home.social

#cyberattack — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #cyberattack, aggregated by home.social.

  1. ePUAP został wyłączony w następstwie cyberataku. Atak był wymierzony w ePUAP – ogólnokrajowy system umożliwiający użytkownikom składanie dokumentów urzędowych, komunikację z instytucjami państwowymi oraz... linuxiarze.pl/epuap-zostal-wyl #cyberattack #cybersecurity #polska

  2. Hackers used 4,837 compromised GitHub accounts to target 61,764 repositories in the wfx-loot campaign. Researchers confirmed credential theft from at least 1,835 repositories.

    Listen/Read: hackread.com/hackers-stolen-gi

    #Cybersecurity #CyberAttack #wfxloot #GitHub

  3. Speaking of #cyberattacks, it looks the one that hit #TruStage was a doozy! Pro-tip... Make sure your backups are offline and in a secure location (don't get me going about how insecure cloud storage is...)

    TruStage CEO Acknowledges Broken Trust, Outlines Next 60 Days Of #Cyberattack Recovery

    By Ray Birch
    10/08/2026

    MADISON, Wis. — "After nearly three months of disruption from a devastating cyberattack, TruStage president/CEO Terrance Williams says the company is entering a new phase of recovery, with a major retirement account platform back online, several critical #CreditUnion systems expected to return within weeks and most key operating systems expected to be restored around year-end.

    "In an interview with CUToday.info, Williams said the next 30 to 60 days should bring some of the most significant progress yet in the insurer's recovery from the July 11 attack, including the restoration of systems that have forced credit unions, employees and members to rely on manual processes for everything from insurance claims to account information.

    " 'Recovery is beginning to accelerate,' Williams said, acknowledging that the effort has taken longer than he or TruStage's credit union partners had anticipated.

    "Among the most significant developments is the Oct. 6 return of #BenefitsForYou, the digital platform that allows retirement plan participants who previously established online accounts to view their balances. For many participants, it marks the first opportunity since the attack to obtain that information online rather than through a telephone-based workaround.

    "That is a meaningful milestone for a company whose prolonged outage has left some consumers struggling to access retirement savings, obtain insurance benefits and manage policies. As CUToday.info reported in August, those problems have included delayed #disability payments, difficulty accessing #retirement money and challenges collecting #LifeInsurance proceeds following the death of a family member.

    [...]

    "As CUToday.info reported Aug. 29, the attack damaged not only TruStage's primary technology environment but portions of the backup infrastructure it expected to use for recovery. The company subsequently accelerated an existing multiyear technology modernization program, rebuilding major portions of its operating environment in the cloud."

    cutoday.info/THE-feature/TruSt

  4. THREAT MODEL: CYBERSECURITY 🧑‍💻
    for November 10th, 2026
    by independent journalist @violetblue

    - CEO of America’s Computer Chips has been banging and doing Computer Chips business with a Chinese spy

    - #WhiteHouse staffers are using an app loaded with residential proxy services

    - #OpenAI hack of #Australia ’s government inspires creation of a really mean AI regulator position

    - Blood plasma freezers in #France were hit in the latest #cyberattack on cooling companies

    - The #Binance attack was actually sophisticated AF

    - @adafruit doubles-down on CFAA-abusers #FluxAI

    ...and much more.

    ✨THREAT MODEL weekly newsletters are free to read -- please help keep them accessible to all by becoming a patron, even $1 a month makes a difference!✨

    patreon.com/violetblue/posts/c

    #ThreatModel #ThreatModelCybersecurity #ThreatModelNewsletters #VioletBlue #infosec #cybersec #CovidIsNotOver

  5. Danbooru hack update, they are now back online.

    The full incident report are in this picture.

    TL:DR is someone managed to find a vulnerability in Danbooru's Flash post (who the fuck still use Flash at their website in 2026?!) and exploiting it to spread an XSS Worm throughout the website to steal visitor IP address.

    The threat actor are using LLM, so the team are decided to take down the website to squash as many vulns as they can before reopening the website again (maybe they call Reimu :hi_reimu: for this lol).

    #cybersecurity #infosec #danbooru #cyberattack

Share on Mastodon

Enter the server where you have an account.