Tag: breach
-
Breach Roundup: Researchers Find Flaws in Palo Alto Firewalls
Also: US Prosecutors Charge Suspected North Korean IT Worker Collaborators. This week, researchers spied Palo Alto firewall flaws, a North Korean IT worker conspiracy, ChatGPT as DDoS vector. Chinese hackers targeted a VPN maker, a fake PyPi package and a Russian threat actor shifted tactics. BreachForums admin faces prison and scammers used the release of…
-
RansomHub lays claim on American Standard, Grohe breaches
Tags: breachFirst seen on scworld.com Jump to article: www.scworld.com/brief/ransomhub-lays-claim-on-american-standard-grohe-breaches
-
Hackers still exploiting older Ivanti bugs to breach networks
CISA and the FBI warned today that attackers are still exploiting Ivanti Cloud Service Appliances (CSA) security flaws patched since September to breach vulnerable networks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-hackers-still-exploiting-older-ivanti-bugs-to-breach-networks/
-
Chinese threat actors used two advanced exploit chains to hack Ivanti CSA
US agencies revealed Chinese threat actors used two advanced exploit chains to breach Ivanti Cloud Service Appliances (CSA). The US government’s cybersecurity and law enforcement revealed that Chinese threat actors used at least two sophisticated exploit chains to compromise Ivanti Cloud Service Appliances (CSA). A CISA and FBI published a joint advisory warning that Chinese hackers…
-
Data breach hitting PowerSchool looks very, very bad
Schools are now notifying families their data has been stolen. First seen on arstechnica.com Jump to article: arstechnica.com/security/2025/01/students-parents-and-teachers-still-smarting-from-breach-exposing-their-info/
-
AI Assistant Jailbreaked to Reveal its System Prompts
Anonymous tinkerer claims to have bypassed an AI assistant’s safeguards to uncover its highly confidential system prompt”, the underlying instructions shaping its behavior. The breach, achieved through creative manipulation rather than brute force, has sparked conversations about the vulnerabilities and ethical considerations of AI security. The Revelation The curious individual began the exploration innocently enough,…
-
Smashing Security podcast #401: Hacks on the high seas, and how your home can be stolen under your nose
An Italian hacker makes the grade and ends up in choppy waters, and hear true stories of title deed transfer scams. First seen on grahamcluley.com Jump to article: grahamcluley.com/smashing-security-podcast-401/
-
Texas Investigates Insider Breach, Theft of Benefit Funds
7 Texas Health and Human Services Workers Fired in Incident Affecting 61,000 people. Authorities in Texas are investigating an insider incident at the Texas Health and Human Services Commission that led to the firing of seven employees, an investigation into hundreds of thousands of dollars in stolen funds and notification of a breach of personal…
-
Google Cloud Security Threat Horizons Report #11 Is Out!
Tags: access, api, apt, attack, authentication, breach, business, cloud, corporate, credentials, cybersecurity, data, detection, exploit, extortion, google, identity, intelligence, leak, mfa, password, phishing, ransomware, service, tactics, theft, threat, tool, vulnerabilityThis is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our next Threat Horizons Report, #11 (full version) that we just released (the official blog for #1 report, my unofficial blogs for #2, #3, #4, #5, #6, #7, #8, #9 and #10). My favorite quotes from the report follow below:…
-
Disruptions at Conduent linked to third-party breach
Tags: breachFirst seen on scworld.com Jump to article: www.scworld.com/brief/disruptions-at-conduent-linked-to-third-party-breach
-
Fraud Watch: E-Skimmers and Scam E-Commerce Sites Still Bite
Criminals Listed 269 Million Stolen Payment Card For Sale in 2024, Researchers Find. It’s an old story: Criminals rake in profits by using digital e-skimming software, running scam e-commerce sites and selling stolen payment card data. Unfortunately, it’s made continually new thanks to adaptability of cybercriminals, who keep their tool set relevant and ever more…
-
PowerSchool data breach brings claims of negligence, poor cyber hygiene
The K-12 software company is facing legal pushback and criticism following a cyberattack that impacted a still unknown number of districts. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/powerschool-data-breach-lawsuits-negligence/737961/
-
What PowerSchool isn’t saying about its ‘massive’ student data breach
The hack has the potential to be one of the biggest of the year, but the edtech giant is refusing to answer important questions First seen on techcrunch.com Jump to article: techcrunch.com/2025/01/22/what-powerschool-isnt-saying-about-its-massive-student-data-breach/
-
73% of UK Education Sector Hit by Cyber-Attacks in Past Five Years
New ESET research reveals that 73% of UK educational institutions experienced at least one cyber-attack or breach in the past five years First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/schools-hit-by-cyberattacks-in/
-
Half a million hotel guests at risk after hackers accessed sensitive data
The personal information of almost half a million people is now in the hands of hackers after a security breach of a company used by some of the world’s best known hotel brands. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/half-a-million-hotel-guests-at-risk-after-hackers-accessed-sensitive-data
-
Cybersecurity is tough: 4 steps leaders can take now to reduce team burnout
Tags: ai, attack, breach, business, ciso, compliance, control, corporate, cybercrime, cybersecurity, group, incident response, international, jobs, risk, soc, tactics, threatWorking in cybersecurity is only getting harder. Cybercriminals continue to up their game as security teams scramble to catch up with attack tactics and techniques. Organizations put near-impossible demands on their security departments, often with little or no support.The “always-on” nature of many roles in cybersecurity (from SOC analyst to incident response to the CISO)…
-
PowerSchool theft latest: Decades of Canadian student records, data from 40-plus US states feared stolen
Lawsuits pile up after database accessed by miscreants First seen on theregister.com Jump to article: www.theregister.com/2025/01/22/powerschool_canada_lawsuits/
-
Healthcare Cybersecurity: The Chronic Condition We Can’t Ignore
Cyber breaches in healthcare are chronic conditions that can linger for years, quietly draining resources and eroding trust. Imagine a chronic disease. There’s the immediate crisis phase that demands urgent attention”, medication, hospital stays, or even surgery. But long after those acute symptoms subside, the condition requires ongoing care and monitoring. Cyberattacks follow a similar…
-
HPE Investigates After Alleged Data Breach
The company reports that it is not experiencing any operational issues within its business, so far. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/hpe-investigates-alleged-data-breach
-
Disciplinary and special ed records of Toronto students may have leaked in PowerSchool breach
The data breach at the educational software company may affect millions of students at Toronto public schools, one of thousands of districts using PowerSchool tools. ]]> First seen on therecord.media Jump to article: therecord.media/disciplinary-special-records-toronto-powerschool
-
HPE Probes Alleged IntelBroker Breach
Tags: breachFirst seen on scworld.com Jump to article: www.scworld.com/brief/hpe-probes-alleged-intelbroker-breach