At the beginning of this month a large car manufacturer was hit by a cyberattack and shut down its systems to contain it. Production at its plants stopped. As I write this it has been almost four weeks, the restart has been pushed back several times, and the government has stepped in with a loan […]
Read Full Post »
Posted in Business, Security Architecture on Sep 24th, 2025
At the end of August, a Swedish provider of systems for work environment and HR was hit by ransomware. Around two hundred municipalities and several regions use its systems. Services stopped, and this month the stolen data started to be published. It includes sensitive information about employees: sick leave, rehabilitation and work related incidents. I […]
Read Full Post »
This month a self replicating worm spread through the npm ecosystem, the package registry used by most JavaScript developers. It stole credentials from developers´ machines, including tokens for npm and GitHub and keys for cloud services. Then it used the stolen npm tokens to publish infected versions of other packages owned by the same developers. […]
Read Full Post »