FBI Seizes Seven Domains Supporting Flax Typhoon Scanning and Phishing Operations
U.S. authorities seized seven domains linked to scanning, phishing, malware delivery, and persistence tools allegedly operated by China-based Integrity Technology Group. The disruption affects infrastructure associated with Flax...
Nine-Day Scanning Surge Targets Unpatched Hikvision Cameras Across Ukraine
GreyNoise logged a sharp nine-day spike in scanning and exploitation attempts against internet-exposed Hikvision cameras in Ukraine, almost all aimed at the four-year-old, maximum-severity CVE-2021-36260 command injection flaw....
Password-Free Login Flaw in Sungrow’s Solar Cloud Platform Could Have Enabled Grid-Wide Disruption
A business-logic flaw in Sungrow's iSolarCloud platform let attackers authenticate into any customer account using only an email address, with no password required and no login alert sent....
Iran-Linked Blinder Tunnel Campaign Targets Iraqi Infrastructure Through Fake Coding Test
An Iran-aligned operation used a counterfeit Dubai Airports recruitment process and a weaponized Visual Studio project to target an Iraqi developer. The chain deployed persistent remote access and...
Warlock Ransomware Turns SharePoint Servers Into Gateways to Essential Services
A China-linked operator is exploiting on-premises SharePoint flaws to deploy Warlock ransomware across water, telecom, government and education organizations. Recent intrusions show how web shells, stolen machine keys,...
CenterPoint Energy Confirms Customer Data Theft From Internet-Facing System
CenterPoint Energy says an unauthorized party accessed customer personal information through an internet-facing company system. Energy delivery remains unaffected, but the utility has not yet disclosed the number...
Cyber Incident Halts Small UK Power Plant for Four Days as Attribution Remains Unclear
A cyber incident reportedly stopped a small British peaking power plant for roughly four days without disrupting customers or the wider grid. Officials confirmed the event, while key...
Iran-Linked Hackers Knocked a UK Power Plant Offline for Four Days in a First-of-Its-Kind Attack
A small UK energy generator was forced completely offline for four days last month in what officials describe as the first successful cyberattack to shut down a British...