Mastodawn

📰 Biometric breaches leave victims no reset button

Unlike passwords, stolen faces, fingerprints or voiceprints cannot be reissued, turning one healthcare biometric leak into permanent identity risk.

🔗 read more: blog.baited.io/2026/biometr...

#ransomNews #cybersecurity

Field Notes - Healthcare biome...

Field Notes - Healthcare biometric breach: the data you cannot reissue - Baited

NYC Health + Hospitals lost biometric data for 1.8 million people. The remediation industry has no answer for a fingerprint that cannot be reissued.

Baited

ransomNews 1d ago

📰 Mobile phishing beats email by forty percent

Verizon DBIR 2026 logged 22,000 confirmed breaches, with 62% involving humans and mobile phishing 40% more successful than email.

🔗 read more: blog.baited.io/2026/verizon...

#ransomNews #cybersecurity

🎣 #PacketHunters - Verizon DBI...

🎣 #PacketHunters - Verizon DBIR 2026: 22.000 breaches, 40% more mobile phishing, and the one number nobody quoted - Baited

Verizon DBIR 2026 buried the scariest number on page 2: mobile social engineering success up 40%. Here is what defenders missed — and what Verizon's own breach record proves.

Baited

ransomNews 2d ago

📰 TOAD invoices shipped before attacker QA finished

The campaign exposed six .xyz domains, two callback numbers and unfinished #TFN# placeholders, with no links or attachments to scan.

🔗 read more: blog.baited.io/2026/toad-in...

#ransomNews #cybersecurity

🎣 #PacketHunters – Caught mid-...

🎣 #PacketHunters – Caught mid-build: a TOAD invoice scam where #TFN# wasn't even filled in yet 💥 - Baited

Malwarebytes caught a TOAD invoice campaign mid-build — templates still showing #TFN# placeholders. Why callback phishing breaks your filters and your training.

Baited

ransomNews 2d ago

⚠️ GitHub attack turns trusted repositories toxic

A large-scale GitHub campaign injects malware into repositories, abusing developer trust and CI/CD reuse as the distribution layer.

🔗 read more: gbhackers.com/massive-gith...

#ransomNews #cybersecurity

ransomNews 2d ago

📰 Italian university phish reused one visible template

A Palermo-focused #OSINT trail showed Italian universities hit by lookalike phishing pages built from the same operational template.

🔗 read more: blog.baited.io/2026/italian...

#ransomNews #cybersecurity

🎣 #PacketHunters - 138 campaig...

🎣 #PacketHunters - 138 campaigns in one week, and one of them cloned a university with a kit it already used on other atenei - Baited

CERT-AGID flagged a Weebly page cloning the University of Palermo login portal, the same kit it already used on other atenei. Inside the Italian universities phishing campaign.

Baited

ransomNews 3d ago

⚠️ iOS AI apps leak live API access

Researchers found 282 of 444 LLM-enabled #iOS apps exposed exploitable credentials or backend access, including 54 plaintext API keys.

🔗 read more: www.helpnetsecurity.com/2026/06/22/l...

#ransomNews #cybersecurity

Show thread

ransomNews 3d ago

#Stormous threat actor did not list the amount of data exfiltrated on their DLS (at the time we detected the incident), but declared 400.00GB were exfiltrated, on the defaced websites.

#ransomNews #ThreatIntel #Defacement

ransomNews 3d ago

🚨 nuova rivendicazione #ransomware Italia 🚨

🏴‍☠️ gruppo #Stormous
🧬 Impulso Store | Montichiari (BS)
🎯 settore: C - Manifatturiero
🔗 impulso-store.com
🗓️ 25 giugno 2026

📄 sample: -
▪️ dati esfiltrati dichiarati: -
▪️ dati esfiltrati pubblicati: -
⏲️ scadenza: 30 giugno 2026

#ransomNews #cyberthreats

ransomNews 3d ago

🚨 nuova rivendicazione #ransomware Italia 🚨

🏴‍☠️ gruppo #Stormous
🧬 Montechiaro Store | Montichiari (BS)
🎯 settore: C - Manifatturiero
🔗 montechiaro-store.com
🗓️ 25 giugno 2026

📄 sample: -
▪️ dati esfiltrati dichiarati: -
▪️ dati esfiltrati pubblicati: -
⏲️ scadenza: 30 giugno 2026

#ransomNews

ransomNews 3d ago

🚨 nuova rivendicazione #ransomware Italia 🚨

🏴‍☠️ gruppo #Stormous
🧬 Lorenzoni Store | Montichiari (BS)
🎯 settore: C - Manifatturiero
🔗 lorenzoni-store.com
🗓️ 25 giugno 2026

📄 sample: -
▪️ dati esfiltrati dichiarati: -
▪️ dati esfiltrati pubblicati: -
⏲️ scadenza: 30 giugno 2026

#ransomNews