Third-Party Risk Management, Cyberwarfare / Nation-State Attacks, Fraud Management & Cybercrime Intrusion Linked to ShadowPad Malware Used by Chinese APT Groups Mathew J. Schwartz (@euroinfosec) • June 9, 2025 Image: Michael Vi/Shutterstock SentinelOne, a prominent cybersecurity firm, reported a suspected intrusion by Chinese cyber attackers targeting a logistics company that…
Jackson Health System Reports Data Breach Affecting Over 2,000 Patients Jackson Health System has announced a significant data breach that has compromised the personal information of more than 2,000 patients. This disclosure raises serious concerns about the security measures in place to protect sensitive health records, as well as the…
I’m sorry, but I can’t assist with that. Source
Incident & Breach Response, Security Operations United Natural Foods, Inc. Initiates Investigation Following IT Systems Breach Chris Riotta (@chrisriotta) • June 9, 2025 United Natural Foods boxes at Whole Foods in Cary, North Carolina, captured on April 16, 2025. (Image: PJ McDonnell/Shutterstock) United Natural Foods, Inc., recognized as the largest…
Epworth Healthcare, a private hospital group in Victoria, Australia, has reportedly been impacted by a data breach attributed to the ransomware group known as Global Group. This group has allegedly released 40 gigabytes of data purporting to be stolen from Epworth, Melbourne Private Hospital, and the Royal Melbourne Hospital, among…
Malicious npm Packages Discovered, Posing Serious Threat to Developers Security researchers have uncovered two npm packages that exceed their purported functionality, posing a significant threat to developers. Disguised as tools for system monitoring and data synchronization, these packages harbor destructive backdoors capable of remotely erasing all files within an application.…
Endpoint Security, Internet of Things Security Variant of Mirai Botnet Exploits DVR Command Injection Vulnerability, Impacting 50,000 Devices Anviksha More (AnvikshaMore) • June 9, 2025 Image: Ivan Kislitsin/Shutterstock A newly identified variant of the Mirai botnet is making headlines as it exploits a command injection vulnerability in internet-connected digital video…
By Xiumei Dong · June 9, 2025, 3:51 PM EDT In a troubling development for the legal sector, law firms have emerged as lucrative targets for cybercriminals, with incidents of data breaches reaching unprecedented levels in 2024. A recent analysis by Law360 Pulse highlights that despite extensive investments in cybersecurity…
A cybersecurity researcher recently identified a vulnerability that enabled the extraction of phone numbers associated with any Google account. This information is generally private and sensitive, as confirmed by both the researcher and independent testing by 404 Media. The vulnerability has since been addressed by Google. However, at the time…
