Ransom! Navesink Rehab

Blacklock ransomware attack targeted Navesink Rehab, a multidisciplinary rehabilitation center in Red Bank, New Jersey, affecting hospital and physician clinic operations. The incident potentially compromised patient data and disrupted healthcare services in the United States. #United States

Read More
⚡ Weekly Recap: APT Intrusions, AI Malware, Zero-Click Exploits, Browser Hijacks and More

This cybersecurity update highlights recent active threats, including APT41’s use of Google Calendar for command-and-control and the takedown of services aiding malware obfuscation. Key incidents involve nation-state cyberattacks, vulnerabilities in popular software, and innovative malware such as GhostSpy and Lumma Stealer. #APT41 #VoidBlizzard…

Read More
Cybersecurity News | Daily Recap [31 May 2025]

Recent cybersecurity updates include Linux core dump flaws enabling local password hash theft and law enforcement seizing domains supporting malware evasion tools. Major threat actor activity includes Conti and TrickBot gang revelations, regional social engineering campaigns by Bitter APT, and high-profile breaches like TikTok user data sale claims. #LinuxVulnerabilities #Conti #BitterAPT #TikTokData breach

Read More
Dark Web Profile: NightSpire Ransomware

NightSpire is a financially motivated ransomware group that emerged in early 2025, utilizing a double extortion strategy targeting small to medium-sized enterprises globally. They exploit vulnerabilities such as CVE-2024-55591 and use living-off-the-land techniques for lateral movement, exfiltrating data prior to encryption and demanding ransom payments under threat of data leak. #NightSpire #CVE202455591

Read More
Hospitals in Maine, New Hampshire limit services after cyberattack on Catholic health org

Three hospitals operated by Covenant Health experienced a cyberattack, leading to system shutdowns and service disruptions. Cybersecurity experts are investigating the incident, which affected hospital operations in Maine and New Hampshire amidst a rising trend of healthcare-related cyberattacks. #CovenantHealth #StJosephHospital #StMarysHealthSystem #BlackBasta…

Read More
Chinese Threat Actor Exploiting Ivanti EMM Vulnerability

Two critical vulnerabilities (CVE-2025-4427 and CVE-2025-4428) in Ivanti Endpoint Manager Mobile (EPMM) have been actively exploited by a China-nexus espionage group, enabling unauthenticated remote code execution and widespread data exfiltration. The threat actors deployed KrustyLoader malware and leveraged AWS S3 buckets for payload delivery while targeting organizations across multiple critical sectors globally. #IvantiEPMM #KrustyLoader #AutoColor #ChinaNexusEspionage

Read More
Ransom! Navesink Rehab

The Everest threat actor has claimed to have successfully compromised Mediclinic Group, a prominent private healthcare provider operating across South Africa, Switzerland, Namibia, and the United Arab Emirates, potentially risking sensitive patient data and disrupting medical services. The incident highlights the evolving cyber threats targeting critical infrastructure in the United Arab Emirates, among other nations. #AE

Read More
The Pharmacist Behind 2 Billion Deepfakes

A hospital pharmacist outside Toronto has been identified as a key figure behind Mr. Deep Fakes, the world’s largest nonconsensual deep fake adult content site. The platform hosted over 70,000 AI-generated videos featuring celebrities and private individuals, accumulating more than two billion views. #DeepFakePorn #AIManipulation

Read More