CyberSecurity Dive
The threat group has impacted more than 500 targets worldwide and the vast majority of critical infrastructure sectors. Numerous attacks have exploited vulnerabilities in ConnectWise ScreenConnect.
Security Affairs
Finnish hacker was sentenced to more than six years in prison for hacking into an online psychotherapy clinic and attempted extortion.
Bleeping Computer
Daily newspaper Philadelphia Inquirer revealed that attackers behind a May 2023 security breach have stolen the personal and financial information of 25,549 individuals.
Krebs on Security
A 26-year-old Finnish man was sentenced to more than six years in prison today after being convicted of hacking into an online psychotherapy clinic, leaking tens of thousands of patient therapy records, and attempting to extort the clinic and patients.
DarkReading
The payment card industry pushes for more security in financial transactions to help combat increasing fraud in the region.
CSO
Absence of multi-factor authentication reportedly left a remote access application exposed.
Security Affairs
US cancer center City of Hope suffered a data breach that impacted 800,000 individuals, personal and health information was compromised.
The Cyber Express
Nations Direct Mortgage, LLC, found itself in the midst of a cybersecurity crisis in December 2023, as it grappled with
The Record
The Nevada-based lender, which operates in 35 states, said a late 2023 breach involved Social Security numbers and other data.
CyberSecurity Dive
Kroll researchers identified a new malware variant threat actors are deploying against the rapidly exploited security vulnerabilities.
SC Magazine
The attacks are deploying ToddlerShark, a new variant of a malware strain linked to the threat group.
Bleeping Computer
The North Korean APT hacking group Kimsuky is exploiting ScreenConnect flaws, particularly CVE-2024-1708 and CVE-2024-1709, to infect targets with a new malware variant dubbed ToddleShark.
The DFIR Report
Key Takeaways More information about Gootloader can be found in the following reports: The DFIR Report, GootloaderSites, Mandiant, Red Canary, & Kroll. An audio version of this report can be … Read More
Security Affairs
The Cactus ransomware gang claims the theft of 1.5TB of data from the Energy management and industrial automation firm Schneider Electric.
SC Magazine
The company said there was no evidence PII spilled outside the organization after a staff member gained unauthorized access to a file.
CyberSecurity Dive
The energy management company is still investigating the ransomware attack, which led to the theft of data.
Krebs on Security
Three Americans were charged this week with stealing more than $400 million in a November 2022 SIM-swapping attack. The U.S. government did not name the victim organization, but there is every indication that the money was stolen from the now-defunct…
CyberSecurity Dive
Cactus ransomware reportedly claimed credit for the mid-January attack, and the company unit hopes to restore operations in the next couple of days.
Security Affairs
Energy management and industrial automation firm Schneider Electric suffered a data breach after a Cactus ransomware attack
The Hacker News
Cybersecurity experts reveal the inner workings of SystemBC's command-and-control (C2) server, a dangerous malware available on the dark web.
The Cyber Express
Orrick, Herrington & Sutcliffe, a popular San Francisco-based international law firm, recently fell victim to a data leak operation that
Security Affairs
The Cactus ransomware group claims to have hacked Coop, one of the largest retail and grocery providers in Sweden.
Bleeping Computer
Risk and financial advisory company Kroll has released additional details regarding the August data breach, which exposed the personal information of FTX bankruptcy claimants.
Bleeping Computer
Mortgage servicing company LoanCare is warning 1,316,938 borrowers across the U.S. that their sensitive information was exposed in a data breach at its parent company, Fidelity National Financial.
Bleeping Computer
Panasonic Avionics Corporation, a leading supplier of in-flight communications and entertainment systems, disclosed a data breach affecting an undisclosed number of individuals after its corporate network was breached more than one year ago, in December 2022.
The Record
A subsidiary of title insurance giant Fidelity National Financial reported a data breach to state regulators this week after a cyberattack in November.
Bleeping Computer
ESO Solutions, a provider of software products for healthcare organizations and fire departments, disclosed that data belonging to 2.7 million patients has been compromised as a result of a ransomware attack.
The Record
Austin-based ESO Solutions said a ransomware attack allowed hackers to access patient health information.
