Yazılar

Envoy Air hit by Oracle-linked cyberattack, confirms limited data exposure

/in /tarafından

Envoy Air, the largest regional carrier for American Airlines (AAL.O), confirmed on Friday that it was the victim of a cyberattack linked to Oracle (ORCL.N) E-Business Suite vulnerabilities, part of a broader hacking campaign carried out by the CL0P extortion group.

The Texas-based airline said it had launched an internal investigation and contacted law enforcement after discovering the breach, which affected systems connected to Oracle software.

“We have conducted a thorough review of the data at issue and have confirmed no sensitive or customer data was affected,” a company spokesperson said. “A limited amount of business information and commercial contact details may have been compromised.”

Envoy Air operates over 160 aircraft and 875 daily flights for American Airlines. The company is the second confirmed victim of the campaign, which cybersecurity experts say has exploited weaknesses in Oracle’s enterprise systems to infiltrate corporate networks.

The CL0P ransomware group, known for previous high-profile attacks on software providers, claimed responsibility and listed American Airlines on its website as one of the victims, though the airline said questions should be directed to Envoy.

Google’s cybersecurity team said earlier this month that the ongoing campaign may have been active for over three months, resulting in the theft of “mass amounts of customer data” from various organizations. Harvard University also confirmed it was targeted in a similar attack earlier this week.

The breach underscores the growing risks associated with third-party enterprise software, particularly as hackers increasingly exploit widely used business platforms for extortion.

US cybersecurity firm F5 breach linked to Chinese state-backed hackers, sources say

/in /tarafından

A breach at U.S.-based cybersecurity company F5 has been attributed to state-backed hackers from China, according to two people familiar with the investigation. The revelation comes a day after U.S. officials warned that federal networks using F5 products were being targeted by a “nation-state cyber threat actor.”

Sources told Reuters that the hackers had been inside F5’s network for over a year, gaining access to sensitive files, including parts of the company’s source code and details about vulnerabilities that could be exploited to attack government and corporate systems.

The Cybersecurity and Infrastructure Security Agency (CISA) said the breach posed an imminent threat to U.S. federal networks and urged immediate patching and updates to F5 devices. Acting Director Madhu Gottumukkala warned that the same vulnerabilities could lead to “a catastrophic compromise of critical information systems” across sectors.

F5, which provides security and networking products to both public and private clients, has not commented on the attribution. The company previously confirmed unauthorized access to some internal systems but said its operations were unaffected.

Responding to the allegation, Chinese Embassy spokesperson Liu Pengyu said Beijing “opposes and combats hacking activities in accordance with the law” and criticized what it called “false information for political purposes.”

U.S. investigators are continuing to assess the full scope of the breach, which highlights the persistent cybersecurity risks facing key technology providers in both government and industry supply chains.

UK’s Capita fined £14 million over 2023 cyber breach affecting 6.7 million people

/in /tarafından

Capita has been fined £14 million ($18.7 million) by the UK Information Commissioner’s Office (ICO) for failing to protect personal data during a 2023 cyberattack that compromised information belonging to 6.7 million individuals, the outsourcing firm said on Wednesday.

The company, which provides services to UK government departments and major corporations, said the fine was part of a settlement with the ICO. Capita had previously estimated that the breach could cost up to £20 million in financial damages.

The ICO report found that Capita failed to maintain adequate network protections, allowing unauthorized access and privilege escalation, and did not respond properly to early security alerts. The regulator said the case underscored the growing pressure on British companies to strengthen cyber defenses following major breaches at Marks & Spencer, Co-op, and Jaguar Land Rover.

“With so many cyber attacks in the headlines, our message is clear: every organization, no matter how large, must take proactive steps to keep people’s data secure,” said John Edwards, the UK’s Information Commissioner.

Capita said it has since introduced advanced cybersecurity measures and completed an internal overhaul of its digital infrastructure. “Following an extended period of dialogue with the ICO, we are pleased to have concluded this matter,” said CEO Adolfo Hernandez.

The firm expects a free cash outflow of £59 million–£79 million in 2025, up from previous guidance of £45 million–£65 million, but noted that all other financial targets remain unchanged.

According to the National Cyber Security Centre (NCSC), the number of “highly significant” cyber incidents in Britain has doubled year-on-year, reflecting growing systemic risks across the public and private sectors.