TechNadu

Fresh cloud credentials and old backups create different risks. In @TechNadu's interview, Ransomnews Editor-in-Chief Mantas Sasnauskas explains why exposed .env files can enable immediate access, while legacy .bak archives fuel extortion. The overlooked risk? Third-party storage

Read the full interview:

🛡️ @Sony Network Communications disclosed a breach affecting 2.58M+ So-net and plala customer records. The exposed data includes 54,401 email-and-password records and 16 bank account records. Unauthorized access: Oct. 19 Breach observed: Oct. 27 No threat actor identified.

Full breach details:

Australia's ASD issued 4,400+ cyber warnings in FY2025–26, up nearly 80%. Its alerts helped identify 360+ incidents, while victim reports supported efforts to disrupt an Akira ransomware campaign. ASD says reporting attacks can help prevent further victims. #TechNaduSecurityDesk

Full report and findings:

The US Federal Election Commission's electronic filing system is offline following an attempted cyber intrusion, one week before the midterms. Campaign finance reporting is disrupted, but voting & searches of past filings are unaffected. No successful breach has been confirmed.

Full report:

Fake @ChatGPT and @claudeai apps on @github are distributing XMRig malware, Check Point warns. The Yoba 2026 campaign abuses signed installers through DLL sideloading, then uses Telegram, DNS-over-HTTPS, and Tor in its infection chain. #TechNaduSecurityDesk #ThreatIntelWatch

Full technical breakdown:

Proton's Black Friday 2026 deal is live. 🔹 VPN Plus: $2.49/month (75% off, 2-year plan) 🔹 @ProtonVPN Unlimited: $6.49/month (50% off, 1-year plan) VPN Plus matches its 2025 Black Friday price. Note: $59.76 upfront for VPN Plus, with higher renewal pricing.

Compare Proton's Black Friday pricing, included features, and renewal costs before choosing a plan. Full deal breakdown:

Three defendants pleaded guilty in a romance fraud scheme that cost victims more than $9 million. Two brothers from Ghana and a Hawaii woman used fake online personas to target mostly older Americans, according to court documents. Each faces up to 20 years in prison.

Victims were identified across 25 U.S. states, Germany, and Austria. Sentencing is scheduled for February 2027. Full case details:

🛡️ @MicrosoftTeams external chat was abused in 400+ incidents analyzed by Arctic Wolf Labs. Attackers pose as IT support, use email bombing, and trick employees into installing Quick Assist or RMM tools. Some reported attack chains reached payload execution in under 15 minutes.

🛡️ @AWNetworks recommends restricting external Teams domains, blocking trial-only tenant federation, and verifying remote-access requests through separate channels. Full investigation:

UNM Health System diverted ambulances and canceled appointments after a cyber incident. Meanwhile, BYOD claims it compromised 36,000 UNM machines, and Safepay claims a breach at Mexico's UAA. Both ransomware claims remain unverified. No link to the hospital...

UNM Health System said hospitals and clinics began resuming operations in phases. Details on the disruption and the separate ransomware claims:

Fake FedEx tax invoices are spreading Sirius Backdoor. Trellix found Korean-language phishing emails carrying malicious PDFs that trigger a fileless PowerShell infection chain. The payload supports HVNC, credential theft, keylogging, crypto wallet hijacking. #ThreatIntelWatch

The malware uses encrypted in-memory loading, ETW patching, and Early Bird APC injection to evade detection. Full technical breakdown and defensive recommendations: