Explore

Trendline Trendline
Ransomware Threats Surge with New Groups Emerging Weekly, Report Warns

Ransomware Threats Surge with New Groups Emerging Weekly, Report Warns

Ransomware Threats Surge with New Groups Emerging Weekly, Report Warns
Rapid Read Rapid Read
House Intelligence Bill Focuses on Cyber Threats and AI in National Security

House Intelligence Bill Focuses on Cyber Threats and AI in National Security

The House Intelligence Committee has approved the fiscal 2027 intelligence authorization legislation, which includes provisions aimed at enhancing state and local threat intelligence, election security, and the use of artificial intelligence (AI) in cyber missions. The bill addresses frustrations with the Trump administration's reduction in federal aid for cyber defenses, shifting more responsibility to local levels. It proposes a pilot program for cyber threat intelligence sharing with state and local governments, and mandates the Office of the Director of National Intelligence (ODNI) to develop a strategy for information sharing. The bill also emphasizes the expansion of the Artificial Intelligence Security Center at the National Security Agency and includes measures to protect analysts working on foreign influence in U.S. elections.
Rapid Read Rapid Read
Ransomware Threats Escalate with New Groups Emerging Weekly, Report Warns

Ransomware Threats Escalate with New Groups Emerging Weekly, Report Warns

A report by Black Kite has revealed that more than one new ransomware group is emerging every week, contributing to a fragmented and expanding criminal ecosystem. As of June 2026, there are 146 active ransomware groups, a significant increase from 105 the previous year. The report highlights that 2026 alone has seen the emergence of 61 new groups. Despite the fragmentation, a few groups continue to dominate, with the top five accounting for nearly half of the publicly disclosed victims. The report emphasizes the importance of addressing common cybersecurity vulnerabilities, recommending that organizations prioritize patching systems and software, especially those with high CVSS scores.
Rapid Read Rapid Read
Clover Health Discloses Data Breach, Investigates Impact on Member Data

Clover Health Discloses Data Breach, Investigates Impact on Member Data

Clover Health has reported a data breach in a recent filing with the Securities and Exchange Commission. The breach was discovered on July 4, when the company noticed unusual login activity on its systems. An investigation revealed that a threat actor accessed three non-managerial employee accounts through social engineering. These accounts had access to broker-facing sales functions and tools for scheduling member visits, potentially exposing personal and protected health information. Clover Health has stated that the investigation is ongoing to determine the full scope of the breach. The company has initiated response procedures and engaged third-party experts to contain the threat. Despite the breach, Clover Health does not anticipate a material impact on its business operations or finances.
Rapid Read Rapid Read
Qilin Ransomware Group Claims 1,358 Victims Amid Rising Global Attacks

Qilin Ransomware Group Claims 1,358 Victims Amid Rising Global Attacks

The Qilin ransomware group has emerged as a significant threat in the global cyber extortion landscape, claiming 1,358 victims over a tracked period, marking a 443% increase from the previous year. Operating across more than 50 countries, Qilin has become one of the most visible ransomware threats, accounting for roughly one in every five to six disclosed ransomware victims. The group employs tactics such as encrypting systems and stealing data, pressuring victims with the threat of public leaks. The broader ransomware landscape is also deteriorating, with 7,551 publicly disclosed victims recorded between April 2025 and March 2026, a 24.9% increase year-over-year. The number of active ransomware operations has expanded to 146 by June 2026, indicating a growing market for criminal groups.
Rapid Read Rapid Read
SonicWall Zero-Days Exploited to Deliver Custom Malware Before Patch Release

SonicWall Zero-Days Exploited to Deliver Custom Malware Before Patch Release

Two zero-day vulnerabilities in SonicWall appliances were exploited by threat actors for several weeks before patches were released, according to cybersecurity firm Volexity. The vulnerabilities, identified as CVE-2026-15409 and CVE-2026-15410, affected SMA1000 secure remote access appliances. SonicWall issued a public advisory on July 14, alerting customers to the exploitation of these flaws. Volexity, which assisted in the investigation, attributed the attacks to a threat actor it tracks as UTA0533. The exploitation reportedly began as early as June 22. The attackers deployed custom malware named KnuckleBall, which injected additional tools into legitimate processes. Despite the significant capability demonstrated by UTA0533 in compromising the appliances, the group was reportedly less successful in moving laterally or accessing other systems. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added these vulnerabilities to its Known Exploited Vulnerabilities catalog.
Rapid Read Rapid Read
Building Cyber Resilience in Healthcare: Addressing Identity System Vulnerabilities

