Author Archives: Crebs Park

Why ransomware, data theft, and insider access are crippling vital networks. U.K. telecoms firm Colt was hit by a ransomware attack from the Warlock gang, forcing key support systems offline, while Australia’s iiNet suffered a third-party breach exposing 280,000 customers’ data, including personal details and modem passwords. Both incidents underscore the growing threat to globalContinue reading “Inside the Cyber War on Global Telecom Giants”

Attackers hijack servers with DripDropper, then seal the backdoor shut with their own patch. Hackers are exploiting a two-year-old Apache ActiveMQ flaw (CVE-2023-46604) on Cloud Linux servers, deploying a loader called DripDropper via Dropbox. After gaining access, they patch the very vulnerability they abused, locking out rivals and obscuring their entry point. DripDropper installs persistenceContinue reading “Hackers Breach Linux, Patch Exploit to Keep Control”

A multi-day outage, stolen data, and a $200K ransom demand shake one of Europe’s biggest telecoms. Colt Technology Services, a London-based multinational telecom provider, has suffered a major cyberattack attributed to the WarLock ransomware group. The attack, starting August 12, caused ongoing outages across Colt’s hosting, porting, Colt Online, and Voice API services. Threat actors,Continue reading “Inside the WarLock Cyber Siege on Colt Telecom”

How a single unpatched vulnerability opened lawmakers to espionage, phishing, and national security risks. Canada’s House of Commons suffered a data breach after attackers exploited a Microsoft SharePoint vulnerability (CVE-2025-53770, CVE-2025-53786). Personal and device information of lawmakers and staff—including emails, job titles, and device details—was exposed, raising risks of phishing, impersonation, and national security threats.Continue reading “Secrets of a Breach: Microsoft Flaw Exposes Canada’s Parliament”

A pro-Russian cyberattack exposes vulnerabilities in critical infrastructure, sending shockwaves through national security circles. In April, pro-Russian hackers remotely opened a dam floodgate in Bremanger, Norway, for four hours, marking a deliberate demonstration of Moscow’s ability to compromise critical infrastructure. The Norwegian Police Security Service (PST) formally attributed the attack to Russia, describing it asContinue reading “Secrets Revealed: How Hackers Controlled Norway’s Dam”