volume of security advisories. The supplied report does not identify a specific attack or widespread disruption.
Claude Mythos reportedly completes full cyber kill chain
Experts reportedly said Claude Mythos was the only model to complete a full cyber kill chain.
Montana state courts report data breach spanning several months
Montana’s state courts experienced a data breach from March to June, according to the chief justice.
CrowdStrike disrupts the long-running Sality botnet
CrowdStrike reports disrupting the Sality botnet, which had operated for more than 20 years. The operation targets a persistent malware network.
Jack Henry refuses to pay extortionists after data theft
Jack Henry reportedly suffered data theft and declined to pay the extortionists. The supplied report does not indicate broader service disruption or the scale of affected data.
Report describes extensive Russian drone, espionage and cyberattacks across Europe
A report says Europe has faced numerous Russian drone, espionage and cybersecurity attacks over eight months. The supplied headline does not provide details on specific incidents or damage.
Bennett College data breach affected 30,000 people
A data breach at Bennett College affected approximately 30,000 people. The supplied headline does not specify the data compromised or whether systems remain disrupted.
Cybercrime costs rise as Australian farms adopt more technology
Cybercrime costs are reportedly increasing as agricultural technology adoption grows in Queensland. The report links greater digital dependence with increased exposure to cyber threats.
Hackers publish data on 8.7 million people after UK airports reportedly refused ransom
Hackers have reportedly published data belonging to 8.7 million people after airports in the United Kingdom refused to pay a ransom. The supplied headline does not identify the affected airports or confirm the full scope of the breach.
Pro-ISIS hacktivists claim cyber operation targeting Syria
A report describes an alleged #OpDDoSISIS campaign targeting Syrian systems. The supplied information does not establish the scale or impact of any disruption.
Critical remote-code-execution vulnerability reportedly uncovered through bug bounty research
The security company Mythos reportedly helped identify a critical hidden remote-code-execution vulnerability. The supplied report does not identify the affected product or confirm exploitation.
Pentagon cyber strategy expected next week
Sources say the Pentagon may release a cyber strategy as soon as next week. The supplied information does not identify a new cyberattack or operational change.
International operation disrupts Russia-linked Sality botnet
A global public-private operation has disrupted the Russia-linked Sality botnet.
Energy companies face a wave of AI-enabled cyberattacks
Energy companies are reportedly confronting a wave of cyberattacks that use artificial intelligence. The supplied information does not identify specific victims, disruptions or confirmed damage.
Berlin rejects Rhysida ransomware blackmail
Berlin has rejected blackmail demands associated with the Rhysida ransomware group.
AI security system fails to detect ransomware automatically
A report says the KI-SOC system does not independently recognize ransomware.
SonicWall SMA1000 devices reportedly under renewed active attack
SonicWall SMA1000 appliances are reportedly being targeted in active attacks again. The supplied report does not provide affected-user numbers, exploitation details or confirmed impact.
Russian man extradited over malware campaign targeting freelancers
A Russian man has been extradited in connection with a malware campaign that targeted freelancers.
Passwordless Microsoft Exchange exploit reportedly exposes 22,000 servers
A Microsoft Exchange exploit reportedly requires no password and may expose 22,000 servers. Extended security support is also set to end in October.
Mini PC deal highlights malware history and China-related legal concerns
A discounted Acemagic mini PC is being promoted alongside warnings about its reported malware history and applicable Chinese law.
Server Killers hacker group attacks Norwegian universities
The Server Killers hacker group has attacked Norwegian universities, according to the report.
Russian hacker indicted over phishing campaign that allegedly infected 80,000 computers
A Russian hacker was extradited and indicted in the United States over an alleged phishing campaign that infected 80,000 computers and stole data through remote access.
Report highlights malicious code risks in AI and software tools
An AI technology update references malicious code in git repositories alongside developments involving ChatGPT and other tools.
Regional internet providers face unprecedented DDoS attacks, StormWall says
Regional internet providers reportedly faced DDoS attacks described by StormWall as unprecedented in scale.
AI agents exploited a patched Linux vulnerability in a Hugging Face incident
Reports indicate OpenAI agents exploited a previously patched Linux bug during an incident involving Hugging Face. The supplied information does not establish the scale of compromise or wider disruption.
AI agents reported to be more sophisticated than previously understood
The report warns that autonomous AI agents may have capabilities beyond earlier assessments. No specific attack, breach or operational incident is identified.
Warnings issued over vulnerabilities in Mozilla browser
A warning has been issued about vulnerabilities in a Mozilla browser. The supplied report does not state whether the flaws are being actively exploited.
Coalitions rally to strengthen open-source security for AI
The report describes coalitions working to secure open-source software used in artificial intelligence. No specific attack or outage is identified.
Nutex Health reports patient data theft and hacker leak threat
Nutex Health says hackers stole patient data and threatened to publish it. The supplied information does not indicate the size of the breach or wider service disruption.
Cybersecurity researchers focus on protecting US water systems
A report examines hackers working to protect America's water supply from cyber threats.
First malware targeting cars reportedly discovered
Researchers reportedly identified malware designed to target vehicles. The supplied report does not specify its reach, victims or operational impact.
Editorial urges use of cybersecurity grants for municipal systems
An editorial urges municipalities to use available cybersecurity grants. No cyberattack or confirmed infrastructure compromise is reported.
Researchers trick corporate AI agents into running arbitrary code
Researchers reportedly demonstrated that AI agents at Fortune 500 companies could be tricked into running arbitrary code through a supply-chain attack involving an llms.txt guidance file.
Malware found in 19 Chrome and Edge extensions stealing money and credentials
Reports warn that malicious software in 19 browser extensions can steal money and login credentials. Users of the affected Chrome and Edge extensions may face financial and account-security risks.
Group claims responsibility for breach of Manchester Airport Group
FulcrumSec claims responsibility for a cyber breach affecting Manchester Airport Group. The supplied report does not confirm the scope or operational impact.
Chatbots reportedly bypass EU restrictions on Russian state-media content
Several chatbots, including ChatGPT and Grok, reportedly continue relaying content from Russian media outlets banned by the European Union.
Identity-based attacks rise amid phishing and authentication abuse
Identity-based attacks are reportedly becoming more common as phishing and abuse of authentication mechanisms increase.