The Breach News

Senator Calls for FTC Investigation of Microsoft Following Ascension Ransomware Attack

U.S. Senator Ron Wyden has called on the Federal Trade Commission (FTC) to investigate Microsoft following its role in a significant ransomware attack on Ascension Hospital, resulting in the exposure of 5.6 million patient records. In a letter dated September 10, 2025, Senator Wyden criticized Microsoft’s software, claiming it facilitated…

Read MoreSenator Calls for FTC Investigation of Microsoft Following Ascension Ransomware Attack

Brute-Force Attacks Target More Than 4,000 ISP IPs to Distribute Info Stealers and Cryptominers

Recent findings from the Splunk Threat Research Team reveal that Internet Service Providers (ISPs) in China and the West Coast of the United States are facing a widespread and sophisticated exploitation campaign. This initiative employs information-stealing malware and cryptocurrency mining software, targeting compromised hosts to gain unauthorized access. The report…

Read MoreBrute-Force Attacks Target More Than 4,000 ISP IPs to Distribute Info Stealers and Cryptominers

Rackspace Verifies Play Ransomware Group as Cause of Recent Breach

Rackspace Confirms Ransomware Attack by Play Group On Thursday, cloud services provider Rackspace identified the ransomware group known as Play as the responsible party behind a recent security breach that occurred in December 2022. The breach targeted Rackspace’s Hosted Exchange email environment, taking advantage of a previously undisclosed vulnerability. The…

Read MoreRackspace Verifies Play Ransomware Group as Cause of Recent Breach

CISA Introduces a New Vision for the CVE Program: Will It Succeed?

CISA Reveals New Vision for CVE Program Amid Funding Concerns Chris Riotta (@chrisriotta) • September 11, 2025 Image: Mitre/Shutterstock/ISMG The Cybersecurity and Infrastructure Security Agency (CISA) has announced an updated vision for its Common Vulnerabilities and Exposures (CVE) program, a crucial system for tracking vulnerabilities worldwide. Despite the agency’s objectives,…

Read MoreCISA Introduces a New Vision for the CVE Program: Will It Succeed?

The US Becomes the Top Investor in Commercial Spyware

Paragon’s Accusations Highlight Growing Concerns in the Global Spyware Market Paragon has issued a strong response to findings from an investigative committee, claiming that Italian authorities have failed to perform a comprehensive technical verification that could have potentially clarified ongoing issues. This accusation emphasizes the need for thorough investigations to…

Read MoreThe US Becomes the Top Investor in Commercial Spyware

How Emerging AI Agents Will Revolutionize Credential Stuffing Attacks

Rising Threat of Credential Stuffing Attacks in 2024 In 2024, credential stuffing attacks have emerged as a significant cybersecurity concern, driven by a troubling cycle of infostealer malware infections and data breaches. The situation, already precarious, is poised to worsen with the advent of Computer-Using Agents (CUAs), a novel class…

Read MoreHow Emerging AI Agents Will Revolutionize Credential Stuffing Attacks

Vyro AI Breach Exposes Weak Cyber Hygiene Practices – Dark Reading

Vyro AI Leak Exposes Weaknesses in Cybersecurity Practices Recent revelations from a security breach involving Vyro AI have shed light on significant vulnerabilities in the company’s cybersecurity protocols. The incident, detailed in a report by Dark Reading, has raised serious concerns about the organization’s ability to safeguard sensitive data, prompting…

Read MoreVyro AI Breach Exposes Weak Cyber Hygiene Practices – Dark Reading