With the reveal of the T-Mobile hack, the Salt Typhoon cyber espionage campaign officially compromised all three of the “big” US mobile carriers. That is an extremely concerning level of access, particularly considering that the hackers were apparently able to maintain access for months without being spotted.
The data broker, DemandScience, has only just now confirmed it was the source of 122 million records offered for sale on BreachForums earlier in the year. However, DemandScience insists that it has not detected an internal breach and that the data must have been taken from a contractor or partner.
With a total of five million records on offer, and over half of those belonging to Amazon, the third party breach is definitely a matter of concern. However, statements from both Amazon and the hacker indicate that the stolen employee data did not contain highly sensitive information.
Very few people probably need a reminder at this point, but CISA’s annual list of the most frequently exploited vulnerabilities reinforces the importance of timely patching when zero-days are announced.
Hackers are using the DocuSign APIs to forge authentic-looking fake invoices for payment backed by the trusted “docusign.net” domain. The term “hacking” is used loosely here as it is something that any paying customer with Envelopes API access could do.
Recent campaign called “EmeraldWhale” snapped up over 15,000 stolen credentials simply by mass scanning for errant web configurations exposing Git config files to the public.
Thus far officials are being tight-lipped about the campaign of the Chinese hackers and any phone data they might have accessed, which points to something potentially being stolen. As to what is anyone’s guess.
Delta has been threatening to sue CrowdStrike over the July flight disruptions that caused mass chaos for travelers, and both parties have now filed papers against each other. CrowdStrike pins the extended IT outage primarily on Delta’s “antiquated” systems.
Canada Revenue Agency (CRA) has admitted that it has been undercounting fake tax refunds it has paid out for at least several years now, and what appeared to be tens of incidents per year has actually been tens of thousands.
Some of the national security memo is an exhortation to Congress to authorize funding for projects seen as vital to keeping up with China in these areas. But federal agencies can be expected to immediately pick up the pace in integrating AI and recruiting talent, and both protections and new risk guidelines will be coming soon.