Global cybercrime continues to rise, with no signs of slowing down, as projected to grow steadily over the next five years. The Critical Start Cyber Research Unit (CRU) conducted an in-depth analysis of 3,438 high-priority alerts from 20 leading EDR solutions and 4,602 reports on ransomware and database breaches across 24 industries in 126 countries during the first half of 2024. 

Manufacturing and Industrial Products: This sector remains the most targeted, with 377 confirmed ransomware and data leak incidents in H1 2024. 

Professional Services: A 15% increase in database leaks and ransomware attacks compared to 2023, with legal services and supply chains being primary targets. 

Healthcare & Life Sciences: A significant surge in ransomware and data leak incidents, spiking by 180% in February 2024, driven by attacks on entities like Change Healthcare. 

German Air Traffic Control, Deutsche Flugsicherung (DFS), recently fell victim to a cyberattack suspected to be the work of the Russian-linked APT-28 hacking group, also known as Fancy Bear. While air traffic operations remained unaffected, the attack paralyzed DFS’s office communications, highlighting the ongoing cyber threats faced by critical infrastructure. 

The Toronto District School Board (TDSB) confirmed that a ransomware attack discovered in June compromised student information. The attack targeted a technology testing environment, impacting data from the 2023/2024 school year, including student names, grades, and birthdates. TDSB, Canada’s largest school board, is now addressing the breach’s implications. 

South Korean authorities have launched an investigation into Telegram’s potential involvement in the distribution of sexually explicit deepfake content. The investigation follows public outrage over digital deepfake pornography, often found in Telegram chatrooms, and aims to determine whether the encrypted messaging platform has been complicit in these illegal activities. 

Security researchers have uncovered a significant international cyber-espionage campaign targeting over 70 organizations across 18 industries. Beginning in August 2024, the campaign used phishing emails disguised as tax authority communications to deliver the “Voldemort” backdoor, with insurance, aerospace, and transportation sectors being heavily impacted. 

The City of Columbus, Ohio, has filed a lawsuit against security researcher David Leroy Ross, also known as Connor Goodwolf, for allegedly downloading and sharing data stolen during a ransomware attack. The attack, which occurred in July 2024, led to service outages and potential exposure of sensitive information, prompting the legal action against Ross.