Hackread – Cybersecurity News, Data Breaches, AI and More
Actively Exploited
ShinyHunters, a known hacking group, claims to have gained access to data from Rockstar Games' Snowflake platform due to a breach involving Anodot, a data analytics company. They have threatened to leak this data on April 14 unless their ransom demands are met. This incident raises concerns about the security of sensitive information related to Rockstar, a major player in the gaming industry. If the breach is legitimate, it could expose user data and proprietary information, impacting both the company and its customers. The situation is still developing, and Rockstar Games has not yet confirmed the breach or provided details on any potential data compromise.
The U.S. Treasury Department's Office of Cybersecurity and Critical Infrastructure Protection has announced a new initiative aimed at sharing cyber threat intelligence with cryptocurrency firms. This program is designed to help these companies better identify, prevent, and respond to cyber threats, especially as attacks on the crypto sector grow more frequent and sophisticated. The initiative comes in response to increasing concerns over security vulnerabilities in the cryptocurrency market, which has become a prime target for cybercriminals. By providing free intelligence resources, the Treasury hopes to strengthen the security posture of these firms and protect consumers. This move reflects a broader recognition of the need for enhanced security measures in the rapidly evolving digital currency landscape.
Hims, a telehealth company, has suffered a data breach that exposes sensitive personal health information (PHI) of its users. The breach could reveal details about users' conditions, such as baldness, obesity, or erectile dysfunction. The attackers may misuse this data for identity theft, targeted phishing scams, or other malicious activities. This incident raises serious concerns about the protection of personal health data in the telehealth sector, highlighting the ongoing challenges companies face in safeguarding sensitive information. Users of Hims should be vigilant about potential phishing attempts and monitor their accounts for unusual activity.
Cybersecurity teams are facing an increasing number of credential-based attacks, which are becoming more sophisticated and harder to detect. To combat this trend, experts suggest that teams need to shift their detection models to better identify these threats as they evolve. This includes adapting to the changing tactics used by attackers, who often disguise their activities to look like normal business operations. As organizations continue to rely on digital credentials for access, the risk of these types of attacks grows, potentially leading to significant data breaches and financial losses. Companies must stay vigilant and update their security strategies to protect against these emerging threats.
In recent discussions, cybersecurity experts have raised alarms about the implications of Claude Mythos, a new threat that could impact various organizations. Financial institutions, particularly those that traditionally invest less in cybersecurity than larger banks, are urged to take immediate action to bolster their defenses. The meeting between Bessent and Powell, along with top bankers, indicates a growing concern about potential vulnerabilities that could be exploited by attackers. As cyber threats continue to evolve, companies must prioritize their cybersecurity strategies to protect sensitive data and maintain trust with customers. The conversation underscores the need for proactive measures in an increasingly digital landscape.
The FBI and NSA have issued a warning about Russian hackers taking advantage of vulnerabilities in routers. These attackers are reportedly exploiting weaknesses to gain unauthorized access to networks, potentially compromising personal and corporate data. This issue affects a wide range of router models, but specific brands and versions have not been disclosed. Users and businesses are encouraged to take proactive measures to secure their routers, as these vulnerabilities could lead to significant security breaches. Ensuring that firmware is updated and default settings are changed are among the recommended steps to mitigate the risk.
Zephyr Energy recently disclosed a significant financial loss of £700,000 due to a business email compromise (BEC) attack. Cybercriminals likely gained access to the company's email or accounting systems, allowing them to alter payment details without detection. This incident points to the growing threat of BEC attacks, where attackers manipulate communication to deceive organizations into making fraudulent payments. The financial implications for Zephyr Energy are substantial, and it raises concerns about the security measures in place to protect sensitive information. Companies need to be vigilant about email security to prevent similar attacks in the future.
Iranian-linked hackers have targeted U.S. critical infrastructure by exploiting vulnerabilities in nearly 4,000 internet-connected programmable logic controllers (PLCs) made by Rockwell Automation. These devices are essential for controlling various industrial processes, making them prime targets for cyberattacks that could disrupt operations. The exposure of these PLCs raises significant concerns about the security of critical infrastructure, as successful attacks could lead to severe disruptions in industries such as manufacturing and energy. Researchers are urging companies using these devices to take immediate action to strengthen their cybersecurity measures and protect against potential intrusions. This incident serves as a reminder of the ongoing risks posed by state-sponsored cyber activities and the need for enhanced defenses in industrial environments.
