Known vulnerability exploited in attack on Romania's ANCPI
An attack on Romania's National Agency for Cadastre and Land Registration exploited a vulnerability known since 2021. The chronology was presented to Parliament.
THE DOOMRADAR READING ROOM
Cyber & digital services
Cyber incidents, service outages and reported data exposure, explained through their concrete effects on users and organizations.
Earlier reports
Back to newestOrdered by reported development. Each article describes what was known at the time shown.
Check Point Reports 22% Rise in Cyberattacks and GenAI Risks
Check Point reports a 22% increase in cyberattacks and highlights risks associated with generative AI. The supplied headline does not specify the affected sectors or geography.
Cisco firewall bugs reportedly exploited by Sandworm and Qilin
Initial reports indicate that vulnerabilities in Cisco firewalls have allowed the Sandworm and Qilin threat groups to gain access. This materially changes the event from a cleared issue to a potentially active exploitation threat.
Fake GTA 6 releases are spreading malware scams
Malware campaigns are using fake Grand Theft Auto 6 downloads and related scams ahead of the game's release date.
Ukraine's electronic-warfare production is expanding
A report says production of electronic-warfare equipment in Ukraine is reaching a new level.
Spirit Airlines faces potential sale of customer data after bankruptcy
Bankrupt Spirit Airlines faces a potential sale of its customer data to Google. The proposed transaction raises concerns about the transfer and privacy of passenger information.
Brazilian malware targets CNAB files and Windows certificates
A newly identified Brazilian malware targets CNAB files and Windows certificates, with artificial intelligence reportedly helping select valuable targets.
Cyberattack in Berlin allegedly exposes 1.4 million files on the dark web
A report claims that a cyberattack in Berlin led to 1.4 million files being posted on the dark web.
Suspect in alleged drone-factory plot reportedly contacted Russian fighter
A suspect accused of plotting to establish a drone factory was reportedly in contact with a Russian fighter. The supplied information does not establish that an attack or factory was successfully carried out.
Ransomware cases in Japan reach a record high in the first half of the year
Japan recorded its highest number of ransomware cases in the first half of the year. The supplied information does not specify the affected organizations or operational damage.
JBS confirms $11 million ransom payment after cyberattack
Meat producer JBS confirmed paying an $11 million ransom following a recent cyberattack. The supplied information does not describe the current operational impact.
Security flaws found in electronic health-record clients
Security vulnerabilities have been identified in electronic health-record client software, with implementations described as having blind spots.
EU cyber-reporting rules begin for manufacturers
New EU cyber-reporting requirements for manufacturers are scheduled to start on September 11. The rules will require covered companies to report specified cybersecurity incidents.
Experts warn that more powerful AI could intensify cyber risks after OpenAI-Hugging Face hack
Experts reportedly describe the OpenAI-Hugging Face hack as an early warning that increasingly capable AI systems could create more powerful cyber threats. The supplied information gives no details on the breach's scale or impact.
Qtonic Quantum publishes post-quantum security research and buyer toolkit
Qtonic Quantum has published research and guidance for enterprises on post-quantum security. The supplied information does not identify a new attack, breach or operational disruption.
Ukrainian water tender linked to alleged cyberattack and legal disputes
A report describes a Ukrainian water-supply tender in which water reportedly did not flow and alleges a cyberattack that did not occur, alongside three pending court cases.
Software industry adopts cryptographically signed artifacts for supply-chain security
Software companies are shifting from traditional code reviews toward cryptographically signed software artifacts. The change aims to strengthen verification across digital supply chains.
MantaxOtax Android malware combines ransomware and spyware
MantaxOtax is an Android malware threat combining ransomware capabilities with spyware. The supplied report does not provide details on its distribution, victims or scale.
GuardBreaker targets AI-assisted malware analysis
GuardBreaker is described as a technique for disrupting or misleading AI-assisted malware-analysis systems through a code comment. The supplied information does not establish the scale or use of any associated attack.
