Tag

Cyberattack

All articles tagged with #cyberattack

technology13 days ago•2 min saved

Autonomous AI Agents Threaten to Scale Global Cyberattacks

Autonomous AI agents capable of thinking, acting, and adapting without human intervention are being described as a hacker’s dream, potentially enabling scalable, relentless cyberattacks on corporate and government systems. Fortune highlights Anthropic’s Mythos as far ahead in cyber capabilities, signaling a new wave of AI-driven exploitation, while ‘shadow AI’ risks grow as employees run agents remotely. A Dark Reading poll shows nearly half of cybersecurity professionals view agentic AI as the top attack vector for 2026, underscoring the urgent need for safe, controlled AI environments and heightened organizational awareness.

via Axios|

#agentic-ai #cyberattack #cybersecurity

technology14 days ago•4 min saved

Iranian Hackers Leak Kash Patel’s Personal Emails in Retaliation Campaign

Pro‑Iranian group Handala published more than 300 emails and photos from Kash Patel’s personal Gmail, mostly dating from 2010–2012 with some items from 2022, claiming retaliation after FBI/DOJ actions against Iranian hacking operations. NBC News could not verify all emails; the material includes Patel’s family correspondence and a Cuba trip, with metadata indicating the breach predates his government work. The FBI says the information is historical and contains no government information. The incident occurs amid broader Iranian cyber activity targeting U.S. figures, with the State Department offering up to $10 million for information on Iranian hackers.

via NBC News|

#cyberattack #hackers #handala

technology25 days ago•10 min saved

Stryker breach spotlights risk of weaponized device-management tools

A March 2026 Stryker cyberattack allegedly used Microsoft Intune to remotely wipe thousands of devices, with Iran-linked Handala claiming credit and up to 50 terabytes of data stolen. Researchers say the attack leveraged living-off-the-land techniques rather than a flaw in Intune, highlighting how MDM/UEM platforms can be abused. MFA and multi-account approvals for destructive actions are advised as Stryker works with forensic experts and the CISA investigates the incident.

via Cybersecurity Dive|

#cyberattack #microsoft-intune #mobile-device-management

technology25 days ago•3 min saved

Stryker’s Intune wipe hits 80,000 devices; no malware used

Last week’s Stryker cyberattack, linked to the Handala hacktivist group, targeted its internal Microsoft environment and used the Intune wipe command to remotely erase data on about 80,000 devices after an admin account was compromised; attackers claimed wiping 200,000 devices and stealing 50 TB, but investigators found no data exfiltration and no malware was deployed. Medical devices remain safe, while electronic ordering systems are offline and orders must be placed via sales reps as restoration proceeds. Microsoft’s DART and Unit 42 are leading the investigation, with full operations and shipping expected to resume as systems recover.

via BleepingComputer|

#cyberattack #cybersecurity #handala-hacktivist

business29 days ago•3 min saved

Stryker Faces Uncertain Recovery Timeline After Global Cyberattack

Stryker disclosed a global cyberattack that disrupted its Microsoft environment and wiped devices via Intune, affecting about 5,500 employees across several regions; while restoration efforts are ongoing, the full timeline and potential financial impact remain unclear, with security researchers pointing to Handala/IRGC-linked APT34 activity though Microsoft has not commented.

via The Record from Recorded Future News|

#apt34 #business #cyberattack

technology29 days ago•2 min saved

Iranian Hacktivists Strike Stryker in Retaliation for Minab School Bombing

An Iran-linked hacktivist group, Handala, claims it hacked U.S. medical-device maker Stryker in retaliation for the Minab school bombing, saying it caused global disruption to Microsoft-based systems; Stryker says there is no ransomware evidence and the incident is contained, with a full restoration timeline unclear. Analysts warn more cyber actions may follow as Middle East tensions spill into the cyber realm.

via The Guardian|

#cyberattack #hacktivism #iran

tech1 month ago•38 min saved

Iran-linked cyberattack freezes Stryker’s global operations

An Iran-linked cyberattack disrupted Stryker’s global networks, taking devices offline and bringing operations to a standstill across Europe, Asia, and the US; Handala claims to have exfiltrated 50 TB of data and wiped over 200,000 devices, though Stryker says there is no malware or ransomware and the full impact and restoration timeline remain uncertain.

