The Cybersecurity and Infrastructure Security Agency (CISA) is launching a series of town hall meetings aimed at improving communication with stakeholders regarding cyber incident reporting for critical infrastructure. These sessions will provide an opportunity for participants to share their experiences and insights related to cybersecurity incidents. CISA emphasizes the need for timely reporting of cyber events to better protect essential services and infrastructure. The initiative is part of a broader effort to enhance collaboration between government and private sectors in addressing cybersecurity challenges. Engaging with a diverse range of stakeholders is crucial as it allows for a more comprehensive understanding of the current cyber threats facing critical infrastructure.
Latest Cybersecurity Threats
Real-time threat intelligence from trusted sources
Hackread – Cybersecurity News, Data Breaches, AI and More
Cybercrime related to cryptocurrency has surged, with losses reaching $17 billion. This increase is largely driven by AI-enabled scams, including sophisticated deepfakes and fraud kits that make it easier for attackers to manipulate victims. Industrial social engineering tactics are also evolving, making it harder for individuals and companies to protect their digital assets. As these scams become more prevalent, users and businesses must be vigilant and enhance their security measures to safeguard against these emerging threats. The growing intersection of AI technology and cybercrime is reshaping how these attacks are executed, posing significant risks to the crypto community and beyond.
Hackers have begun exploiting a serious vulnerability in BeyondTrust Remote Support known as CVE-2026-1731, which allows unauthenticated remote code execution. This flaw was identified and a proof of concept (PoC) was released just a day prior to the exploitation attempts, indicating a rapid response from malicious actors. Organizations using BeyondTrust Remote Support should be particularly vigilant, as this vulnerability poses significant risks, potentially allowing attackers to take control of affected systems. The quick exploitation of this flaw underscores the importance of timely patch management and security measures to protect sensitive data and systems from unauthorized access. Users are urged to monitor for updates and apply any patches as soon as they become available to mitigate risks.
In December 2025, npm implemented significant changes to its authentication process following the Sha1-Hulud incident, which was a notable supply-chain attack. While these updates are a positive move toward enhancing security, they do not fully protect npm projects from future supply-chain attacks or malware. Users of npm should remain vigilant, as the platform is still vulnerable to potential malware threats. This situation serves as a reminder that even after security improvements, the risk of attacks persists, and both developers and organizations need to adopt best practices to safeguard their projects. Staying informed and proactive is essential for a safer Node community.
The Dutch National Police have arrested a 21-year-old man from Dordrecht in connection with the distribution of a malicious tool known as JokerOTP. This bot is designed to intercept one-time passwords (OTPs), which are commonly used to secure online accounts and financial transactions. Authorities believe the suspect was selling the bot through a Telegram account and possessed license keys related to it. This arrest is part of a broader effort by police to combat cybercrime and follows two previous arrests in the same investigation. The use of tools like JokerOTP poses significant risks to individuals and organizations, as it can facilitate unauthorized access to sensitive information and financial resources.
Industrial control systems are still relying on outdated communication protocols that prioritize reliability over security features like authentication and data integrity. This leaves networks vulnerable, allowing attackers to impersonate devices, send unauthorized commands, or alter messages without being detected. A new guidance document from the Cybersecurity and Infrastructure Security Agency (CISA) explains the reasons behind the slow adoption of more secure versions of these industrial protocols. Despite their availability, many organizations are hesitant to implement them, which raises serious concerns about the security of critical infrastructure. The continued use of legacy systems could lead to significant risks for industries that depend on these technologies.
The Tianfu Cup, a prominent hacking competition in China, has been revived but now operates under tighter secrecy than in previous years. While the contest has a reputation for showcasing advanced hacking skills and finding vulnerabilities, the rewards for successful exploits are reportedly lower than they were during its peak. This shift in focus and reduced incentives may impact the level of participation and the quality of exploits demonstrated. Given the competition's history, its revival raises questions about China's stance on cybersecurity and the implications for global tech companies, which may face new vulnerabilities as a result of the research presented at the event. Observers will be watching closely to see how this contest evolves and what it means for the cybersecurity community internationally.
