Hackmanac Cyber Alerts

🚨Cyberattack Alert ‼️ 🇫🇷France - CESI Termite hacking group claims to have breached CESI.

🚨Hackers leak cop manuals for departments nationwide after breaching major provider https://www.dailydot.com/debug/lexipol-data-leak-puppygirl-hacker-polycule/

🟧 #HackTuesday 🟧 Hack Tuesday: Week 05 - 11 February 2025 ⚠️464 cyber attacks across 56 countries ⚠️ ➡️The most active threat actor last week was NoName057(16) claiming responsibility for 82 cyber attacks. ➡️The USA is the most affected country, accounting for 25.4% of incidents, with 118 cyber attacks. ➡️The Gov / Mil / LE sector is the most impacted, accounting for 17.7% of incidents with 82 cyber attacks. ➡️The estimated Critical cyber attacks account to 54(11.6% of the total). ➡️Overall, the claimed compromised data amounts to approximately 17.3TB. Follow the link for the list of attacks (claimed or disclosed): https://hackmanac.com/news/hack-tuesday-week-05-11-february-2025 #Hackmanac #HT #Cybersecurity

🔥 Tomorrow, we’re heading to ISS World Middle East 2025! 🔥 🚀 ISS World Middle East is one of the premier events in Threat Intelligence and Cybercrime Investigations⤵️ https://www.issworldtraining.com/iss_mea/ We’ll be there to connect, explore cutting-edge technologies and exchange insights with industry leaders. ☕️ Are you attending too? Let’s grab a coffee! See you in Dubai! 🌍 #Cybersecurity #ThreatIntelligence #ISSWorldMiddleEast2025 #StrategicCyberThreatIntelligence

🚨Cyberattack Alert ‼️ 🇹🇼Taiwan - Unimicron Technology Corporation Sarcoma hacking group claims to have breached Unimicron Technology Corporation. Allegedly, 377 GB of data were exfiltrated. A sample has been leaked. Ransom deadline: 20th Feb 25.

🚨Cyberattack Alert ‼️ 🇯🇵Japan - JSP RansomHub hacking group claims to have breached JSP. Allegedly, 400 GB of data were exfiltrated. Ransom deadline: 17th Feb 25.

🚨Cyberattack Alert ‼️ 🇬🇧UK - Marshall Motor Group Lynx hacking group claims to have breached Marshall Motor Group, one of the UK's largest motor retail groups.

⚠️DDoS - NSO Group 🇮🇱Israel - DarkStorm hacktivist group claims a DDoS attack on the website of NSO Group, the Israeli cyber-intelligence firm primarily known for its proprietary spyware Pegasus.

🚨Cyberattack Alert ‼️ 🇺🇸USA - SAU Tech (Southern Arkansas University Tech) RansomHub hacking group claims to have breached SAU Tech. Allegedly, 252 GB of data were exfiltrated. Ransom deadline: 14th Feb 25.

Apple ordered to open encrypted user accounts globally to UK spying The secret order would give the UK access to encrypted backups belonging to any user — not just Brits. https://www.theverge.com/news/608145/apple-uk-icloud-encrypted-backups-spying-snoopers-charter

First #RiskFriday of the month! 🚀 Discover with us the evolution of: 📈 Global Average ESIX© score 🔄 ESIX© changes compared to the previous week 🏭 Top 5 impacted industries (with highest average ESIX©) 🌍 Top 5 impacted countries (with highest average ESIX©) 📆 Weekly, monthly, and quarterly ESIX© variations Stay informed with our actionable strategic intelligence insights discovering how the global threat landscape evolves and impacts different industries and regions. 👉 Explore this week's insights⤵️ ✅ 514 analyzed cyber attacks, +24% compared to last week ✅ 3.57 average ESIX© (Estimated Severity Index), +6% compared to last week ✅ Healthcare is stable at the first place of the most impacted industries of the week ✅ Portugal and Kenya are the most impacted countries and both the new entries of the week #CyberThreatIntelligence #StrategicCyberThreatIntelligence #ESIX #Hackmanac #HackRisk #CyberSecurity

