Hodisaga javob
BAE Bankrotlik sudlariga ta'sir qilgan hodisada ma'lumotlar olinmaganini aytmoqda
BAE Systems bankrotlik sudlari xabarlarini bir necha hafta davomida to'xtatib qo'ygan kiberxavfsizlik hodisasida hech qanday ma'lumot olinmagan va shaxsiy ma'lumotlar (PII) buzilmaganini aytmoqda.
Muallif
Eduard Kovacs
| 2026-yil 29-oktabr (ET 9:26)
BAE Systems federal sud tizimining Bankrotlik xabar berish markazini (BNC) qayta ishga tushirgan va ikki haftadan ortiq vaqt davomida uni oflayn holatga keltirgan kiberxavfsizlik hodisasida hech qanday ma'lumot o'g'irlanmaganini aytmoqda.
"BAE Systems, Inc., AQSh sudlari ma'muriy idorasi (AOUSC) bilan yaqin hamkorlikda, Bankrotlik xabar berish markazi (BNC) tizimi faoliyatini qayta tikladi. Boshqa hech qanday tizim ta'sirlanmagan. Hech qanday ma'lumot olinmagan. Hech qanday shaxsiy ma'lumotlar (PII) buzilmagan", — deb BAE Systems, Inc. vakili SecurityWeek nashriga ma'lum qildi.
BNC, BAE sud tizimi bilan shartnoma asosida boshqaradigan markaz, AQShdagi barcha federal bankrotlik sudlari xabarlarini yuboradigan kanal hisoblanadi. Xabarlar markaz orqali 9-oktabr atrofida to'xtagan.
Hodisa birinchi marta ma'lum bo'lganida, na BAE, na sud tizimi ma'lumotlar buzilgan-buzilmaganligi haqida hech narsa aytmagan edi. BAEning yangi bayonoti hali ham hodisaga nima sabab bo'lganini va bu kiberhujum bo'lgan-bo'lmaganini ochiq qoldirmoqda.
27-oktabrda AQSh sudlari ma'muriy idorasi BAE ma'lumotiga ko'ra muammolar tuzatilganini va BNC yana mavjudligini tasdiqladi.
Bankrotlik sudlari xabarlari markaz 26-oktabrda qayta ishga tushganini va kechiktirilgan xabarlarni, avval eng eski xabarlardan boshlab, yuborishni boshlaganini ko'rsatmoqda.
Reklama. O'qishni davom ettirish uchun pastga aylantiring.
To'xtashga javoban, Sud konferensiyasi 22-oktabrda "Bankrotlik qoidalari favqulodda holati" e'lon qildi. Bu e'lon bankrotlik sudyalariga muddatlarni kechiktirish, vaqt davrlarini to'xtatib turish va oqibatlarga qarshi tegishli buyruqlar chiqarish imkonini beradi.
Hech qanday ransomware yoki boshqa kiberjinoyatchilik guruhi hodisa uchun ochiq ravishda javobgarlikni o'z zimmasiga olgan ko'rinmaydi.
Bog'liq: Xakerlar Sony'ning yapon ISP So-net'dan 2,6 million yozuvni o'g'irlagan
Bog'liq: HHS arizasi iRhythm ma'lumotlar buzilishi sonini 8,2 millionga yetkazgan
Bog'liq: Sotuvchi kalitining sizib chiqishi Denver Health Plan a'zolarining 238 000 ta ma'lumotini xavf ostiga qo'ygan
Yozgan: Eduard Kovacs
Eduard Kovacs (@EduardKovacs) SecurityWeek nashrining katta bosh muharriri. U jurnalistika faoliyatini 2011-yilda boshlashdan oldin o'rta maktabda IT o'qituvchisi bo'lib ishlagan. Eduard sanoat informatikasi bo'yicha bakalavr va elektr muhandisligida kompyuter texnikalari bo'yicha magistr darajasiga ega.
