Posts

Warlock Ransomware Attacks Critical Infrastructure Through SharePoint Vulnerabilities

A ransomware campaign linked to the Warlock group has targeted critical infrastructure and public-sector organizations by exploiting vulnerabilities in on-premises Microsoft SharePoint servers. According to cybersecurity research published by Symantec and Carbon Black, the attackers targeted at least four organizations over a two-month period. The victims included a water utility, a telecommunications provider, a regional government body and a university. The organizations were located across Europe, Africa and Latin America. How did the attack happen? The attackers exploited vulnerabilities in Microsoft SharePoint Server to gain initial access to their victims’ networks. After entering the systems, they deployed malicious web shells, stole credentials and used remote-access techniques to move deeper into compromised networks. Researchers also observed the attackers abusing legitimate software, including Visual Studio Code’s tunneling feature, to maintain remote access while makin...
Post a Comment
Read more

Pentagon Data Breach Exposes Personal Information of 3 Million People

Date: September 30, 2026 Location: United States Organization: U.S. Department of Defense (DoD) Threat Actor: Unknown What Happened in the Pentagon Data Breach? A major Pentagon data breach exposed sensitive personal information belonging to approximately 3.05 million people, according to reports published in September 2026. The incident involved the Defense Manpower Data Center (DMDC), an organization connected to the U.S. Department of Defense. The breach reportedly affected 2.76 million living individuals and around 294,000 deceased individuals. The exposed information included Social Security numbers, names, dates of birth, and military or civilian employment details. The incident has raised concerns about government data security and the protection of sensitive information belonging to military personnel and other individuals. How Did the Data Breach Happen? Reports indicate that unauthorized users accessed files through a vulnerable file-sharing system. The unauthorized acce...
Post a Comment
Location: Delhi, India
Read more

Rajasthan Government Data Breach Claim: 8.63 Million Emails Reportedly Exposed

A new cybersecurity allegation involving Rajasthan’s Department of Information Technology & Communication (DoIT&C) has raised concerns about the safety of government data in India. According to reports, a threat actor is allegedly offering a large dataset linked to the department for sale. The claimed collection contains millions of emails, personal information and potentially sensitive access-related records. However, the authenticity and full extent of the alleged breach have not been independently confirmed. What Does the Alleged Data Leak Include? According to the reported figures, the dataset contains: 5,926 mailboxes containing approximately 8.63 million emails. 22,686 email attachments with a combined size of 6.63 GB. 783,495 unique email addresses. 70,301 identity records. 59,460 mobile numbers. 69 reportedly verified credentials. 21 VPN logins and 64 VPN certificates. 1,065 mailboxes reportedly belonging to senior officers. The reported data may include...
Post a Comment
Location: Delhi, India
Read more

Berlin Government Hit by Ransomware Attack as Hackers Leak Stolen Data

Image
Date: September 5, 2026 Location: Berlin, Germany Threat Actor: Rhysida ransomware group Berlin Government Hit by Ransomware Attack The Berlin government ransomware attack has raised serious concerns about data security and the protection of sensitive government information. On September 5, 2026, stolen data from two Berlin government departments was reportedly published online after the authorities refused to pay a ransom. The incident highlights how ransomware attacks are increasingly targeting public institutions, putting government records, employee information, and potentially sensitive personal data at risk. How Did the Berlin Cyberattack Happen? The attack affected two departments of Berlin's state government: Senate Department for Mobility, Transport, Climate Protection and the Environment Senate Department for Urban Development, Building and Housing Authorities reportedly detected the cyberattack on August 14, 2026, and took steps to secure the affected systems. Howeve...
Post a Comment
Location: Delhi, India
Read more

Telegram Desktop Vulnerability: How One Click Could Risk Your Account

Introduction A single click can sometimes create a serious cybersecurity risk. In September 2026, a reported vulnerability in Telegram Desktop highlighted how improper handling of external links could potentially expose users’ local files and compromise their accounts. According to the published advisory, the vulnerability affected versions earlier than 7.2.9. How Does the Vulnerability Work? The reported flaw involved improper handling of the semicolon ( ; ) character in Telegram Desktop’s internal communication mechanism, known as inter-process communication (IPC). An attacker could potentially exploit this weakness using a specially crafted external link. Under the necessary conditions, the application might interpret injected data as additional commands, allowing sensitive local files to be transmitted to an attacker-controlled Telegram chat. If usable session data were exposed, account takeover could also become possible. However, clicking an arbitrary link does not automat...
Post a Comment
Read more

Aesto Health Data Breach Affects Over 9.5 Million Patients

September 1, 2026 Healthcare technology company Aesto Health has reported a major data breach potentially affecting 9,540,683 individuals . According to Aesto, an unauthorized actor accessed a portion of its AWS infrastructure between December 2 and December 18, 2025 . The company detected the incident on December 18 and launched an investigation with the help of external cybersecurity experts. The investigation found that personal and protected health information belonging to patients of Aesto's healthcare-provider clients may have been accessed or acquired. What Information Was Exposed? The potentially affected information varied by individual and may have included: Names and dates of birth Medical and health insurance information Social Security numbers Government identification numbers Driver's license information Financial account information Aesto has stated that it currently has no evidence of identity theft or financial fraud connected to the incident. The Cybersecuri...
Post a Comment
Location: Delhi, India
Read more