Tag: breach
-
750,000 patients’ medical records exposed after data breach at French hospital
A hacker calling themselves “nears” claims to have compromised the systems of multiple healthcare facilities across France, claiming to have gained access to the records of over 1.5 million people. First seen on tripwire.com Jump to article: www.tripwire.com/state-of-security/750000-patients-medical-records-exposed-after-data-breach-french-hospital
-
US seizes PopeyeTools cybercrime marketplace, charges administrators
The U.S. has seized the cybercrime website ‘PopeyeTools’ and unsealed charges against three of its administrators, Abdul Ghaffar, Abdul Sami, and Javed Mirza, for selling stolen data. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/legal/us-seizes-popeyetools-cybercrime-marketplace-charges-administrators/
-
Financial Software Firm Finastra Investigating Data Breach
Finastra is investigating a data breach after a hacker claimed the theft of information from an internal file-transfer application. The post Financial Software Firm Finastra Investigating Data Breach appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/financial-software-firm-finastra-investigating-data-breach/
-
Threat actor sells data of over 750,000 patients from a French hospital
A threat actor had access to electronic patient record system of an unnamed French hospital, and the health data of 750,000 patients was compromised. An unnamed French hospital suffered a data breach that impacted more than 758,000 patients, a threat actor had access to the electronic patient record system of the organization. The threat actor…
-
The Crucial Influence of Human Factors in Security Breaches
The hard truth is that security breaches often happen because of human mistakes from simple, everyday actions. It’s not just employees unknowingly using unsecured Wi-Fi it’s phishing, weak passwords and a lack of awareness that open the door to attackers. First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/11/the-crucial-influence-of-human-factors-in-security-breaches/
-
5 Hackers Charged for Attacking Companies via Phishing Text Messages
Federal authorities have unsealed charges against five individuals accused of orchestrating sophisticated phishing schemes that targeted employees of companies across the United States. The alleged hackers reportedly stole confidential company data and millions of dollars in cryptocurrency by exploiting stolen employee credentials. The defendants, ranging in age from 20 to 25, are accused of conspiracy…
-
Helldown Ransomware Attacking VMware ESXi And Linux Servers
Helldown, a new ransomware group, actively exploits vulnerabilities to breach networks, as since August 2024, they have compromised 28 victims, leaking their data on a dedicated website. The ransomware group IS has updated its data leak site, removing three victims, possibly indicating successful ransom payments by continuing its double extortion tactic, stealing and threatening to…
-
Helldown Ransomware Attacking VMware ESX And Linux Servers
Helldown, a new ransomware group, actively exploits vulnerabilities to breach networks, as since August 2024, they have compromised 28 victims, leaking their data on a dedicated website. The ransomware group IS has updated its data leak site, removing three victims, possibly indicating successful ransom payments by continuing its double extortion tactic, stealing and threatening to…
-
Build Confidence with Robust Machine Identity Solutions
How Robust Are Your Machine Identity Solutions? As cybersecurity threats and data breaches continue to soar, the question becomes inevitable: how robust are your machine identity solutions? For many organizations, the answer remains shrouded in ambiguity, leaving them vulnerable to data breaches and non-compliance penalties. However, a new frontier of Non-Human Identity (NHI) and Secrets……
-
>>Ghost Tap<< Emerges: Cybercriminals Exploit NFC Relay for Contactless Cash-Outs
ThreatFabric reveals a new tactic allowing fraudsters to anonymously drain stolen credit cards linked to mobile wallets. A new and concerning trend in financial cybercrime has surfaced, dubbed >>Ghost Tap
-
Full recovery from breaches takes longer than expected
In 2024, businesses reported taking an average of 7.3 months to recover from cybersecurity breaches 25% longer than expected and over a month past the anticipated … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/21/cybersecurity-breach-recovery/
-
Shift Left and Shift Up Workload Attack Surface Protection
In today’s security landscape, the concept of a hardened perimeter is increasingly insufficient. With the rise of hybrid and multi-cloud environments, lateral movement attacks, where attackers move through internal systems once a breach has occurred, have emerged as a significant threat. First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/11/shift-left-and-shift-up-workload-attack-surface-protection/
-
Cyberattack at French hospital exposes health data of 750,000 patients
A data breach at an unnamed French hospital exposed the medical records of 750,000 patients after a threat actor gained access to its electronic patient record system. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cyberattack-at-french-hospital-exposes-health-data-of-750-000-patients/
