https://blog.dansec.red/actors/labhost/Recent content in LabHost on DanSec DailyHugoen-gbThu, 01 May 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-05-01-cybersecurity-news/Thu, 01 May 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-05-01-cybersecurity-news/<h2 id="major-incidents-and-breaches">Major Incidents and Breaches</h2> <ul> <li> <p><strong>SonicWall SMA100 Exploitation</strong></p> <ul> <li>SonicWall has confirmed active exploitation of two now-patched vulnerabilities in its SMA100 Secure Mobile Access appliances. Attackers are targeting unpatched systems in the wild.</li> </ul> </li> <li> <p><strong>UK Retailer Co-op Cyberattack</strong></p> <ul> <li>Co-op Food, a major UK supermarket chain, experienced limited operational disruption after a cyberattack, prompting the shutdown of some IT systems.</li> </ul> </li> <li> <p><strong>Ascension Healthcare Data Breach</strong></p> <ul> <li>Ascension, a large US healthcare provider, is notifying patients of a data breach stemming from a December 2024 third-party hacking incident, with personal and health information stolen.</li> </ul> </li> <li> <p><strong>Commvault Azure Breach</strong></p> <ul> <li>Data protection firm Commvault reported a breach of its Azure environment by a nation-state actor but stated customer backup data was not impacted.</li> </ul> </li> <li> <p><strong>Phishing Platform LabHost Takedown</strong></p> <ul> <li>The FBI released a list of 42,000 phishing domains tied to the dismantled LabHost phishing-as-a-service (PhaaS) operation, one of the largest of its kind.</li> </ul> </li> <li> <p><strong>RansomHub Ransomware Group Offline</strong></p> <ul> <li>The RansomHub ransomware-as-a-service operation&rsquo;s infrastructure has gone dark since 1 April 2025, causing affiliates to migrate to other groups such as Qilin and DragonForce.</li> </ul> </li> </ul>