Cybersecurity Jesus

M&S and Co-op Hacks Classified as Single Cyber Event The UK’s Cyber Monitoring Centre (CMC) assessed the incident as a Category 2 systemic event, based on the significant economic impact

Total financial impact of the M&S and The Co-op incidents to range from £270m-£440m
www.infosecurity-magazine.com/news/ms-coop...

Infecting insurance firms with ransomware... for dummies

💥 The ransomware vs insurance company playbook 💥

1. Ransomware gang infects insurance company, but DOESN'T install ransomware. Instead it steals information about insurance company's clients, learns which have cyberinsurance, and how much insurance cover they have.

1/4

UK ‘woefully’ unprepared for Chinese and Russian undersea cable sabotage, says report CSRI finds China and Russia may be coordinating ‘grey zone’ tactics against vulnerable western infrastructure

UK woefully unprepared for undersea cable sabotage, says report
elonmusk and Starlink liked this post
The guardian: Click here to donate for more post like this
www.theguardian.com/politics/202...

Food distributor UNFI says it’s recovering from cyberattack as grocery shortages persist | TechCrunch Whole Foods and other grocery stores reported shortages following the cyberattack

NEW: United Natural Foods (UNFI) said it's making "significant progress" in restoring its systems after a cyberattack earlier this month. The hack left grocery stores and supermarkets across the U.S. and Canada without food supplies and caused shelf shortages, including at Whole Foods and others.

Threat Actors Target Victims with HijackLoader and DeerStealer Cyber-attacks using HijackLoader and DeerStealer have been identified exploiting phishing tactics via ClickFix

Another Clickfix Story
As you know - You shall not click !
Perform your simulation awareness training regularly in your bussines

www.infosecurity-magazine.com/news/hijackl...

Major European insurer hit by cyberattack FC Barcelona data among over 200GB of sensitive data stolen

www.insurancebusinessmag.com/uk/news/cybe...
Yet another insurance company hit by ransomware.

Major European insurer hit by cyberattack

Microsoft Defender Spoofing Flaw Enables Privilege Escalation and AD Access Rated 6.5 (Medium) on the CVSS v3.1 scale, this flaw exploits MDI’s Lateral Movement Paths (LMPs) feature and has been actively addressed in Microsoft’s May 2025 Patch Tuesday updates.

Holy reminder

Apply the May 2025 patch for Microsoft Defender for Identity
Ensure your networks are properly isolated ( Zero Trust principles )
Upgrade your sensors in Defender & Some DNS hygene also is advisable

www.cvedetails.com/cve/CVE-2025...
gbhackers.com/microsoft-de...

🚨 Scania breach alert

Swedish truck maker #Scania’s insurance division was allegedly breached: 34k files containing policy details, customer info, VINs & claims are reportedly up for sale on the dark web.

#ransomNews #CyberSecurity #Infosec

M365 Copilot: New Zero-Click AI Flaw Allows Corporate Data Theft Researchers have found a flaw in Microsoft 365 Copilot that allows the exfiltration of sensitive corporate data with a simple email

Definetly concerning , however in 2025 are we still not classifying data
You shall Protect your sensitive emails and data from Day to day black boxes LLMS !!

www.infosecurity-magazine.com/news/microso...

ConnectWise to Rotate ScreenConnect Code Signing Certificates Due to Security Risks ConnectWise rotates ScreenConnect certificates by June 13 after config data concerns, impacting on-prem users to prevent remote access risks.

You shall do a risk assesment if you have Connectwise
Time to talk to your IT Team .
Start confessing your CMDB.
For what is hidden shall be revealed.
Amen

thehackernews.com/2025/06/conn...

The shall have mfa

Smart Cars, Dumb Passwords: Auto Industry Still Runs on Weak Passwords Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

🚗🔐 Despite advanced smart car tech, a NordPass/NordStellar study finds automotive systems are still locked with weak, reused passwords like “123456” and “P@ssw0rd,” making them easy targets for cyberattacks.

#ransomNews #CyberSecurity #Infosec

Let not thy clicks be blind folks!! Be vigilant on Online shopping and adds!

for businesses : Use dns security solutions!!

Facebook malvertising reveals 4K domains spoofing 68 brands
www.scworld.com/news/faceboo...

😍
👍

PayU Plugin Flaw Allows Account Takeover on 5000 WordPress Sites Vulnerability in PayU CommercePro plugin allows account hijacking on thousands of WordPress sites

Worpress PayU Plugin Flaw allows Account Takeover
Uninstall the plugin, review public APIs, eliminate hardcoded credentials, and activate multi-factor authentication
#PatchNow #Infosec #ZeroTrust #WordPress
#CybersecurityAlert #WordPressSecurity
www.infosecurity-magazine.com/news/payu-pl...

Stay Alert: Hackers Are Selling Repackaged Data Stolen From AT&T The data—which includes dates of birth, 44 million SSNs of AT&T customers, and more—is not new, but it could lead to an uptick in phishing scams, so be on the lookout for sketchy messages.

Reduce your digital footprint — I can’t turn breaches into wine, sadly

uk.pcmag.com/security/158...

#DataBreach #CyberSecurity #DigitalFootprint #CyberHygiene #OnlinePrivacy #ZeroTrust #DeleteMeVibes