DataBreaches
CBIZ KA, a third-party vendor for Prime Healthcare (Prime), discovered a security incident involving CBIZ’s use of MOVEit Transfer software, which has...
Bleeping Computer
Cactus ransomware has been exploiting critical vulnerabilities in the Qlik Sense data analytics solution to get initial access on corporate networks.
SecurityWeek
A 20-year-old Floridian was sentenced to prison for his role in a hacking scheme that led to the theft of $1 million in cryptocurrency.
Infosecurity News
The incident occurred between May 27 and 31 2023, before MOVEit Transfer vulnerability was publicly disclosed
SecurityWeek
Mixin Network suspends deposits and withdrawals after hackers steal $200 million in digital assets from its centralized database.
DataBreaches
Skye Witley reports: Internet commerce services vendor Freestyle Solutions Inc. must face a trimmed-down lawsuit alleging it misled customers about its...
DataBreaches
Haseeb Shaheen reports: In a recent turn of events, the claims portal for the globally renowned cryptocurrency exchange FTX has resumed its full-fledged...
SecurityWeek
A recently introduced Google account sync feature has been blamed after sophisticated hackers attacked 27 cryptocurrency firms via Retool.
Cyber Security News
The latest attack techniques, significant weaknesses, and exploits have all been highlighted. We also provide the most latest software upgrades available to keep your devices secure.
The Hacker News
Researchers uncover a loophole in Microsoft Entra ID app. An abandoned URL led to privilege escalation, granting hackers unauthorized access.
Bleeping Computer
PurFoods, which conducts business in the U.S. as 'Mom's Meals,' is warning of a data breach after the personal information of 1.2 million customers and employees was stolen in a ransomware attack.
DataBreaches
Brian Krebs reports: Security consulting giant Kroll disclosed today that a SIM-swapping attack against one of its employees led to the theft of user...
Cyber Security News
Kroll was informed about the Sim swapping attack that targeted a T-Mobile US., Inc. account belonging to a Kroll employee.
SecurityWeek
Three bankrupt cryptocurrency companies — FTX, BlockFi and Genesis — suffered data breaches following a SIM swapping attack at Kroll.
The Record
A data breach affecting customers of the struggling cryptocurrency platforms BlockFi, FTX and Genesis began with a SIM-swapping attack on an employee at a third-party vendor.
Security Affairs
Security consulting giant Kroll disclosed a data breach resulting from a SIM-swapping attack against one of its employees. Security consulting firm Kroll revealed that a SIM-swapping attack against one of its employees caused the theft of user information for multiple cryptocurrency platforms. Kroll is managing ongoing bankruptcy proceedings for the impacted organizations, including BlockFi, FTX, and Genesis. On August […]
The Hacker News
Kroll reveals an employee's T-Mobile account was compromised due to a sophisticated SIM swap attack.
Bleeping Computer
Multiple reports on social media warn of a data breach at financial and risk advisory company Kroll that resulted in exposing to an unauthorized third-party the personal data of some credit claimants.
The Record
A breach affecting the vendor Kroll leaked sensitive information, the bankrupt cryptocurrency giants FTX and BlockFi warned customers.
The Hacker News
New research reveals that threat actors are exploiting Cloudflare Tunnels for covert communication channels from compromised hosts.
The Hacker News
SEC just approved new rules mandating publicly traded companies to disclose cyber attacks with "material" impact on their finances within 4 days.
The Hacker News
Multiple vulnerabilities have been found in Honeywell Experion DCS and QuickBlox. If exploited, these flaws could lead to severe compromise of affecte
CyberSecurity Dive
The slow-moving disaster has ensnared some of the world's largest enterprises. Cybersecurity experts expect further damage to come.
Bleeping Computer
Ghostscript, an open-source interpreter for PostScript language and PDF files widely used in Linux, has been found vulnerable to a critical-severity remote code execution flaw.
DataBreaches
Gates Corporation in Denver describes itself as a leading manufacturer of application-specific fluid power and power transmission solutions. On July 7, its...
Bleeping Computer
The New York City Department of Education (NYC DOE) says hackers stole documents containing the sensitive personal information of up to 45,000 students from its MOVEit Transfer server.
