Skip to content

ADMIN.FOUNDATION

  • Cyber Incidents Put U.S. Water Infrastructure And Public Safety At Risk

    ·

    Blogs
    This week in cybersecurity from the editors at Cybercrime Magazine

    Sausalito, Calif. – Oct. 6, 2026

    – Listen to the Podcast Episode

    A new study shows that malware stealing employee passwords has put more than a thousand U.S. water and wastewater providers at risk of cyberattacks. Researchers found these issues while analyzing systems registered with the U.S. Environmental Protection Agency (EPA), raising concerns about how safe our water infrastructure really is.

    Recent hacks have also highlighted weak spots like manufacturer-set default passwords in the mechanical switches and physical controllers used by critical infrastructure.

    Michael Centrella, Head of Public Policy at SecurityScorecard, recently joined Cybercrime Magazine Podcast host Amanda Glassner, and Scott Schober, cybersecurity expert and author of the popular book Hacked Again, and discussed a recent series of cyber incidents involving water and wastewater systems, and why it’s important for Americans to care about this right now.

    “The first thing that Americans should understand is that this is not simply a story about hackers attacking a computer network,” says Centrella, who previously served as Assistant Director at the U.S. Secret Service. “When we’re talking about the water and waste water systems, we’re talking about infrastructure that directly supports public health, public safety, economic activity and virtually every other critical infrastructure sector.”

    Listen to the Podcast Episode


    Cybercrime Magazine · Public Sector Cyber Brief. Water System Safety. Michael Centrella, SecurityScorecard & Scott Schober 

    Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

    • SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
    • NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
    • HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
    • VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
    • M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
    • BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
    • PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
    • PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
    • RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

    Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

    The post Cyber Incidents Put U.S. Water Infrastructure And Public Safety At Risk appeared first on Cybercrime Magazine.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Gentlemen Ransomware Affiliate Uses MCP as C2 Channel in Live Cyberattacks

    ·

    cyber security, Cyber Security News, Ransomware

    A Russian-speaking Gentlemen ransomware affiliate used the Model Context Protocol (MCP) to execute commands during live intrusions, turning an AI coding assistant’s tool interface into an operational command-and-control channel. CloudSEK identified the activity while investigating exposed infrastructure belonging to an operator calling himself Azazel. Azazel also operated LEAKNED, an independent leak site that allegedly diverted […]

    The post Gentlemen Ransomware Affiliate Uses MCP as C2 Channel in Live Cyberattacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Meta and Microsoft Reduce Internal Use of Claude AI

    ·

    AI, cyber security, Cyber Security News, Microsoft

    Meta and Microsoft are reducing employee reliance on Anthropic’s Claude AI while promoting their own coding assistants, according to an October 5 report by The Information. This change relates to internal budgets and development workflows, not a complete withdrawal of Claude from Microsoft’s customer offerings. This reported shift highlights competitive tension, as both companies use […]

    The post Meta and Microsoft Reduce Internal Use of Claude AI appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Accenture Contractor Removed After FBI Data Breach Exposes Thousands of Employees

    ·

    cyber security, Cyber Security News

    On October 5, the Federal Bureau of Investigation (FBI) terminated an Accenture employee’s contract after a security breach exposed sensitive information belonging to thousands of workers, according to Reuters. The incident involved an allegedly unpatched human resources platform, raising concerns about the bureau’s operational security. FBI cyber chief Brett Leatherman confirmed that the contractor failed […]

    The post Accenture Contractor Removed After FBI Data Breach Exposes Thousands of Employees appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • OT Attacks on US Critical Infrastructure Could Disrupt Military Operations and Physical Processes

    ·

    cyber security, Cyber Security News

    US critical infrastructure faces an operational technology threat that extends beyond civilian service outages. State-sponsored intrusions and direct attacks on industrial controllers could disrupt physical processes and undermine military operations by targeting electricity, water, telecommunications, transportation, fuel, manufacturing, and logistics providers outside installation boundaries. Disabling a supporting utility or transportation system could interrupt essential services, […]

    The post OT Attacks on US Critical Infrastructure Could Disrupt Military Operations and Physical Processes appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

    ·

    A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker’s code as soon as the file is opened, security researchers have shown. There is no warning first, of the kind either program shows before it runs a macro. The attack works only when the program’s Java support is enabled. So far, it has only been shown as a proof of concept, and there are no reports of its use in

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies

    ·

    The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by rogue OpenAI agents on its platforms, including unsuccessful efforts to compromise Etherpad, a public note-taking tool, and edit Wikipedia pages. “The unauthorized bot activities included edits to our wikis, some unsuccessful attempts to exploit a public note-taking tool we host, and heavy traffic,

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cling Botnet Spoofs Google STUN Traffic to Hide Commands Sent to Infected IoT Devices

    ·

    Botnet, cyber security, Cyber Security News

    Cling, an IoT botnet that disguises operator commands as Google STUN replies, blending malicious communications into routine NAT traversal traffic. Published October 1, the research documents exploitation of exposed networking devices and a command channel designed to exploit trust in familiar infrastructure. Researchers discovered the malware while investigating increased exploitation of CVE-2021-35394, a remote code […]

    The post Cling Botnet Spoofs Google STUN Traffic to Hide Commands Sent to Infected IoT Devices appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers

    ·

    In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol delivered. Thousands of developers built servers, and enterprises plugged them into agent workflows. The ecosystem around it fell short. Earlier this year, our team at OX Security,  traced critical vulnerabilities in Anthropic’s MCP

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Using Technology to Fight Distraction and Improve Focus

    ·

    Ad Blockers, App Blockers, Browsing, Notifications, Site Blockers, Technology
    Learn how to use technology to fight distraction and improve focus with notification controls, site blockers, focus timers and task lists.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 42 43 44 45 46 … 1,217
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence