Threats & incidents
-
Ransomware disrupts Windows through Group Policy
Kaspersky has documented an attack that used Active Directory Group Policy to disrupt an entire Windows domain without encrypting files on its workstations.
-
RNLI warns supporters after supplier breach
The RNLI has written to supporters warning that information held by Beacon CRM may have been taken during the supplier’s July cyber incident.
-
Craneware resets outlook after cyber incident
Craneware has reset FY27 revenue expectations to about $185 million while remediation, customer notification, and regulatory work continue after July’s data breach.
-
Belgian federation disputes cyber breach claims
Belgium’s AFTT says current checks do not support claims that its results infrastructure or private contact data were compromised, while a separate gymnastics breach remains confirmed.
-
LMU Munich breach exposes student records
LMU Munich says an attacker retrieved student enrolment data that may include identity, banking, health-insurance, academic-history, and other personal information.
-
Three Linux kernel flaws enter CISA KEV
CISA has added three Linux kernel vulnerabilities to its exploited-vulnerability catalogue, bringing evidence of real-world attacks into infrastructure patching decisions.
-
Fake software repositories spread Rapuncel stealer
Fake GitHub repositories impersonating LastPass and dozens of other software brands are distributing Rapuncel malware alongside a signed driver designed to disable security products.
-
WeaselBiscuit npm malware targets browser data
Thirteen malicious npm packages delivered the WeaselBiscuit stealer, which harvests Chrome extension storage and shows similarities to malware used in North Korean campaigns.
-
npm malware shifts execution into runtime
An npm campaign hides malicious behaviour inside normal package execution, bypassing controls designed to block dangerous installation scripts.
-
European manufacturing ransomware victims rise sharply
Black Kite recorded an 85.4% increase in European manufacturing ransomware victims, while Germany’s count rose by more than 83% during the first seven months of 2026.