> InfoSec News Nuggets 12/01/2025

South Korean government declares emergency over Coupang cyber attack The South Korean government convened an emergency ministerial meeting after e-commerce giant Coupang disclosed a major cyber incident and large scale data theft affecting its customer base. Authorities have launched a broad investigation into what personal data was exposed and how the intrusion occurred, reflecting concern about the impact on a platform used by a significant share of the country’s population.   The weekend is prime time for ransomware A new Semperis report finds that more than half of surveyed ransomware incidents in the last year hit during weekends or holidays, when staffing and monitoring are thinner. The study also notes that many attacks cluster around major corporate events such as mergers and restructurings, when identity systems and access controls may be in flux, giving attackers more opportunity to move unnoticed.   Medusa Ransomware Strikes Concord Academy in Targeted Cyberattack The Medusa ransomware group has claimed responsibility for an attack on Concord Academy, a specialized educational institution in the United States, and is threatening to leak stolen data if negotiations do not begin. Public reporting indicates the group says it has obtained sensitive internal information and has listed the organization on its leak site while it waits for a response.   Major Cyberattack Cripples Georgia Real Estate Industry: What Security Leaders Need to Know A ransomware attack against the Georgia Superior Court Clerks’ Cooperative Authority has disrupted access to statewide real estate records, delaying thousands of property transactions. The Devman group claims to have stolen around 500 GB of data and the authority has restricted access to online services while it responds, illustrating how a single compromise in a public records system can ripple through an entire sector.   Manufacturers Faced $18bn Loss To Ransomware In 2025 – Report Kaspersky, working with VDC Research, estimates that ransomware attacks on manufacturing companies in the first three quarters of 2025 may have caused more than 18 billion dollars in losses from downtime alone. The report looks at detections across multiple regions and notes particularly high ransomware activity in manufacturing environments in the Middle East and Latin America, highlighting ongoing pressure on industrial operations.   1st December – Threat Intelligence Report Check Point’s latest weekly bulletin summarizes several recent incidents, including a data exposure at OpenAI via third party provider Mixpanel, a Dartmouth College breach tied to the Oracle E-Business Suite exploitation campaign, and a ransomware attack on crisis management firm Crisis24 that hit the OnSolve CodeRED alerting platform. The report also covers a breach at SitusAMC affecting data linked to major banks, discovery of more than 17,000 exposed credentials in public GitLab repositories, and a critical authentication bypass in certain ASUS routers that can lead to remote code execution. The post InfoSec News Nuggets 12/01/2025 appeared first on AboutDFIR - The Definitive Compendium Project.