Kundalik axborot byulleteni
So'nggi kiberxavfsizlik tahdidlari, tendensiyalar va mutaxassis fikrlari haqida xabardor bo'lish uchun SecurityWeek elektron pochta axborotiga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Eduard Kovacsdan ko'proq
- GoAhead veb-serverida yuzlab million qurilmalarda ishlatiladigan TLS kamchiliklari topilgan
- EPICS tadqiqot muassasasi nazorat dasturida uzoq vaqtdan beri yashirin bo'lgan kamchiliklar tuzatilgan
- CISA honeypotlar hujum urinishlarini qayd etayotgani sababli Node2Shell ekspluatatsiyasidan ogohlantirmoqda
- Tailscale "Tailworm" kamchiliklarining muvofiqlashtirilmagan oshkor etilishidan so'ng tezda tuzatishlar chiqarilmoqda
- iOS, macOS 27.2 286 ta xatoni tuzatmoqda; iOS 18 ga ekspluatatsiya qilingan kamchilik orqaga ko'chirilgan
- Dengiz koalitsiyasi kemalar va port tizimlari uchun bepul zaiflik ma'lumotlar bazasini ishga tushirmoqda
- Sanoat sotuvchilari PHP2Shell zaifliklari uchun mahsulotlarini tekshirmoqda
- PHP2Shell ekspluatatsiyasi tekshiruvlardan ishlaydigan shellarga o'tmoqda
So'nggi yangiliklar
- 41 000 dan ortiq DHS xodimlarining yozuvlari onlayn sizib chiqqan
- Xakerlar Sony'ning yapon ISP So-net'dan 2,6 million yozuvni o'g'irlagan
- Cisco SD-WAN nol kun ekspluatatsiyasi Volt Typhoon'ning "Jim poyezd" tarmog'iga bog'langan
- Avgustdan beri ikkinchi Cisco Firewall VPN nol kun ekspluatatsiyasi hujumchilari tomonidan ishlatilmoqda
- HHS arizasi iRhythm ma'lumotlar buzilishi sonini 8,2 millionga yetkazgan
- Xitoylik xakerlar nol kun sifatida past darajadagi ESXi jurnal yozish kamchiligidan foydalanishgan
- Ukraina Hive va Nefilim ransomware sherigi AQShda 70 oy qamoq jazosiga hukm qilingan
- Upwind Security 3,8 milliard dollar baholashda 400 million dollar jalb qilgan
Trendda
Tailscale "Tailworm" kamchiliklarining muvofiqlashtirilmagan oshkor etilishidan so'ng tezda tuzatishlar chiqarilmoqda
Node2Shell: Brotli kamchiligi Microsoft, Node.js, Python paketlari bo'ylab tuzatishlarni keltirib chiqarmoqda
Xitoy bilan bog'liq xakerlar PHP2Shell'dan foydalanib firewallarni ildizdan buzishmoqda
CISA honeypotlar hujum urinishlarini qayd etayotgani sababli Node2Shell ekspluatatsiyasidan ogohlantirmoqda
Chrome va Firefox yangilanishlari 200 dan ortiq zaiflikni tuzatmoqda
iOS, macOS 27.2 286 ta xatoni tuzatmoqda; iOS 18 ga ekspluatatsiya qilingan kamchilik orqaga ko'chirilgan
HPE tarmoq mahsulotlarida o'nlab muhim kamchiliklarni tuzatmoqda
Xakerlar yangi Oracle EBS zaifligini tekshirishni boshlashmoqda
Kundalik axborot byulleteni
So'nggi tahdidlar, tendensiyalar, texnologiya va soha mutaxassislarining chuqur fikrlari haqida xabardor bo'lish uchun SecurityWeek elektron pochta axborotiga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Vebinar: Kuchliroq CTEM dasturi uchun agentik pentesting
2026-yil 4-noyabr
Pentestlar orasidagi xavfsizlik bo'shliqlarini yopish. CTEM dasturingizda uzluksiz ta'sirni tekshirish uchun amaliy asos olish maqsadida agentik pentestingni o'rganish uchun ushbu sessiyaga qo'shiling.
Ro'yxatdan o'tish
Virtual tadbir: CISO Forum 2026 sammiti
2026-yil 10 va 11-noyabr
CISOlar, yuqori darajadagi kiberxavfsizlik rahbarlari, amaliyotchilar, soha mutaxassislari va boshqa xavfsizlik rahbarlarini amaliy tajriba almashish va korporativ kiberxavfsizlik strategiyasini shakllantirayotgan masalalarni ko'rib chiqish uchun birlashtirganimizda bizga qo'shiling.
Ro'yxatdan o'tish
Harakatdagi odamlar
Quantum eMotion Wayne Teepleni CTO etib tayinladi.
Guy Ellis NCC Group bosh direktori etib tayinlandi.
Noma Security Bobby Shokerni CFO va Alberto Rodriguesni CCO etib tayinladi.
Harakatdagi ko'proq odamlar
Mutaxassis fikrlari
Hech kim xavfsizlik so'rovnomasiga ishonmaydi. Shunga qaramay, biz unga tayanamiz.
