Manchester Airports Said No to the Ransom. The Attackers Answered With the Passenger Data.
Manchester Airports Group kept operations running, but reporting says the attackers published stolen passenger data after MAG refused a ransom demand.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
Two Arrests Put a Number on TeamPCP’s Supply-Chain Damage
Google says an undercover Mandiant analyst reached TeamPCP's inner circle, watched stolen credentials accumulate and helped disrupt the group's follow-on access.
Adobe Campaign Classic Has Three CVSS 10 Paths to Code Execution
Adobe fixed three unauthenticated, network-reachable Adobe Campaign Classic flaws rated CVSS 10.0. On-premises and hybrid customers must update to build 9401.
Android 17 Encrypts the Domain Name. Enterprise Network Visibility Just Changed.
Android 17 adds ECH, local-network permission enforcement, certificate transparency by default and carrier-controlled 2G disablement. Privacy improves, but enterprise visibility changes.
PaperCut After Patching
Patch the software. Investigate prior exposure.
ServiceNow Patched Three CVSS 10 Flaws. No Login Was Required.
ServiceNow patched three CVSS 10 flaws that can be exploited without credentials, plus a high-severity sandbox escape. Self-hosted customers must verify the complete build.
The Security Agent Became the Remote Execution Service: WatchGuard Fixes Two Unauthenticated RCE Flaws
WatchGuard fixed two critical Windows agent flaws that allow unauthenticated remote code execution. One can make the trusted agent download and run attacker-controlled code as SYSTEM.
The Router Came With a Root Backdoor. The Brand on the Box Hid Who Built It.
A router sold under a reassuring retail brand can still be running firmware built by somebody else. VulnCheck’s investigation into ZBT router backdoors found three remote-control implants, including one that can hand an unauthenticated internet user a root shell with…
The Repository Was Data. Amazon Kiro Treated It as Instructions.
A crafted workspace could steer Amazon Kiro into reading local data and triggering its transmission without a malicious user prompt. Amazon fixed the issue in Kiro IDE 0.8.140.
Boston Scientific Could Not Process or Ship Orders After a Global Cyberattack.
A cybersecurity incident disrupted Boston Scientific's global operations and business applications used to process and ship orders. The company has not provided a restoration timetable.