GPS Spoofing Cripples Aviation, AI Poisoning Attacks Emerge, and Massive Data Breaches Hit Healthcare and Crime Reporting Services

Coordinated GPS Spoofing Attacks Disrupt Global Aviation and Maritime Navigation

A wave of sophisticated GPS spoofing attacks is targeting civil aviation and critical infrastructure across the Middle East and Europe. Attackers are using "time skew sabotage" to disrupt aircraft automated landing systems and attempting "flow reversal" attacks on solar farms to destabilize power grids. In a swift response, G7 nations have introduced the GNSS Resilience Act, mandating inertial backup systems for transit. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has also issued Emergency Directive 26-24 to address the escalating cyber-physical threats.

GPS SpoofingGNSSCyber-Physical AttackAviation SecurityEnergy Sector +3 more

G7 Responds with GNSS Resilience Act as GPS Spoofing Attacks Cripple Global Aviation and Threaten Power Grids

Industrial Control Systems

Regulatory

"Bband Siphon 16.0" Android Malware Steals Location Data Directly from Communication Chip, Works Even When Phone is Off

New Android Malware "Bband Siphon 16.0" Steals Location Data from Communication Chip

A novel Android malware named "Bband Siphon 16.0" has been discovered, representing a significant escalation in mobile threats. It targets the device's communication (baseband) chip directly, bypassing the OS to exfiltrate location data. Its most alarming feature is the ability to transmit data even when the device appears powered down, indicating a deep, persistent hardware-level compromise that is exceptionally difficult to detect and remove.

AndroidMalwareBasebandFirmware AttackMobile Security +2 more

Malware

Mobile Security

"Phantom Entry" Zero-Day Hits Building Management Systems; Gov Agencies Ordered to Take Smart Meters Offline

"Phantom Entry" Zero-Day Vulnerability Discovered in Building Management Systems

A critical zero-day vulnerability dubbed "Phantom Entry" has been discovered in building management systems (BMS), enabling unauthorized physical and logical access. The threat is considered so severe that a government directive has ordered all smart metering controllers in federal buildings to be taken offline immediately. Compounding the threat, a new backdoor called "Ghost Pointer" found in free remote work tools could be used to exploit this vulnerability, allowing attackers to manipulate systems remotely without user knowledge.

Zero-DayVulnerabilityBuilding Management SystemICSSmart Building +2 more

"Phantom Entry" Zero-Day Hits Building Management Systems; Gov Agencies Ordered to Take Smart Meters Offline

Vulnerability

Industrial Control Systems

Cloud Sweep Group's "Phase 30" Attack Embeds Ransomware in Cold Storage Backups, Defeating Recovery Efforts

Cloud Sweep Group Unleashes "Phase 30" Attacks on Cold Storage Backups

The notorious threat actor group "Cloud Sweep" has launched "Phase 30," a sophisticated new attack campaign that targets cold storage backups. The group's novel technique involves embedding dormant malware into data archives during the backup process. When an organization attempts to restore from the compromised backup, the malware activates, re-encrypts the system, and sabotages the recovery effort, effectively creating a ransomware time bomb within the last line of defense.

RansomwareCloud SweepBackupDisaster RecoveryInhibit System Recovery +1 more

Threat Actor

Supply Chain Attack

Massive Telehealth Breach Exposes 30 Million Patient Video Records, Sparking Deepfake Scam Fears

Major Telehealth Platform Breach Exposes 30 Million Patient Video Records

A leading international telehealth platform has suffered a catastrophic data breach, resulting in the theft of 30 million patient video consultation records. While the company remains unnamed, the scale of the breach is staggering, exposing highly sensitive and private medical interactions. Cybersecurity experts are issuing urgent warnings that this data is a goldmine for creating sophisticated deepfake scams, enabling attackers to commit fraud, extortion, and identity theft with unprecedented realism.

Data BreachHealthcareTelehealthDeepfakePrivacy +1 more

Massive Telehealth Breach Exposes 30 Million Patient Video Records, Sparking Deepfake Scam Fears

Data Breach

Phishing

Cloud Security

"LAR Blinding Attacks" Use Lasers to Deceive Autonomous Car Sensors, Creating Critical Collision Risks

"LAR Blinding Attacks" on Autonomous Cars Use Lasers to Trick Sensors

A new cyber-physical attack method targeting autonomous vehicles, dubbed "LAR blinding," has been demonstrated. The attack uses coordinated lasers to jam and feed false signals into a self-driving car's sensors, such as LiDAR and cameras. This manipulation effectively blinds the vehicle, preventing it from identifying real-world obstacles and creating a severe risk of collision. The emergence of this physical-layer attack poses a critical safety challenge to the automotive industry.

Autonomous VehicleCyber-Physical AttackSensor AttackLiDARAutomotive Security +1 more

"LAR Blinding Attacks" Use Lasers to Deceive Autonomous Car Sensors, Creating Critical Collision Risks

IoT Security

New "Latent Poisoning" Attack Embeds Hidden Backdoors in AI Models, Triggered by Secret Prompts

New "Latent Poisoning" Attack Method Creates Hidden Vulnerabilities in AI Models

Security researchers have discovered a sophisticated new AI attack method called "latent poisoning." This technique embeds hidden, triggerable vulnerabilities within an AI model's training data. The compromised model behaves normally until an attacker provides a specific, secret prompt (a "sleeper agent" trigger). When activated, the prompt causes the model to bypass its safety controls, potentially leading to data leakage, execution of unauthorized commands, or generation of malicious content. This stealthy attack vector poses a significant threat to the integrity and security of AI systems.

Artificial IntelligenceAI SecurityData PoisoningLatent PoisoningMachine Learning +1 more

New "Latent Poisoning" Attack Embeds Hidden Backdoors in AI Models, Triggered by Secret Prompts

Threat Intelligence

Supply Chain Attack

Malware

EU Proposes Mandatory Audits for AI Training Data to Combat Data Poisoning Attacks

INFORMATIONAL

European Union to Mandate AI Data Poisoning Vetting

The European Union is drafting landmark legislation aimed at securing the AI supply chain. The proposed rules would mandate that companies developing or deploying AI systems within the EU must have their training datasets audited and certified by independent security agencies. This move is a direct response to the growing threat of AI data poisoning attacks, such as the recently discovered "latent poisoning" technique, and aims to establish a new standard for AI safety and trustworthiness.

EURegulationAIArtificial IntelligenceData Poisoning +1 more

EU Proposes Mandatory Audits for AI Training Data to Combat Data Poisoning Attacks

Regulatory

Policy and Compliance

Cyber Attack Paralyzes Parking Payment System in Russian City, Highlighting Urban Infrastructure Vulnerabilities

MEDIUM

Cyber Attack Disrupts Parking Payments in Russian City

A cyber attack has disrupted the municipal parking payment system in an unnamed Russian city, preventing citizens from paying for parking. Details regarding the type of attack, the threat actor responsible, and the duration of the outage have not yet been disclosed. The incident serves as a stark reminder of the vulnerability of smart city infrastructure and the potential for cyber attacks to cause significant disruption to daily public services.

CyberattackRussiaSmart CityGovernmentRansomware +1 more

3 min read

Industrial Control Systems

Payload Ransomware Group Claims Attack on Royal Bahrain Hospital, Threatening Patient Data Leak

Payload Ransomware Group Claims Breach of Royal Bahrain Hospital

The Payload ransomware group has claimed responsibility for a cyber attack against the Royal Bahrain Hospital, listing the healthcare provider as a victim on its dark web leak site. This incident is a classic double-extortion attack, where the group has likely encrypted the hospital's systems and exfiltrated sensitive patient data. The hospital has not yet confirmed the breach, but the attack places immense pressure on the institution, threatening operational disruption and a major violation of patient privacy.

RansomwarePayload RansomwareHealthcareData BreachBahrain +1 more

Data Breach

Threat Actor

Crimestoppers Data Breach Exposes 8.3 Million Anonymous Crime Tip Records, Endangering Whistleblowers

Millions of Anonymous Crime Tips Exposed in Crimestoppers Hack

The anonymous crime reporting service Crimestoppers has suffered a catastrophic data breach, with a threat actor claiming to have stolen and leaked 8.3 million records. This incident strikes at the heart of the service's mission, which is built on the promise of anonymity for tipsters. The exposure of this data could potentially identify and endanger individuals who have reported on criminal activity, creating a massive chilling effect on public cooperation with law enforcement.

Data BreachCrimestoppersAnonymityWhistleblowerLaw Enforcement +1 more

Data Breach

Bit Refill Blames North Korea-Linked Hackers for Cyber Attack on Cryptocurrency Platform

Bit Refill Accuses North Korea-Linked Hackers of Cyber Attack

The cryptocurrency gift card platform Bit Refill has publicly attributed a recent cyber attack to a hacker group linked with North Korea. While the company has not yet detailed the full impact of the attack, such as whether customer funds were stolen, the accusation points towards a sophisticated, state-sponsored operation. North Korean threat actors, like the infamous Lazarus Group, are well-known for targeting cryptocurrency services to generate revenue for the regime, suggesting the attack was likely financially motivated.

Bit RefillNorth KoreaDPRKLazarus GroupCryptocurrency +2 more

Threat Actor