WASHINGTON, Oct 19 (Reuters) - Over the past couple of weeks, a cybersecurity researcher watched as a Chinese-speaking hacker broke into websites belonging to more than 100 companies, including farm equipment maker Deere, home appliance company SharkNinja, and engine manufacturer Cummins. https://lnkd.in/gB8YKKZq
Countermeasures Group
Information Services
Calgary, Alberta 13,332 followers
“If you know the enemy and know yourself, you need not fear the result of a hundred battles." - Sun Tzu, The Art of War
About us
Countermeasures Group provides insights into the current and evolving cyber threat landscape. Since 2013, we have monitored emerging and trending threats targeting global information systems and services. All information is public from open sources categorized as TLP: WHITE. Updated multiple times daily - 24/7/365, we provide the latest global news, research, and reports on cyber security: #CyberSecurity, #CyberRisk, #Ransomware, #Wiperware, #CyberAttacks, #CyberThreats, #CyberIntelligence, #ThreatIntelligence, #RiskAnalysis, #PredictiveAnalysis, #ThreatAnalysis, #DataBreach, #DataLeak, #CTI, #TTPs, #DoS, #DDoS, #MiTM, #SQLi, #XSS, #PenTesting, #OSINT, #VPN, #BYOD, #Vulnerability, #Shodan, #OWASP, #CERT, #ICS-CERT, #US-CERT, #BotNets, #Darknet, #Darkweb, #DevSecOps, #APTs, #TTPs, #IOC, #IOA, #IRC, #ThreatActors, #ThreatVectors, #AttackSurface, #OPSEC, #HUMINT, #OSINT, #SOCINT, #SIGINT, #Hacktivism, #Hacktivists, #Ransomware, #Wiperware, #APT, #Malware, #RATs, #Trojans, #Worms, #Viruses, #Phishing, #SpearPhishing, #Smishing, #Vishing, #Whaling, #BEC, #TypoSquatting, #Combosquatting, #Defacements, #Keyloggers, #Rootkits, #PredictiveAnalysis, #BehavioralAnalysis, #SCADA, #ICS, #PLCs, #RTUs, #HMIs, #CANbus, #ModBus, #ThreatRiskAssessments, #AttackSurfaces, #AttackVectors, #Footprinting, #Fingerprinting, #Reconnaissance, #Encryption, #IntelligenceReports, #DataBreach, #Spyware, #BruteForce, #MiTM, #Fuzzing, #Encryption, #CryptoAnalysis, #Cryptography, #Spoofing, #SocialEngineering, #Zero-Day, #0-Day, #Exploits, #ExploitKits, #Sinkholeing, #IDS, #IPS, #SIEM, #Firewall, #ThreatModeling, #WAF, #LoTL, #LLMs, #GPT, #AI, #Zero-Trust, #Secure-By-Design
- Website
-
https://ca.linkedin.com/in/rvalerio
External link for Countermeasures Group
- Industry
- Information Services
- Company size
- 2-10 employees
- Headquarters
- Calgary, Alberta
- Type
- Privately Held
- Founded
- 2013
- Specialties
- Cyber Security, Threat Intelligence, Security Analysis, Risk Analysis, Predictive Analysis, Business Continuity Planning, Disaster Recovery Planning, OWASP, Project Management, Vulnerability Management, Information Security, Cyber Attacks, Patch Management , Cyber Awareness, Cyber Threats, Threat Assessment , Risk Management, Malware, Ransomware, Incident Response, and Malware Analysis
Employees at Countermeasures Group
Locations
-
Primary
Get directions
Calgary, Alberta, CA
Updates
-
Ahold Delhaize, the Dutch multinational grocery chain, said Monday that a cyberattack forced it to take systems offline across most of its U.S. and European brands, impacting shoppers on both sides of the Atlantic. The company confirmed that the suspicious activity it announced detecting in its IT systems last week was caused by malicious actors, adding that it filed a police report in the Netherlands on Monday. The incident disrupted online services in the U.S., Netherlands and Belgium, although stores remained open. https://lnkd.in/evkN__yM
-
Siemens revealed on Monday that threat actors have exploited a vulnerability in Siemens Software Center as part of a malware campaign. CVE-2026-110936 exists because the program doesn’t properly restrict the locations it searches for DLL files. An authenticated local attacker could plant a malicious DLL in one of those folders and have their code executed with the same privileges as Software Center. https://lnkd.in/gwyPVixc
-
Austrian building automation company Loxone was hit by a cyberattack over the weekend. A criminal gang gained access to internal servers and copied data. “The internal CRM system and our applicant management system are affected”, Loxone says. Buildings equipped with Loxone technology continue to operate without restriction, the company says. Some systems were also damaged: “Our internal CRM and the website’s database have been corrupted. As a precaution, we have isolated all affected systems and are now bringing them back online step by step, with checks at each stage.” Regarding the data copied by the attackers, Loxone said: “This includes, in particular, data from our CRM systems—that is, contact details for our partner businesses, especially electrical installation companies—as well as support requests and applicant data.” https://lnkd.in/g4URA754
