Security
Ransom gangs have cost manufacturers $46B
Downtime caused by ransomware attacks on the manufacturing industry have cost it $46 billion over the past five years, a cybercrime round-up can reveal.
Read more about Ransom gangs have cost manufacturers $46B
Zero-day bug exploiting Meta hits Salesforce
Cloud-based software company Salesforce was left wide open to a cyberattack exploiting the reputation of tech giant Meta thanks to a previously undetected bug.
Read more about Zero-day bug exploiting Meta hits Salesforce
Burger King forgets to put a password on their systems, again
The fast food giant put their systems and data at risk by exposing sensitive credentials to the public for a second time.
Read more about Burger King forgets to put a password on their systems, again
Chrome extensions: they see everything
Your handy adblocker, price tracker, or spell checker extension might be significantly risking your online safety. Oren Koren, Co-Founder of the cybersecurity firm Veriti, advised me to delete all Chrome extensions, and he’s not the only one. Four more cybersecurity researchers have similar opinions.
Read more about Chrome extensions: they see everything
Everlast hacked, customer credit cards compromised
Everlast, the well-known American boxing equipment brand, recently had its online shop hacked by a cybergang linked to the world’s biggest online bank heist. Customer credit card data has been silently skimmed for at least three weeks, the Cybernews research team found.
Read more about Everlast hacked, customer credit cards compromised
Italy targeted by new malware strain
A threat group known for going after targets in Europe and Asia has been deploying a new form of malware against Italian organizations, cybersecurity company Proofpoint says.
Read more about Italy targeted by new malware strain
US Senator demands feds investigate Microsoft over China email and SolarWinds hack
Oregon Senator Ron Wyden is pushing three federal agencies to hold Microsoft accountable for security failures that led to two major hacking campaigns impacting multiple government offices – a recently discovered Chinese-led cyberespionage campaign and the infamous 2020 SolarWinds hack.
Read more about US Senator demands feds investigate Microsoft over China email and SolarWinds hack
Deloitte joins fellow Big Four MOVEit victims PWC, EY
Big Four financial services firm Deloitte confirms to Cybernews that it's part of the latest round of victims claimed in the MOVEit attacks.
Read more about Deloitte joins fellow Big Four MOVEit victims PWC, EY
DepositFiles exposed config file, jeopardizing user security
DepositFiles, a popular web hosting service, left its environment configuration file accessible, revealing a trove of highly sensitive credentials.
Read more about DepositFiles exposed config file, jeopardizing user security
macOS RedLine Stealer malware found on fake blockchain games
macOS is being abused to create malicious software embedded in bogus games, a malware hunter has disclosed.
Read more about macOS RedLine Stealer malware found on fake blockchain games
Apple extends spyware patch to all devices
Apple has now extended an emergency patch notice, which was recently issued for newer devices, to its entire array of platforms, Sophos cybersecurity firm reports.
Read more about Apple extends spyware patch to all devices
Imagine360 data breach: medical information, Social Security numbers compromised
Imagine360, a health plan solution company based in Pennsylvania, has disclosed a data breach affecting over 130,000 people.
Read more about Imagine360 data breach: medical information, Social Security numbers compromised
Average cost of data breach reaches $4.5M – you’re the one who pays
The frequency and cost of data breaches are increasing. However, companies are reluctant to invest in safeguarding their systems. What’s more, many organizations transfer the cost of the breach to consumers.
Read more about Average cost of data breach reaches $4.5M – you’re the one who pays
Tampa hospital hit hard in cyberattack
Tampa General Hospital (TGH) confirms patient data was compromised during a more than two-week-long cyberattack. Now, multiple ransomware gangs are claiming to possess the stolen data.
Read more about Tampa hospital hit hard in cyberattack
First search result leads to malware: crooks now paying for ads
Cybercriminals are finding new ways to poison search results. They’re filling Google with paid ads using so-called ‘malvertising’ campaigns, which lead unaware users to malicious sites that exploit their data and trust.
Read more about First search result leads to malware: crooks now paying for ads
Nice Suzuki, sport: shame dealer left your data up for grabs
Two Suzuki-authorized dealer websites were found to be leaking sensitive information. Files that should be secure and kept private were left publicly accessible.
Read more about Nice Suzuki, sport: shame dealer left your data up for grabs
Only Fans hacked by Anonymous Sudan
Anonymous Sudan is raising eyebrows again, this time by claiming to have taken down the online adult content subscription service known as Only Fans.
Read more about Only Fans hacked by Anonymous Sudan
Malware risk in AI software packages, warns analyst
ChatGPT’s API program, designed to incorporate artificial intelligence (AI) functionality into pre-existing apps and software, comes with a risk, warns analyst.
Read more about Malware risk in AI software packages, warns analyst
American students bombarded with job scam emails
Threat actors have been impersonating bioscience, healthcare, and biotechnology companies to defraud job seekers in North America.
Read more about American students bombarded with job scam emails
TD Ameritrade, Ernst & Young, PWC MOVEit negotiations fail, data published
The Cl0p ransomware gang is offering more than 3TB of sensitive data for sale – allegedly stolen from TD Ameritrade and Ernst & Young in the MOVEit zero-day attacks – all as retaliation for the companies' lack of negotiation skills. Pricewaterhouse Coopers was also slammed by the gang after it was assigned its very own leak URL containing all of PWC published files.
Read more about TD Ameritrade, Ernst & Young, PWC MOVEit negotiations fail, data published
