Retailer Responds Quickly to Cyberattack Attempt
UK Retail Giant Co-op Shuts Down IT Systems After Cyberattack Attempt

Retailer Acts Swiftly to Limit Threat as UK Retail Sector Faces Growing Digital Risks

The Co-operative Group has confirmed it shut down parts of its IT network after detecting an attempted cyberattack, in what is the latest incident to affect a major UK retailer. The move was described as precautionary and aimed at containing the threat before any systems could be compromised.

Although the shutdown affected internal functions such as virtual desktops, stock systems, and contact centre operations, Co-op reassured the public that all food stores, home delivery services, and funeral operations are running as normal.

“There is no evidence that customer data has been accessed,” the company said in a statement. “We took swift action to protect our systems and continue to monitor the situation closely.”

This incident follows a more disruptive attack on M&S (Marks & Spencer) earlier this month, which impacted contactless payments, and online orders, and led to temporary stock shortages. That breach was linked to the cybercriminal group known as Scattered Spider, which has previously targeted large organisations across the US and UK.

At this time, there is no confirmed connection between the two incidents, but cybersecurity analysts say the timing raises questions about coordinated threats aimed at UK retail.

Co-op has brought in external cybersecurity experts and is working with law enforcement as part of an ongoing investigation. While the company has not provided a timeline for full system restoration, it emphasised that day-to-day operations will continue uninterrupted for customers. hackread.com


Hackers Lean on AI to Carry Out Attacks
AI-fueled cybercrime may outpace traditional defenses, Check Point warns

The security firm said in a new report that defenders should begin using AI to counter cybercriminals’ adoption of the technology.

Hackers are increasingly using AI in their attacks and defenders should follow suit, Check Point Software Technologies said in a report published Wednesday.

The company’s AI security report, announced at the 2025 RSAC Conference in San Francisco, also found that one in 13 generative AI prompts contained potentially sensitive information, and one in every 80 prompts posed “a high risk of sensitive data leakage.”

Unauthorized AI tools, data loss, and AI platform vulnerabilities topped the list of AI risks for enterprises, according to Check Point.

Check Point’s report represents a road map for businesses interested in developing AI tools to streamline their operations. It also offers warnings to companies that aren’t interested in using AI — namely, that poor access controls and software management could allow their employees to use AI tools without permission.

Whether authorized or unauthorized, AI tools can expose corporate secrets, user data, and other sensitive information. The Check Point report catalogs the risks that companies need to be aware of. For example, it warns that unapproved AI software “can lead to security vulnerabilities, compliance issues, and inconsistent data management, exposing a company to operational risk or data breaches.” Regarding data loss, the report urges businesses to “assess AI applications for data protection and industry best practices” before adopting them, noting that some applications store data, share it with third parties or fail to protect it from hackers. cybersecuritydive.com


Securing Critical Infrastructure Top CISA Focus
DHS secretary vows to refocus CISA, saying it strayed from mission

Kristi Noem said the agency should be focused on securing critical infrastructure.

Homeland Security Secretary Kristi Noem on Tuesday said the Trump administration remains committed to combating cyber threats and protecting the nation but warned of changes at the Cybersecurity and Infrastructure Security Agency to redirect the agency toward its core responsibilities.

The administration will continue to go after malicious hackers and focus on building resilience among critical infrastructure operators and small businesses, Noem said in a keynote address at the annual RSAC Conference in San Francisco. But she also criticized CISA for straying beyond its remit in recent years and vowed to put a stop to those activities.

“We need to put CISA back on mission,” Noem said. “Many times CISA is doing important work, but we also saw them get into areas that were not why they were created.”

Noem’s last-minute appearance at RSAC came as the cybersecurity community remains deeply concerned about widespread job cuts and resignations at CISA and broader national security policy changes. cybersecuritydive.com
 

Property renters targeted in simple BEC scam

Airplay-enabled devices open to attack via “AirBorne” vulnerabilities

Stevensville, MI: Three Female Suspects fled after $20,000 Armed Robbery of T-Mobile
Three women are in custody following a multi-agency pursuit and alleged armed robbery over the weekend at a T-Mobile store in Stevensville. According to a news release from the Lincoln Township Police Department, officers responded to the store at 4878 Red Arrow Highway in Stevensville at about 3:50 p.m. Sunday – following the activation of a hold-up alarm. Officers confirmed an armed robbery took place and witnesses gave police descriptions of the three suspects, along with the vehicle they fled in. Police said a broadcast was issued and shortly after, a Berrien County sheriff’s deputy found the suspect vehicle traveling west on I-94 in New Buffalo Township. Police reported a pursuit began and continued into Porter County, Ind., where deputies from that county deployed stop sticks and a PIT maneuver, causing the vehicle to stop. No injuries were reported during the robbery or the pursuit. Officers recovered stolen cellphones with an estimated value exceeding $20,000 inside the vehicle.  heraldpalladium.com


Nashville, TN: Multiple Nashville Vape shops targeted in $!0K overnight burglary attempts
Several vape shops were targeted in a string of burglary attempts overnight in Nashville. According to authorities, four suspects wearing masks and gloves attempted to break into at least three stores. In the Whites Creek area, a citizen reported that two juveniles attempted to break into VAPEX Smoke Shop on Buena Vista Pike, then drove away in a white pickup truck. News 2 video shows the glass door to the store had been shattered. The second incident was reported just after midnight Wednesday at Good Deal Everything on White Bridge Pike. Officers on the scene said two large rocks were thrown at the shop’s front window, shattering the glass. Surveillance footage from the scene shows four people clearing shelves of vape products and stuffing them into bags before running out of the store.  wkrn.com


Indianapolis, IN: IMPD uses drone to capture Disc Replay burglar who allegedly stole over $26,000 worth of electronics
A Lawrence man has been charged with felony burglary and theft after he allegedly broke into a Disc Replay store on Indy's south side. According to recently filed court documents, around 2:40 a.m. on Monday, April 28, an IMPD officer was called to Disc Replay South Indy, located at 7317 U.S. 31 South, for a burglary in process. Two witnesses, described in court documents as employees of the nearby Walmart, told 911 dispatchers that a male wearing a yellow jacket with a backpack broke a window to the Disc Replay store and went inside. When IMPD officers arrived on scene, they found the glass window above the entry door was smashed and a motion alarm had been tripped at 2:41 a.m. Officers arrived on scene at 2:42 a.m., according to court documents. From there, another IMPD officer dispatched a drone to survey the area.  wthr.com


Nashville, TN: Nearly $4k worth of Lululemon merchandise stolen, woman arrested

Opelika, AL: Opelika Police seek public's help in locating $3600 Ulta beauty bandits