Threats & incidents
-
Italy tracks 178 malicious campaigns in one week as banking lures persist
Italy’s national digital agency identified 178 malicious campaigns over seven days and shared more than 1,200 indicators of compromise.
-
Suspected Qilin ransomware organiser arrested in Germany after Japanese extradition
Japanese police helped extradite a Russian national to Germany following an international investigation into the Qilin ransomware operation.
-
Germany ranks second in global ransomware claims as quarterly reports reach 2,627
Comparitech recorded 2,627 ransomware attacks and claims in the third quarter, with Germany accounting for 121, although most incidents were not independently confirmed.
-
Europe records fastest annual growth in cyberattack volume, Check Point finds
Check Point Research reports a 61% annual increase in observed attack attempts against European organisations in September, exceeding growth in other regions.
-
ASOS describes social engineering behind customer communications breach
ASOS has provided further information about an incident involving customer communications platforms, identifying credential theft through impersonation as the apparent entry method.
-
Russian-aligned UAC-0099 updates MATCHBOIL malware used against Ukrainian industry
ESET has traced changes to a downloader used by UAC-0099 against Ukrainian organisations, exposing sustained intrusion activity affecting industrial and essential-service environments.
-
UK identifies China-linked company behind international cyber intrusion infrastructure
Britain’s National Cyber Security Centre and international partners have linked a China-based technology company to infrastructure and services used in malicious cyber operations against organisations around th
-
Swiss pension fund investigates supplier breach affecting sensitive information
Swiss federal pension fund Publica is assessing a data leak associated with an attack on an external software supplier, as federal authorities investigate the incident and its consequences for information handl
-
Tensorlake compromise exposes AI development infrastructure to credential theft
A compromised release of the Tensorlake software development kit installed credential-stealing malware through an npm lifecycle script, exposing systems used to develop and run AI agents before their isolated e
-
SonicWall fixes new SMA 1000 remote access vulnerabilities
SonicWall has issued fixes for new SMA 1000 vulnerabilities that can enable remote code execution, server-side request forgery and cross-site scripting.