-
Ford data breach involved a third-party supplier
Ford investigates a data breach linked to a third-party supplier and pointed out that its systems and customer data were not compromised. Ford investigation investigated a data breach after a threat actors claimed the theft of customer information on the BreachForums cybercrime. On November 17, threat actors IntelBroker and EnergyWeaponUser published a post on BreachForums…
-
Five alleged members of Scattered Spider cybercrime group charged for breaches, theft of $11 million
First seen on therecord.media Jump to article: therecord.media/five-scattered-spider-members-charged-breaches-11-million-theft
-
Ford Blames Third-Party Supplier for Data Breach
Ford has completed its investigation into recent data breach claims and determined that its systems and customer data have not been compromised. The post Ford Blames Third-Party Supplier for Data Breach appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/ford-says-leaked-data-comes-from-supplier-and-is-not-sensitive/
-
Criminals ‘Ghost Tap’ NFC for Payment Cash-Out Attacks
Tactic Uses Stolen Cards Added to Apple Pay and Google Pay Digital Wallets. Criminals have been caught tapping a new type of relay attack to cash-out stolen payment cards added to legitimate digital wallets. These criminals use money mules who carry an Android device able to capture and relay NFC communications used by ATMs to…
-
Fintech giant Finastra investigates data breach after SFTP hack
Finastra has confirmed it warned customers of a cybersecurity incident after a threat actor began selling allegedly stolen data on a hacking forum. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fintech-giant-finastra-investigates-data-breach-after-sftp-hack/
-
Alleged Finastra breach under investigation
Tags: breachFirst seen on scworld.com Jump to article: www.scworld.com/brief/alleged-finastra-breach-under-investigation
-
Alleged Ford ‘Breach’ Encompasses Auto Dealer Info
Cybersecurity investigators found the leaked data to be information from a third party, not Ford itself, that is already accessible to the public and not sensitive in nature. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/alleged-ford-breach-auto-dealer-info
-
Fintech Finastra Confirms Data Theft; Investigation Underway
Company Probing Customers Affected After Attacker Claims 400 Gigabyte Data Theft. Financial technology firm Finastra is warning customers that it suffered a breach of a secure file transfer system that it uses to relay information to some customers, leading to an unknown quantity of data being exfiltrated by an attacker. The company is still identifying…
-
New Ghost Tap attack abuses NFC mobile payments to steal money
Cybercriminals have devised a novel method to cash out from stolen credit card details linked to mobile payment systems such as Apple Pay and Google Pay, dubbed ‘Ghost Tap,’ which relays NFC card data to money mules worldwide. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-ghost-tap-attack-abuses-nfc-mobile-payments-to-steal-money/
-
Fintech giant Finastra confirms it’s investigating a data breach
An incident disclosure shared with Finastra’s banking and financial customers confirms a hacker stole files from a company system. First seen on techcrunch.com Jump to article: techcrunch.com/2024/11/20/fintech-giant-finastra-confirms-its-investigating-a-data-breach/
-
Ford investigates alleged breach following customer data leak
Ford is investigating allegations that it suffered a data breach after a threat actor claimed to leak 44,000 customer records on a hacking forum. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ford-investigates-alleged-breach-following-customer-data-leak/
-
Ghost Tap: Hackers Exploiting NFCGate to Steal Funds via Mobile Payments
Threat actors are increasingly banking on a new technique that leverages near-field communication (NFC) to cash out victim’s funds at scale.The technique, codenamed Ghost Tap by ThreatFabric, enables cybercriminals to cash-out money from stolen credit cards linked to mobile payment services such as Google Pay or Apple Pay and relaying NFC traffic.”Criminals can now misuse…
-
Apple fixes 2 zero-days exploited to breach macOS systems (CVE-2024-44309, CVE-2024-44308)
Apple has released emergency security updates for macOS Sequoia that fix two zero-day vulnerabilities (CVE-2024-44309, CVE-2024-44308) that >>may have been actively … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/20/cve-2024-44309-cve-2024-44308/
-
Inside the Booming ‘AI Pimping’ Industry
AI-generated influencers based on stolen images of real-life adult content creators are flooding social media. First seen on wired.com Jump to article: www.wired.com/story/ai-pimping-industry-deepfakes-instagram/
-
Ford Says Blames Third-Party Supplier for Data Breach
Ford has completed its investigation into recent data breach claims and determined that its systems and customer data have not been compromised. The post Ford Says Blames Third-Party Supplier for Data Breach appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/ford-says-leaked-data-comes-from-supplier-and-is-not-sensitive/