July 25, 2025

Akira Group Attacks U.S. Defense Contractor

The Akira ransomware group carried out a significant cyberattack against a U.S. defense contractor, highlighting the growing risks to organizations involved in national security and defense. The attackers claimed to have stolen a substantial collection of sensitive data, including corporate records, contracts, nondisclosure agreements, and nearly 200 identification documents such as passports and driver’s licenses.The incident was linked to the […]
July 10, 2025

Qilin Ransomware Dominates the Month

The Qilin ransomware group emerged as the most dominant player in the global ransomware landscape, consolidating its position as a formidable cyber extortion actor. The group was responsible for approximately 73 confirmed victims, accounting for nearly 17% of the 423 ransomware disclosures tracked worldwide during the month. This marks the third time in four months that Qilin has led in […]
June 18, 2025

Lee Enterprises says cybersecurity incident cost millions

Lee Enterprises, a major U.S. regional newspaper publisher, continued to grapple with the aftermath of a ransomware attack attributed to the Qilin gang that disrupted operations across more than 75 newspapers and exfiltrated nearly 350 GB of sensitive data. The breach compromised information of about 39,779 individuals, including names, Social Security numbers, driver’s license details, financial and medical records, and […]
June 17, 2025

Supply Chain Attack on NPM Packages

In June 2025, a significant supply chain attack on the NPM ecosystem was uncovered, primarily affecting multiple React-Native Aria packages that had been tampered with to distribute a Remote Access Trojan (RAT). The malicious code was embedded in seemingly routine updates, beginning with @react-native-aria/focus version 0.2.10 and quickly spreading across related packages, many of which collectively record hundreds of thousands […]
June 4, 2025

16 Billion Credentials Leaked in Massive Data Dump

Cybersecurity researchers revealed the exposure of an unprecedented 16 billion login credentials, described as the largest credential compilation ever recorded. The data, sourced from past breaches, infostealer malware logs, and recycled leaks, included usernames, passwords, cookies, and tokens linked to major platforms such as Google, Apple, Facebook, Telegram, and government services. While many experts stressed that much of the dataset […]
May 25, 2025

Cellcom Outage Mobile Carrier Suffers Major Cyberattack

Wisconsin-based wireless carrier Cellcom suffered a major cyberattack that severely disrupted mobile services for nearly 75,000 subscribers across Northeast Wisconsin and Michigan’s Upper Peninsula. The outage began on May 14, leaving customers unable to make calls, send SMS messages, or port numbers, though 911 services, mobile data, iMessage, and RCS messaging continued to function.At first, Cellcom described the disruption as […]
May 17, 2025

Peter Green Chilled Supply Chain Attack

UK-based logistics firm Peter Green Chilled, a key distributor of chilled, frozen, and ambient foods to major supermarkets including Tesco, Sainsbury’s, M&S, Aldi, Waitrose, Co-op, Asda, and Morrisons, suffered a significant ransomware attack. The incident began on the evening of 14 May, when malicious actors encrypted the company’s systems. By 15 – 16 May, order processing was fully disrupted, though […]
May 2, 2025

Retail Giants Harrods and Co-Op Under Attack

A wave of cyberattacks targeted major UK retail institutions, including Harrods and the Co-operative Group (Co-op), alongside Marks & Spencer (M&S). These assaults unfolded in rapid succession and collectively exposed systemic vulnerabilities in the retail sector’s cybersecurity infrastructure.Harrods, the renowned luxury department store, disclosed on May 1, 2025, that it had experienced attempted unauthorized access to its systems. In response, […]
April 15, 2025

Zero-Day Supply Chain Breach Hits Real Estate Sector

Microsoft disclosed a critical zero-day vulnerability (CVE-2025-29824) in the Windows Common Log File System (CLFS) driver. The flaw was actively exploited by a threat group known as Storm-2460, which deployed PipeMagic malware to gain elevated privileges, harvest credentials, and execute ransomware attacks. While the broader campaign mainly impacted IT and technical service providers, the real estate sector was among the […]
123456789101112131415161718192021222324252627282930313233
Next page

Collaboration can mitigate the effects of Ransomware Attacks

Archives
Categories
Privacy Policy
RSS NCSC Threat Reports Feed

© 2021 CyberEnsō – Nihon Cyber Defence Co., Ltd. All Rights Reserved.