Cyber World

Date: September 5, 2026 Location: Berlin, Germany Threat Actor: Rhysida ransomware group Berlin Government Hit by Ransomware Attack The Berlin government ransomware attack has raised serious concerns about data security and the protection of sensitive government information. On September 5, 2026, stolen data from two Berlin government departments was reportedly published online after the authorities refused to pay a ransom. The incident highlights how ransomware attacks are increasingly targeting public institutions, putting government records, employee information, and potentially sensitive personal data at risk. How Did the Berlin Cyberattack Happen? The attack affected two departments of Berlin's state government: Senate Department for Mobility, Transport, Climate Protection and the Environment Senate Department for Urban Development, Building and Housing Authorities reportedly detected the cyberattack on August 14, 2026, and took steps to secure the affected systems. Howeve...

Introduction A single click can sometimes create a serious cybersecurity risk. In September 2026, a reported vulnerability in Telegram Desktop highlighted how improper handling of external links could potentially expose users’ local files and compromise their accounts. According to the published advisory, the vulnerability affected versions earlier than 7.2.9. How Does the Vulnerability Work? The reported flaw involved improper handling of the semicolon ( ; ) character in Telegram Desktop’s internal communication mechanism, known as inter-process communication (IPC). An attacker could potentially exploit this weakness using a specially crafted external link. Under the necessary conditions, the application might interpret injected data as additional commands, allowing sensitive local files to be transmitted to an attacker-controlled Telegram chat. If usable session data were exposed, account takeover could also become possible. However, clicking an arbitrary link does not automat...

September 1, 2026 Healthcare technology company Aesto Health has reported a major data breach potentially affecting 9,540,683 individuals . According to Aesto, an unauthorized actor accessed a portion of its AWS infrastructure between December 2 and December 18, 2025 . The company detected the incident on December 18 and launched an investigation with the help of external cybersecurity experts. The investigation found that personal and protected health information belonging to patients of Aesto's healthcare-provider clients may have been accessed or acquired. What Information Was Exposed? The potentially affected information varied by individual and may have included: Names and dates of birth Medical and health insurance information Social Security numbers Government identification numbers Driver's license information Financial account information Aesto has stated that it currently has no evidence of identity theft or financial fraud connected to the incident. The Cybersecuri...

  September 2026 Merrimack County in New Hampshire, USA, recently experienced a network security incident that disrupted several county computer systems and temporarily affected government services. The earliest documented impact occurred on August 25, 2026 , when county dispatchers lost access to criminal-information data through New Hampshire's IMC system. The county publicly confirmed the incident on August 26 and began working with cybersecurity specialists to investigate the unauthorized activity. What Happened? Merrimack County dispatchers were unable to access important law-enforcement information, including: Criminal records Driving information Active warrants Nearly 20 law-enforcement departments rely on Merrimack County's dispatch services. Alternative procedures were used while access to the affected system was unavailable. Despite the disruption, emergency call-taking and response operations continued . The county also took some systems offline as a precaution whil...

On July 6–10, 2026, attackers gained unauthorized access to cloud systems belonging to Apollo Global Management , a major private-equity firm. Apollo confirmed the incident on August 21, reporting that sensitive personal information had been compromised. The incident is part of a wider wave of cyberattacks targeting financial-sector organizations and highlights an important reality of modern cybersecurity: sometimes, attackers don't need to break through the technology—they simply convince someone to let them in. What Happened? According to reports, attackers used social engineering to gain access to Apollo's cloud environment. Social engineering is a technique in which attackers manipulate people into revealing information or performing actions that compromise security. In this broader campaign, attackers reportedly impersonated IT or help-desk personnel and contacted employees by phone. Victims were then directed toward fraudulent login pages designed to capture credentials ...

Generative AI (Gen AI) is becoming a regular part of business operations. Employees are using AI tools to write content, analyze information, solve problems, and improve productivity. But as AI usage grows, so does the risk of sensitive data being shared without proper protection. AI Usage Is Increasing According to Check Point’s August report, high-risk Gen AI prompts fell to their lowest level in several months. However, overall AI usage continued to rise. The average enterprise user generated 106 prompts in August , compared with 95 in July and around 78 in June. This shows that while some organizations may be improving their awareness and security controls, the growing use of AI is creating more opportunities for sensitive information to be entered into AI tools. The Risk Is Still Widespread The report found that: 86% of organizations regularly using Gen AI were affected by high-risk prompt activity. Organizations used an average of seven different AI tools . About 1 in every 43 p...