All posts tagged: Cyberattack

Small UK power plant shut down after Iran-linked cyberattack: report

Small UK power plant shut down after Iran-linked cyberattack: report

Published by Sam Flores

Fiber optic cables feed into switches inside a communications room at an office in London, UK, on Monday, Oct. 13, 2025. Photographer: Jason Alden/Bloomberg via Getty Images Bloomberg | Bloomberg | Getty Images A small power plant in the U.K. was shut down for four days in July following a cyberattack carried out by hackers linked to Iran, The Telegraph newspaper reported Sunday. The paper said the incident happened around the time that U.S. authorities including the Federal Bureau of Investigation warned about malicious cyber actors targeting water facilities across at least seven states. The Cybersecurity and Infrastructure Security Agency, FBI, Environmental Protection Agency and other agencies blamed Iran.. A U.K. government spokesperson declined to attribute blame for the reported power outage or identify the facility. “This story refers to an incident impacting a small-scale energy generator, and at no point was there a risk to the wider energy system,” the spokesperson told CNBC in a statement. “The U.K. has a highly resilient energy system. We work closely with the energy sector to protect infrastructure and …

Valve Warns Steam Machine Buyers About Scam Messages After Cyberattack

Valve Warns Steam Machine Buyers About Scam Messages After Cyberattack

Published by skeptic

If you’ve been holding out on buying Valve’s ludicrously expensive home console, you may have saved yourself from more than an empty wallet. European customers who ordered a Steam Machine or Steam Controller may be the victims of a personal information data breach after one of Valve’s hardware distribution partners was hit by a cyberattack. CEVA Logistics, the company that helps organize Valve’s European supply chain, informed its partner of the data breach on Aug. 7. A Valve spokesperson told CNET that the company spent the weekend assembling a list of at-risk customers, notifying them about the attack via email on Monday morning. “Though CEVA is still investigating the attack, we wanted to at least send out messaging to all customers we can assume were affected based on what we currently know,” the spokesperson said. What Valve currently knows is that the personal information revealed by the cyberattack is likely all delivery-related. CEVA told Valve that the breach revealed customers’ names, countries, street addresses, phone numbers and email addresses. According to Valve, “payment information, passwords …

Live updates: Trump laments Blanche caught in fight over IRS deal, says Iran didn’t cause Minnesota cyberattack

Live updates: Trump laments Blanche caught in fight over IRS deal, says Iran didn’t cause Minnesota cyberattack

Published by Sam Flores

President Trump and his Cabinet are gathered at Camp David for their 13th Cabinet meeting of his second term. Among the new faces at the table are Jay Clayton, incoming director of national intelligence, and Keith Sonderling, secretary of Labor. In questions with reporters, Trump lambasted the Senate, specifically Sen. John Cornyn (R-Texas), for not… Source link

If you pay a hacker’s ransom, chances are that they’ll come back for more

If you pay a hacker’s ransom, chances are that they’ll come back for more

Published by skeptic

Governments have long warned not to pay a hacker’s ransom demands, arguing that doing so only lets criminals profit from their cyberattacks and funds the next one. There’s also another reason: The hackers are unlikely to leave you alone if you pay up once, and many will come back demanding more. In a report published Wednesday, cybersecurity giant Proofpoint said it surveyed 953 companies and found that over one-third of companies that paid a hacker’s ransom were hit with a second extortion demand. The findings underscore the long-held understanding among security researchers and network defenders that it’s impossible to negotiate in good faith with an extortion racket because there’s no incentive for the other side to actually walk away. Proofpoint’s data shows that ransomware attacks and extortion attacks have evolved from a single transaction where hackers would get paid once and move on, into an effort using multiple forms of leverage, such as retaining stolen data under the threat of publicly releasing it. While hackers have claimed in the past that they will delete or …

Hugging Face confirms breach affected internal datasets and credentials, urges users to take action

Hugging Face confirms breach affected internal datasets and credentials, urges users to take action

Published by skeptic

Hugging Face, a platform that hosts AI models and datasets, said its internal datasets and service credentials were compromised in a hack last week. The company disclosed the breach on Friday, but said it was still investigating whether any customer or partner data was stolen during the incident. In a blog post, the company said a dataset uploaded to its platform abused a security vulnerability to run malicious code on its servers, allowing the attackers to escalate their permissions and gain broader access to Hugging Face’s internal systems. The company said it has revoked and rotated the stolen credentials that were accessed. It urged users to do the same with any keys stored on the platform, and review any suspicious activity on their accounts. Hugging Face said it has fixed the vulnerability that was abused during the cyberattack. While it’s common for hackers to try to break into a company’s network using stolen employee credentials, keys, or a weak point in their security perimeter, this incident underscores the challenges that companies like Hugging Face face …

