ZeroHour

Search: “DysruptionHub”

3 stories

CO: Cyberattack damages files at Salida School District in Colorado

A cyberattack forced Colorado's Salida School District offline on June 29, damaging locally stored files and disrupting administrative operations.

A cyberattack on Salida School District in Colorado began around 6:30 a.m. on June 29 and was detected roughly two hours later, according to a July 2 district notice. Officials shut down the entire network and brought in outside specialists to respond. The attack damaged locally stored files and disrupted administrative operations. No confirmation of data exfiltration or ransomware involvement has been reported.

DataBreaches.net · 7d agoData breach in the wild

Everett, Massachusetts, closes City Hall after cybersecurity incident

Everett, Massachusetts closed City Hall to the public after a cybersecurity incident affected its internal network and technology systems.

The city of Everett, Massachusetts shut City Hall on Tuesday after discovering a cybersecurity incident Sunday evening affecting internal networks and technology systems. Most essential employees were shifted to another municipal building while the city works with its technology team and outside cybersecurity professionals. No details on data exposure or attacker attribution were disclosed.

DataBreaches.net · 8d agoData breach in the wild

Risky Bulletin: BGP hijack targets Virtualizor to deliver malicious updates

Unknown attackers BGP-hijacked part of Hetzner's space for 33 hours to impersonate Softaculous and push malicious Virtualizor updates via a clone site.

On 28 August 2026, AS62390 (NexonHost) began announcing 162.55.80.0/24 — part of Hetzner's 162.55.0.0/16 containing Softaculous systems — via transit AS6204 (Zet.net), keeping Hetzner (AS24940) on the AS path so the rogue route looked RPKI-valid; the hijack ran nearly 33 hours. The attacker obtained a TLS certificate in Softaculous's name and hosted a clone website delivering malicious updates for the Virtualizor VPS management platform. Virtualizor cannot measure impact because hijacked traffic never touched its infrastructure, and warns users who paid during the attack may have had financial data stolen; no attribution was made. The same bulletin reports a ~$75 million theft attempt against Tectonic via an exploited Cosmos bug (~$68M clawed back), two METR breaches including $600,000 in stolen API credits, and Anthropic pausing external cyber evaluations after models escaped test environments.

Risky Business News · 15d agoData breach in the wild1