Výsledky hledání

sektor: veřejná správa× téma: ransomware× v celém archivu zrušit filtry

14 karet z 14 položek CZ · EN/orig

Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.

Warlock ransomware breach SharePoint in water, telecom operator attacks

The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint vulnerabilities to gain initial access. [...]

CVE-2025-1055 * CVE-2025-49704 * CVE-2025-49706 * CVE-2025-53770 * CVE-2025-53771 * vodárenství telekomunikace veřejná správa školství US

tg: incident tg: zneužíváno tp: ransomware tp: špionáž

· BleepingComputer · Warlock ransomware breach SharePoint in water, telecom operator attacks

· zachyceno

SPOJENO PŘES CVE JetBrains TeamCity - Actively Exploited Critical Vulnerability

Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: 9.8, CVEs: CVE-2026-63077, Summary: An unauthenticated remote code execution vulnerability affects TeamCity On-Premises. An attacker with HTTP or HTTPS access to a vulnerable server can exploit the TeamCity agent polling protocol to bypass authentication and execute operating-system commands with the privileges of the TeamCity server process.

KEV ✓ · ransomware EPSS 0.94 CVSS 9.8 CVE-2026-63077 JetBrains veřejná správa FI US

tg: incident tg: zneužíváno tg: zranitelnost tg: rozbor tp: ransomware

· zachyceno · NCSC-FI · JetBrains TeamCity - Actively Exploited Critical Vulnerability · BleepingComputer · CISA: Ransomware gangs now exploiting critical TeamCity flaw · Wiz Research · JetBrains Cadence Compromised via Exploitation of TeamCity Vulnerability (Incident) · Rapid7 · Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077) · CISA Advisories · CISA Adds One Known Exploited Vulnerability to Catalog · CISA KEV · JetBrains TeamCity Deserialization of Untrusted Data Vulnerability (CVE-2026-63077)

Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments

In this article Who is Storm-2570?Storm-2570 attack chain: From initial foothold to impactWhat Storm-2570 activity means for defendersMitigation and protection guidanceMicrosoft Defender detectionsHunting queries Activity associated with Storm-2570, a ransomware affiliate linked to multiple ransomware payloads, illustrates how tracking and responding to ransomware attacks by payload alone can obscure the affiliates carrying out intrusions and the recurring behaviors that defenders can use to…

zdravotnictví školství veřejná správa finance US

tg: rozbor tp: ransomware tp: identita

· Microsoft Security Blog · Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments

RIASZTÁS Magyarország Ügyészségének nevével visszaélő ransomware támadásokkal kapcsolatban

A Nemzetbiztonsági Szakszolgálat Nemzeti Kiberbiztonsági Intézet (NBSZ NKI) riasztást ad ki Magyarország Ügyészségének nevével és arculati elemeivel visszaélő, zsarolóvírus fertőzéshez vezető adathalász üzenetekről. A bejelentések alapján a támadók hamis, hivatalos megkeresés látszatát keltő leveleket küldenek, amelyekben ügyészségi alkalmazottak nevével élnek vissza. A kampány célja az, hogy a felhasználó a levélben szereplő hivatkozásra kattintson, majd a […]

veřejná správa HU

tg: varování tg: zranitelnost tp: malware tp: phishing tp: ransomware

· NKI Maďarsko · RIASZTÁS Magyarország Ügyészségének nevével visszaélő ransomware támadásokkal kapcsolatban

New Report: AI threats are here. Why Q2 2026 signals the end of traditional patch cycles

You can’t patch everything. So what do you fix first? Findings in Q2 2026 have changed traditional answers.The latest Quarterly Threat Landscape Report from Rapid7 Labs shows vulnerability disclosures still surging while attackers use automation and AI-assisted tooling to compress the time between disclosure and exploitation. The gap that patch cycles were built to fill is closing. Speed and volume are overwhelming security teams that have relied on traditional patch cycles and reactive…

CVSS 7.0 Microsoft veřejná správa finance zdravotnictví výroba a průmysl US

tg: rozbor tp: ransomware tp: AI tp: špionáž tp: průmyslové systémy

· Rapid7 · New Report: AI threats are here. Why Q2 2026 signals the end of traditional patch cycles

You were onto something with “It’s the Climb,” Miley

Welcome to this week’s edition of the Threat Source newsletter. For my fianceé’s 30th birthday, I took her on a weekend trip to Shenandoah National Park – a favorite of ours since we went to a wedding there several years back. We’ve done several incredible hikes over the years, but one in particular had always loomed over my head: Old Rag, a 9.3 mile circuit hike that’s largely considered the most difficult in Virginia. I've always been warned that at the beginning and end, you hate Old Rag.…

zdravotnictví veřejná správa US

tg: rozbor tg: přehled tp: phishing tp: ransomware tp: identita

· Cisco Talos · You were onto something with “It’s the Climb,” Miley

27th July – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 27th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Nichirei, a Japan-based frozen-food supplier and logistics company, has experienced a ransomware attack that disrupted shipping operations and affected approximately 5,000 customers. KFC Japan warned of possible shortages. Nichirei confirmed personal data theft, while the RansomHouse group claimed responsibility and published a subset of the stolen…

KEV ✓ EPSS 0.20 CVE-2025-66376 CVE-2026-16232 CVE-2026-50522 Check Point Oracle Microsoft Zimbra energetika vodárenství doprava veřejná správa IL

tg: incident tg: zneužíváno tg: přehled tp: ransomware tp: únik dat tp: AI tp: průmyslové systémy

· Check Point Research · 27th July – Threat Intelligence Report