Tag: data
-
Ivanti zero-day exploited by APT group that previously targeted Connect Secure appliances
Researchers from Google’s Mandiant division believe the critical remote code execution vulnerability patched on Wednesday by software vendor Ivanti has been exploited since mid-December by a Chinese cyberespionage group. This is the same group that has exploited zero-day vulnerabilities in Ivanti Connect Secure appliances back in January 2024 and throughout the year.The latest attacks, exploiting…
-
U.S. Medical billing provider Medusind suffered a sata breach
Medusind, a medical billing provider, disclosed a data breach that occurred in December 2023 and affected over 360,000 individuals. Medusind is a company that provides medical billing, coding, and revenue cycle management (RCM) services to healthcare organizations, including medical practices, dental practices, and other providers. The company disclosed a data breach discovered on December 29,…
-
Florida Firm Fined $337K by Feds for Data Deleted in Hack
Behavioral Health Company Lost Electronic PHI for Nearly 3,000 Patients in Breach. A Florida-based behavioral health holding company has paid federal regulators a $337,750 HIPAA settlement for a 2018 incident involving the deletion of electronic protected health information pertaining to nearly 3,000 patients. How should other entities avoid these data loss situations? First seen on…
-
Hacking Group ‘Silk Typhoon’ Linked to US Treasury Breach
The attack used a stolen remote support SaaS API key to exfiltrate data from workstations in the Treasury Department’s Office of Foreign Assets Control. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/hacking-group-silk-typhoon-linked-us-treasury-breach
-
Candy Crush, Tinder, MyFitnessPal: See the Thousands of Apps Hijacked to Spy on Your Location
A hack of location data company Gravy Analytics has revealed which apps are”, knowingly or not”, being used to collect your information behind the scenes. First seen on wired.com Jump to article: www.wired.com/story/gravy-location-data-app-leak-rtb/
-
Largest US addiction treatment provider notifies patients of data breach
BayMark Health Services, North America’s largest provider of substance use disorder (SUD) treatment and recovery services, is notifying an undisclosed number of patients that attackers stole their personal and health information in a September 2024 breach. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/largest-us-addiction-treatment-provider-notifies-patients-of-data-breach/
-
Unsecured Amazon S3 Bucket Exposes WebWork Data
Tags: dataFirst seen on scworld.com Jump to article: www.scworld.com/brief/unsecured-amazon-s3-bucket-exposes-webwork-data
-
Breach Roundup: Finland Detains Tanker Tied to Cable Sabotage
Also, Alleged Gravy Analytics Breach Exposes Location Data. This week, a Russian tanker linked to cable sabotage detained in Finland, a claimed Gravy Analytics breach exposed location data, a Mirai-based botnet exploited zero-day flaws, Dell updated framework flaws and a court sentenced a Florida woman for laundering millions in romance scams. First seen on govinfosecurity.com…
-
New Mirai botnet targets industrial routers
Tags: access, attack, botnet, cctv, china, credentials, cve, cybercrime, data, ddos, exploit, germany, network, password, remote-code-execution, router, russia, update, vulnerability, zero-dayAccording to security analysis, the Gayfemboy botnet, based on the notorious Mirai malware, is currently spreading around the world. Researchers from Chainxin X Lab found that cybercriminals have been using the botnet since November 2024 to attack previously unknown vulnerabilities. The botnet’s preferred targets include Four-Faith and Neterbit routers or smart home devices.Experts from VulnCheck reported at the end of…
-
Randall Munroe’s XKCD ‘Features of Adulthood’
Tags: datavia the comic humor & dry wit of Randall Munroe, creator of XKCD Permalink First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2025/01/randall-munroes-xkcd-features-of-adulthood/
-
Harnessing AI for Proactive Threat Intelligence and Advanced Cyber Defense
Discover how AI revolutionizes cybersecurity with real-time threat detection, adaptive protection, and advanced data protection to combat evolving… First seen on hackread.com Jump to article: hackread.com/harnessing-ai-proactive-threat-intelligence-cyber-defense/
-
PowerSchool says hackers stole students’ sensitive data, including Social Security numbers, in data breach
In an FAQ obtained by TechCrunch, PowerSchool confirms it negotiated with the threat actors responsible for the breach. First seen on techcrunch.com Jump to article: techcrunch.com/2025/01/09/powerschool-says-hackers-stole-students-sensitive-data-including-social-security-numbers-in-data-breach/
-
Ukrainian Cyber Alliance destroyed the connectivity of Russian ISP Nodex