Cyber incidents continue to affect small and medium-sized businesses
Kaspersky reports on how small and medium-sized enterprises were affected by cyber incidents over the past year.
Hackers steal 4,000 BTC before returning 85% in white-hat settlement
Hackers reportedly stole 4,000 Bitcoin and later returned 85% under a white-hat agreement.
Press Gazette launches initiative to detect AI-generated fakes
Press Gazette has launched Made by Humans, an initiative intended to stop AI-generated fabrications before publication. The report concerns media integrity rather than a specific cyberattack.
Report says NATO thwarted alleged Russian operation targeting global internet infrastructure
A report claims NATO stopped a Russian operation against the infrastructure underpinning the global internet. No specific target, damage or operational details are supplied.
Bitcoin wallet manufacturers face attack
The report says Bitcoin wallet manufacturers are under attack, but provides no further details about the nature or scale of the threat.
Finite State customers prepare for CRA reporting deadline
Finite State customers are preparing for the Cyber Resilience Act’s September 11 reporting deadline.
Researchers reconstruct Stuxnet source code 16 years later
Researchers have reconstructed the source code of Stuxnet, the malware associated with attacks on industrial control systems. The report describes a research development, not a new attack or active disruption.
Windows 11 users urged to take action
Windows 11 users are being urged to act in response to a reported security issue or required update. The supplied report does not specify the vulnerability or its scope.
Concerns grow over alleged Russian hybrid attacks in Bulgaria
Concerns are increasing about alleged Russian hybrid attacks in Bulgaria, including scrutiny from US observers.
Anthropic reports another cyberattack involving its own AI model
Anthropic says its AI model was involved in another hacker attack. The supplied headline does not provide details on the targets, scale or consequences.
DOJ probes Nvidia licensing deal with AI startup Groq
The U.S. Department of Justice is reportedly examining Nvidia's licensing agreement with AI startup Groq. The probe concerns a major technology transaction involving advanced AI capabilities.
Banking trojan reportedly uses Brazilian government servers and Google Chrome
A banking trojan has reportedly been discovered using government servers and Google Chrome in Brazil. The supplied headline does not provide details on the scale of infection or financial losses.
AI deepfakes and fake fighters reshape Mali’s information war
AI-generated deepfakes and fabricated fighters are influencing the information conflict in Mali. The reports describe an information-warfare trend rather than a specific cyberattack.
Fake security emails target Trezor and BitBox cryptocurrency users
Fraudulent security emails are targeting users of Trezor and BitBox hardware wallets. The reports indicate a phishing threat aimed at cryptocurrency holders.
Romania's national cybersecurity directorate website reportedly hacked
Hackers reportedly attacked the website of Romania's National Directorate for Cyber Security.
Suspect pleads guilty in $240 million bitcoin heist
A 22-year-old has pleaded guilty in a bitcoin theft valued at $240 million, described as one of the largest heists in U.S. history. The report concerns a completed criminal case rather than an ongoing attack.
Liquid Network reportedly suffers $340 million theft
A reported theft involving approximately $340 million from the Liquid Network resulted in some Bitcoin being returned.
US senators seek action against India-based firms over alleged data theft
US senators have urged action against three India-based firms over alleged data theft. The supplied report does not specify any government action or confirmed scope of the alleged theft.
Ransomware and generative-AI data exposure increase enterprise cyber risk
A report says ransomware incidents nearly doubled in August while exposure of enterprise data through generative AI emerged as an additional risk. No specific attack or affected organization is identified.
Lawmakers seek stronger safeguards for OpenAI after cyberattack
Lawmakers are demanding additional safeguards for OpenAI following a reported cyberattack. The supplied information does not specify the attack's scope or operational impact.
Dunedin health technology firm reports major data breach
Sensitive files were reportedly stolen from a health technology firm in Dunedin in what is described as a major data breach. The supplied information does not specify the number of affected people or the data involved.