Author: Staff Writer

Quick Takeaways False Alarm: The Arkana Security gang falsely claimed to have stolen new Ticketmaster data; instead, they listed data from the 2024 Snowflake data theft attacks, causing confusion and concern. Previous Breach Confirmation: BleepingComputer verified that the files shown in Arkana’s post matched previously leaked Ticketmaster data from the Snowflake incident, where several organizations were targeted using compromised credentials. Extortion Tactics: The threat actors ramped up their extortion attempts by showcasing stolen ticket information and leveraging the notoriety of past breaches, including those linked to ShinyHunters and the PowerSchool data breach. Unclear Origins: The origin and ownership of the…

GARTNER SECURITY & RISK MANAGEMENT SUMMIT — Washington, DC — Hype can be a detriment or an opportunity to improve one’s security posture, according to the opening keynote at Gartner’s Security & Risk Management Summit today.The keynote, entitled “Harness the Hype: Turning Disruption Into Cybersecurity Opportunity,” was hosted by Gartner distinguished vice president analysts Leigh McMullen and Katell Thielemann. The talk concerned the waves of hype that can take over the cyber industry, either through optimism for emerging technologies like AI or preoccupation with certain threats and risks.McMullen referenced major changes to the public sector in the past six months, involving executive orders, budget…

Essential Insights Unauthorized Activity Investigation: United Natural Foods, Inc. (UNFI) is addressing "temporary disruptions" due to unauthorized activity affecting its IT systems, discovered during a recent regulatory filing. System Outages and Workarounds: Key systems were taken offline for investigation, but UNFI is implementing workarounds to continue service delivery where feasible. Collaboration with Experts: The company has engaged leading forensic experts and law enforcement in its investigation to assess the breach and restore operations securely. Industry Context: This incident follows a previous online attack on Ahold Delhaize’s systems, highlighting growing cybersecurity risks in the grocery sector. The Impact of Cyberattacks on…

Fast Facts Cyberespionage Threats: SentinelOne reported ongoing cyberespionage probes from Chinese threat actors targeting cybersecurity vendors, emphasizing that no breaches occurred within their network. Supply Chain Concerns: A third-party contractor responsible for employee laptop logistics was briefly compromised, raising supply chain security alarms during the attack attempts. Targeted Infrastructure: Between July 2024 and March 2025, over 70 organizations were targeted, utilizing the ShadowPad backdoor linked to APT41, with reconnaissance conducted on SentinelOne’s servers. High-Value Targets: The company warns that cybersecurity firms are increasingly attractive targets for threat actors due to their critical roles, creating potential risks for their many downstream…

Quick Takeaways Cyber Espionage Campaign: Between July 2024 and March 2025, over 70 organizations—including a South Asian government and a European media entity—were targeted in a series of cyber intrusions linked to Chinese threat actors, particularly the PurpleHaze cluster. Intrusion Timeline: The attacks include multiple activity clusters indicating a sophisticated operation: starting with a government entity in June 2024, followed by a global targeting initiative, and specific attacks on SentinelOne’s IT logistics company and a media organization. Malicious Tools and Methods: State-sponsored actors employed advanced tools, including ShadowPad and GoReShell, often utilizing vulnerabilities like CVE-2024-8963 and CVE-2024-8190 to gain unauthorized…

Summary Points Data Breach Announcement: Sensata Technologies, a global industrial tech firm with over $4 billion in annual revenue, informed former and current employees of a data breach stemming from an April ransomware attack. Incident Timeline: The ransomware actors breached Sensata’s network from March 28 to April 6, 2025, leading to unauthorized access and data theft, though the exact scope and type of stolen data was initially unclear. Exposed Information: The stolen data includes sensitive personal details such as names, addresses, Social Security Numbers, financial account information, and medical records, affecting both current and former employees and their dependents. Support…

Summary Points Vulnerability Discovery: A security firm found nearly 400 critical human-machine interfaces (HMIs) in U.S. water utilities exposed to the internet, with 40 devices fully unauthenticated, allowing anyone to control them. Rapid Remediation: Following intervention from the security firm and the EPA, utilities secured their systems swiftly, reducing online unauthenticated access to fewer than 6% by May, with nearly 60% fixing issues within weeks. Sector’s Cybersecurity Challenges: The water sector, facing significant cyber threats from state-linked groups and ransomware, remains particularly vulnerable due to limited funding and expertise for cybersecurity defenses. Federal Awareness and Action: In response to the…

Top Highlights Cyberattack Impact: United Natural Foods (UNFI), the largest wholesale distributor in North America, shut down some systems due to a cyberattack discovered on June 5, disrupting customer orders across its network of 53 distribution centers. Operational Measures: In response to the breach, UNFI activated its incident response plan, implemented containment measures, and engaged external cybersecurity experts while notifying law enforcement to investigate the incident. Business Continuity: UNFI has established workarounds to maintain customer service despite system outages, although the company has not disclosed the nature of the attack or confirmed any data theft. Industry Context: This incident marks…

Top Highlights Vulnerability Exposure: Nearly 35,000 solar power devices, crucial for energy infrastructure, are openly accessible online, heightening cybersecurity risks according to Forescout. Geographic Distribution: Most exposed devices are concentrated in Europe (75%) and Asia (17%), with Germany and Greece housing significant numbers. Outdated Equipment Risks: Discontinued equipment like SMA’s Sunny WebBox continues to be a security liability despite known vulnerabilities, making them prime targets for cyber threats. Urgent Need for Security: The report highlights the critical need for robust cybersecurity practices and visibility in managing infrastructure to mitigate the risks of digitalization in the energy sector. Rising Risks in…

For businesses, compliance with regulations can often appear to be restrictive, and costly and reduce the speed of business. It’s still necessary to create an environment that protects not only internal data but also external constituents like partners and customers. Highly regulated industries, such as healthcare and finance, are often faced with a variety of regulations that vary by geography and can carry steep penalties and consequences for noncompliance. Most companies struggle to comply with regulations. In fact, Business Wire estimates that “71% of companies could potentially fail a cyber audit, which often includes identity management aspects”. What are some…