Security
Bridgestone hacked same day as Jaguar Land Rover, also disrupting operations
Bridgestone Americas on Thursday confirms the company has suffered what it calls a “limited cyber incident” – ironically, on the same day luxury carmaker Jaguar Land Rover was breached by the publicity-hungry Scattered Spider-led trio of ransomware gangs.
Read more about Bridgestone hacked same day as Jaguar Land Rover, also disrupting operations
Surge in malicious scans for outdated routers: hackers hunting for old Cisco, Linksys gear
Researchers are warning of a surge in malicious scans for old, outdated, and vulnerable network equipment. Hackers are likely succeeding because these probes often come from compromised end-of-life Cisco, Linksys, and Araknis Networks devices.
Read more about Surge in malicious scans for outdated routers: hackers hunting for old Cisco, Linksys gear
Online chess players’ data leaked in third-party breach
The most popular platform for chess players, Chess.com, has informed thousands of users that their personal details were exposed after hackers breached the company’s data storage vendor.
Read more about Online chess players’ data leaked in third-party breach
AI blockade: websites are putting up fences to protect their content
Website owners, from global banks to prestigious universities and leading law firms, are cracking down on AI bots pillaging their online content. Firms are increasingly blocking AI crawlers using various methods, from including them in robots.txt files to implementing server-side anti-bot protections.
Read more about AI blockade: websites are putting up fences to protect their content
Jaguar Land Rover cyberattack claimed by Salesforce, M&S hacking gangs
The hacking group said to be behind the devastating rash of Salesforce supply chain attacks is claiming responsibility for this week's cyberattack on luxury automaker Jaguar Land Rover.
Read more about Jaguar Land Rover cyberattack claimed by Salesforce, M&S hacking gangs
Cybercrime revolutionized with an AI “brain” that unleashes automated cyberattack mayhem
Instead of hacking themselves, attackers are increasingly deploying a free AI weapon that hacks for them. Twelve autonomous AI agents juggle 150 highly specialized security tools, from reconnaissance to zero-day exploitation, and it seems to be working.
Read more about Cybercrime revolutionized with an AI “brain” that unleashes automated cyberattack mayhem
PayPal users targeted by stealthy phishing scam
A polished and sophisticated scam is targeting PayPal users. Like most scams, it has telltale signs of deception, which can be easily spotted if you look hard enough.
Read more about PayPal users targeted by stealthy phishing scam
Hackers exploiting popular TP-Link WiFi device, WhatsApp also affected
The US Cybersecurity and Infrastructure Security Agency (CISA) has warned that hackers are actively exploiting two vulnerabilities: one affects very popular TP-Link WiFI extenders, and another is a recent WhatsApp flaw exploited by highly sophisticated attackers.
Read more about Hackers exploiting popular TP-Link WiFi device, WhatsApp also affected
252M identities dumped online in massive leak affecting 7 countries
Over 250 million identity records have been exposed across seven countries in a massive data leak.
Read more about 252M identities dumped online in massive leak affecting 7 countries
Popular marketing chatbot abused by hackers to breach Google, Cloudflare taken offline
Amid a wave of significant data breach disclosures from some of the world’s largest firms, Salesloft has announced that it’s pulling its Drift AI chatbot service offline. Hackers abused compromised Drift access tokens to infiltrate Salesforce instances.
Read more about Popular marketing chatbot abused by hackers to breach Google, Cloudflare taken offline
Production process of Jaguar Land Rover disrupted by cyberattack
A cyberattack has “severely disrupted” Jaguar Land Rover’s production activities. The good news is that there’s no evidence that customer data has been stolen.
Read more about Production process of Jaguar Land Rover disrupted by cyberattack
Google accused of “partisan” spam filters in Gmail
Federal Trade Commission (FTC) Chairman Andrew Ferguson has sent a letter to Sundar Pichai, CEO of Google’s parent company Alphabet, warning the company of potential FTC Act violations related to Gmail’s alleged “partisan” spam filters.
Read more about Google accused of “partisan” spam filters in Gmail
Zscaler discloses data breach after cyberattack on third party
The data of an unknown number of customers at Zscaler has been leaked due to a cyberattack on Salesforce. The American cloud security company is now warning affected customers of phishing attacks and social engineering attempts.
Read more about Zscaler discloses data breach after cyberattack on third party
Cloudflare joins list of Salesforce attack victims, provides detailed timeline
Cloudflare announces it has officially joined the list of hundreds of companies impacted by a continuing rash of third-party attacks on its Salesforce instance, following in the footsteps of Palo Alto Networks, which also made a similar admission on Tuesday.
Read more about Cloudflare joins list of Salesforce attack victims, provides detailed timeline
Palo Alto Networks also targeted during Salesforce data heist
Palo Alto Networks (PAN), the largest cybersecurity company by market capitalization, will be disclosing a data breach that exposed customer data and support cases, BleepingComputer reports.
Read more about Palo Alto Networks also targeted during Salesforce data heist
“This is personal now:” Man fired after cyberattack wants Lapsus$ hackers to pay
Fired after a supposed cyberattack on his company, a former employee has declared war on the ransomware gang. The company says there was no cyberattack.
Read more about “This is personal now:” Man fired after cyberattack wants Lapsus$ hackers to pay
Santa Fe County hack likely full of hot air
Attackers claim to have stolen source code from the Santa Fe County government website. However, the Cybernews research team believes that they’re peddling outdated information.
Read more about Santa Fe County hack likely full of hot air
Everyone can find your car, phone or other WiFi: what can you do about it?
You might not like it, but your WiFi devices are already mapped and used in vast, public location tracking systems without giving you anything in return. This means that attackers can accurately pinpoint where you are from a couch on another continent.
Read more about Everyone can find your car, phone or other WiFi: what can you do about it?
“Invincible” hackers threaten Google, FBI over Salesforce attack investigations
Three teen cybercrime gangs, previously decimated by arrests, are now acting as one and again feeling invincible. After claiming responsibility for major breaches tied to Salesforce instances, the group is now demanding that Google and the FBI halt their investigations and fire specific employees.
Read more about “Invincible” hackers threaten Google, FBI over Salesforce attack investigations
Don’t worry, your Gmail accounts might be secure after all
Google has denied claims that it informed Gmail users of a major security issue that supposedly affected 2.5 million users.
Read more about Don’t worry, your Gmail accounts might be secure after all
