Cyber threats are on the rise, affecting multiple industries and posing significant risks to businesses and individuals alike. Recent incidents have highlighted the vulnerability of various sectors, from tech and retail to energy and manufacturing.
What Happened
Several high-profile incidents have come to light, including suspicious login prompts on the websites of Japanese tech giant Toshiba and retailer Muji. Both companies warned visitors that the login screens, generated by an external service hosted at polyfill[.]io, could collect credentials. Meanwhile, threat actors have been exploiting internet-exposed tank gauges at gas stations, leaving fuel tanks vulnerable to drainage and businesses unaware of potential leaks or theft.
In addition, the US Cybersecurity & Infrastructure Security Agency (CISA) has warned of ongoing cyber-attacks on automated tank gauges (ATGs), which could result in fuel tanks being drained without businesses noticing. These attacks have significant implications for various industries, including the chemical, food, and agriculture sectors.
Why It Matters
The escalating cyber threats have serious consequences for businesses and individuals. The use of AI-powered tools in ransomware attacks, for example, has lowered the barrier to entry for new actors, making it easier for them to launch attacks. This has led to a 20% increase in ransomware attacks since 2023, with smaller enterprises now comprising 80% of targets.
"The largest ransomware operators are increasingly operating the same business models as legitimate vendors, selling services and infrastructure to their clients and affiliates," said Cynthia Kaiser, SVP of Halcyon's Ransomware Research Center. "The main difference is that the goods on offer are exploits and stolen credentials."
What Experts Say
Experts warn that the situation is likely to worsen unless businesses take proactive measures to protect themselves. "The attacks on ATGs are a prime example of the risks associated with internet-exposed devices," said a CISA spokesperson. "System administrators must take immediate action to protect their systems by removing convenience features, implementing robust security measures, and monitoring for suspicious activity."
Key Numbers
- **20%: Increase in ransomware attacks since 2023
- **80%: Proportion of ransomware attacks targeting smaller enterprises
Background
The surge in cyber threats is not limited to specific industries or regions. The Cisco Catalyst SD-WAN Manager, for example, has been affected by a high-severity, unpatched zero-day vulnerability (CVE-2026-20245) that is being actively exploited in attacks. This vulnerability allows local attackers with low privileges to execute arbitrary commands as root.
What Comes Next
As the cyber threat landscape continues to evolve, businesses and individuals must remain vigilant and take proactive measures to protect themselves. This includes implementing robust security measures, monitoring for suspicious activity, and staying informed about the latest threats and vulnerabilities.
Key Facts
- Who: Toshiba, Muji, and various gas stations and industries
- What: Suspicious login prompts, AI-powered ransomware, and fuel tank hacks