Hub: Ransomware & Cyber Attacks - Page 4

Paris prosecutors told The Record they estimate around 700 victims of the French supermarket fridge attack. EU rules may not force any fixes.

Fireworks AI says an outsider used internal credentials to capture API keys and tokens from evaluation jobs. It reports no evidence of data access so far.

A former CYPFER executive is charged with extortion conspiracy. Krebs's unnamed sources say investigators also suspect a US consulting executive helped run ShinyHunters' Shinywire site; nobody new has been charged.

Japan's Commune says about 307,000 community members' data leaked after attackers used invite links and posed as admins. Sansan and Panasonic are hit.

Japanese hotel-booking software firm Temairazu says details of up to about 4.45 million guests may have been viewed or obtained. What it confirms.

Pays ApS told TV 2 its lawful access to Denmark's CPR register was abused. Politiken reports '123456' passwords on at least three accounts. What is confirmed.

FBI Director Kash Patel says agents have arrested another suspected ShinyHunters co-conspirator over the FBIjobs.gov incident. The suspect's name and charges are not public; reports of a Canadian arrested in Pennsylvania rest on unnamed sources. What is confirmed, what is reported, and what is only the group's own claim.

JR East and Viewcard say about 6.09 million accounts, mostly email addresses, may be exposed after the IDC Frontier ransomware attack. What the companies and Japanese media report, what is not affected, and what it does not prove.

Three security items from 8–9 October 2026: a security firm reports attack attempts against a patched, maximum-severity SonicWall SMA1000 flaw (success unconfirmed); Pwn2Own Ireland pays $1,262,000 for 98 zero-days; and Microsoft says Windows Update certificates expire on 17 May and 19 June 2027.

CrowdStrike says an unnamed, likely Chinese-speaking attacker used ARTEX, an open-source AI penetration-testing agent, alongside several AI models to steal data from South Korean financial firms. What CrowdStrike found, what Korean investigators say, and what it does not prove.