Deyarli har bir B2B bitimni nazorat qiladigan jarayon — yuboruvchi ishonmaydigan va qabul qiluvchi qabul qiladigan o'z-o'zini baholash. Nihoyat, kompaniyalar o'rtasida ishonch uchun yaxshiroq asos paydo bo'lmoqda. (Sravish Sridhar)
Bu normal holat: NetScaler nol kunlari yangi normal haqida nima aytadi
Tez orada Citrix NetScaler tuzatishlarining yana bir to'plami chiqarilishi mumkinligi sababli tuzatish boshqaruv quvurlarini tayyor saqlang. (Tod Beardsley)
Zamonaviy kiberhujumlarga qarshi kurashda kalit — tezlik emas, yetuklik
AI zaifliklarni aniqlash va ekspluatatsiya qilishni tezlashtirayotgani sababli, virtual tuzatish hali ham chuqur mudofaa va kuchli ilova xavfsizligi asoslariga bog'liq. (Joshua Goldfarb)
Incident Response
BAE Says No Data Extracted in Incident Hitting Bankruptcy Courts
BAE Systems says no data was extracted and no PII was breached in the incident that disrupted US bankruptcy court notices for weeks.
By
Eduard Kovacs
| October 29, 2026 (9:26 AM ET)
*
BAE Systems has restored the federal judiciary’s Bankruptcy Noticing Center (BNC) and says no data was taken in the cybersecurity incident that knocked it offline for more than two weeks.
“BAE Systems, Inc., working closely with the Administrative Office of the U.S. Courts (AOUSC), has resumed operations of the Bankruptcy Noticing Center (BNC) system. No other systems were affected. No data was extracted. There was no breach of any PII,” a BAE Systems, Inc. spokesperson told SecurityWeek.
The BNC, which BAE operates under contract with the judiciary, is the channel through which all federal bankruptcy courts in the US send their notices. Notices stopped flowing through the center around October 9.
When the incident first came to light, neither BAE nor the judiciary addressed whether any data had been compromised. BAE’s new statement still leaves out what caused the incident and whether it was a cyberattack.
On October 27, the Administrative Office of the US Courts confirmed that, according to BAE, the problems had been fixed and the BNC was available again.
Bankruptcy court notices show the center came back on October 26 and began clearing the delayed notices, oldest first.
Advertisement. Scroll to continue reading.
In response to the outage, the Judicial Conference declared a “Bankruptcy Rules emergency” on October 22. The declaration lets bankruptcy judges push back deadlines, pause time periods and issue related orders to deal with the fallout.
No ransomware or other cybercrime group appears to have publicly claimed responsibility for the incident.
Related: Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net
Related: HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million
Related: Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk
Written ByEduard Kovacs
Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
More from Eduard Kovacs
- TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices
- Long-Hidden Flaws Patched in EPICS Research Facility Control Software
- CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
- Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws
- iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
- Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems
- Industrial Vendors Check Products for PHP2Shell Vulnerabilities
- PHP2Shell Exploitation Moves From Probes to Working Shells
Latest News
- Over 41,000 DHS Employee Records Leaked Online
- Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net
- Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network
- Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August
- HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million
- Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day
- Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison
- Upwind Security Raises$400 Million at$3.8 Billion Valuation
Trending
Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws
Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
China-Linked Hackers Exploit PHP2Shell to Root Firewalls
CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
Chrome and Firefox Updates Patch Over 200 Vulnerabilities
iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
HPE Patches Dozens of Critical Flaws in Networking Products
Hackers Start Probing Fresh Oracle EBS Vulnerability
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
Webinar: Agentic Pentesting for a Stronger CTEM Program
November 4, 2026
Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.
Register
Virtual Event: CISO Forum 2026 Summit
November 10 & 11, 2026
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
People on the Move
Quantum eMotion has named Wayne Teeple as CTO.
Guy Ellis has been appointed CEO of NCC Group.
Noma Security has named Bobby Shoker as CFO and Alberto Rodrigues as CCO.
More People On The Move
Expert Insights
*
Nobody Trusts the Security Questionnaire. We Rely on It Anyway.
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.(Sravish Sridhar)
This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley)
The Key to AI Software Security Isn’t Speed, It’s Maturity
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)
Context Is King in the Fight Against Modern Cyberattacks
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.(Etay Maor)
AI Has Changed Attack Speed, Not Security Fundamentals
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.(Joshua Goldfarb)