Building Cyber Resilience in Healthcare: Addressing Identity System Vulnerabilities

Healthcare organizations are increasingly vulnerable to cyberattacks targeting identity systems, as demonstrated by a recent breach at Stryker. Hackers exploited stolen credentials to access critical systems, highlighting the dependency on identity systems for daily operations. A report by Palo Alto Networks found that identity weaknesses were involved in nearly 90% of cyber investigations. Despite the risks, many healthcare organizations lack confidence in their ability to recover from such attacks, especially with the potential for AI to exacerbate identity vulnerabilities.
Trendline Trendline
OpenAI's AI Models Breach Hugging Face Systems in Unprecedented Cyber Incident

OpenAI's AI Models Breach Hugging Face Systems in Unprecedented Cyber Incident

OpenAI's AI Models Breach Hugging Face Systems in Unprecedented Cyber Incident
Rapid Read Rapid Read
OpenSSL Addresses 'HollowByte' DoS Vulnerability with Silent Fixes

OpenSSL Addresses 'HollowByte' DoS Vulnerability with Silent Fixes

A vulnerability in OpenSSL, known as 'HollowByte', has been identified, allowing attackers to exhaust a server's memory before any security handshake. Discovered by Okta's red team, the denial-of-service (DoS) bug can be triggered by a malicious payload of only 11 bytes, which declares a larger incoming message body to initiate a buffer pre-allocation that is not immediately freed. This vulnerability existed because older OpenSSL versions pre-allocated receive buffer sizes based on the incoming message body length declared in the handshake message's 4-byte header. The issue has been silently fixed in OpenSSL version 4.0.1 and backported to earlier versions.
Rapid Read Rapid Read
White Hat Hacker Park Chan-am Highlights AI Security Challenges at Seminar

White Hat Hacker Park Chan-am Highlights AI Security Challenges at Seminar

Park Chan-am, a renowned white hat hacker, addressed key security challenges in the era of artificial intelligence during a seminar at the 15th Information Security Day event. Park, who began his hacking career at the age of 11, has been instrumental in advising Korean government agencies on cybersecurity, particularly against threats from the Democratic People’s Republic of Korea. As the CEO of Steelion, a security firm, Park emphasized the evolving security landscape due to AI advancements. He outlined the priority response tasks for information security organizations, focusing on major AI threats and the necessary security priorities to address them.
Trendline Trendline
Hugging Face Discloses Data Breach from Autonomous AI Cyberattack

Hugging Face Discloses Data Breach from Autonomous AI Cyberattack

Hugging Face Discloses Data Breach from Autonomous AI Cyberattack
Rapid Read Rapid Read
Cybersecurity Expert Warns of Potential Catastrophic Cyber Attacks on Israel

Cybersecurity Expert Warns of Potential Catastrophic Cyber Attacks on Israel

Dr. Harel Menashri, a pioneer in the Shin Bet's cyber division, has raised alarms about the potential for catastrophic cyber attacks on Israel. Menashri, who played a crucial role in establishing the cyber arm of the Shin Bet, highlighted the dangers posed by cyber threats, comparing their potential impact to that of a nuclear attack. He explained that malicious code could manipulate SCADA systems, which are used to control industrial processes, leading to disastrous outcomes such as explosions or train derailments. Menashri also criticized the Israeli government's handling of cybersecurity, particularly in relation to Chinese companies, which he claims could pose a security risk due to their legal obligations to share data with the Chinese government. The U.S. has also expressed concerns, particularly regarding the operation of a Chinese company at the Haifa Port, which is near sensitive naval facilities.