#cyberattack

70 posts · Last used 14h

Little warning regarding of a social technical attack. At least three collogues were targeted. Th criminals start with a newsletter subscription bomb. Several thousand emails were sent to the users in a very short timeframe. And as these are "valid" subscription emails the e-mail filter only blocked a small subset. #Cyberattack #SocialEngineering
2
2
2
0
So one FBI breach led to this. And it's only early Saturday 😅 . The Daily Beast: Keystone Kash and Pentagon Pete Hit by Twin Humiliations https://www.thedailybeast.com/keystone-kash-and-pentagon-pete-hit-by-twin-humiliations/ @thedailybeast@newsie.social Reuters had more about the files that were affected. Reuters, from yesterday: ShinyHunters attackers say they stole psychiatric and medical records of FBI staff https://www.reuters.com/world/shinyhunters-hackers-say-they-stole-psychiatric-medical-records-fbi-staff-2026-09-25/ @Reuters@flipboard.com #infosec #databreach #cyberattack
0
0
0
0

Cyberrisker: från Studium-angreppet till #digitalSuveränitet (presentation och paneldebatt), 2026-09-22, 15:30

I början av maj utsattes UU:s lärplattform Studium / #Canvas för en #cyberattack. Vad säger denna händelse om vår tids digitala #sårbarhet? Hur beroende är universitet, kommuner och myndigheter av globala #molntjänster? Vem har egentligen kontroll över vår data?

Panel:

  • Fredrik Blomqvist
  • Daniel Melin
  • Robert Reineck Moderator:
  • Ida-Maria Sintorn

Mer info: https://www.uu.se/institution/informationsteknologi/kalendarium/arkiv/2026-09-22-cyberrisker-fran-studium-angreppet-till-digital-suveranitet-presentation-och-paneldebatt

1
1
1
0
A reexamination of recent OpenAI sins: 1) a cyberattack and 2) attempted theft of data. New. "In May 2026, a malicious package campaign forced RubyGems to suspend new registrations and remove hundreds of packages [1]. Researchers later linked the activity to OpenAI agents, reporting unauthorized code execution and attempted API-key theft [2]. OpenAI acknowledged its agents’ use of RubyGems to retrieve public information [3]. RubyGems could not independently confirm attribution and found no evidence of successful key theft." Picus: Inside the OpenAI-RubyGems Incident: Did AI Agents Attack RubyGems? https://www.picussecurity.com/resource/blog/openai-rubygems-incident-ai-agents #infosec #threatresearch #RubyGems #cyberattack #OpenAI
0
0
0
0

THREAT MODEL: CYBERSECURITY 🧑‍💻 for August 4th, 2026 by independent journalist @violetblue@mastodon.social

...and much more.

✨THREAT MODEL weekly newsletters are free to read -- please help keep them accessible to all by becoming a patron, even $1 a month makes a difference!✨

https://www.patreon.com/violetblue/posts/cybersecurity-4-165719362

#ThreatModel #ThreatModelCybersecurity #ThreatModelNewsletters #VioletBlue #infosec #cybersec #CovidIsNotOver

7
0
7
0
New. True or false, the easiest thing to do is to blame a foreign country. But it's important to remember that this happened in the embattled state of Minnesota. Things being as they are, nothing should be off the table. "Attribution remains open. Minnesota state and local officials declined to say who was responsible, and TJ Sayers, senior director of threat intelligence at the Center for Internet Security, confirmed the attacks had not been attributed to any party and that it was unclear whether the PLCs CISA warned about were involved." Picus: Minnesota Water Systems Attacks: Internet-Exposed PLCs Under Attack https://www.picussecurity.com/resource/blog/minnesota-water-systems-attacks-internet-exposed-plcs-under-attack #infosec #threatresearch #cyberattack
0
0
0
0
New. "While headlines focused on an AI model escaping its test environment, the real lesson is that security failures still begin with ordinary mistakes and overlooked exposure." "Behind the AI headlines are familiar attack paths: vulnerable software, stolen credentials and permissive access." Barracuda: Faster, not different: What the Hugging Face AI incident really means for organizations https://blog.barracuda.com/2026/08/03/hugging-face-incident-faster-not-different Related, from yesterday: Socket: Claude Breached 3 Companies and Uploaded Malware to PyPI During Anthropic's Security Tests https://socket.dev/blog/anthropic-claude-pypi-malware @SocketSecurity@fosstodon.org #infosec #HuggingFace #cyberattack #Claude #OpenAI #Anthropic #malware #Python
0
0
0
0
Did you miss this yesterday? Anthropic is increasingly looking like a comic book villain, right next to the neophyte OpenAI villains. "My LLM hacked more targets than your puny LLM." "No, mine hacked more." "I dare you." Politico: Anthropic's AI models hacked 3 organizations during testing https://www.politico.com/news/2026/07/30/anthropic-ai-rogue-hacks-01018741 @politico@flipboard.com #Anthropic #infosec #cyberattack #OpenAI
0
0
0
0