VulnHub

A recent cyber-attack attributed to Iranian hackers has caused a shutdown of a power plant in the UK, raising concerns about the vulnerabilities in the country’s critical national infrastructure (CNI). Experts are warning that this incident reveals significant weaknesses in the systems that support essential services like electricity generation. The attack not only disrupted operations but also served as a wake-up call for the government and private sector to bolster their cybersecurity defenses. As the threat of state-sponsored cyber activities continues to rise, stakeholders are urged to reassess their security measures to protect against future incidents. This attack could have broader implications for national security and public safety if similar vulnerabilities are exploited elsewhere.

Slovakia's National Security Authority (NBÚ) has issued a warning about vulnerabilities in certain road speed cameras. These weaknesses could allow attackers to access vehicle data and potentially gain remote control of the cameras, posing risks to public networks. This alert is not about tampering with speeding tickets; instead, it emphasizes a serious cybersecurity concern that could affect traffic management and public safety. The NBÚ's warning serves as a reminder for the need to secure critical infrastructure, as these vulnerabilities could be exploited for malicious purposes. Addressing these issues promptly is essential to protect both motorists and the integrity of public systems.

A new phishing technique called Chameleon SEO Poisoning has been identified by Fortra's threat intelligence team. This method involves creating fake banking websites that are optimized to appear in search results for terms like 'Bank Name Customer Portal'. These deceptive sites can evade security scanners by disguising themselves, making it difficult for users to recognize them as fraudulent. Fortra reported a significant increase in these phishing attempts, with a 40% rise noted in the second quarter of 2026. This situation poses a serious risk to individuals seeking to access their banking information online, as attackers aim to steal credentials through these disguised sites.

A recent analysis by Black Kite reveals that mid-sized companies are increasingly becoming targets for ransomware attacks. Between January 2023 and June 2026, these companies, defined as those with annual revenues between $10 million and $1 billion, accounted for 73% of all publicly disclosed ransomware and data-extortion incidents with known revenue in North America and Europe. This consistent trend, showing that mid-market firms are targeted in 72% to 75% of cases during this period, indicates a shift in focus from larger enterprises to smaller businesses. The implications are significant, as these mid-sized companies often lack the extensive cybersecurity resources of larger firms, making them more vulnerable to such attacks. This trend underscores the need for improved security measures within these organizations to protect sensitive data and maintain operational integrity.

Iran-linked hackers successfully disabled a power plant in the UK for four days, marking a significant cyberattack on the country's energy sector. This incident is considered the first confirmed attack of its kind in the UK. The timing of the attack coincided with similar incidents targeting water infrastructure across 12 states in the United States, raising concerns about coordinated efforts by these hackers. The impact of such attacks on critical infrastructure is profound, as it not only disrupts services but also poses risks to public safety and national security. As countries increasingly rely on digital systems for essential services, the need for robust cybersecurity measures becomes even more urgent.

A new version of the malware known as ToxicPanda has been reported, now dubbed ToxicPanda 2.0. This upgraded malware is expanding its reach and has been detected in 16 different countries. Researchers have found that it specifically targets Android car head units, hijacking them for malicious purposes. This poses significant risks for drivers as it can compromise vehicle systems and potentially allow attackers to manipulate navigation and other functions. Users and manufacturers of affected devices need to be vigilant and implement security measures to protect against this evolving threat.

Recent reports have spotlighted three banking trojans: Manic, Grandoreiro, and ToxicPanda 2.0. Manic is a spyware variant that has been actively targeting users in Latin America and Europe. The Grandoreiro campaign continues to persist, affecting online banking users by stealing sensitive information. ToxicPanda 2.0 has expanded its capabilities, posing a significant risk to financial institutions and their customers. The presence of these trojans indicates a growing trend of sophisticated cyberattacks aimed at financial theft, making it crucial for users and businesses to remain vigilant and adopt stronger security measures.

Researchers from Cycode have identified a serious vulnerability in NASA's AIT-GUI, the web-based console used for controlling spacecraft instruments. This flaw, rated CVSS 9.4, allows anyone to send commands without any authentication, meaning unauthorized users could potentially manipulate spacecraft operations. The issue stems from the lack of authentication, session checks, and protection against cross-site request forgery on critical endpoints. This vulnerability poses significant risks, as it could lead to unauthorized access and control over space missions. Given the sensitive nature of NASA's operations, this flaw raises concerns about the security of vital systems and the potential for misuse.