InfoSecBulletin Cybersecurity for mankind

Arctic Wolf noted a significant rise in Akira ransomware attacks since late July 2025, focusing on SonicWall SSL VPN accounts. This campaign is still active, with new infrastructure spotted as recently as September 20, 2025. Akira affiliates are exploiting stolen credentials, even in environments where multi-factor authentication (MFA) is enabled. …

Archer Health, a US provider of in-home and palliative care, left an unsecured database online, exposing sensitive personal and health information to anyone who could find it, experts say. Cybersecurity researcher Jeremiah Fowler alerted WebsitePlanet after discovering the database and assisting in securing it. Fowler discovered an unprotected database with …

Independent security experts have welcomed what’s billed as the first standardized set of SaaS (software as a service) security controls. The SaaS Security Capability Framework (SSCF), launched this week and backed by the Cloud Security Alliance, is designed to close long-standing gaps in third-party risk management. The framework is designed …