HSIN Breach, Adobe Speeds Patches, Canada Disrupts Ransomware

An unidentified actor gained access to the Homeland Security Information Network (HSIN), Adobe announced a faster patch cadence and Canada’s Communications Security Establishment (CSE) reported disruptions to ransomware infrastructure.

The Department of Homeland Security reported that the intruder accessed HSIN servers and SharePoint sites used by federal, state and private partners for information sharing. A damage assessment by the DHS Office of Intelligence and Analysis found the attackers targeted servers and SharePoint infrastructure. DHS isolated the affected network segments, launched a forensic investigation and reported no evidence that classified systems were impacted. Officials did not release the number of accounts or specific datasets involved and made no attribution to a criminal group or nation-state.

Adobe announced it will publish security bulletins and critical patch disclosures twice a month, on the second and fourth Tuesdays. The company described the change as a response to faster discovery of vulnerabilities and increased use of automated tools by adversaries. Adobe encouraged customers to subscribe to notifications and to apply updates when published.

Canada’s CSE disclosed it conducted operations over the past year that included penetrating the infrastructure of ransomware groups, drug traffickers and extremist networks under its foreign cyber operations mandate. The agency reported those actions disrupted command-and-control functions and degraded technical capabilities used to run criminal campaigns. CSE did not provide operational details, targets or techniques, and noted the interventions reduced the operational tempo of the networks affected.

Recent security alerts have warned that threat actors are increasingly targeting development tools, open source dependencies and cloud credentials to move laterally and exfiltrate data. Security guidance recommends monitoring privileged account activity, rotating credentials, applying patches promptly and reviewing external-facing collaboration services for unusual access patterns.

DHS said its investigation of the HSIN breach remains active and urged partners to follow operational guidance. Adobe plans to publish its first twice-monthly bulletin on the new schedule. CSE reiterated it would not disclose specific technical or operational tradecraft while noting the disruptions limited the criminal networks’ capabilities.