🎧 Subscribe to the podcast feed | Download episode
Ransomware Victims (48h)
| Group | Victim | Country | Sector |
|---|---|---|---|
| clop | ⚠️ Starkey.com | US | Healthcare |
| clop | ⚠️ Philips.com | NL | Healthcare |
| clop | Shell.com | GB | Energy & Utilities |
| clop | Fiserv.com | US | Financial Services |
| clop | GE.com | US | Technology |
| clop | AldoGroup.com | CA | Retail |
| clop | Mammut.com | CH | Retail |
| clop | Suunto.cn | FI | Retail |
| clop | MamasAndPapas.com | GB | Retail |
| clop | Clover.com | US | Retail |
| clop | Thermos.com | US | Retail |
| clop | G3Aerospace.com | US | Government & Defense |
| clop | ToastTab.com | US | Hospitality |
| clop | Intellihot.com | US | Hospitality |
| clop | JPMGroup.co.in | IN | Financial Services |
| clop | OmniTanker.com | US | Transportation |
| clop | LifeStraw.com | US | Retail |
| clop | Atomberg.com | IN | Manufacturing |
| clop | MidlandInd.com.au | AU | Manufacturing |
| clop | LarGan.com.tw | TW | Manufacturing |
| clop | HongHe-Tech.com | CN | Technology |
| clop | 9Altitudes.com | IN | Technology |
| clop | FluidLogic.com | US | Technology |
| clop | QCPL.in | IN | Manufacturing |
| clop | SMAPCENTER.UAH.EDU | US | Education |
| clop | Partech.com | US | Technology |
| clop | NetPower.com | Technology | |
| clop | NUVITIA.COM | FR | Technology |
| clop | IPMSOLUTIONS.SK | SK | Professional Services |
| clop | ECCELLENT.COM | IT | Other |
| clop | STNET.IT | IT | Technology |
| clop | ITKHOLDING.HU | HU | Technology |
| clop | ARCHERGREY.COM | US | Other |
| clop | SPKAA.COM | KZ | Other |
| clop | IVALUESYS.COM | US | Technology |
| clop | NUOVACMM.COM | IT | Other |
| clop | WATERLANDPE.COM | PE | Other |
| clop | INTELLIGENTGROWTHSOLUTIONS.COM | US | Professional Services |
| clop | BRILLONCONSUMER.COM | MX | Retail |
| clop | TRISTAR.COM | US | Other |
| clop | CORNELIUS.COM | US | Other |
| clop | IRCO.COM | IR | Other |
| incransom | ⚠️ DiabetesAndMetabolism.com | US | Healthcare |
| incransom | Pacific-Construction.com | GB | Manufacturing |
| incransom | CambriaLawFirm.com | CA | Professional Services |
| incransom | BEDC.com.au | AU | Energy & Utilities |
| incransom | StuartAndAssociates.com | US | Professional Services |
| incransom | Gamaus.com | US | Technology |
| incransom | CLGroup | US | Professional Services |
| SilentRansomGroup | Reminger Attorneys | DE | Professional Services |
| SilentRansomGroup | Riker Danzig LLP | US | Professional Services |
| SilentRansomGroup | Riker Danzig Scherer | Professional Services | |
| SilentRansomGroup | [redacted] | Unknown | |
| SilentRansomGroup | [redacted] | Unknown | |
| blacknevas | ⚠️ Enteroptyx Ophthalmology | US | Healthcare |
| blacknevas | Westbrook Greenhouse | US | Agriculture |
| blacknevas | Jack Rutherford Customs | CA | Professional Services |
| blacknevas | Portable Intelligence Inc | US | Technology |
| blacknevas | Computer Country & Networks | Technology | |
| majinahanashi | ⚠️ UAB Biotecha | LT | Healthcare |
| majinahanashi | Altair | US | Technology |
| majinahanashi | Caliche | CL | Energy |
| majinahanashi | Camandona SA | CH | Other |
| majinahanashi | Eticod | Other | |
| qilin | D & J Beverage Service | US | Hospitality |
| qilin | United Association Local 345 | US | Other |
| qilin | Wanted | NL | Other |
| krybit | ⚠️ LabIndia.com | IN | Healthcare |
| krybit | hisstw.com | TW | Other |
| krybit | lhyk.com.sg | SG | Other |
| AiLock | DAISEN | JP | Technology |
| AiLock | Yaomasa | JP | Other |
| rhysida | ⚠️ SIA Medical Centre | AU | Healthcare |
| coinbasecartel | Hitachi High-Tech | JP | Manufacturing |
| akira | CF Supply | Retail | |
| thegentlemen | Safeware | US | Technology |
| kairos | Hightech Signs | US | Manufacturing |
| dragonforce | GB Group S.A | PL | Financial Services |
| payload | Zara Investment Holding | JO | Financial Services |
Security News
Global Threat Campaign Hits Critical VMware vCenter Flaw (Dark Reading) — CVE-2026-59310 actively exploited globally; patching alone may not fully mitigate.
Apple Sends New 'Threat Notification' Alerts Over Mercenary Spyware Attacks (BleepingComputer) — High-confidence detections; recipients should contact security professionals.
Akira Hackers Disable EDR With Safe Mode, Steal Data but Fail to Encrypt (BleepingComputer) — Safe Mode with Networking used to bypass endpoint defences; exfiltration succeeded.
Borrowing Windows Hello Keys for Authentication and Persistence (dirkjanm.io) — Novel credential theft technique for post-compromise persistence.
Identity Crisis: Kerberos Vulnerabilities — Downgrade, DoS, Domain Takeover (Semperis) — Critical AD attack chains; full domain compromise possible.
New Zealand Says China Tried Using Space Investments to Spy on Local Affairs (The Register) — NZSIS disrupted Chinese GBSI installation targeting military intelligence.
OpenAI Launches 'Computer History' — Keylogging for ChatGPT Pro (The Register) — Opt-in event capture; unencrypted local storage; increased prompt injection risk.
Ukraine Shuts Down 94 Fraudulent Call Centers, Seizes Millions (BleepingComputer) — Large-scale takedown of investment fraud operations.
CISA KEV
No new additions on 13–14 August. Most recent (11 August): CVE-2026-68820 (Windows CLFS, Lazarus), CVE-2026-20349 (Cisco ASA/FTD), CVE-2026-72898 (Metabase). Full catalog →