Fairlife Pauses US Production After Cyberattack Breached Milk Brand’s Systems

Fairlife Pauses US Production After Cyberattack Breached Milk Brand’s Systems

Published by Sam Flores

NEW YORK (AP) — Milk brand Fairlife is pausing its production in the U.S. after a ransomware cyberattack breached the company’s systems. Coca-Cola, which owns Fairlife, announced Thursday that its dairy company had identified “unauthorized access by a third party” to a portion of its systems, including those related to production. The company disclosed that this was in connection to a ransomware event — and in response, it took some operations offline. “Product quality and safety have not been impacted,” Atlanta-based Coca-Cola said in a statement. “However, as a result of the incident, production operations at fairlife in the United States are temporarily suspended.” Fairlife’s Canadian operations were not affected. The full scope and impacts of the attack are otherwise still unknown, Coca-Cola added — but the beverage giant said it had informed law enforcement, and is also working with cybersecurity experts as it continues its investigation and recovery to restore operations. A company spokesperson said there were no further updates to share as of Friday morning. Cyberattacks are on the rise across sectors. Beyond …

Coca-Cola suspended production at its Fairlife dairy after a ransomware attack

Coca-Cola suspended production at its Fairlife dairy after a ransomware attack

Published by skeptic

U.S. beverage maker Coca-Cola said one of its dairy subsidiaries was hacked and that it’s shutting down its operations for the foreseeable future. The multinational giant said in a disclosure with the U.S. Securities and Exchange Commission that its Fairlife dairy company was hit by ransomware and that its production systems are affected. The company said that its Fairlife production operations across the United States are “temporarily suspended.” Fairlife’s operations in Canada are unaffected. Coca-Cola is one of the largest companies in the world, with products spanning carbonated drinks, water, and dairy products. Its Fairlife dairy is one of the company’s major brands, with an estimated $4 billion in sales by 2024. Ransomware attacks on food and beverage companies can have lasting effects. Past incidents at Arizona Beverages in 2019 and food distributor giant UNFI last year resulted in weeks-long disruptions to their respective production lines and empty grocery shelves. Coca-Cola didn’t say when Fairlife’s systems would be restored. Do you know about the cyberattack at Fairlife? Do you work at the company? We would …

KFC Japan, major sushi chain fear shortages after cyberattack

KFC Japan, major sushi chain fear shortages after cyberattack

Published by Sam Flores

TOKYO: A cyberattack against a major frozen food maker in Japan has prompted businesses such as Kentucky Fried Chicken and a popular sushi chain to warn of possible shortages and even store closures. Nichirei, Japan’s top frozen food supplier, said on Wednesday (Jul 15) that it “came under a cyberattack”, disrupting subsidiaries’ operations including making deliveries to clients. The company did not share details of the attack, which Nichirei first disclosed in a statement on Monday that mentioned “system failures caused by unauthorised access”. The disruption could affect large parts of Japan’s food sector as Nichirei also provides temperature-controlled logistics services to a wide range of businesses. Supermarkets have already been hit by shortages, local media said, reporting that pastry chefs and elderly care centres have also been impacted. Kura Sushi Inc, a popular rotary sushi chain with nearly 700 locations in Japan and abroad, said on Wednesday that its stores in the country’s west were experiencing shipment delays for some products. Kentucky Fried Chicken Japan warned on Tuesday that its restaurants could face shortages …

Polymarket battles cyberattack while regulatory pressure intensifies across American prediction markets

Polymarket battles cyberattack while regulatory pressure intensifies across American prediction markets

Published by skeptic

Polymarket is dealing with mounting problems on several fronts after a phishing campaign stole millions of dollars from users just as the prediction market platform faces growing pressure from lawmakers, regulators and fresh criticism over its marketing strategy and public image. On Thursday (June 25), the company disclosed that a third-party vendor supporting its frontend had been compromised, allowing attackers to inject malicious code that targeted some users. Polymarket said it quickly removed the affected dependency, contained the incident and began contacting impacted customers. The company also pledged to fully reimburse everyone who lost funds. This morning we discovered a 3rd party vendor had been compromised, injecting a malicious script into our frontend for some users. We've contained it & removed the affected dependency. We're contacting impacted users & refunding them in full. — Polymarket Traders (@PolymarketTrade) June 25, 2026 “We discovered a 3rd party vendor had been compromised, injecting a malicious script into our frontend for some users,” the company said in a statement shared on X. Polymarket added that the malicious dependency had …

Feds Nab Iranian In Montenegro Over Alleged .4BN Cyberattack Campaign Targeting US Institutions

Feds Nab Iranian In Montenegro Over Alleged $3.4BN Cyberattack Campaign Targeting US Institutions

Published by Jenni Sidey

In the years leading up to President Trump coming into office and ordering Operation Epic Fury targeting the Islamic Republic for regime change, which failed to accomplish this (early-stated) goal, Iran had frequently been accused of orchestrating major cyberespionage campaigns targeting the United States and its allies. But rarely was any individual or group apprehended for such alleged cyberattacks, much less was definitive proof uncovered of backing from the Iranian government. But on Friday there has been a reported capture of an Iranian suspected cyber-attacker, said to be behind dozens of significant sabotage attacks on American institutions, mainly of higher learning. A high-profile international manhunt ended in the coastal town of Kotor on Thursday, as Montenegrin police, reportedly acting on an FBI tip-off, arrested an Iranian-Turkish dual national accused of masterminding a catastrophic, decade-long cyberwar against US infrastructure. via Reuters The 39-year-old suspect, identified by authorities only as “A.B.”, is wanted by the United States for allegedly orchestrating cyberattacks that inflicted a staggering $3.4 billion in damages. The suspect is facing a laundry list of …