A Chinese hacker allegedly belonging to Silk Typhoon, the state-sponsored Chinese hacking group behind the Microsoft Exchange Server attacks of 2021 among other major actions, was picked up in Milan on July 3 on a US arrest warrant.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
Hot on the heels of the U.S. bombing of Iranian nuclear facilities, a joint cybersecurity advisory has warned critical infrastructure organizations of cyber threats stemming from Iranian-backed malicious actors.
AI deepfakes were used to contact three foreign ministers, a US Governor, and a member of Congress around the middle of June via the Signal messaging app. Two of the officials received fake voicemail messages mocked up to use Rubio's voice, and another received an invite to join a chat.
Amid the ongoing political row with the Trump administration, Columbia University has suffered a sophisticated cyber attack by a politically motivated hacktivist who copied student data.
Cloudflare, one of the world's largest content delivery networks and web security service providers, is taking on AI bots with a new "Easy button" that simplifies the shutdown of unauthorized content scraping.
The International Criminal Court (ICC) suffered a sophisticated cyber attack coinciding with the Hague NATO summit attended by U.S. President Donald J. Trump, who pushed for increased defense spending among member countries.
The Qantas breach appears to be isolated to a third-party contact center that the airline uses for customer service queries. Unusual activity was detected on June 30, leading to discovery of the data breach and "immediate" actions to contain it, and up to six million customers may be impacted.
A ransomware attack on a third-party service provider has impacted numerous Swiss government departments, potentially leaking sensitive personally identifiable information.
Multinational food retailer Ahold Delhaize reports that the November 2024 ransomware attack on its U.S. operations resulted in a massive data breach affecting over 2.2 million individuals.
The FBI is warning that one of the world's most prolific and dangerous ransomware groups has now set its sights on the "airline ecosystem" of the region, and has already racked up successful cyber attacks against two major airlines.










