Cyberattack Hits Ukraine Agency Ahead of Major Asset Tender
Ukraine's Asset Recovery and Management Agency (ARMA) experienced a cyberattack on its servers ahead of the August 22 deadline for selecting a manager for assets linked to sanctioned Russian oligarch Mikhail Fridman, prompting investigations by the Security Service of Ukraine and the National Anti-Corruption Bureau into whether the incident was part of a broader coordinated campaign. ARMA has documented signs of unauthorized interference since spring, including unauthorized access to officials' email accounts and inquiries, raising concerns about possible coordinated efforts to disrupt operations, apply pressure, or affect the competition, though the agency has not identified the alleged perpetrators. Despite the incident, ARMA said it will proceed with the IDS Ukraine asset manager competition according to established legal procedures and timelines.
Researchers have discovered methods to bypass Windows 11's strongest security defenses without physical access to the machine, though the attack requires the attacker to already possess privileged system access. Last week also saw reports of records allegedly stolen from Azure tenants and Medusa ransomware targeting over 500 organizations, along with law enforcement actions against cybercrime operations.
The private equity firm said attackers broke into some of its cloud platforms during a five-day period in early July, compromising sensitive personal data. The post Apollo discloses data breach from ongoing wave of attacks hitting financial sector appeared first on CyberScoop.
Canada's Hospital for Sick Children has suffered another cybersecurity incident involving theft of employee data, reportedly linked to a vulnerability in a third-party software application. This marks the second significant attack on the institution, following a 2022 ransomware incident that disrupted hospital systems.
Russian network monitoring firm Microolap has confirmed a cyberattack claimed by pro-Ukraine hacking group Black Spark, which alleged it maintained access to the company's network for over a month. The attackers claimed to have compromised internal systems including EtherSensor, Microolap's network traffic analysis platform, according to statements made by the threat group.