NOTE: Police in the UK have indicted four members of Scattered Spider. The suspects — two 19-year-old men, a 17-year-old man and a 20-year-old woman — are being held on suspicion of violating the Computer Misuse Act, blackmail, money laundering and participating in organized crime activities, according to the NCA. For more information, click here: https://www.cybersecuritydive.com/news/uk-arrest-four-retail-cyberattack/752682/  

===========

Welcome to the Identity Theft Resource Center's (ITRC’s) Weekly Breach Breakdown for July 11, 2025. I'm Alex Achten, Senior Director of Communications & Media Relations of the ITRC. Thanks to Sentilink for supporting the ITRC and this podcast. Each week, we look at the most recent events and trends related to data security and privacy. Today, we will take a deeper look at the works of a ransomware group that ITRC President James E. Lee discussed on the podcast just last month. We are discussing Scattered Spider attacks. 

Have you ever been bitten by a spider? It hurts so bad! The good news is that most spider bites are harmless. However, some are worse than others, especially black widow and brown recluse spiders. As James said in June, not all scary spiders are of the 8-legged freak. There is one that does not have eight legs and can inflict harm as nasty as a black widow or brown recluse bite. We are again discussing the ransomware group Scattered Spider, which continues to dominate the headlines and target companies.

Follow on LinkedIn: www.linkedin.com/company/idtheftcenter/
Follow on Twitter: twitter.com/IDTheftCenter

The Weekly Breach Breakdown Podcast by ITRC: Spider Bites – S6E21

In today’s episode, we break down the AMEOS data breach impacting millions of patients across Europe, highlighting the growing urgency around healthcare data security. We also explore a nation-state attack on Microsoft SharePoint that compromised U.S. government agencies, and a new wave of malware abusing everyday tools like PowerShell and Google Docs. From infected gaming hardware to stolen SSH credentials, the threat landscape is expanding fast. Stay tuned as we cover the cybercriminal tactics every healthcare organization needs to watch.

Healthcare on Alert: AMEOS Breach, Nation-State Hacks, and the Malware Tools Behind Them

In this episode, Edd Hall discusses the latest cybersecurity developments, including Brave’s move to block Windows Recall for user privacy, Europol’s arrest of the XSS forum admin, and the exploitation of a critical SharePoint vulnerability. He also covers major breaches at Toptal, AMEOS Group, and U.S. federal agencies, the data leak penalty faced by Haesung DS, and SonicWall’s urgent patch for a critical flaw. Stay tuned for expert insights and analysis.

Cybersecurity Update: Major Breaches, Exploits, and Global Enforcement Actions

Today’s episode dives into a wave of emerging cyber threats shaking the digital landscape — from AI-generated Linux malware and malicious Copilot commands to steganography-based attacks hiding in innocent-looking images. We examine how fake error pages are delivering platform-specific payloads, how healthcare AI tools may be exposing sensitive data, and why open-source repositories are facing a surge in supply chain breaches. Stay informed as we break down what these threats mean for cybersecurity in healthcare and beyond.

AI Threats, Stealthy Malware & Supply Chain Risks: Today in Healthcare Cybersecurity

In this episode, Edd Hall discusses the latest cybersecurity developments making headlines on July 28, 2025. Topics include the Scattered Spider ransomware group’s attack on VMware ESXi, Microsoft’s licensing controversy with national security implications, the reemergence of BlackSuit as Chaos, and major breaches affecting Allianz Life, WordPress sites, and even a CIA intelligence portal. Tune in for expert insights on evolving cyber threats, outdated defenses, and the irony of cybercriminals exposing themselves.

Ransomware Evolution, Data Breaches, and Security Gaps

In today’s episode, we cover a wide range of cybersecurity threats making headlines — from exposed user chats in a popular messaging app to phishing campaigns targeting developers on PyPI. We also examine new malware tactics disguised as government apps, critical vulnerabilities in platforms like SAP NetWeaver and CodeIgniter, and the weaponization of a widely used npm package. Stay tuned as we unpack what these incidents mean for security teams, developers, and everyday users.

Exploits, Phishing Campaigns, and Data Leaks Shaping the Cybersecurity Landscape

A very interesting topic based piece of music by T I W

Drawing on our feelings & fears as we live with the possibility of a potential Cyber Attack.

Our inner minds feel conscious that something big one day will play out, which is also helped on its way by what we hear & see in the news & in social media.

Download here via my Bandcamp page -https://rupertx.bandcamp.com/track/cyber-attack

CYBER ATTACK

The Invisible West - 'CYBER ATTACK'

From AI-powered phishing scams in Brazil to a major breach at Allianz Life, today’s cybersecurity roundup covers the latest threats and revelations. Learn how attackers are using generative AI tools—and how defenders are fighting back using AI-powered forensics. We dive into a privilege escalation flaw in Amazon ECS, a new malware analysis platform from CISA, and cyberattacks targeting Air France, KLM, and Allianz. Plus, find out what’s next for three Pennsylvania hospitals in a major healthcare shake-up. Stay informed and stay secure with today’s top stories in cybersecurity.

AI Scams, Cloud Flaws, and Global Breaches: This Week in Cybersecurity

In today’s cybersecurity roundup, we cover a surge in global brute-force attacks on Fortinet SSL VPNs, a massive scam using over 10,000 fake TikTok and Facebook shops to spread malware and steal cryptocurrency, and newly discovered vulnerabilities in Ivanti VPN gateways. We also report on a cyber incident disrupting the Pennsylvania Attorney General’s office, a suspected collaboration between the ShinyHunters and Scattered Spider cybercrime groups, and the emergence of Charon ransomware using advanced APT-style tactics. Plus, we look at Norway’s move to overhaul e-health security with fintech-grade protections.

Cybersecurity Roundup: Global VPN Attacks, Fake Shop Scams, and E-Health Security Overhaul

This episode covers Microsoft’s latest Patch Tuesday tackling a critical Kerberos zero-day, a Booking.com phishing scam using a sneaky Unicode trick, and the Crypto24 ransomware group’s advanced EDR evasion tools. We also look at Google’s Android pKVM earning top security certification, a surge in personalized phishing emails, and two new mobile threats — the LunaSpy spyware and PhantomCard NFC-based banking malware.

Cybersecurity Roundup: Sophisticated Phishing Scams, and Emerging Mobile Threats

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

💥New album - Intercom 'Analogue AI' Available NOW via my Bandcanp page - rupertx.bandcamp.com/album/analogue-ai 🎧

Peace, Love & Sunshine ✌️ 💓 🌞 
Jason Westwell.

New tracks tagged #Cyberattack