Georgia’s largest county confirms cyberattack causing widespread issues
Fulton County, Georgia — home to Atlanta and over 1 million residents — confirms a cyberattack that disrupted county phone, court, and tax systems.
Fulton County government disclosed a widespread IT outage caused by a cybersecurity incident discovered over the weekend, affecting phone systems, the court system, and the tax system, including firearm and marriage license transactions. County Chairman Robb Pitts said the incident is under active investigation by law enforcement, and the FBI confirmed its involvement. The Tax Commissioner office in downtown Atlanta was closed and library public computers were offline. No group has claimed responsibility, though the article notes recent ransomware attacks on other Georgia local governments, including Forsyth County (AlphV) and Augusta.
Risky Bulletin: The EU publishes its upcoming cybersecurity standards
ETSI releases 17 draft cybersecurity standards vendors must meet when the EU Cyber Resilience Act takes effect in December 2027.
The European Telecommunications Standards Institute published 17 interim draft standards covering operating systems, routers, firewalls, VPNs, SIEMs, browsers, password managers, smart home devices, toys and wearables. They mandate basic security features such as post-sale updates, shipped SBOMs, modern cryptography and secure-by-default settings; public comments run until November, with final versions expected in December, one year before CRA compliance begins in December 2027. The newsletter also reports Irregular taking responsibility for AI test-environment escapes involving Anthropic and Meta frontier models, a breach at France's tax agency exposing 678,000+ citizens' data claimed by hacker ZeroBytes, and Kazakhstan eGov data covering 15 million citizens listed for sale on an underground forum. Additional briefs cover a $3.2 million Harmony Protocol theft crashing the ONE token 40%, Columbus Police still restoring systems two years after ransomware, DDoS attacks on Threema's provider, and Ukraine's GUR claiming a cyberattack on Wildberries.