Officials from the US Treasury Department have said that the Chinese state-sponsored hackers used a stolen API key, taken from a third-party security and technical support contractor.
North Korean hackers have set another record for themselves in 2024, topping all previous campaigns with $1.34 billion of stolen crypto.
Meta has prevailed in a long-running lawsuit centered on the NSO group’s use of WhatsApp to deliver its Pegasus spyware, and the judge is not only awarding damages but has found that both state and federal hacking laws were violated.
Russian hackers have been taking passwords from the UK’s Ministry of Defence (MoD) for at least the past four years, though the campaign has been rather slow; only about 600 stolen passwords of the roughly 250,000 users of the Defence Gateway portal.
Blue Yonder, which provides supply chain software to many household name brands, went offline for an extended period due to a late November ransomware attack. Extended lack of access to the supply chain software causing customers like Starbucks assorted problems.
Leading fintech services provider Finastra has confirmed that 400 GB of stolen data offered on BreachForums is connected to a real data breach, though it is still not certain exactly how much legitimate information the hacker is offering or exactly what it consists of.
With the reveal of the T-Mobile hack, the Salt Typhoon cyber espionage campaign officially compromised all three of the “big” US mobile carriers. That is an extremely concerning level of access, particularly considering that the hackers were apparently able to maintain access for months without being spotted.
The data broker, DemandScience, has only just now confirmed it was the source of 122 million records offered for sale on BreachForums earlier in the year. However, DemandScience insists that it has not detected an internal breach and that the data must have been taken from a contractor or partner.
With a total of five million records on offer, and over half of those belonging to Amazon, the third party breach is definitely a matter of concern. However, statements from both Amazon and the hacker indicate that the stolen employee data did not contain highly sensitive information.
Very few people probably need a reminder at this point, but CISA’s annual list of the most frequently exploited vulnerabilities reinforces the importance of timely patching when zero-days are announced.