<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Incident on CuraSec</title><link>https://curasec.metacog.co.kr/tags/incident/</link><description>Recent content in Incident on CuraSec</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Wed, 26 Aug 2026 11:42:13 +0000</lastBuildDate><atom:link href="https://curasec.metacog.co.kr/tags/incident/index.xml" rel="self" type="application/rss+xml"/><item><title>Nutex Health hospital operator confirms data stolen in cyberattack</title><link>https://curasec.metacog.co.kr/insights/2026-08-26-hospital-operator-nutex-health-says-data-stolen-in-cyberatta/</link><pubDate>Wed, 26 Aug 2026 11:42:13 +0000</pubDate><guid>https://curasec.metacog.co.kr/insights/2026-08-26-hospital-operator-nutex-health-says-data-stolen-in-cyberatta/</guid><description>&lt;ul>
&lt;li>&lt;strong>Engineer — Skip&lt;/strong>&lt;/li>
&lt;li>&lt;strong>SOC/IR — Skip&lt;/strong>&lt;/li>
&lt;li>&lt;strong>Leader — Learn:&lt;/strong> A healthcare-sector peer breach involving exfiltrated data from hospital systems — useful context for board briefings on sector risk and a prompt to verify any Nutex Health service or data-sharing relationships your organization holds.&lt;/li>
&lt;/ul></description></item><item><title>Delta probes Wi-Fi deauth attack on DEF CON attendee flight</title><link>https://curasec.metacog.co.kr/insights/2026-08-12-delta-probes-wi-fi-deauth-attack-on-flight-carrying-def-con/</link><pubDate>Wed, 12 Aug 2026 11:57:00 +0000</pubDate><guid>https://curasec.metacog.co.kr/insights/2026-08-12-delta-probes-wi-fi-deauth-attack-on-flight-carrying-def-con/</guid><description>&lt;ul>
&lt;li>&lt;strong>Engineer — Learn:&lt;/strong> No enterprise infrastructure impact; this is an air-gapped physical environment curiosity. Worth noting as a reminder that rogue AP and deauth techniques remain practical in constrained wireless environments, but no action required on cloud or app systems.&lt;/li>
&lt;li>&lt;strong>SOC/IR — Learn:&lt;/strong> No IOCs, no TTPs, no enterprise detection surface — the incident is confined to in-flight Wi-Fi. Useful context for understanding wireless attack tradecraft but yields no detection or hunt action.&lt;/li>
&lt;li>&lt;strong>Leader — Skip&lt;/strong>&lt;/li>
&lt;/ul></description></item><item><title>North Carolina Ports Authority confirms disruptive cyberattack</title><link>https://curasec.metacog.co.kr/insights/2026-08-09-north-carolina-ports-confirms-cyberattack-disrupting-operati/</link><pubDate>Sun, 09 Aug 2026 11:41:42 +0000</pubDate><guid>https://curasec.metacog.co.kr/insights/2026-08-09-north-carolina-ports-confirms-cyberattack-disrupting-operati/</guid><description>&lt;ul>
&lt;li>&lt;strong>Engineer — Skip&lt;/strong>&lt;/li>
&lt;li>&lt;strong>SOC/IR — Learn:&lt;/strong> Active attack against maritime critical infrastructure with operational impact, but no IOCs, TTPs, or attribution have been published yet — monitor for follow-up reporting before initiating a hunt.&lt;/li>
&lt;li>&lt;strong>Leader — Learn:&lt;/strong> A confirmed attack disrupting multi-site port operations illustrates supply-chain and critical-infrastructure risk; useful context for board risk discussions but no vendor exposure to verify or immediate action required at this stage.&lt;/li>
&lt;/ul></description></item></channel></rss>