Explore

Trendline Trendline
Broadcom Releases Patches for Critical VMware Vulnerabilities Affecting Virtual Infrastructure

Broadcom Releases Patches for Critical VMware Vulnerabilities Affecting Virtual Infrastructure

Broadcom Releases Patches for Critical VMware Vulnerabilities Affecting Virtual Infrastructure
FactFable FactFable
Why Famous Credential Stuffing Incidents in U.S. History Matter More in Cloud Environments

Why Famous Credential Stuffing Incidents in U.S. History Matter More in Cloud Environments

Learn what credential stuffing is and why the historic threat of stolen passwords becomes far more dangerous for businesses operating in the cloud.
Rapid Read Rapid Read
Minnesota Water Utilities Hit by Coordinated Cyberattacks, Raising Security Concerns

Minnesota Water Utilities Hit by Coordinated Cyberattacks, Raising Security Concerns

State and federal agencies are investigating a coordinated cyberattack on operational technology systems at over 30 water utilities in Minnesota. The attacks, which occurred on July 26 and 27, affected automated control functions in cities like Maple Plain, Braham, South St. Paul, and Plymouth. While contingency procedures were activated, and most water and wastewater operations remained functional, Braham briefly took its water plant offline. The attacks follow a U.S. government warning about Iran-linked cyber threats targeting industrial control systems from companies like Siemens, Rockwell Automation, and Schneider Electric. Although Iranian groups such as CyberAv3ngers and Handala are suspected, no formal attribution has been made.
FactFable FactFable
What an Application Security Engineer Actually Looks Like in a Real Incident

What an Application Security Engineer Actually Looks Like in a Real Incident

Forget the hacker movie stereotypes. Here’s a look at what an application security engineer actually does when a critical incident strikes.
Rapid Read Rapid Read
Minnesota IT Services Responds to Cyberattack on Over 30 Community Water Systems

Minnesota IT Services Responds to Cyberattack on Over 30 Community Water Systems

Minnesota IT Services has confirmed a coordinated cyberattack targeting more than 30 community water systems across the state. The attacks occurred between Sunday, July 26, and Monday, July 27. Four cities, including Plymouth, South St. Paul, Maple Plain, and Braham, have publicly disclosed the incidents. Despite the attacks, the Minnesota Department of Health has not reported any need for residents to alter their drinking water usage. The state has activated its cybersecurity incident response capabilities to address the situation, working alongside federal and private-sector partners to investigate and support the affected communities.
Rapid Read Rapid Read
Minnesota Water Systems Face Coordinated Cyberattack, Statewide Response Initiated

Minnesota Water Systems Face Coordinated Cyberattack, Statewide Response Initiated

A coordinated cyberattack targeted over 30 community water systems in Minnesota, prompting a statewide response. The attacks, which occurred on July 26 and 27, affected operational technology systems but did not disrupt water services to residents. Minnesota IT Services (MNIT) is working with local, tribal, and federal officials to investigate the incident. The agency is providing guidance and support to affected communities to restore operations and strengthen defenses against future attacks. The incident highlights the vulnerability of critical infrastructure to cyber threats.
Rapid Read Rapid Read
Minnesota Water Systems Targeted in Coordinated Cyberattack, Disrupting Operations

Minnesota Water Systems Targeted in Coordinated Cyberattack, Disrupting Operations

A coordinated cyberattack targeted over 30 community water systems in Minnesota between July 26 and July 27, affecting cities such as Plymouth, South St. Paul, Maple Plain, and Braham. The attacks disrupted automated controls but did not compromise water quality, allowing residents to continue normal water use. Minnesota IT Services, along with state and federal agencies, including the Cybersecurity and Infrastructure Security Agency, are investigating the incident. The state has activated its cybersecurity incident response capabilities to manage the situation, and no ransom demands have been reported. The attacks are part of a broader campaign targeting similar facilities nationwide.
Trendline Trendline
Phishing Remains Top Entry Method for Cyber-Attacks, Evasion Techniques Evolve

Phishing Remains Top Entry Method for Cyber-Attacks, Evasion Techniques Evolve

Phishing Remains Top Entry Method for Cyber-Attacks, Evasion Techniques Evolve
Rapid Read Rapid Read
Cyberattack Disrupts Water Utilities in Over 30 Minnesota Communities, Prompting Statewide Response

Cyberattack Disrupts Water Utilities in Over 30 Minnesota Communities, Prompting Statewide Response

A coordinated cyberattack has disrupted water and wastewater utilities in more than 30 communities across Minnesota. The state's technology agency, Minnesota Information Technology Services, is leading the response, working with local and federal agencies to contain and investigate the attack. The cyberattack affected the computerized operating systems of water plants, causing temporary outages. The agency is providing guidance and support to affected utilities to remediate damages. The attack highlights vulnerabilities in the U.S. water infrastructure, which consists of a vast network of systems, many of which are small and lack resources to defend against cyber threats.
Rapid Read Rapid Read
ASD Advises Critical Infrastructure to Prepare for System Isolation

ASD Advises Critical Infrastructure to Prepare for System Isolation

The Australian Signals Directorate (ASD) has issued new guidance for critical infrastructure operators, advising them to be prepared to isolate their systems from external networks for up to three months in the event of a crisis or conflict. This guidance follows a year-long consultation with the industry and aims to enhance resilience against cyber threats. The ASD emphasizes the importance of being able to fully disconnect operational technology and vital systems from the internet and other networks to protect against state-sponsored espionage and cybercrime.
Trendline Trendline
Hacked Public Wi-Fi Gateways Exploited to Steal Corporate Credentials

Hacked Public Wi-Fi Gateways Exploited to Steal Corporate Credentials

Hacked Public Wi-Fi Gateways Exploited to Steal Corporate Credentials
Rapid Read Rapid Read
Dysphoria IoT Botnet Adopts Blockchain C2 After JackSkid Disruption

Dysphoria IoT Botnet Adopts Blockchain C2 After JackSkid Disruption

The Dysphoria Internet of Things (IoT) botnet, tracked by CNCERT and XLab, has integrated blockchain-based name services and infected-device relays following a law enforcement operation against the JackSkid infrastructure in March. This development makes the botnet more resilient to disruptions. The botnet's population is estimated to exceed 200,000 bots, with significant activity recorded both in China and internationally. The botnet employs Ethereum Name Service (ENS) domains for command-and-control (C2) operations, complicating traditional server seizure efforts. Dysphoria spreads through weak Telnet and SSH credentials and exploits known IoT vulnerabilities, such as the Linksys E1700 command-injection flaw. The botnet targets internet-service and gaming sectors, advertising attacks of up to 4 Tbps.