Cyberattacks by Iranian-affiliated groups on Israel's critical military infrastructure; Iran-Israel war in the cyber layer

 

The Iranian Cyber ​​Isnad Front has managed to infiltrate the Maya company, which is linked to Israeli forces, gaining access to confidential data on projects such as the Iron Beam laser system, the Hermes 900 drone, and the Spike anti-tank missile. The hacking group has also released footage from inside the company showing the stages of Israeli weapons production. In addition, the pro-Iranian hacking group Handala has revealed the identities of 6 Israeli defense/nuclear scientists, the brains behind Israel’s air (helicopters and F-35 aircraft), naval, and nuclear programs. Handala said they are senior engineers, architects of Israel’s air and naval power, and the secretive minds behind the Weizmann Institute’s most secret operations, including nuclear.

Dozens of celebrities take stage in London for ‘Together for Palestine’ fundraiser

 

“It’s important to speak out now, not when this is over, right now, while it’s happening, pressurize your government. Lend your support to those who are peacefully campaigning for Palestine. Call for a ceasefire, stop the killing,” Coogan said.

Dozens of musicians, actors, activists and speakers took to the stage at London’s biggest stadium on Wednesday to raise money for Palestinians at a fundraising concert for the war in Gaza.

The event, “Together for Palestine,” brought a star-studded lineup to Wembley Arena and included performances from Bastille, James Blake, Paloma Faith, Jamie xx, and PinkPantheress, as well as Palestinian artists such as Sama’ Abdulhadi, Saint Levant and Elyanna.

Actors such as Florence Pugh, Nicola Coughlan, and Benedict Cumberbatch, and other notable figures such as broadcaster Mehdi Hasan, footballer Eric Cantona, and Francesca Albanese, the UN special envoy for Palestine, also spoke at the event.

https://edition.cnn.com/2025/09/17/entertainment/celebrities-gaza-ceasefire-london-concert-latam-intl

https://x.com/PaulAnders1998/status/1968632249164714133

Alleged Iran-Linked Phishing Targets Israeli Actors

Hebrew media reported on Friday that dozens of Israeli actors were targeted in a phishing attack allegedly directed by Iran.

According to a statement cited from Israel’s Cybersecurity Authority, several Israeli actors received an email claiming to be from a famous director seeking to cast actors for a new film.

The email requested that the artists submit not only audition videos but also personal documents such as ID cards, passports, and home addresses.

Reports indicate that dozens of actors sent the requested documents and subsequently received threatening responses, with the attack attributed to Iran.

Israeli authorities have advised actors affected by the incident to replace their identity documents and notify government agencies.

Media: The Sophisticated Soft Weapons of the Modern Era

Cognitive Manipulation Mechanisms

Modern media represents a complex neuropsychological intervention system designed to systematically influence human cognitive processes through strategic communication technologies.

US Homeland Security News :Venezuela under US cyber attack! Blackout in Greater Caracas and other regions of Venezuela.

Given the available evidence, there is a strong possibility that the power outage was caused by internal problems, infrastructure or human sabotage, not a foreign cyberattack.

The release of this news is more of a psychological nationalism for the Venezuelan people and their weak government officials than a technical and cyber reality...

US Homeland Security News

Google recommends that 2.5 billion Gmail users change their passwords following an advanced phishing attack that started through a Salesforce vulnerability.

 

Google recommends that 2.5 billion Gmail users change their passwords following an advanced phishing attack that started through a Salesforce vulnerability.

The attack included fake phone calls with attackers posing as Google representatives, prompting users to enter their login details.

Google did not specify the extent of the affected users but emphasized the need for an immediate password change. It also recommends enabling two-factor authentication (2FA) and avoiding entering login details during unidentified phone calls.

The password change recommendation was also delivered via messages within Gmail to ensure users take immediate action.

Hackers breached the customer service system of TransUnion in the US through a third-party application, exposing sensitive personal information of about 4.4 million Americans including names, addresses, birth dates, and Social Security numbers, but without credit reports.

