Akira Ransomware Racks Up 30+ Victims in a Single Day
Source: Dark Reading
The Akira ransomware group recently attacked over 30 victims in one day, using double extortion tactics to steal and threaten to leak data. Initially targeting Windows systems, the group now also attacks Linux environments. Affected sectors include education and manufacturing. Organizations are advised to enhance security measures like backups and phishing defenses.
Over 145,000 Industrial Control Systems Across 175 Countries Found Exposed Online
Source: The Hacker News
A recent analysis revealed over 145,000 industrial control systems (ICS) are exposed online across 175 countries, leaving critical infrastructure vulnerable to cyberattacks. The U.S. accounts for over one-third of these exposures. The research highlights unique regional risks, outdated protocols, and increasing malware targeting ICS, such as during the Russo-Ukranian war.
Surge in DocuSign Phishing Attacks Target US State Contractors
Source: Infosecurity Magazine
A recent phishing campaign is targeting U.S. state contractors by impersonating DocuSign communications to steal credentials and payments. Attackers mimic authentic workflows, such as project approvals or compliance requirements, using real DocuSign-like infrastructure. This tactic bypasses common email security systems, exploiting the trust associated with DocuSign. Victims face financial losses and operational disruptions.
Apple Confirms Zero-Day Attacks Hitting macOS Systems
Source: Securityweek
Apple has confirmed active exploitation of two zero-day vulnerabilities affecting macOS and Intel-based systems, as well as iOS and iPadOS devices. These vulnerabilities allow attackers to execute arbitrary code with kernel privileges and access kernel memory. Apple has released emergency patches to address the issues, urging users to update their devices to mitigate the risks.
300 Drinking Water Systems in US Exposed to Disruptive, Damaging Hacker Attacks
Source: Securityweek
Over 300 U.S. drinking water systems, serving 110 million people, are vulnerable to cyberattacks, according to an EPA report. Security weaknesses, including critical and high-severity issues, could disrupt operations or compromise customer data. The EPA lacks a comprehensive incident reporting system, relying on CISA for support. The vulnerabilities highlight significant risks to water infrastructure, raising concerns about public safety and cybersecurity gaps.