Owner of spyware used in alleged WhatsApp breach ends contract with Italy Decision comes after Italian investigative journalist and two activists alleged to have been targeted by Paragon Solutions spyware https://www.theguardian.com/technology/2025/feb/06/owner-of-spyware-used-in-alleged-whatsapp-breach-ends-contract-with-italy?CMP=sharebtnurl

🚨Ransomware Update🚨 🇯🇵Japan - Hikari Seiko Co., Ltd. was targeted by a ransomware attack on January 19, 2025 The attack vector has been largely identified, and investigations are ongoing to determine whether any data was leaked. Despite the attack, production activities were not disrupted, as the company promptly shut down compromised servers and disconnected networks to minimize impact. Source: https://www.hikariseiko.com/uploads/2025/02/Incidents-caused-by-ransomware-attacks-first-report.pdf

🚨Data Breach Alert 🚨 🇵🇪Peru - Inkafarma A potential data breach at Inkafarma has been detected on a hacking forum: 3.9 million customer records for sale. According to the post, the data includes information such as ID, DNI, phone number, email, name, birthdate, etc. The authenticity of these claims has yet to be verified, but in the meantime, Inkafarma customers are advised to remain cautious of potential phishing attempts.

💡GitHub Copilot Evolves: Smarter AI Assistance with Agent Mode, Copilot Edits, and Project Padawan GitHub Copilot has evolved into a more autonomous and powerful AI assistant for developers. The latest updates introduce Agent Mode, Copilot Edits, and a first look at Project Padawan, an AI-driven SWE agent. Agent Mode (Preview): Copilot can now iterate on its own code, detect and fix errors, suggest terminal commands, and analyze run-time issues with self-healing capabilities. It continuously refines its output until all required subtasks are completed. Copilot Edits (GA in VS Code): This feature enables inline code modifications across multiple files through natural language requests. Developers can review, accept, or iterate on changes while staying in the coding flow. Project Padawan (SWE Agent): An upcoming AI-powered agent designed to automate software development tasks, from generating pull requests to fixing bugs and maintaining tests. It will integrate seamlessly into GitHub workflows, acting as an intelligent contributor. https://github.blog/news-insights/product-news/github-copilot-the-agent-awakens/

🚨Cyberattack Alert ‼️ 🇺🇸USA - Lexington Electric System Lynx hacking group claims to have breached Lexington Electric System. Ransom deadline: 14th Feb 25.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Robertshaw Hunters International ransomware group claims to have breached Robertshaw. Allegedly, 90 GB (148,708 files) of data were exfiltrated. Ransom deadline: 9th Feb 25.

🚨Cyberattack Alert ‼️ 🇯🇵Japan - HARADA Qilin hacking group claims to have breached HARADA INDUSTRY CO. According to the post, 942 GB of data were exfiltrated, including emails, contracts, 2D/3D drawings, customer data, financial data, supply chain details, product development, employee personal info, data on employees moved from Japan to the USA, passports, visa applications, family members' data, infant documents, reports/audits, assembly notes, specifications, product roadmaps, SWOT analysis, new facilities data, and documents classified as "confidential." Allegedly the breach also includes data associated with leading automobile companies such as Honda, Mazda, Ford, BYD, Fujikura, Harley Davidson, Ferrari, Isuzu, Harman, Nippon, Tesla, Toyota, and others.

🚨Data Breach Alert - OpenAI A threat actor claims to be in possession of login credentials (email and password) for 20 million OpenAI accounts. A sample has been provided, and more are being offered for a few dollars. The confirmation or denial of these claims has yet to be verified. Translation of the post: [20 Million OpenAI] A Large Batch of OpenAI Account Codes When I realized that OpenAI might have to verify accounts in bulk, I understood that my password wouldn’t stay hidden. I have more than 20 million access codes to OpenAI accounts. If you want, you can contact me - this is a treasure, and Jesus thinks so too.

🚨Cyberattack Alert ‼️ 🇮🇹Italy - DIEM (Università di Salerno) Fog hacking group has recently been leaking the source code of various entities worldwide. Today, among others, it's the turn of DIEM - Dipartimento di Ingegneria dell'Informazione ed Elettrica e Matematica Applicata at Università di Salerno.