 

Hackers breached the customer service system of TransUnion in the US through a third-party application, exposing sensitive personal information of about 4.4 million Americans including names, addresses, birth dates, and Social Security numbers, but without credit reports.

The attack is attributed to the ShinyHunters and UNC6395 groups who exploited vulnerabilities in Salesforce.

TransUnion provides credit rating and financial information management services, so such a leak poses a serious risk of identity theft.

The company offers affected individuals two years of credit monitoring and identity protection services, while a class-action lawsuit against it is under review. Law enforcement authorities continue their investigation.

ESET researchers exposed PromptLock, the world’s first ransomware written using artificial intelligence.

 

ESET researchers exposed PromptLock, the world’s first ransomware written using artificial intelligence.

This is a PoC demonstrating the potential of using a local LLM (gpt-oss:20b via Ollama API) to create Lua scripts in real time, used for file scanning, data theft, and encryption.

The ransomware is written in Golang, runs on Windows and Linux, and uses the SPECK 128-bit encryption algorithm. Its uniqueness lies in the fact that each execution generates different and dynamic code, making it difficult for signature-based detection systems to stop it.

Although this is a demonstration and not a real attack, researchers warn that integrating AI into ransomware could make advanced capabilities accessible even to criminals with little technical knowledge, creating a new generation of more sophisticated ransomware.

ESET’s recommendations for dealing with this are maintaining proper backups, monitoring dynamic script creation, and preparing defenses against AI-based attacks.

#Ransomware #AI #PromptLock #ESET #CyberThreats #Malware

Tom Alexandrovich, a child molester who is the mastermind and founder of the Israeli Cyber Dome.

Tom Artyom Alexandrovich, 38, an Israeli national; executive director of the cyber department of the

Israeli National Cyber Authority, was arrested in Las Vegas, USA, along with eight other men. He was arrested on a felony charge of luring a child using a computer for sexual activity and was released on $10,000 bail and immediately returned to Israel.

Prior to this incident, Alexandrovich was known as a senior manager in Israel’s cybersecurity sector, specifically the Israeli National Cyber Authority. He had recently attended the Black Hat briefings, a cybersecurity conference in Las Vegas.

Under Nevada law, the charge of luring a child using a computer for sexual activity can carry a prison sentence of between one and ten years.

Others arrested with him include:

David Wonnacott-Yahnke, 40

Jose Alberto Perez-Torres, 35

Aniket Brajeshkumar Sadani, 23

James Ramon Reddick, 23

Ramon Manuel Parra Valenzuela, 29

Neal Harrison Creecy, 46

John Charles Duncan, 49

Tom Alexandrovich is a cybersecurity leader and executive specializing in national security cyber defense. He played a key role in designing and building Israel’s groundbreaking “Cyber Dome” program, a national initiative to protect civilian cyberspace. His expertise includes developing national cyber strategies, building high-performance teams, and protecting critical infrastructure and democratic institutions from advanced persistent threats (APTs).

With deep experience in cyber threat intelligence (CTI) and proactive cyber defense, Alexandrovich has shaped national cybersecurity policies not only in Israel but also on the international stage. He has advised senior government officials, managed multi-million dollar cybersecurity budgets, and contributed to the resilience of critical infrastructure and election security.

As the founder of Israel’s Cyber Dome program and the national approach to proactive cyber defense, Alexandrovich has significantly strengthened the country’s cyber resilience. His contributions include co-founding the Israeli National Aviation Cyber Security Program and receiving the Israel Defense Forces Award for Outstanding Achievement.

This incident exemplifies the multi-layered complexities that arise from the intersection of technology, ethics, and politics. The arrest of a senior cybersecurity official not only has a personal dimension, but also raises fundamental questions about the regulatory structure and professional ethics in this field. Given the sensitive place of cybersecurity in international relations, such incidents can have profound implications for strategic cooperation.

From an analytical perspective, this incident highlights the importance of multi-dimensional approaches; Because it cannot be reduced to a single individual error. The ethical, security, and political issues are intertwined, and any strategic analysis must consider these dimensions simultaneously.

