Tag: breach
-
FBI and Global Task Force Dismantle Cracked and Nulled, Seizing Millions in Stolen Data
Authorities have successfully disrupted and dismantled the notorious online cybercrime marketplaces know First seen on thecyberexpress.com Jump to article: thecyberexpress.com/international-takedown-of-cracked-and-nulled/
-
BeyondTrust Zero-Day Breach 17 SaaS Customers API Key Compromised
BeyondTrust, a leading provider of identity and access management solutions, disclosed a zero-day breach impacting 17 Remote Support SaaS customers. The incident, detected on December 5, 2024, has been linked to the compromise of an infrastructure API key used to access specific Remote Support SaaS instances. The breach allowed attackers to reset local application passwords…
-
Change Your Password Day: Keeper Security Highlights Urgent Need for Strong Credential Management
In recognition of Change Your Password Day, Keeper Security is urging organisations to prioritise securing credentials to combat the escalating threat of cyber attacks. Without proper safeguards, compromised credentials can lead to devastating breaches, financial loss and reputational damage. Privileged accounts, often used by administrators or automated systems to access critical infrastructure, are prime targets for…
-
Foreign Hackers Are Using Google’s Gemini in Attacks on the US
Plus: WhatsApp discloses nearly 100 targets of spyware, hackers used the AT&T breach to hunt for details on US politicians, and more. First seen on wired.com Jump to article: www.wired.com/story/hackers-google-gemini-us-cyberattacks/
-
Smiths Group investigates cybersecurity breach
First seen on scworld.com Jump to article: www.scworld.com/brief/smiths-group-investigates-cybersecurity-breach
-
IT Services Vendor Hack Affects 293,000 AHN Patients
7 Proposed Class Actions Filed Against Allegheny Health Network and IntraSystems. A Pittsburgh-based healthcare system and its Massachusetts-based IT services firm are facing at least seven proposed federal class action lawsuits involving a data theft – reported on Jan. 17 – affecting about 293,000 people. The hack is the latest major breach involving a business…
-
South Africa’s government-run weather service knocked offline by cyberattack
The government-run South African Weather Service (SAWS) said its systems went down “following a security breach by criminal elements.” First seen on therecord.media Jump to article: therecord.media/south-african-weather-service-cyberattack
-
Notification underway for victims of Powerschool data breach
First seen on scworld.com Jump to article: www.scworld.com/brief/notification-underway-for-victims-of-powerschool-data-breach
-
Why API Security is Essential for the Hospitality Sector: Safeguarding Your Guests and Your Rewards
Trust is the cornerstone of the hospitality industry. Guests rely on you to safeguard their personal data, payment information, and loyalty rewards. However, in today’s digital landscape, this trust faces constant risks. APIs, which serve as the unseen connections among various systems and applications, are particularly vulnerable to cyber threats. A single flaw can compromise…
-
MGM Resorts settles lawsuits after millions of customer records stolen in data breaches
A court filing says 37 million MGM customers had personal data stolen in the cyberattacks. First seen on techcrunch.com Jump to article: techcrunch.com/2025/01/29/mgm-resorts-settles-lawsuits-after-millions-of-customer-records-stolen-in-data-breaches/
-
Clutch grabs $20M to build out its non-human security ID platform
When it comes to the world of cybersecurity, identity is often thought of as a “perimeter” around an organization. So many breaches begin through techniques like password theft, phishing, and credential stuffing; ergo, securing the identities of not only users, but also applications and machines, is the key to securing the whole system. Easier said…
-
312% Surge in Breach Notices That Could Have Been Prevented
Identity Theft Resource Center’s Lee on Lessons Learned From 2024 Mega-Breaches. Six mega cybersecurity incidents led to a record 1.7 billion data breach notices going out to victims in 2024 – a dramatic 312% increase over the previous year. Identity Theft Resource Center President James E. Lee says the increase exposes industry-wide failures in basic…
-
Lynx Ransomware Group ‘Industrializes’ Cybercrime With Affiliates
The ransomware group provides everything an affiliate could want to breach and attack victims, including a quality controlled recruitment system to engage even more criminals. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/lynx-raas-group-industrializes-cybercrime-with-affiliate-operations
-
How Interlock Ransomware Infects Healthcare Organizations
Ransomware attacks have reached an unprecedented scale in the healthcare sector, exposing vulnerabilities that put millions at risk. Recently, UnitedHealth revealed that 190 million Americans had their personal and healthcare data stolen during the Change Healthcare ransomware attack, a figure that nearly doubles the previously disclosed total. This breach shows just how deeply ransomware First…
-
Ex-worker arrested after ‘shutdown’ of British Museum computer systems
