Tag: data
-
FBI Issues Urgent Warning About Data Extortion Scam Targeting Corporate Executives
The Federal Bureau of Investigation (FBI) has alerted businesses about a disturbing new data extortion scam targeting corporate executives. The scheme, which is being orchestrated by criminals posing as the “BianLian Group,” involves sending fraudulent letters to high-level professionals with threats of sensitive data leaks unless hefty ransom payments are made. First seen on thecyberexpress.com…
-
Peaklight Malware Targets Users to Steal Credentials, Browser History, and Financial Data
Peaklight malware has emerged as a significant threat, designed to steal sensitive information from compromised endpoints. This information stealer is often distributed through underground channels and is sometimes offered as a Malware-as-a-Service (MaaS), making it a continuously evolving and potent threat capable of bypassing conventional security measures. Peaklight’s primary goal is to exfiltrate sensitive data,…
-
Medusa Ransomware Attacks Surge 42% with Advanced Tools Tactics
Medusa ransomware attacks have seen a significant increase, rising by 42% between 2023 and 2024, with a further escalation in early 2025. This surge is attributed to the group Spearwing, which operates Medusa as a ransomware-as-a-service (RaaS) model. Spearwing and its affiliates are known for conducting double extortion attacks, where they steal data before encrypting…
-
FBI Warns: Threat Actors Impersonating BianLian Group to Target Corporate Executives
The Federal Bureau of Investigation (FBI) issued a critical alert through its Internet Crime Complaint Center (IC3) warning of a novel cyber extortion campaign targeting corporate executives. Criminal actors impersonating the notorious BianLian ransomware group are leveraging physical mail to deliver threatening letters demanding Bitcoin payments under the guise of data exfiltration. The Cybersecurity and…
-
Medusa Ransomware Claims 40+ Victims in 2025, Confirmed Healthcare Attacks
Symantec found that Medusa has listed almost 400 victims on its data leaks site since early 2023, demanding ransom payments as high as $15m First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/medusa-claims-victims-2025/
-
Elastic Issues Urgent Update for Critical Kibana Vulnerability Exposing Remote Code Execution Risk
Elastic has released a critical security update to address a vulnerability in Kibana, a widely used data visualization and analysis tool for Elasticsearch. This Kibana vulnerability, identified as CVE-2025-25012, could allow attackers to execute arbitrary code on affected systems, posing a severe threat to organizations using Kibana. The vulnerability, categorized under the CVSS scoring system…
-
What is risk management? Quantifying and mitigating uncertainty
Tags: breach, business, cio, ciso, compliance, control, cyber, cyberattack, data, finance, flaw, framework, governance, healthcare, infosec, infrastructure, insurance, international, jobs, mitigation, monitoring, nist, risk, risk-analysis, risk-assessment, risk-management, software, strategy, technology, tool, vulnerabilityHow do organizations structure risk management operations?: Risk management has in some organizations traditionally been multicentric, with different departments or individuals within the org implementing risk management techniques in their work: Risk management is a component of good project management, for instance. IT leaders in particular must be able to integrate risk management philosophies and…
-
CISA, FBI warn of BianLian mail scam targeting executives with $500k ransom note
In an alert on Thursday, the FBI said scammers are mailing letters to corporate executives claiming that they stole sensitive data and will publish it unless a demand is paid in Bitcoin. First seen on therecord.media Jump to article: therecord.media/cisa-fbi-warn-bianlian-mail-scam-extortion
-
Qilin Ransomware gang claims the hack of the Ministry of Foreign Affairs of Ukraine
Qilin Ransomware group claims to have breached the Ministry of Foreign Affairs of Ukraine, marking a significant cybersecurity attack. The Russian-speaking Qilin Ransomware group claims responsibility for an attack on the Ministry of Foreign Affairs of Ukraine. The group stated that it stole sensitive data such as private correspondence, personal information, and official decrees. The…
-
Indictments of Chinese Cyber Spies Reveal HackerHire Operation
The U.S. DOJ indicted a dozen Chinese nationals for their role in a years-long hacker-for-hire campaign that included the Chinese government using private companies and freelance hackers to steal data from U.S. and other governments while obscuring its role in the attacks. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/indictments-of-chinese-cyber-spies-reveal-hacker-for-hire-operation/
-
What are the key security controls for NHIs at the executive level?