The Financial Industry Regulatory Authority (FINRA) has established a new Financial Intelligence Fusion Center aimed at tackling cybersecurity threats and fraud in the financial sector. This initiative is designed to enhance the collaboration between various financial institutions and regulatory bodies to share intelligence and improve responses to cyber threats. The center will focus on analyzing data, identifying emerging threats, and providing actionable insights to better protect investors and financial markets. By fostering cooperation among different players in the industry, FINRA hopes to strengthen defenses against increasingly sophisticated cybercriminals. The establishment of this center comes at a time when the financial sector is facing heightened risks from cyberattacks and fraudulent activities, making this initiative particularly timely and necessary.
In October 2025, researchers identified a new malware strain named LucidRook, which is targeting non-governmental organizations (NGOs) in Taiwan. The malware is delivered through RAR or 7-Zip archives that use social engineering tactics to entice users into executing a dropper called LucidPawn. This method of distribution raises concerns about the security of NGOs, which often handle sensitive information and may not have the same level of cybersecurity resources as larger organizations. The attacks reflect a growing trend of cybercriminals focusing on specific groups, potentially aiming to disrupt their operations or steal valuable data. As these organizations face increasing risks, the need for heightened security measures becomes more critical.
The article discusses the ongoing concerns among cryptographers about the potential impact of quantum computing on current encryption methods. As quantum computers become more powerful, they could potentially decrypt data that is currently secured by traditional algorithms. This has prompted the US National Institute of Standards and Technology (NIST) to work on developing post-quantum cryptography (PQC) to address these vulnerabilities. The timing of when quantum computers will reach this level of capability remains uncertain, but experts are actively preparing for the implications. This situation is significant as it could affect the security of sensitive data across various sectors, highlighting the need for organizations to begin transitioning to quantum-resistant encryption methods.
Chevin Fleet Solutions has confirmed that its FleetWave environments, hosted in Azure in both the UK and the US, were taken offline due to a cybersecurity incident. This precautionary measure was implemented to ensure the safety and integrity of user data and services. While specific details about the nature of the incident have not been disclosed, the downtime affects users who rely on FleetWave for fleet management solutions. The decision to take the systems offline suggests that the company is taking the threat seriously and prioritizing security over service availability. Users and organizations that utilize FleetWave should stay updated on the situation and follow any guidance provided by Chevin regarding service restoration and data security.
ChipSoft, a prominent Dutch healthcare IT firm, experienced a ransomware attack that led to the shutdown of its HiX platform, impacting numerous hospitals and healthcare providers across the Netherlands and Belgium. This incident has disrupted access to electronic health records (EHR) for both medical staff and patients, raising concerns about patient care and data security. As a major provider of EHR systems, ChipSoft's services are critical for managing patient information and facilitating healthcare operations. The attack underscores the vulnerability of healthcare systems to cyber threats, which can have serious implications for patient safety and operational continuity. Authorities and healthcare organizations are now tasked with addressing the fallout and restoring services as quickly as possible.
A recent analysis of one billion remediation records from the Cybersecurity and Infrastructure Security Agency (CISA) has found that many critical vulnerabilities are being exploited by attackers before organizations have a chance to patch them. The research conducted by Qualys indicates that the speed at which cyber threats evolve outpaces the ability of security teams to respond effectively. This situation leaves companies vulnerable to breaches and other security incidents, as they struggle to address known flaws quickly enough. The findings emphasize the growing need for enhanced security measures and automated solutions to keep pace with the increasing number of threats. Without these improvements, organizations risk significant exposure to attacks that can have devastating impacts.
Juniper Networks has released patches for multiple vulnerabilities in its Junos OS, including a critical flaw that could allow attackers to remotely take control of affected devices without needing authentication. This vulnerability poses a serious risk to organizations using Junos OS, as it could lead to unauthorized access and potential data breaches. The company has not specified which specific products are affected, but users of Junos OS should prioritize applying these updates. The presence of such a critical flaw emphasizes the need for regular software updates and vigilance in network security practices. Companies relying on Junos OS are encouraged to check for the latest patches and ensure they are implemented promptly to mitigate the risks associated with these vulnerabilities.