From SonicWall to Axios: Attacks and Vulnerabilities of the First Week of August
August cyber attacks recap: SonicWall credential stuffing, npm Axios supply chain compromise, Adobe critical patches, and major data breaches.
APT
More news
Page 8 / 9 · 77 articles
AnySign4PC zero-day exploited as entry point: 72 South Korean organizations hit, same channel used by Gunra ransomware
AnySign4PC zero-day exploited 72 South Korean organizations via clickless infection, sharing infrastructure with Gunra ransomware attacks.
Alert in South Korea: State-sponsored phishing and watering hole attacks infect without any click
South Korean agencies warn of state-sponsored zero-click watering hole and phishing attacks exploiting local software to steal data and extort victims.
North Korea Hits macOS with Fake Updates and a Backdoor That Empties Crypto Wallets
North Korean hackers target macOS via fake update ads, deploying a Node.js backdoor hidden on Ethereum to steal credentials and empty crypto wallets.
North Korea behind the npm attacks on debug, chalk and axios: Amazon's attribution
Amazon attributes npm supply chain attacks on debug, chalk, and axios to North Korean group Sapphire Sleet, linking three campaigns over twelve months.
Laundry Bear exploits Exchange OWA zero-day: persistent and invisible espionage
Laundry Bear APT exploits an Exchange OWA zero-day (CVE-2026-42897) deploying the OWAReaper backdoor for invisible espionage and persistent mailbox access.
Coordinated Attack on OT Water Infrastructure in Minnesota: When Cellular Modems Become the Weak Point
Minnesota water systems faced an OT cyberattack exploiting cellular modems. The incident disrupted SCADA controls, forcing manual plant operations.
Pavel Durov charged in Russia: Telegram accused of facilitating terrorism
Russian FSB charged Telegram CEO Pavel Durov for facilitating terrorism via malicious chatbots, causing mass arrests and an almost total app block.
Isolating Vital Systems: 2026 Recommendations for Critical Infrastructure, OT, and AI
Explore 2026 recommendations for securing critical infrastructure, OT, and AI. Learn about Zero Trust, ATG vulnerabilities, and AI supply chain risks.