Major Incidents or Breaches

  • U.S. hackers have reportedly caused a blackout in Venezuela, according to recent reports, indicating a significant cyber operation targeting critical infrastructure.
  • Nicholas Moore, a Tennessee man, pleaded guilty to repeatedly hacking the U.S. Supreme Court’s filing system and illegally accessing systems belonging to AmeriCorps and the Department of Veterans Affairs.

Newly Discovered Vulnerabilities

  • Wireshark 4.6.3 has been released, addressing 4 vulnerabilities and 9 bugs.

Notable Threat Actor Activity

  • Ukrainian and German law enforcement have identified two Ukrainian nationals suspected of working for the Russia-linked Black Basta ransomware group. One of the group’s leaders has been added to the EU Most Wanted list and is the subject of an INTERPOL Red Notice.
  • Malicious Chrome extensions impersonating productivity and security tools have been found stealing authentication credentials from enterprise HR and ERP platforms or blocking legitimate extensions.
  • Seventeen additional malicious browser extensions linked to the GhostPoster campaign have been discovered in Chrome, Firefox, and Edge stores, with a combined total of 840,000 installations.

Trends, Tools, or Tactics of Interest

  • Google Chrome now allows users to delete local AI models used for scam detection under the “Enhanced Protection” feature, providing more user control over on-device AI-powered security functions.