IncidentsBrief2 min read
The health system sent ambulances elsewhere for about two hours, suspended outpatient surgeries and appointments, and later said a ransomware gang had claimed the intrusion.
VulnerabilitiesExploitedCVE-2026-35273CVSS 9.82 min read
Researchers say the PeopleSoft bug ShinyHunters has exploited since May is a chain of three flaws, all patched under one CVE identifier in June. The root is an SSRF that reaches an internal management interface.
IncidentsBrief2 min read
The capital city's IT department spotted suspicious activity and called in state law enforcement to lead the investigation, while the MyColaSC citizen services platform stayed offline.
Threat intelBrief2 min read
Version 20 of the framework tracks prompt injection, theft of app-specific passwords, and attacks on internet-exposed PLCs at Minnesota water utilities, where MITRE says attribution remains unconfirmed.
Threat intelBrief1 min read
Rapid7's Q3 threat analysis found high-severity vulnerabilities exploited within three days of disclosure on average, ransomware still dominant, and AI cited in only 8% of tracked incidents.
IncidentsBrief2 min read
Authorities across 21 countries arrested more than 1,400 suspects and recovered over $105 million in illegal funds during a two-month crackdown on business email compromise, ransomware and online scams.
IncidentsBrief2 min read
Operation Serengeti III, run across 20 African countries with US support, targeted online fraud, ransomware and business email compromise gangs, Interpol said.
VulnerabilitiesExploitedCVE-2026-0257CVSS 7.82 min read
Palo Alto Networks says it continues to see ransomware actors abuse an authentication bypass in PAN-OS and Prisma Access that lets attackers set up unauthorized VPN connections.
Threat intelBrief1 min read
A joint investigation describes bulk scanning of FortiGate, FortiWeb and Palo Alto GlobalProtect appliances, credential theft and hands-on-keyboard intrusions, with victim overlaps seen at Qilin and The Gentlemen.
Threat intelBrief2 min read
A joint advisory says SafePay has hit at least 600 critical infrastructure organizations worldwide since August 2024, and warns that paying a ransom doesn't guarantee files come back.
