Industry
Security firm Todyl says that since Nov 1 an attacker has been using stolen, still-valid credentials to sign in to MSPs' Microsoft 365 and Azure environments as their own applications, targeting about 45 app registrations at roughly 18 organizations with more than 33 authenticating successfully .
US utility CenterPoint Energy said in a September SEC 8-K that after learning of an online post claiming to hold its customer data, it investigated and determined an unauthorized third party obtained personal information of a portion of customers through one of its external-facing systems .
Taiwan's Administration for Cyber Security said on August 13 that monitoring units detected abnormal attacks on government agencies in July with clear overseas characteristics, combining human operators with AI agents such as OpenClaw and using backup and test systems as stepping stones, and that affected agencies have completed remediation .
According to Portafolio, citing an announcement from Ecopetrol, an external threat actor gained unauthorized access to cloud storage environments across approximately 15 companies within the group and downloaded data associated with roughly 3,300 user accounts .
In an assessment published on December 18, 2025, the Danish Defence Intelligence Service (DDIS / FE) stated that Russia was responsible for a destructive cyberattack against a Danish water utility in 2024 .
According to The Guardian and Norwegian media, the head of the Norwegian Police Security Service (PST) stated that a dam facility in Bremanger was targeted in a cyberattack in April 2025 .
According to Dawn, citing a spokesperson for Pakistan Petroleum Limited (PPL), the company's IT systems were targeted by a ransomware attack on August 6, 2025 .
According to Semana, citing a statement from EPM, the company discovered on May 23, 2025, that its Factura Web payment page had been impersonated, diverting customer payments to third parties .
According to The Nation, citing Thailand's personal data protection regulator, Bangchak discovered unauthorized access to its customer feedback system on April 9, 2025 .
According to Argentine media outlet TN, Argentina's National Atomic Energy Commission (CNEA) suffered a ransomware attack .
According to El Heraldo, citing a statement from electric utility Air-e, the company suffered a ransomware attack in the early hours of September 2, 2024, affecting multiple information systems .
On 2024-02-07, CISA, NSA, and the FBI issued a joint advisory attributing confirmed intrusions into U.