The water treatment plant incidents appeared to be more of a show of capability than a serious attempt to cause damage, with the Russian hackers taking videos of at least two of these incidents to boast about on Telegram.
Two successful credential stuffing attacks since the beginning of 2024 have caused Roku to now require all users to log in with 2FA. At the moment, the company only supports email 2FA.
Customers of Cisco Duo are advised to be on heightened alert for phishing and identity theft attempts, as the authentication service has revealed that a third party breach resulted in some MFA logs being stolen.
Employee targeted in the voice phishing attack received several different deepfake call attempts and at least one voicemail message, but did not respond as it’s exceedingly rare for anyone to communicate internally via WhatsApp, let alone for the CEO to randomly start peppering an employee with messages after business hours.
A Februrary attack on Change Healthcare was enough of a national disruption to prompt federal government action, and now the company is dealing with a second cyber extortion attempt that may involve some of the perpetrators from the first.
Microsoft’s security breach, which essentially gave the Chinese hackers the ability to walk into any Exchange Online email account and ended up impacting at least 500 people in high-ranking positions, would have been unthinkable at one time.
While about 7.6 million current AT&T customers are impacted by the data leak, the vast majority (65.4 million) are former customers from before the start of 2020. Aside from partial SSNs, the most worrying item in the data leak is the account passcodes.
The AI rules require federal agencies to not just conduct ongoing testing and audits, but also to make much of their internal workings transparent to the public. That will include annual inventories of AI use cases, data used to train and support models, and also code.
The antitrust lawsuit is perhaps best summed up in its characterization of Apple’s privacy and security policies as an “elastic shield” that it can selectively move when a business opportunity suits it.
A group called Tycoon is offering an MFA bypass tool, and it appears to be a popular option selling at $120 to $320 depending on the length of time the client wants to access it. This subscription also provides email templates for use in phishing attacks.