For providers

Teams need to upgrade their NHI game – here’s how to get started.

The growing list includes 26 CISO and CSOs, 21 CEOs, and experts from companies including Google, Sophos and NVIDIA.

Yesterday, a reader reported to us a malicious ZIP archive (SHA256: a0104921a2d37ab87482ac9a9f5c3713479c118846c3e999178e75b81620c094[ 1]). Once unzipped, it contains a VHDX file that discloses a malicious JavaScript after being mounted (which is automatic on modern Windows OSs):

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The attackers, identified as UNC6508, likely exploited older, vulnerable versions of REDCap to gain initial access, although the exact method remains undetermined.

A report by Incogni found that ZipRecruiter, LinkedIn, and Monster are among the top platforms for collecting and sharing personal information.

The cyberattack on Mackay Sugar occurred during its peak crushing season, forcing two of its three mills offline and disrupting operations.