Unit 42 says Falcon C2 compromised government sites via browser JavaScript
The framework stole credentials and cookies, sideloaded Chrome extensions, and delivered the Antino implant over OneDrive.
Stories per day · 30 days
10 RSS
Relateddata-breach9data-leak4espionage4outage4dhs3legal-aid-agency3linux3moldova3personal-data3uk3belgium2cereal2chatgpt2claude2cl-unk-12112copilot2credential-theft2e-government2
108 stories, newest first · one card per story
Stories tagged #government
Turla uses Cereal malware to spy on government Exchange servers
ESET found the toolset at agencies in Kazakhstan and Romania, where it collected selected NATO and EU correspondence.
1
Poland takes ePUAP offline after stopping a cyberattack
Officials say the shutdown was precautionary, with no confirmed system access or stolen data.
Japan announces emergency cybersecurity package after attacks
The 10 billion yen package includes AI teams and cyber rescue units after data breaches hit major companies and government agencies.
1
Norad grants portal breach may have exposed 20,614 users
Attackers used 27 compromised logins found on October 30; the portal is shut and police were notified.
1
69GB of Philippine Migrant Worker Data Leaked in Government Breach
An unknown operator exfiltrated 69GB of migrant worker and contract data from the Philippine Overseas Employment Administration to a Singapore staging server.
1
Japan reports a wave of AI-assisted attacks on firms and agencies
Officials cite data on about 260 million people since April, while leak reports rose from 303 in September to 830 in October.
2
Kaspersky finds NetamLoader on one Asian government Windows system
The loader uses signed Microsoft components, can hide activity, and its delivery path is unconfirmed.
1
Hacker leaks work contacts for more than 40,000 DHS employees
Records cover CBP, ICE, and CISA staff; the leaker claims an Okta SSO source, which Okta says it has no evidence was compromised.
Published records identify more than 41,000 DHS personnel
The set includes phones, emails, job titles and some surveillance, forensics and undercover roles.
Belgium tax agency takes MyMinfin offline after cyberattack
FOD Financiën says the attack was stopped within hours without data access, and extends an October 31 filing deadline to November 16.
Cyberattack takes Belgian tax portal MyMinfin offline before deadline
FPS Finance says there is no sign data was stolen and will extend the October 31 filing deadline later.
Unknown APT deploys NetamLoader on government Windows 10 builds in Asia
Kaspersky traced a CAB in the Windows update folder to AppDomainManager injection and a layered .NET loader.
1
DDoSecrets publishes records of 41,000 DHS personnel, including undercover links
The Icepick archive, last updated August 19, lists emails, phones, supervisors, and more than 55,000 permission groups across seven DHS components.
Moldova investigates foreign role in government data breach
Attackers made about 11 million requests and extracted data linked to roughly 750,000 identification numbers.
1
Attackers shadow Indian government domains to promote illegal gambling sites
Infoblox says unauthorized NS delegations on maharashtra.gov.in and a separate Hidden Hawk operation abused school and government domains for SEO.
4
FEC shuts electronic filing after attempted breach before midterms
New campaign-finance submissions were blocked from late October 26; voting and already filed public records were not.
Moldova shuts 82 public services after theft of 750,000 citizen records
Hackers stole identity, health and financial records on 750,000 people via an exposed, unauthenticated logging service.
1
Hacking attempts knock US FEC electronic filing system offline
The outage comes about a week before the November 3 elections; past reports remain searchable.
Italy’s Chamber says three parliamentary email accounts were targeted
Public statements do not yet say whether messages were read or any data was taken.
Moldova says government breach may have exposed 750,000 people
Attackers hit unauthenticated government services from October 22 to 23; card data was not compromised, officials say.
1
Ohio auditor takes web server offline after October 25 attack
Keith Faber says monitoring quarantined the threat and he does not believe residents’ or local governments’ financial data is at risk.
1
Sweden blocks ChatGPT and Claude on government staff computers
Staff are directed to approved tools such as Copilot, whose security was tightened after a review.
PHP2Shell exploited at a European government entity, Unit 42 says
Within two hours the attackers reached password hashes, MFA secrets, and an NTLM-relay path toward Domain Admin.