ShiftSix Security

Dedicated cyber experts safeguarding industry ecosystems. Crafting strong, strategic defenses.Stay informed with top insights 👉

[ShiftSix Security @Shift6Security]

A new ransomware group is making waves: BERT, also known as Water Pombero, is targeting Windows and Linux systems across Asia, Europe, and the US focusing on healthcare, tech, and events. Fast, efficient, and surprisingly simple. #CyberSecurity #Ransomware

[ShiftSix Security @Shift6Security]

Nippon Steel Solutions disclosed a data breach after attackers exploited a zero-day in its network equipment. Personal data from customers, partners, and employees was exposed while cloud services remained unaffected.
#CyberSecurity #DataBreach

[ShiftSix Security @Shift6Security]

@BleepinComputer @LawrenceAbrams From court to keyboard alleged involvement of a Russian pro basketball player in ransomware ops shows how cybercrime networks blur across industries. Talent and tech aren’t limited by profession.

[BleepingComputer @BleepinComputer]

Russian pro basketball player arrested for alleged role in ransomware attacks - @LawrenceAbrams
https://t.co/MDCNRkPOAg

https://t.co/MDCNRkPOAg

[ShiftSix Security @Shift6Security]

@Dinosn A newly uncovered eSIM bug could let attackers spy or hijack millions of phones bypassing physical SIM swaps entirely. When the SIM goes digital, so do the threats. Mobile security needs to catch up fast.

[Nicolas Krassas @Dinosn]

eSIM Bug in Millions of Phones Enables Spying, Takeover https://t.co/ypMlpUYscT

[ShiftSix Security @Shift6Security]

@TheHackersNews A critical flaw in mcp-remote allows remote OS command execution via a fake server putting 437K+ systems at risk of full takeover. When AI tools become attack surfaces, secure-by-default isn’t optional. Patch now.

[ShiftSix Security @Shift6Security]

@Cyber_O51NT SLOW#TEMPEST’s use of dynamic jumps and obfuscated calls shows just how far malware authors will go to stay off the radar. Unit 42’s breakdown and how emulation can defeat it is a must-read for defenders.

[ShiftSix Security @Shift6Security]

@H4ckmanac DragonForce claims a major hit on the City of Keene 629GB of exfiltrated data and a ticking ransom clock. As smaller municipalities remain under-resourced, they continue to face outsized ransomware risk.

[Hackmanac @H4ckmanac]

🚨 Data Breach Alert 🚨

🇪🇸 Spain - AEOL Service

A threat actor known as byebye942 is claiming to be selling a database allegedly stolen from AEOL Service.

According to the post, the database reportedly contains 3.8 million records, including full names, national ID numbers (DNI), emails, driving school affiliations, and IP addresses.

Discover more at https://t.co/yiQ1nOhPjb

[ShiftSix Security @Shift6Security]

@H4ckmanac Alleged breach of AEOL Service exposes 3.8M records tied to Spain’s driving school ecosystem including DNIs, emails, and IPs. A goldmine for identity theft and phishing. Even niche platforms hold high-value data.

[BleepingComputer @BleepinComputer]

PerfektBlue BlueTooth flaws impact Mercedes, Volkswagen, Skoda cars - @billtoulas
https://t.co/YxaSkZiFt8

https://t.co/YxaSkZiFt8

[The Hacker News @TheHackersNews]

🚨 Hackers can hijack your car over Bluetooth.

New “PerfektBlue” flaws let attackers run remote code on Mercedes, VW & Skoda—just by pairing.

They can track location, record audio, and even reach engine controls.

Full story → https://t.co/JBvlpjqCc7

[ShiftSix Security @Shift6Security]

@TheHackersNews PerfektBlue shows how Bluetooth flaws aren’t just bugs they’re potential drive-by takeovers. From remote code execution to engine access, this puts physical safety on the line. Cars need cybersecurity as much as seatbelts.

[ShiftSix Security @Shift6Security]

@a_greenberg When the admin password is “123456,” it's not a breach it's an open door. Exposing private conversations and personal data from job applicants shows how weak security hygiene can undo trust in seconds.

[Andy Greenberg (@agreenberg at the other places) @a_greenberg]

McDonald's uses an AI bot called "Olivia" for hiring. A pair of hackers found they could access every conversation job applicants had with it—including all the personal info they shared—by exploiting security flaws as basic as using the password "123456". https://t.co/55WueJz3Of

[ShiftSix Security @Shift6Security]

@TheHackersNews Suspected India-linked APT used fake defense emails and Google Drive phishing to breach a European foreign ministry. LoptikMod enabled stealth, persistence, and data theft—another case of low-friction, high-impact espionage.

[ShiftSix Security @Shift6Security]

@H4ckmanac Indonesia’s Ministry of Defense confirms a cyberattack, but the scope especially regarding leaked civil servant data remains unclear. As defense agencies become frequent targets, transparency and rapid assessment are critical.

[Hackmanac @H4ckmanac]

🚨Data Breach Update‼️

🇮🇩Indonesia - Ministry of Defense (Kementerian Pertahanan Republik Indonesia, KEMHAN RI)

The Ministry of Defense admits there was a hacking incident

When contacted by IDN Times, Brigadier General Frega Wenas Inkiriwang, Head of the Defense Ministry's Information Bureau, confirmed the cyberattack on the ministry's system. However, he could not yet confirm whether personal data of civil servants had been leaked.

Source:
https://t.co/5hSJSTsV1K

[ShiftSix Security @Shift6Security]

@TheHackersNews Gold Melody is exploiting exposed https://t.co/GuSuBCPk9r keys to hijack servers via ViewState flaws running code in memory, leaving minimal traces. 3,000+ servers reportedly at risk. When keys leak, trust collapses.