NOTE: Police in the UK have indicted four members of Scattered Spider. The suspects — two 19-year-old men, a 17-year-old man and a 20-year-old woman — are being held on suspicion of violating the Computer Misuse Act, blackmail, money laundering and participating in organized crime activities, according to the NCA. For more information, click here: https://www.cybersecuritydive.com/news/uk-arrest-four-retail-cyberattack/752682/  

===========

Welcome to the Identity Theft Resource Center's (ITRC’s) Weekly Breach Breakdown for July 11, 2025. I'm Alex Achten, Senior Director of Communications & Media Relations of the ITRC. Thanks to Sentilink for supporting the ITRC and this podcast. Each week, we look at the most recent events and trends related to data security and privacy. Today, we will take a deeper look at the works of a ransomware group that ITRC President James E. Lee discussed on the podcast just last month. We are discussing Scattered Spider attacks. 

Have you ever been bitten by a spider? It hurts so bad! The good news is that most spider bites are harmless. However, some are worse than others, especially black widow and brown recluse spiders. As James said in June, not all scary spiders are of the 8-legged freak. There is one that does not have eight legs and can inflict harm as nasty as a black widow or brown recluse bite. We are again discussing the ransomware group Scattered Spider, which continues to dominate the headlines and target companies.

Follow on LinkedIn: www.linkedin.com/company/idtheftcenter/
Follow on Twitter: twitter.com/IDTheftCenter

The Weekly Breach Breakdown Podcast by ITRC: Spider Bites – S6E21

In this episode of HEAL Security Dispatch Daily Digest, Richard Simmons breaks down today’s top cybersecurity developments shaping industries worldwide. Microsoft faces disruption in its Windows Server Update Services, delaying critical patch deployments across enterprise networks. Qantas reveals a major data breach affecting millions of frequent flyer accounts, while Mitsubishi Electric warns of a critical remote code execution vulnerability impacting industrial automation systems. Researchers uncover severe Bluetooth flaws in millions of vehicles, and cybercriminals exploit fake gaming and AI companies to spread remote access malware. We also explore a new eSIM cloning technique threatening mobile privacy, and Google’s commitment to localize UK user data to strengthen data sovereignty and security compliance. Stay informed with this essential update on evolving cyber threats and defenses.

Broken Updates, Car Hacks, and eSIM Clones: Unpacking 2025’s Emerging Cyber Risks

In this episode of HEAL Security Dispatch Daily Digest, Richard Simmons reports on the latest wave of critical cybersecurity threats impacting global systems and data. Fortinet users are urged to patch immediately as a severe remote code execution flaw surfaces, while researchers track a stealthy new PHP-based Interlock RAT and the group’s malicious “FileFix” tool posing as recovery software. A tax consulting firm exposes nearly 250,000 sensitive records due to a cloud misconfiguration, and Gigabyte motherboards are found vulnerable to UEFI malware that bypasses Secure Boot. A malicious VS Code extension in Cursor IDE leads to over half a million dollars in stolen crypto, and a global data breach at Louis Vuitton compromises customer information in the UK, South Korea, and Turkey. Stay tuned for a fast-paced briefing on the critical vulnerabilities and breaches shaping today’s cyber threat landscape.

Fortinet Flaw, RAT Deception, and High-End Data Leaks: Today’s Top Cybersecurity Headlines

In this episode, Edd Hall covers a sweeping cyberattack that hit Louis Vuitton across multiple regions, a severe data breach affecting 6.5 million Co-op members, and a disruption to Air Serbia’s digital systems. He also explores BadBox 2.0 malware preinstalled on Android and IoT devices, a stealthy macOS threat abusing the Zoom SDK, and new phishing campaigns using SquidLoader in Hong Kong. Plus, we examine a critical privilege escalation flaw in Windows Server 2025 known as the Golden DMSA attack. Tune in for essential insights on emerging cyber risks and what they mean for security and infrastructure worldwide.

Malware Preloads, Luxury Breaches, and Airline Outages – Global Threats Unfold

Welcome back to the Identity Theft Resource Center’s (ITRC) Weekly Breach Breakdown, supported by Sentilink. I’m James E. Lee, the ITRC’s President, and this is the episode for July 18, 2025. Each week, we take a look at the latest news and trends related to data security and privacy. This week, the ITRC released our H1 2025 Data Breach Analysis that looks at what happened in the first six months of 2025 when it comes to U.S. data compromises. Let’s talk about the trends, but first, some housekeeping with some numbers: 

A total of 1,732 data compromises were reported in the first half of 2025, resulting in a little more than 165.7 million breach notices. That’s about five percent ahead of where we were at this time last year in terms of compromises. It’s also more reported compromises than at the halfway point in 2023, when we set the current high-water mark for data compromises.  

Follow on LinkedIn: www.linkedin.com/company/idtheftcenter/
Follow on X: twitter.com/IDTheftCenter

The Weekly Breach Breakdown: ITRC H1 2025 Data Breach Analysis – Key Findings & Takeaways – S6E22

In today’s deep dive, we unpack a wave of major healthcare data breaches reported to federal authorities, impacting millions. We explore the release of a free decryptor for Phobos ransomware, a significant breakthrough for victims. Hospitals and public services in Kansas, Nova Scotia, and Glasgow are reeling from recent cyber incidents. Plus, we look at critical vulnerabilities affecting VMware and Citrix systems used across the healthcare sector. Stay ahead with the latest threats and defense updates in healthcare cybersecurity.

Hospital Hacks, Ransomware Relief, and Rising Threats in Healthcare Cybersecurity

Today's episode dives into multiple Microsoft-related cybersecurity developments. We cover the active exploitation of a SharePoint vulnerability using Toolshell malware, a critical Windows Server update causing VM failures, and a new auto-recovery tool being tested in Windows 11. Plus, we examine the broader implications for healthcare IT teams and security professionals. Stay informed with the latest threats, exploits, and defense strategies shaping the cyber landscape.

SharePoint Attacks, Hospital Breach, and Zero-Days

In today’s episode, we break down the AMEOS data breach impacting millions of patients across Europe, highlighting the growing urgency around healthcare data security. We also explore a nation-state attack on Microsoft SharePoint that compromised U.S. government agencies, and a new wave of malware abusing everyday tools like PowerShell and Google Docs. From infected gaming hardware to stolen SSH credentials, the threat landscape is expanding fast. Stay tuned as we cover the cybercriminal tactics every healthcare organization needs to watch.

Healthcare on Alert: AMEOS Breach, Nation-State Hacks, and the Malware Tools Behind Them

In this episode, Edd Hall discusses the latest cybersecurity developments, including Brave’s move to block Windows Recall for user privacy, Europol’s arrest of the XSS forum admin, and the exploitation of a critical SharePoint vulnerability. He also covers major breaches at Toptal, AMEOS Group, and U.S. federal agencies, the data leak penalty faced by Haesung DS, and SonicWall’s urgent patch for a critical flaw. Stay tuned for expert insights and analysis.

Cybersecurity Update: Major Breaches, Exploits, and Global Enforcement Actions

Today’s episode dives into a wave of emerging cyber threats shaking the digital landscape — from AI-generated Linux malware and malicious Copilot commands to steganography-based attacks hiding in innocent-looking images. We examine how fake error pages are delivering platform-specific payloads, how healthcare AI tools may be exposing sensitive data, and why open-source repositories are facing a surge in supply chain breaches. Stay informed as we break down what these threats mean for cybersecurity in healthcare and beyond.

AI Threats, Stealthy Malware & Supply Chain Risks: Today in Healthcare Cybersecurity

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

New tracks tagged #DataBreach