Risky Bulletin: Supply chain attack lets ransomware group inside 40 shipping companies

A ransomware group known as Non has successfully breached approximately 40 maritime and global shipping companies by exploiting a shared IT service provider, believed to be South Korean company CyberLogitech. The group is demanding over $1.2 billion in ransom from the affected companies, according to security firm Sidome.

In cybersecurity updates, the PHP Foundation has released urgent patches for two major vulnerabilities, which were exploited shortly after their disclosure. Meanwhile, GitLab has addressed a critical vulnerability that could allow hackers to take control of self-hosted servers. The Pentagon has established a new unit, the Technology Support Office, aimed at sabotaging foreign military technology through cyber attacks and disinformation.

Recent cyber incidents include a breach of the Lite LLM project, where hackers added malware to its releases, and a compromise of Railway.com, which resulted in the theft of encrypted environment variables. Additionally, Japanese securities company IYE Cosmo reported unauthorized transactions linked to a breach of its internet trading system. The EU has initiated an investigation into Booking.com for failing to address fraudulent listings and phishing scams, while an Interpol operation has led to the arrest of over 1,400 suspects involved in cybercrime across 21 countries.

A ransomware group used a supply chain compromise to hack around 40 shipping companies, the Pentagon assembles a technology sabotage unit, PHP2Shell exploitation gets underway and GoDaddy revokes 400,000 certs.