Bleeping Computer
PBI Research Services (PBI) has suffered a data breach with three clients disclosing that the data for 4.75 million people was stolen in the recent MOVEit Transfer data-theft attacks.
Security Affairs
The U.S. government announced up to a $10 million bounty for information linking the Clop ransomware gang to a foreign government. The US goverment is offering up to a $10 million bounty for information linking CL0P Ransomware Gang or any other threat actors targeting U.S. critical infrastructure to a foreign government. The bounty is covered […]
Security Affairs
British multinational oil and gas company Shell has confirmed that it has suffered a ransomware attack conducted by the Clop group. Oil and Gas giant Shell has confirmed that it is one of the victims of the recent large-scale ransomware campaign conducted by the Clop gang exploiting a MOVEit zero-day vulnerability Threat actors are actively exploiting the zero-day vulnerability, tracked […]
Security Affairs
Progress Software addressed a third vulnerability impacting its MOVEit Transfer application that could lead to privilege escalation and information disclosure. Progress Software disclosed a new SQL injection vulnerability impacting its MOVEit Transfer application, it is the third issue fixed by the company after: “Progress has discovered a vulnerability in MOVEit Transfer that could lead to escalated privileges […]
The Hacker News
🚨 Alert: Progress Software has disclosed a 3rd critical flaw in MOVEit Transfer app—an SQL injection—allowing unauthorized access.
Bleeping Computer
Progress warned MOVEit Transfer customers to restrict all HTTP access to their environments after info on a new SQL injection (SQLi) vulnerability was shared online today.
Bleeping Computer
Horizon3 security researchers have released proof-of-concept (PoC) exploit code for a remote code execution (RCE) bug in the MOVEit Transfer managed file transfer (MFT) solution abused by the Clop ransomware gang in data theft attacks.
Security Affairs
Progress Software released security updates to fix several new SQL injection vulnerabilities in the MOVEit Transfer application. Progress Software has released security updates to address new SQL injection vulnerabilities in the MOVEit Transfer application. An attacker can exploit the SQL injection vulnerabilities in the MOVEit Transfer solution to steal sensitive information. “SQL Injection (CVE pending […]
The Hacker News
Attention all businesses using MOVEit Transfer! Progress Software has just rolled out critical patches to address new SQL injection flaws.
Bleeping Computer
The week was dominated by fallout over the MOVEit Transfer data-theft attacks, with the Clop ransomware gang confirming that they were behind them.
Bleeping Computer
Progress Software warned customers today of newly found critical SQL injection vulnerabilities in its MOVEit Transfer managed file transfer (MFT) solution that can let attackers steal information from customers' databases.
DarkReading
Over that time, the group carried multiple tests to see if the exploit worked and to identify potential victims. It was like "turning the doorknob" to check for access, a researcher says.
Security Affairs
Researchers discovered that the Clop ransomware gang was looking for a zero-day exploit in the MOVEit Transfer since 2021. Kroll security experts discovered that the Clop ransomware gang was looking for a zero-day exploit in the MOVEit Transfer since 2021. Kroll investigated the exploitation attempts for the MOVEit Transfer vulnerability and discovered that Clop threat […]
Bleeping Computer
The Clop ransomware gang has been looking for ways to exploit a now-patched zero-day in the MOVEit Transfer managed file transfer (MFT) solution since 2021, according to Kroll security experts.
Bleeping Computer
The Clop ransomware gang has been looking for ways to exploit a now-patched zero-day in the MOVEit Transfer managed file transfer (MFT) solution since 2021, according to Kroll security experts.
The Hacker News
New research reveals the Clop ransomware group has silently exploited a critical flaw in Progress Software's MOVEit Transfer since 2021.
CSO
Keep up with news of CSO, CISO, and other senior security executive appointments.
Bleeping Computer
The Cuba ransomware gang has claimed responsibility for this month's cyberattack on The Philadelphia Inquirer, which temporarily disrupted the newspaper's distribution and disrupted some business operations.