Why Should CISOs Consider Non-Human Identities Security Controls? Did you know NHIs represent a significant portion of all entities in a typical network environment? A lack of robust Non-Human Identities (NHIs) security controls can pose significant threats to data integrity and system security in any organization. You must be wondering What are the key… First…
-
Third-Party Risk Tops Cybersecurity Claims
Data collected by cyber insurers shows that ransomware accounts for the majority of insurance claims, but much of the losses stem from third-party breaches affecting policyholders. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/third-party-risk-top-cybersecurity-claims
-
Incisive Software Named Exclusive Provider of Spreadsheet Intelligence Software for the Financial Modeling World Cup
CAMPBELL, CA, UNITED STATES, March 5, 2025, Incisive Software, a leaderin advanced data analytics and spreadsheet intelligence solutions, and the prestigious FinancialModeling World Cup (FMWC) are proud to announce FMWC’s exclusive selection of Incisive’sSpreadsheet Intelligence Software, Xcellerator, for FMWC members. This strategic partnershipunderscores FMWC’s commitment to leveraging cutting-edge technology to enhance financialmodeling and data… First…
-
Chinese APT Silk Typhoon exploits IT supply chain weaknesses for initial access
Tags: access, apt, attack, authentication, china, citrix, cloud, control, corporate, credentials, data, detection, email, exploit, firewall, github, government, group, hacker, identity, Internet, ivanti, least-privilege, microsoft, network, password, service, software, supply-chain, threat, update, vpn, vulnerability, zero-dayTwo-way lateral movement: Aside from abusing cloud assets and third-party services and software providers to gain access to local networks, the Silk Typhoon attackers are also proficient in jumping from on-premise environments into cloud environments. The group’s hackers regularly target Microsoft AADConnect (now Entra Connect) servers which are used to synchronize on-premise Active Directory deployments…
-
How Some State Health Privacy Laws Throw a Curveball at AI
State privacy laws, such as Washington State’s My Health My Data Act, could throw a curve ball in the use of certain consumer information for artificial intelligence and machine learning endeavors, said regulatory attorney Adam Greene of the law firm Davis Wright Tremaine. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/interviews/how-some-state-health-privacy-laws-throw-curveball-at-ai-i-5466
-
Hacked health firm HCRG demanded journalist ‘take down’ data breach reporting, citing UK court order
DataBreaches.net declined to comply, citing a lack of jurisdiction. First seen on techcrunch.com Jump to article: techcrunch.com/2025/03/06/hacked-health-firm-hcrg-demanded-journalist-take-down-data-breach-reporting-citing-uk-court-order/
-
Toronto Zoo breach impacts decades worth of data
First seen on scworld.com Jump to article: www.scworld.com/brief/toronto-zoo-breach-impacts-decades-worth-of-data
-
Tata Technologies Hit by Hunters International Ransomware, 1.4TB Data at Risk
Tata Technologies hit by Hunters International ransomware attack. The group threatened to leak 1.4TB of data. Learn about… First seen on hackread.com Jump to article: hackread.com/tata-technologies-hunters-international-ransomware-1tb-data/
-
Enterprise AI Through a Data Security Lens: Balancing Productivity With Safety
Recently, 57 countries signed an agreement pledging an open and inclusive approach to AI’s development. The US and UK were not among them, with the US vice president implying productivity should be the priority over safety. Should the opportunity for AI to drive innovation and productivity be prioritized over safety and security? First seen on…
-
DoJ Busts Alleged Global HackingHire Network of ‘Cyber Mercenaries’
Targets included the U.S. Treasury Department, journalists, and religious organisations, and the attacks intended to steal data and suppress free speech. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/us-doj-charges-chinese-nationals-hacking/
-
Decrypting the Forest From the Trees
Tags: api, computer, container, control, credentials, data, endpoint, least-privilege, microsoft, network, password, powershell, service, updateTL;DR: SCCM forest discovery accounts can be decrypted including accounts used for managing untrusted forests. If the site server is a managed client, service account credentials can be decrypted via the Administration Service API. Introduction While Duane Michael, Chris Thompson, and I were originally working on the Misconfiguration Manager project, one of the tasks I took…
-
Rite Aid Agrees to $6.8M Data Breach Lawsuit Settlement
Provisional Agreement Tied to Ransomware Attack Affecting 2.2 Million Customers. American pharmacy chain giant Rite Aid reached a $6.8 million agreement to settle a data breach class action lawsuit, which includes a pledge to improve its cybersecurity practices. The breach involved a ransomware group stealing data pertaining to 2.2 million customers. First seen on govinfosecurity.com…
-
Data Security in the Age of AI with Rob Truesdell
Rob Truesdell discusses how enterprises must rethink data security in the age of AI. He explores why traditional security tools fall short as companies increasingly connect sensitive data with Large Language Models, and how it’s especially critical as the software industry is projected to reach 1 million organizations by 2027. Rob and Alan explore how..…
-
Top 7 Full Disk Encryption Software Solutions for 2025
Protect your data with the best disk encryption software for your organization. Compare the top solutions now. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/networks/top-full-disk-software-products/
-
AI, Web Scraping and the Transformation of Data Privacy: What the EDPB’s Rulings Mean for Businesses
Web scraping is no longer just about collecting raw data. AI transforms this data, embedding it into machine learning models that can generate insights, predict behaviors and even infer new information about individuals in ways that were never intended when the data was first made public. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/ai-web-scraping-and-the-transformation-of-data-privacy-what-the-edpbs-rulings-mean-for-businesses/
-
CISOs und CIOs auf dem Weg zur Cyber-Resilienz durch Data-Governance-Strategien leiten
Data Governance ebnet den Weg für Data Resilience. Durch die Datenklassifizierung können Unternehmen Lücken in ihren Business-Continuity-Plänen aufdecken und als zusätzlichen Vorteil ihre laufenden Tagesabläufe verbessern First seen on infopoint-security.de Jump to article: www.infopoint-security.de/cisos-und-cios-auf-dem-weg-zur-cyber-resilienz-durch-data-governance-strategien-leiten/a40058/
-
French oceanographers clock up 23 years on Atempo backup software
Oceanogaphic research institute keeps Atempo backup software for near a quarter century with no plans to replace it for protection of critical data helping map the world’s oceans First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366620193/French-oceanographers-clock-up-23-years-on-Atempo-backup-software