London’s world-famous British Museum was forced to partially close its doors at the end of last week, following a serious security breach involving a former IT contractor. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/ex-worker-arrested-after-shutdown-of-british-museum-computer-systems
-
Attackers exploit SimpleHelp RMM Software flaws for initial access
Threat actors exploit recently fixed SimpleHelp RMM software vulnerabilities to breach targeted networks, experts warn. Horizon3 researchers discovered three vulnerabilities, tracked as CVE-2024-57726, CVE-2024-57727, and CVE-2024-57728, that could be used to compromise a SimpleHelp server, as well as clients machines being managed by SimpleHelp. The first vulnerability, CVE-2024-57727 (CVSS score of 7.5), is an unauthenticated…
-
UAC-0063 Expands Cyber Attacks to European Embassies Using Stolen Documents
The advanced persistent threat (APT) group known as UAC-0063 has been observed leveraging legitimate documents obtained by infiltrating one victim to attack another target with the goal of delivering a known malware dubbed HATVIBE.”This research focuses on completing the picture of UAC-0063’s operations, particularly documenting their expansion beyond their initial focus on Central Asia, First…
-
MGM agrees to pay $45 million to victims of 2019 data breach and 2023 ransomware attack
MGM Resorts International agreed to pay $45 million to settle multiple class action lawsuits related to a data breach in 2019 and a ransomware attack the company experienced in 2023. First seen on therecord.media Jump to article: therecord.media/mgm-agrees-45-million-payment-data-breach-ransomware-victims
-
UHG’s PR Headache: How Did Breach Total Jump to 190 Million?
Experts Explain Complexity of Company’s Massive Data Breach Analysis Endeavor. UnitedHealth Group says its previously eye-popping estimate of 100 million people affected by last year’s attack on its Change Healthcare unit nearly doubled in recent months to a staggering 190 million victims. Why did it take so long for the company to figure out the…
-
5 ways boards can improve their cybersecurity governance
Tags: attack, breach, business, ciso, cloud, cyber, cybersecurity, data, election, endpoint, finance, gartner, governance, government, group, identity, incident, india, infrastructure, jobs, middle-east, network, ransomware, regulation, risk, skills, technology, threat, trainingAs chairman of the board for Cinturion Group, Richard Marshall is intimately involved in ensuring the security of the fiber optic network his company is constructing from India through the Middle East and on to Europe.The monumental Trans Europe Asia System (TEAS) will be difficult enough to build given it will be buried beneath thousands…
-
Hackers exploiting flaws in SimpleHelp RMM to breach networks
Hackers are believed to be exploiting recently fixed SimpleHelp Remote Monitoring and Management (RMM) software vulnerabilities to gain initial access to target networks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploiting-flaws-in-simplehelp-rmm-to-breach-networks/
-
Toll in 2024 Change Healthcare breach hits nearly 190 million Americans
First seen on scworld.com Jump to article: www.scworld.com/news/toll-in-2024-change-healthcare-breach-hits-nearly-190-million-americans
-
Reporting a Breach or Vuln? Be Sure Your Lawyer’s on Call
Globally, security researchers and whistleblowers face increasingly hostile laws and judiciaries that are ready to levy fines and prison sentences. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/security-researchers-whistleblowers-face-crackdowns-globally
-
A Vision for a Breach Ready Healthcare
Stepping into my role as Senior Vice President & GM of Healthcare and Life Sciences at ColorTokens, I recognize the weight of responsibility. As we mark the announcement, I want to shed light on the challenges healthcare security faces, the solutions we’re committed to delivering, and the direction we plan to take in the coming……
-
Hackers Claim 2nd Breach at HP Enterprise, Plan to Sell Access
IntelBroker targets Hewlett-Packard Enterprise (HPE) again, claiming to have access to the company’s internal infrastructure and the possibility… First seen on hackread.com Jump to article: hackread.com/hackers-claim-2nd-breach-hp-enterprise-sell-access/
-
Engineering giant Smiths Group discloses security breach
London-based engineering giant Smiths Group disclosed a security breach after unknown attackers gained access to the company’s systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/engineering-giant-smiths-group-discloses-security-breach/
-
ENGlobal Cyber-Attack Exposes Sensitive Data
Energy contractor ENGlobal reported that sensitive personal data was stolen by threat actors, with the incident disrupting operations for six weeks First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/englobal-attack-sensitive-data/
-
Texas utility firm investigating potential leak of customer data tied to 2023 MOVEit breach
A large Texas energy company confirmed it is investigating reports of stolen customer data that has been published on a cybercriminal forum after it was allegedly taken during a 2023 breach. First seen on therecord.media Jump to article: therecord.media/texas-utility-firm-investigating-potential-data-leak-moveit-breach