Many analysts consider him to be one of the most powerful cyberwarfare officials in the entire Israeli government, a man who operates at the nerve center of the national intelligence and defense apparatus. As head of the data and artificial intelligence division at Israel’s National Cybersecurity Authority, his job is nothing less than protecting Israel’s critical infrastructure from digital attacks—everything from the power grid to airports to the country’s most sensitive information networks.

Officially, the swift response from the Israeli Prime Minister’s Office was an attempt to contain the diplomatic crisis. The clear statement that no arrests had taken place was implicitly intended to calm public opinion and prevent media hype. This approach in crisis diplomacy is a smart move to avoid damaging political relations.

Israel was able to prevent the crisis from escalating by insisting that the issue had no political dimensions; However, the global media coverage highlights the importance of public opinion management. This incident demonstrated that failure to control the media narrative in a timely manner can have serious costs for an institution’s credibility. Therefore, designing a proactive communication strategy is a key imperative in cyber management.

AI-Driven Trends in Endpoint Security: What the 2025 Gartner® Magic Quadrant™ Reveals

 

Cyber threats and attacks like ransomware continue to increase in volume and complexity with the endpoint typically being the most sought after and valued target. With the rapid expansion and adoption of AI, it is more critical than ever to ensure the endpoint is adequately secured by a platform capable of not just keeping pace, but staying ahead of an ever-evolving threat landscape.

SentinelOne's steadfast commitment to delivering AI-powered cybersecurity enables global customers and partners to achieve resiliency and reduce risk with real-time, autonomous protection across the entire enterprise — all from a single agent and console with a robust, rigorously tested platform that keeps the customer in control.

Cybersecurity today isn't just about detection—it's about operational continuity under pressure. For example, endpoint solutions must account for encrypted traffic inspection, policy enforcement during identity compromise, and fast containment across distributed environments. These capabilities are especially critical in industries like healthcare or finance, where seconds can mean regulatory penalties or breached patient records.

Gartner recently named SentinelOne a Leader in the 2025 Gartner® Magic Quadrant for Endpoint Protection Platforms for the fifth consecutive year. This recognition builds on the Singularity Platform's momentum in innovation as the first solution with an AI analyst and the first unified platform delivering EDR, CNAPP, Hyperautomation, and SIEM to be FedRAMP High (the highest level of U.S. federal cloud security authorization) Authorized.

SentinelOne provides protection for organizations of all sizes—from small businesses to global governments and enterprises—meeting their unique needs in the face of an increasingly complex cyber landscape. The Singularity Platform secures organizations across any device, any OS, and any cloud, providing industry-leading signal-to-noise so SOC teams can focus on responding as quickly as possible. With advanced XDR, AI SIEM, and CNAPP capabilities, a lightweight agent, and responsible architecture, SentinelOne offers a solution designed for both security and operational resiliency.

Organizations using Singularity Endpoint and Purple AI detect threats 63% faster, reduce MTTR by 55%, and lower the likelihood of a security incident by 60%. Customers have reported a 338% ROI over three years, maximizing the value of their security investments while strengthening their endpoint security.

For example, a healthcare provider using SentinelOne reported cutting incident response time by over 50% during a phishing-induced ransomware outbreak, thanks to automated rollback and unified visibility across cloud workloads and endpoints.

Many teams searching for EDR or XDR platforms are trying to answer: "Will this reduce alert fatigue?" or "Can it integrate with my SIEM or SOAR stack without more overhead?" This is where automation must go beyond buzzwords—reducing manual triage, stitching disconnected signals, and working with existing tools instead of replacing them.

https://thehackernews.com/2025/07/ai-driven-trends-in-endpoint-security.html

run Locksmith now!

•  If you have Active Directory Certificate Services (ADCS) in your environment, run Locksmith now!
• In Active Directory Security Assessments, we have found critical security issues in *most* ADCS configurations.
• The great thing about Locksmith is that it doesn't just highlight the security issues in your ADCS environment, but also provides the command to remediate it!
• If you're a pentester/red teamer, Locksmith is great for you to provide remediation recommendations to your customers.