In 2024, cyberattacks involving data extortion surged to 6,800 incidents, marking a significant 63% increase from the previous year. This rise has been largely driven by the intensified activities of ransomware groups such as Qilin, Sp1d3r Hunters, and Clop. These groups are known for stealing sensitive data and then threatening to release it unless a ransom is paid. This trend poses serious risks to organizations across various sectors as they face increasing pressure to protect their data and respond to extortion demands. Companies must enhance their cybersecurity measures to mitigate these risks and safeguard their sensitive information from being exploited by cybercriminals.
ApolloMD, a major healthcare firm based in Georgia with operations across the U.S., disclosed a significant data breach affecting over 626,000 patients. The incident, which occurred in May, was attributed to the Qilin ransomware group. Compromised information includes sensitive data, which raises serious concerns about patient privacy and potential identity theft. As healthcare organizations increasingly face cyber threats, this breach serves as a troubling reminder of the vulnerabilities within the sector. Patients and providers alike need to be vigilant about safeguarding personal information and responding to potential fallout from such attacks.
SCM feed for Latest
The UK government's Science, Innovation and Technology Committee recently questioned ministers about the challenges of preventing sensitive data leaks, particularly in light of a recent incident involving the Ministry of Defence (MoD). In this case, sensitive information was accidentally exposed, putting Afghan informants at risk. This incident raises serious concerns about data security practices within government departments. The committee is focused on ensuring that such lapses do not occur again, especially given the potential dangers to individuals who have assisted UK forces. The discussion highlights the urgent need for better safeguards to protect sensitive data in government systems.
Recent zero-day vulnerabilities in Ivanti's Endpoint Manager Mobile (EPMM) have sparked renewed concern among cybersecurity experts. These flaws, which can be exploited by attackers, could potentially compromise sensitive data in mobile devices managed by the software. Organizations using EPMM must act quickly to secure their systems, as these vulnerabilities are already being exploited in the wild. Experts are urging a shift away from simply applying patches and towards more robust security measures, including better authentication controls and reducing unnecessary public interfaces. The urgency of the situation emphasizes the need for businesses to prioritize security and stay updated with the latest patches and practices.
A serious vulnerability has been discovered in BeyondTrust Remote Support and Privileged Remote Access appliances, allowing attackers to execute code remotely without authentication. This flaw has become a target for exploitation after a proof-of-concept (PoC) was made publicly available. Organizations using these systems should be particularly vigilant, as the flaw can lead to unauthorized access and potential data breaches. BeyondTrust has released patches to address this issue, and it’s crucial for users to apply these updates promptly to protect their systems. The urgency of this situation highlights the need for proactive security measures in remote access technologies.
As Valentine's Day approaches, a new report reveals that men are nearly twice as likely as women to fall victim to romance scams. These scams typically involve fraudsters posing as potential romantic partners online, often leading to significant financial losses for victims. The reluctance to discuss these incidents is prevalent, with many individuals feeling ashamed or embarrassed about being scammed. This silence can hinder awareness and prevention efforts, making it crucial for people to openly share their experiences. Given the emotional and financial toll these scams can take, men should be particularly vigilant this Valentine's Day to avoid falling prey to such deceitful tactics.
Cyber Defense Magazine
Insider threats continue to be a significant concern for organizations, with a recent report showing that 64% of those with formal programs still face incidents. This suggests that existing measures may not be sufficient to fully protect against threats from within. The rise of synthetic identities complicates this issue further, as attackers may use these identities to bypass security protocols and gain unauthorized access. Companies must enhance their strategies to identify and mitigate these threats, focusing on employee monitoring and robust access controls. This ongoing challenge emphasizes the need for organizations to stay vigilant and adapt their security measures to effectively address insider risks.
Conpet S.A., Romania's national oil pipeline operator, has confirmed that it fell victim to a data breach involving the Qilin ransomware gang last week. The attackers managed to steal sensitive company data, although specific details about the compromised information have not been disclosed. This incident raises concerns about the security of critical infrastructure, particularly in the energy sector. As ransomware attacks continue to target essential services, it highlights the need for stronger cybersecurity measures to protect against such threats. Companies in similar sectors should take this as a warning to review their security protocols and ensure they can respond effectively to potential breaches.