The United Nations’ International Civil Aviation Organization (ICAO) confirmed a data breach that compromised 42,000 records from its recruitment systems between April 2016 and July 2024. The data, sold by cybercriminal Natohub, included names, email addresses, and employment histories, but not financial or passport information. The ICAO stressed that the breach did not affect aviation safety or security operations. The agency is investigating the incident and implementing extra security measures.
Russian CTRL Toolkit Delivered via Malicious LNK Files Hijacks RDP via FRP Tunnels
Cybersecurity researchers have discovered a remote access toolkit of Russian-origin that’s distributed via malicious Windows shortcut (LNK) files that are disguised as private key folders.
