Ransomware actors have compromised customers of a utility software billing software provider after exploiting a vulnerability in the SimpleHelp Remote Monitoring and Management (RMM) tool. A new advisory from the Cybersecurity and Infrastructure Security Agency (CISA) warned that the incident reflects a broader pattern of ransomware actors targeting organizations through unpatched versions of SimpleHelp RMM...Read More
Fog ransomware hackers, known for targeting US educational institutions, are now using legitimate employee monitoring software Syteca, and several open-source pen-testing tools alongside usual encryption. While investigating a May 2025 attack on an unnamed financial institution in Asia, Symantec researchers spotted hackers using Syteca (formerly Ekran) and several pen-testers, including GC2, Adaptix, and Stowaway, a...Read More
Cybernews reports that Asefa, the Spanish arm of major French insurance firm SMABT, has confirmed having been impacted by a cyberattack that disrupted certain systems but not its core business after the Qilin ransomware gang alleged stealing 210 GB of data from the firm. Source link .........................Read More
Major South Korean ticketing platform and online book retailer Yes24 had its website and services taken down following a ransomware attack earlier this week, which was reported by local media outlets to have disrupted ticket preselling and events for various K-Pop artists, according to The Record, a news site by cybersecurity firm Recorded Future. Source...Read More
Fraud Management & Cybercrime , Ransomware 7.2 Million Individuals’ Personal Data Being Held to Ransom by Threat Actor Mathew J. Schwartz (euroinfosec) • June 13, 2025 The government place in Asunción, Paraguay. (Image: FranckV/Shutterstock) A data-leak extortion group is shaking down the government of Paraguay for a ransom payment worth $7.4 million, or...Read More
In the fast-changing world of cybersecurity, IT leaders have to keep up with evolving threats and new technologies to stay ahead of attackers. With nation states lending a hand to threat groups with more pointed aims than ever before, alongside the double-edged sword of greater AI adoption in cybersecurity, there’s never been a more worrying...Read More
Ransomware gangs have been exploiting a vulnerability in remote device control software SimpleHelp during a recent string of attacks, according to federal cybersecurity officials. The Cybersecurity and Infrastructure Security Agency (CISA) warned on Thursday that CVE-2024-57727 — a vulnerability affecting SimpleHelp’s widely-used remote access tools — was exploited to “compromise customers of a utility billing...Read More
Listen to the article 3 min This audio is auto-generated. Please let us know if you have feedback. Dive Brief: Ransomware gangs have exploited a vulnerability in the SimpleHelp remote support program to breach customers of a utility billing software vendor, the Cybersecurity and Infrastructure Security Agency (CISA) warned on Thursday. The government advisory follows...Read More