via The Verge|

#cyberattack #cybersecurity #handala

technology1 month ago•2 min saved

Iran-linked Hackers Hit U.S. MedTech Stryker, Disrupting Global Operations

Iran-backed Handala claimed responsibility for a global cyberattack on U.S. medical-technology company Stryker, crippling its Microsoft environment, wiping data on many computers, and forcing offices to close; Stryker says there is no ransomware and is assessing the impact as Handala frames the strike as retaliation for an Iranian school bombing.

via Mashable|

#cyberattack #cybersecurity #handala

world1 month ago•2 min saved

Iran-linked hackers cripple Stryker in retaliatory cyberattack

Iran-connected group Handala disrupted Stryker’s global networks and claimed to have stolen about 50 terabytes of data in retaliation for US-Israeli strikes on Iran. Stryker reported a global Microsoft environment disruption with no evidence of ransomware and said the incident is under investigation; Handala also claimed an attack on Verifone amid broader tensions and threats against Western targets.

via Al Jazeera|

#cyberattack #data-breach #handala

middle-east1 month ago•8 min saved

Prayer-time app hack spurs defection wishes amid Iran unrest

An Iranian prayer-time app was hacked to display anti-regime messages urging defections, as protests widen and Iran faces a widespread internet blackout. The attacker remains unknown, but the incident coincides with cyberattacks on state outlets and heavy repression of demonstrations, with Netblocks noting internet access dropped to about 4%.

via The Jerusalem Post|

#cyberattack #iran #iran-us-conflict

world2 months ago•6 min saved

Russia escalates cyber sabotage of Europe’s energy grid with Polish plants under attack

Russia’s hybrid warfare appears to be escalating as cyberattacks hit about 30 energy facilities in Poland, threatening a major blackout during a cold snap and signaling broader European subversion beyond Ukraine. The incidents reportedly point to the involvement of Russia’s security services (FSB), highlighting a bold expansion of Moscow’s clandestine strikes against critical infrastructure.

via The Economist|

#cyberattack #energy-security #hybrid-warfare

technology2 months ago•3 min saved

Coordinated Wiper Attacks Hit 30+ Renewable Farms, Sparking Grid Security Concerns

CERT Polska disclosed a coordinated, destructive cyber campaign on Dec 29, 2025 that hit more than 30 wind/solar farms and a CHP plant, disrupting substation communications but not stopping electricity or heat delivery. The attackers deployed wipers (DynoWiper, LazyWiper) via compromised Fortinet devices and Active Directory, used multiple accounts with no two-factor authentication, and leveraged Tor/IPs to access energy networks, with several variants and likely LLM involvement; data was also exfiltrated from OT/cloud services. Attribution to Static Tundra tied to Russia's FSB is stated by CERT Polska, though some researchers link activity to Sandworm.

via The Hacker News|

#cert-polska #cyberattack #dynowiper

technology2 months ago•4 min saved

Russia-linked wiper targets Poland’s grid but power stays on

Poland’s electric grid was targeted by a new wiper malware, allegedly from Russia’s Sandworm group, on the late-December anniversary of a Ukraine grid attack. The payload, dubbed DynoWiper, aimed to disrupt communications between renewables and grid operators but did not cause a blackout. Attribution is at medium confidence and researchers say there’s no evidence of disruption, with several possible reasons the attack failed.

via Ars Technica|

#cyberattack #energy-grid #poland

technology2 months ago•3 min saved

Verizon Outage Traced to Software Glitch, Not a Cyberattack

Verizon says a January 2026 nationwide outage that left many customers in SOS mode was caused by a software issue rather than a cyberattack; while the company hasn’t disclosed specifics, analysts speculate a faulty feature update. The disruption affected major cities, hindered emergency calls and GPS, and disrupted healthcare communications; Verizon is conducting a full review, with NY Assembly member Anil Beephan Jr. urging FCC scrutiny. A $20 account credit via the MyVerizon app has been offered to affected customers.

via SlashGear|

#cyberattack #emergency-services #outage

technology2 months ago•6 min saved

Verizon Outage Traced to Software Glitch, Not a Cyberattack

Verizon has confirmed that its nationwide outage was caused by a software issue rather than a cyberattack, and the company will credit affected customers $20 as it conducts a full review of what happened.

via Lifehacker|

#cyberattack #outage #software-issue