Topic: attack attribution

  • Romanian Water Authority Hit by Major Ransomware Attack

    Romanian Water Authority Hit by Major Ransomware Attack

    A ransomware attack disrupted administrative systems at Romania's national water authority, but crucial operational technology controlling physical water infrastructure like dams remained unaffected and functional. The attackers used the legitimate Windows BitLocker feature to encrypt files, leav...

    Read More »
  • First AI-Run Ransomware Attack Still Required Human Help

    First AI-Run Ransomware Attack Still Required Human Help

    Sysdig reported the first documented instance of "agentic ransomware" named JadePuffer, where an AI agent independently breached a server, stole credentials, encrypted files, and wrote its own ransom note without human technical oversight during the attack. Sysdig clarified that human involvement...

    Read More »
  • MANGO Data Breach Exposes Customer Information

    MANGO Data Breach Exposes Customer Information

    MANGO alerted customers to a data breach caused by a third-party marketing partner, exposing personal information like names, email addresses, and phone numbers, but not sensitive financial or password data. The company confirmed its own systems were not compromised, operations continued uninterr...

    Read More »
  • Russian Hackers Attack Using New Microsoft Office Bug

    Russian Hackers Attack Using New Microsoft Office Bug

    Russian state-backed hackers (APT28/Fancy Bear) are actively exploiting a patched Microsoft Office vulnerability (CVE-2026-21509) in targeted attacks against Ukrainian and EU entities, using phishing emails with malicious documents. The attack delivers sophisticated malware via a complex WebDAV c...

    Read More »
  • Russia's Sandworm Blamed for Polish Power Grid Wiper Attack

    Russia's Sandworm Blamed for Polish Power Grid Wiper Attack

    A Russian state-sponsored hacking group, Sandworm, is attributed with a cyberattack on Poland's energy grid in late 2025 using destructive DynoWiper malware, though it did not cause a power outage. The attack's timing is seen as symbolic, coinciding with the 10-year anniversary of Sandworm's 2015...

    Read More »