A rare cryptomining malware campaign dubbed “Werewolf” has compromised hundreds of devices across Russia, with additional infections reported in Belarus and Kazakhstan. The attacks have primarily targeted industrial enterprises and engineering schools, posing potential risks to critical infrastructure and educational institutions in the region. The malware, designed to hijack computing resources for unauthorized cryptocurrency mining, […]
A ransomware attack forced Tonga’s National Health Information System offline and disrupted the Ministry of Health’s official website on June 15, according to The Record, a cybersecurity news outlet operated by Recorded Future. The cyber incident marked a significant blow to the nation’s healthcare infrastructure, with the Tonga Health Ministry hit by digital intruders targeting […]
NHS England backs Medicus as the first supplier to deliver a fully assured core IT system for general practitioners under its new Tech Innovation Framework. The approval marks a significant step in modernizing digital infrastructure across primary care, aiming to streamline clinical operations and improve patient outcomes. The system, developed by Medicus Health, passed all […]
Microsoft has begun rolling out the KB5058499 preview cumulative update for Windows 11 version 24H2, introducing 48 new features and improvements. Among the most notable additions are the enhanced Windows Share functionality and the new Click to Do Preview, both designed to streamline user productivity and interaction. The update is part of a gradual deployment […]
The U.S. government has filed a forfeiture complaint to seize $7.7 million in funds allegedly laundered by North Korean IT workers, according to federal authorities. The money, which has been frozen for over two years, is believed to be tied to operations conducted by individuals working on behalf of North Korea through covert employment in […]
Honeywell unveiled a new suite of artificial intelligence-powered cybersecurity tools aimed at strengthening operational technology (OT) environments and supporting the transition toward industrial autonomy. The tools are designed to accelerate autonomous operations by enhancing cyber resilience across critical infrastructure and manufacturing systems, according to a company announcement. The AI-driven solutions are tailored for industrial sectors […]
The U.S. Government Accountability Office (GAO) has identified critical shortcomings in the guidance of the Continuous Diagnostics and Mitigation (CDM) Program, raising concerns over the effectiveness of federal network security and data protection efforts. In a recent review, the GAO urged the Department of Homeland Security (DHS) to address these gaps to better safeguard government […]
A threat actor is allegedly selling a Fortinet Firewall API Flaw exploit tool on a dark web marketplace, raising alarms across the cybersecurity sector. Priced at $12,000 and supported by escrow services, the tool reportedly targets over 170 unsecured FortiOS API endpoints, granting unauthorized access to sensitive data on vulnerable FortiGate firewall systems. Leaked forum […]
Microsoft has alerted users to a disruptive issue affecting its cloud storage platform, OneDrive. A Microsoft bug makes OneDrive’s search function display blank results, even though the files remain accessible through direct navigation. The company is investigating the issue but has not released a timeline for resolution or a temporary fix. The Microsoft bug makes […]
Apple is celebrating the opening of its newest retail location in Perth, Australia, by releasing a custom-designed wallpaper featuring local flora. As Apple marks the Perth Store launch, the company offers the wallpaper in three different resolutions, making it suitable for a range of devices, including desktops and mobile screens. The high-resolution image showcases the […]
Qilin ransomware-as-a-service operators have introduced a new feature called “Call lawyer” to boost pressure on victims as part of their data extortion campaigns. The move comes amid rising enforcement actions against several high-profile ransomware groups, including ALPHV/BlackCat, LockBit, Everest, RansomHub, and BlackLock. By offering legal-themed communication tools, Qilin Ransomware Adds Legal pressure tactics that may […]
Chinese state-sponsored hacking group APT41 is deploying a new malware strain dubbed “ToughProgress” that exploits Google Calendar for covert command-and-control (C2) communication, according to cybersecurity analysts. The malicious software uses the popular cloud-based scheduling service to blend its traffic with legitimate operations, making detection significantly more challenging. By embedding commands within calendar event data, the […]