June 1, 2026

Critical WordPress Plugin Vulnerability Actively Exploited by Attackers

Website owners using the WP Maps Pro plugin are being urged to update immediately after security researchers confirmed active attacks targeting a critical vulnerability in the software. The flaw, identified as CVE-2026-8732, has received a severity rating of 9.8 out of 10, making it one of the most serious WordPress vulnerabilities reported this year. WP Maps Pro is a widely […]
May 15, 2026

Instructure Reaches Ransom Agreement with ShinyHunters to Stop 3.65TB Canvas Leak

One of the largest cybersecurity incidents to impact the education sector came to light in May 2026 after learning platform Canvas LMS confirmed that it had suffered a significant data breach. According to Instructure, the company behind Canvas, unauthorized access to its systems occurred on April 25. The intrusion was detected several days later, and the company publicly disclosed the […]
May 1, 2026

Two Cybersecurity Professionals Get 4-Year Sentences in BlackCat Ransomware Attacks

In a case that has shocked the cybersecurity community, two former cybersecurity professionals have been sentenced to four years in federal prison after helping the notorious ALPHV/BlackCat ransomware group carry out cyber extortion attacks.Ryan Goldberg, an incident response manager at Sygnia, and Kevin Martin, a ransomware negotiator at DigitalMint, used their industry knowledge to assist cybercriminals rather than protect organizations […]
March 12, 2026

Iranian Hacktivists Destroy Stryker’s Global Infrastructure

One of the most alarming cyber incidents of 2026 wasn’t caused by ransomware or a sophisticated piece of malware. Instead, attackers turned a company’s own management tools against it.On March 11, medical technology giant Stryker suffered a massive cyberattack that affected more than 200,000 employee devices across 79 countries. According to reports, the threat group Handala gained access to Microsoft’s […]
January 30, 2026

Cl0p Mass Exploiting Zero-day Vulnerability in Oracle E-Business Suite

One of the biggest cybersecurity stories affecting organizations in January 2026 was the ongoing Oracle E-Business Suite (EBS) breach linked to the Cl0p ransomware group. The attackers took advantage of a critical security vulnerability in Oracle’s BI Publisher Integration component, allowing them to gain unauthorized access to vulnerable systems and potentially execute malicious code remotely.According to security researchers, the vulnerability […]
January 7, 2026

Dire Wolf Ransomware Attack Hits Malaysian Energy Firm

Malaysian energy services company Perdana Petroleum Berhad became the latest victim of a major ransomware attack after the Dire Wolf ransomware group claimed responsibility for breaching the organization’s network.According to reports, the attackers used a double-extortion strategy, a tactic that has become increasingly common among modern ransomware groups. In addition to encrypting company systems and disrupting business operations, the group […]
December 25, 2025

Kuaishou Cyberattack Disrupts Livestreaming, Triggers Sharp Stock Decline

Chinese short-video and livestreaming platform Kuaishou, a leading competitor to TikTok, experienced a highly coordinated cyberattack on December 22, 2025, around 10 p.m. local time, which significantly disrupted its core livestreaming operations. Organized criminal groups, often referred to as “black and grey industries,” used nearly 17,000 automated bots and AI-driven tools to overwhelm the platform. These bots flooded popular live […]
November 18, 2025

Coupang breach exposes data of over 33 million users

South Korean e‑commerce giant Coupang has disclosed a massive data breach that exposed personal information from approximately 33.7 million customer accounts, making it one of the largest cyber incidents in the country’s history. ​The exposed data includes names, email addresses, phone numbers, postal or shipping addresses, and order histories, with some reports noting leak of delivery entrance codes, raising concerns […]
September 22, 2025

Collins Aerospace/European airport systems hit by ransomware

A ransomware attack targeting Collins Aerospace’s vMUSE check-in and boarding software in September created widespread disruption at several major European airports, including London Heathrow, Brussels, Berlin Brandenburg, and Dublin. The assault began late Friday and rendered automated check-in kiosks and bag-drop systems inoperable, forcing airline staff to revert to manual paper-based processes. This rapid shift caused severe delays, extensive queues, […]
12345678910111213141516171819202122232425262728293031323334353637
Next page

Collaboration can mitigate the effects of Ransomware Attacks

Archives
Categories
Privacy Policy
RSS NCSC Threat Reports Feed

© 2021 CyberEnsō – Nihon Cyber Defence Co., Ltd. All Rights Reserved.