News
Victorian Department of Education says hackers stole students’ data
18+ hour, 14+ min ago (625+ words) Belgian hospital AZ Monica shuts down servers after cyberattack Target employees confirm leaked source code is authentic Betterment confirms data breach after wave of crypto scam emails Reprompt attack let hackers hijack Microsoft Copilot sessions Pok Pok offers educational screen…...
New China-linked hackers breach telcos using edge device exploits
6+ day, 6+ hour ago (486+ words) Logitech Options+, G HUB macOS apps break after certificate expires Max severity Ni8mare flaw lets hackers hijack n8n servers Kimwolf Android botnet abuses residential proxies to infect internal devices Gmail's new AI Inbox uses Gemini, but Google says it won't train AI…...
Cryptocurrency theft attacks traced to 2022 LastPass breach
1+ week, 5+ day ago (892+ words) European Space Agency confirms breach of "external servers" Exploited MongoBleed flaw leaks MongoDB secrets, 87K servers exposed Former Coinbase support agent arrested for helping hackers Covenant Health says May data breach impacted nearly 478,000 patients Cryptocurrency theft attacks traced to 2022 LastPass breach…...
US cybersecurity experts plead guilty to BlackCat ransomware attacks
2+ week, 1+ day ago (469+ words) Two former employees of cybersecurity incident response companies Sygnia and DigitalMint have pleaded guilty to targeting U.S. companies in BlackCat (ALPHV) ransomware attacks in 2023. 33-year-old Ryan Clifford Goldberg of Watkinsville, Georgia (in federal custody since September 2023), and 28-year-old Kevin Tyler Martin…...
FinCEN says ransomware gangs extorted over $2.1B from 2022 to 2024
1+ mon, 6+ day ago (612+ words) Critical React, Next.js flaw lets hackers execute code on servers North Korea lures engineers to rent identities in fake IT worker scheme CISA warns of Chinese "BrickStorm" malware attacks on VMware servers Marquis data breach impacts over 74 US banks,…...
North Korea lures engineers to rent identities in fake IT worker scheme
1+ mon, 1+ week ago (1275+ words) University of Pennsylvania confirms new data breach after Oracle hack ShadyPanda browser extensions amass 4.3M installs in malicious campaign Cybercrime Goes SaaS: Renting Tools, Access, and Infrastructure North Korea lures engineers to rent identities in fake IT worker scheme Google fixes…...
Cybercrime Goes SaaS: Renting Tools, Access, and Infrastructure
1+ mon, 1+ week ago (989+ words) University of Pennsylvania confirms new data breach after Oracle hack ShadyPanda browser extensions amass 4.3M installs in malicious campaign Cybercrime Goes SaaS: Renting Tools, Access, and Infrastructure North Korea lures engineers to rent identities in fake IT worker scheme Google fixes…...
CrowdStrike catches insider feeding information to hackers
1+ mon, 3+ week ago (582+ words) Salesforce investigates customer data theft via Gainsight breach CISA gives govt agencies 7 days to patch new Fortinet flaw New SonicWall SonicOS flaw allows hackers to crash firewalls Microsoft: Out-of-band update fixes Windows 11 hotpatch install loop Grafana warns of max severity…...
'Scattered Spider' teens plead not guilty to UK transport hack
1+ mon, 3+ week ago (684+ words) Salesforce investigates customer data theft via Gainsight breach CISA gives govt agencies 7 days to patch new Fortinet flaw New SonicWall SonicOS flaw allows hackers to crash firewalls FCC rolls back cybersecurity rules for telcos, despite state-hacking risks 'Scattered Spider' teens…...
New ShadowRay attacks convert Ray clusters into crypto miners
1+ mon, 3+ week ago (865+ words) Cloudflare blames this week's massive outage on database issues Fortinet warns of new FortiWeb zero-day exploited in attacks New WrtHug campaign hijacks thousands of end-of-life ASUS routers The hidden risks in your DevOps stack data'and how to address them CISA…...