-
Threat actors began targeting Plex2Shell, a chain of four Plex Media Server vulnerabilities, one day after technical details and a working exploit went public. The researcher who found the Plex2Shell bugs released a write-up and proof-of-concept (PoC) code on October 16. Tracked as CVE-2026-96652, CVE-2026-96654, CVE-2026-96655 and CVE-2026-96656, the flaws can be combined to run arbitrary code on an exposed server without valid credentials. The code runs with the same privileges as the Plex service. https://lnkd.in/g654xCx6
-
In late September, ShinyHunters hacked the FBI recruitment website fbijobs.gov and taunted the agency by threatening to publish the stolen files, which reportedly included medical and psychological records, Social Security numbers and home addresses, and information about each employee’s unit and specialization. The FBI jobs site hack has prompted the agency to move with uncommon speed to arrest, detain and question people who had any communications with Rey or other ShinyHunters suspects. Reuters reported on October 3 that Rey had been detained by Jordanian authorities and was cooperating with the FBI. https://lnkd.in/gauakCTF
-
Countermeasures Group reposted this
What happened: Burger King Japan disclosed a breach affecting approximately 11.18 million users of its official mobile app after attackers gained unauthorized access to a server containing member information between October 2 and October 7. Exposed data included names, dates of birth, gender, email addresses, phone numbers and order histories. The company says the affected server did not store credit card numbers and it has found no evidence that user credentials were accessed. Macnica researcher Yutaka Sejiyama has separately tracked 119 publicly disclosed incidents involving personal-data theft or exposure in Japan this year, pointing to continued attacks against websites and APIs through access-control, configuration, authentication and known-vulnerability weaknesses. Who's affected: Burger King Japan app users whose personal information was stored on the compromised server, along with organizations operating consumer apps and web services that hold large volumes of customer identity and transaction data. What CISOs should do: 1. Review internet-facing applications and APIs for access-control, authentication and configuration weaknesses, and prioritize remediation of known vulnerabilities on systems holding customer data. 2. Limit the amount of personal information exposed through any single application or backend service, and ensure sensitive datasets are segmented and accessible only to the services and identities that require them. 3. Prepare customers for post-breach phishing and impersonation attempts. Monitor for misuse of exposed contact data and provide clear guidance on suspicious emails, SMS messages, calls, links and requests for credentials. #Cybersecurity #CISO #DataBreach #DataSecurity #APISecurity #JapanCybersecurity Read the article: https://lnkd.in/eRCejM9B
-
Countermeasures Group reposted this
⚠️ A fake Web3 accelerator is targeting crypto developers with investment offers and free AI tools that deliver malware through npm packages. The packages deploy a Windows stealer and macOS backdoor, redirect AI agent requests to attacker-controlled services, and generate fake security audit findings. Read - https://lnkd.in/gNpAEypT
-
-
Countermeasures Group reposted this
⚠️ #IronChain uses elevated privileges and kernel-level components to weaken security controls before encrypting files. It can disrupt Windows systems and leave organizations facing data loss and extended downtime. Wiper-like behavior means the damage may be permanent: ransom payment does not guarantee file recovery. 👨💻 How defenders can detect it before serious damage occurs: https://lnkd.in/ez4UUFM2
-
-
Countermeasures Group reposted this
⚡ Cloud breach shuts down backups. AI agents go rogue. $100M stolen via wallet backdoors. Also this week: → 98 zero-days exposed → 1B phishing messages → Remote support flaw exploited → 700+ supermarkets hit → Malicious developer packages The full ThreatsDay recap ↓ https://lnkd.in/gpwYY9ym
