01
Security
Synology urges immediate DSM updates as C3RB3R ransomware targets NAS devices
Owners of exposed, outdated Synology storage appliances face encrypted data unless they patch and restrict remote access to the management interface.
Malicious software that locks a victim's files, usually by encrypting them, and demands payment to unlock them.
Many groups now also steal the data first and threaten to publish it, so backups alone no longer protect a victim.
Owners of exposed, outdated Synology storage appliances face encrypted data unless they patch and restrict remote access to the management interface.
Dutch police recovered customer data from more than 3,000 accounts, and officials are now following up on what it shows.
Customers in France are being warned to watch for phishing, since names, addresses and contract identifiers were taken, though no banking data was affected.
Because the attacks exploit trust rather than software flaws, security teams need to watch endpoint and identity activity, not just scan messages.
The case raises the stakes around hospital ransomware by tying the attack to a patient death and more than 10,000 disrupted appointments.
Stores stayed open, but staff and customers faced outages across several banners while the company contained the incident.
The arrest adds pressure on a ransomware operation that has still kept publishing victims since June.
IDC Frontier has cut access to IDCF Cloud management consoles while it investigates the breach and contains the disruption.
Prosecutors say customers were billed as if MonsterCloud used its own recovery tools, while it allegedly paid attackers for decryptors instead.
Attackers are deleting recovery copies before encryption, making restoration harder and raising the stakes for victims.
The company says exposed records may include identity and financial details, and affected people have until January 4, 2027 to activate monitoring.
Seizures, arrests and new evidence are expected to expose more victims and accomplices linked to the KillSec ransomware group.
The twin incidents underscore ongoing cyber risks for major transport-linked brands in Japan, even when trains keep running.
The campaign extends from tenant-wide resource wipes to direct hits on AI datasets and vector stores.
The case highlights how U.S. authorities are pursuing individuals behind major ransomware groups even years after their attacks.
The GDPR ruling highlights weak security at a key municipal IT supplier and opens the door to more probes of local authorities.