A group of hacktivists, known as the Ukrainian Cyber Alliance, breached Russian ISP Nodex, stole sensitive documents, and wiped systems. Ukrainian Cyber Alliance hacked Russian ISP Nodex, stole sensitive data, and wiped systems, highlighting their cyberattack capabilities. The Ukrainian Cyber Alliance has been active since 2016, the Pro-Ukraine group has targeted Russian entities since the…
-
PowerSchool Reportedly Pays Ransom to Prevent Student Data Leak
A school district said that PowerSchool paid a ransom to prevent the attackers releasing data it accessed of students and teachers in North America First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/powerschool-pays-ransom-data-leak/
-
India Readies Overhauled National Data Privacy Rules
The country awaits implementation guidelines for a framework that gives Indians greater autonomy and security over their personal data, and recognizes a right to personal privacy. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/india-overhauled-national-data-privacy-rules
-
Medical Billing Firm Medusind Says Data Breach Impacts 360,000 People
Medical billing solutions provider Medusind has revealed that a data breach discovered in December 2023 impacts over 360,000 individuals. The post Medical Billing Firm Medusind Says Data Breach Impacts 360,000 People appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/medical-billing-firm-medusind-says-data-breach-impacts-360000-people/
-
Meet, Learn, Dominate: 10 Cybersecurity Conferences You Need to Be At in 2025
What makes a cybersecurity professional stand out in today’s rapidly evolving digital landscape? Is it their technical prowess, their ability to anticipate threats or their knack for staying ahead of the curve? The answer lies in all three”, and one of the best ways to achieve this is by attending industry-leading cybersecurity conferences. These aren’t…
-
The ‘Worst in Show’ CES Products Put Your Data at Risk and Cause Waste, Privacy Advocates Say
Some of the innovative products presented at CES can pose a serious risk to data and privacy. The post The ‘Worst in Show’ CES Products Put Your Data at Risk and Cause Waste, Privacy Advocates Say appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/the-worst-in-show-ces-products-put-your-data-at-risk-and-cause-waste-privacy-advocates-say/
-
APT32 Hacker Group Attacking Cybersecurity Professionals Poisoning GitHub
The malicious Southeast Asian APT group known as OceanLotus (APT32) has been implicated in a sophisticated attack that compromises the privacy of cybersecurity professionals. A recent investigation by the ThreatBook Research and Response Team revealed that a popular privilege escalation tool utilized by cybersecurity experts had been backdoored, leading to significant data breaches and identity…
-
EU Commission Liable for Breaching EU’s Own Data Protection Rules
Tags: dataA court has ruled the EU Commission infringed an individual’s right to the protection of their personal data by transferring their details to the US First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/eu-commission-liable-data/
-
Excelsior Orthopaedics Data Breach Impacts 357,000 People
Excelsior Orthopaedics says the information of roughly 357,000 patients and employees was stolen in a June 2024 data breach. The post Excelsior Orthopaedics Data Breach Impacts 357,000 People appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/excelsior-orthopaedics-data-breach-impacts-357000-people/
-
Webinar: Learn How to Stop Encrypted Attacks Before They Cost You Millions
Ransomware isn’t slowing down”, it’s getting smarter. Encryption, designed to keep our online lives secure, is now being weaponized by cybercriminals to hide malware, steal data, and avoid detection.The result? A 10.3% surge in encrypted attacks over the past year and some of the most shocking ransom payouts in history, including a $75 million ransom…
-
New Great Morpheus Hacker Group Claims Hacking Into Arrotex Pharmaceuticals And PUS GmbH
A Data Leak Site (DLS) belonging to a new extortion group named Morpheus, which has stolen data from Arrotex Pharmaceuticals (Australia) on December 12th and PUS GmbH (Germany) on December 20th. Morpheus offers stolen data for sale on the DLS, requiring buyers to create accounts. While a researcher suggests a link to Hellcat ransomware, there…
-
Green Bay Packers Store Hacked Thousands of Credit Cards Data Stolen
The Green Bay Packers, Inc. has confirmed that its online merchandise store was hacked, leading to the theft of credit card data from over 8,500 customers. The incident, which occurred on September 23, 2024, was discovered nearly three months later on December 20, 2024. An official notification was sent to affected individuals on January 6,…
-
Green Bay Packers Pro Shop Data Breach Compromises Customers
The Green Bay Packers disclosed on Monday that their official online store was breached and customer information stolen First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/green-bay-packers-shop-data-breach/