Svoboda Cybersecurity Brief May 18, 2025
May 18, 2025bulletproof VPN - stay anonymous
Ransomware Attack on ADP Partner Exposes Broadcom Employee Data
A ransomware attack on Business Systems House (BSH), an ADP payroll partner, compromised Broadcom employee data in September 2024. The El Dorado ransomware group leaked the data in December, but Broadcom was only notified in May 2025, highlighting supply chain risks. The breach occurred during Broadcom’s transition away from ADP.
Source: DataBreaches.net
Anne Arundel County Health Data Breached in Ransomware Attack
A ransomware attack on Anne Arundel County’s health department compromised confidential patient data between January 28 and February 22, 2025. The county detected the breach on February 22 and engaged cybersecurity experts, but no ransomware group has claimed responsibility. Services were disrupted, and investigations are ongoing.
Source: DataBreaches.net
Australian Hacker “DR32” Sentenced to Time Served in US Court
David Kee Crees, aka DR32, was sentenced to time served (2+ years in detention) for hacking and ransomware-related charges. The case involved 7 unnamed victims and a forfeiture of $245,056.92, but no restitution was ordered. The light sentence and sealed court files suggest potential national security implications.
Source: DataBreaches.net
Webinar: Unifying Code-to-Cloud-to-SOC Security Strategies
A webinar by Palo Alto Networks highlights the risks of siloed security teams (DevSecOps, CloudSec, SOC) and delayed responses to cloud threats. It promotes a unified approach to reduce exposure gaps and cut response times from days to hours.
Source: The Hacker News
Share this brief: https://svo.bz/Upem