Bleeping Computer
PyPI, the official third-party registry of open source Python packages has temporarily suspended new users from signing up, and new projects from being uploaded to the platform until further notice. The unexpected move comes amid the registry's struggle to upkeep with a large influx of malicious users and packages
Bleeping Computer
The Philadelphia Inquirer daily newspaper is working on restoring systems impacted by what was described as a cyberattack that hit its network over the weekend.
Security Affairs
Researchers warn of a new ransomware family called CACTUS that exploits known vulnerabilities in VPN appliances to gain initial access to victims’ networks. Researchers from cybersecurity firm Kroll have analyzed on a new ransomware family called CACTUS that has been spotted exploiting known flaws in VPN appliances to achieve initial access to targeted networks. The […]
The Hacker News
Heads up! CACTUS, a new ransomware strain, is targeting large commercial entities by exploiting known vulnerabilities in VPN appliances.
Bleeping Computer
A new ransomware operation called Cactus has been exploiting vulnerabilities in VPN appliances for initial access to networks of "large commercial entities."
The Hacker News
DFIR via XDR: How to expedite your investigations with a DFIRent approach | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect against cyberattacks and software vulnerabilities.
Infosecurity News
New Jersey-based Genova Burns disclosed the breach in an email to customers
Bleeping Computer
Fake extortionists are piggybacking on data breaches and ransomware incidents, threatening U.S. companies with publishing or selling allegedly stolen data unless they get paid.
Security Affairs
Experts discovered a fully featured information stealer, tracked as ‘Colour-Blind’ in the Python Package Index (PyPI). Researchers from Kroll’s Cyber Threat Intelligence team discovered a malicious Python package uploaded to the Python Package Index (PyPI) that contained a fully-featured information stealer and remote access trojan tracked as Colour-Blind. Below is the list of capabilities supported […]
The Hacker News
A malicious Python package has been found on PyPI containing a fully-featured information stealer and remote access trojan.
Infosecurity News
Experts say the delay in notifying customers left data potentially open to compromise
CSO
The stolen information includes personal information of employees, including financial account information, state and federal government-issued ID numbers, driver’s license numbers, ID cards, social security numbers, and digital signatures.
Bleeping Computer
Pepsi Bottling Ventures LLC suffered a data breach caused by a network intrusion that resulted in the installation of information-stealing malware and the extraction of data from its IT systems.
The Hacker News
Vidar stealer now uses throwaway accounts on social media platforms to retrieve the address of its command-and-control servers and steal information.
DataBreaches
Connexin Software, a business associate to numerous pediatric practices, recently notified HHS that it experienced a breach that affected 2,216,365 patients...
Infosecurity News
Kroll’s Q3 2022 Threat Landscape report showed an unprecedented increase in insider threats
The Record
The “Bourbon Capital of the World” is still investigating alleged ransomware attack.
DataBreaches
Jessica Lyons Hardcastle reports: LabMD, the embattled and now defunct cancer-testing company, will get another chance at suing security firm Tiversa for...
DarkReading
External attacks focused on vulnerabilities are still the most common ways that companies are successfully attacked, according to incident data.
CyberSecurity Dive
The breach, which occurred between Dec. 3 and Dec. 4, is the second to impact the bank in less than two years.
Ars Technica
SSNDOB websites taken down by seizure orders, but no arrests have been made.
DataBreaches
The education sector has always been a relatively easy target for cybercriminals. One group in particular — Pysa — earned a reputation for its...
DarkReading
With manufacturing ranking as the fourth most targeted sector, manufacturers that understand their exposure will be able to build the necessary security maturity.
DataBreaches
Jai Vijayan reports: Threat actors doubled down on their use of phishing emails as an initial attack vector during the first quarter of 2022 — and in many...
DarkReading
For the first time in a year, security incidents involving email compromises surpassed ransomware incidents, a new analysis shows.
SecurityWeek
Nearly 40 cybersecurity-related mergers and acquisitions were announced in March 2022.
DataBreaches
GreenSlate is notifying employees of some of its clients about a breach involving a rogue Canadian employee. According to their notification template submitted...
DataBreaches
Logan Health Medical Center in Montana is notifying 213, 543 patients, employees, and business associates after discovering that files with personal and...
Loading more articles....