Microsoft’s security breach, which essentially gave the Chinese hackers the ability to walk into any Exchange Online email account and ended up impacting at least 500 people in high-ranking positions, would have been unthinkable at one time.
While about 7.6 million current AT&T customers are impacted by the data leak, the vast majority (65.4 million) are former customers from before the start of 2020. Aside from partial SSNs, the most worrying item in the data leak is the account passcodes.
The AI rules require federal agencies to not just conduct ongoing testing and audits, but also to make much of their internal workings transparent to the public. That will include annual inventories of AI use cases, data used to train and support models, and also code.
The antitrust lawsuit is perhaps best summed up in its characterization of Apple’s privacy and security policies as an “elastic shield” that it can selectively move when a business opportunity suits it.
A group called Tycoon is offering an MFA bypass tool, and it appears to be a popular option selling at $120 to $320 depending on the length of time the client wants to access it. This subscription also provides email templates for use in phishing attacks.
Both the US and UK slapped sanctions on a company called Wuhan Xiaoruizhi Science and Technology that is believed to be a front for Chinese cyber attacks. The US accused APT31 of a decade-long cyber espionage campaign.
Attacker can initiate an essentially endless error message string against a target that will eventually result in a DoS attack consuming all available resources. The study’s authors believe that there are about 300,000 vulnerable systems.
The researchers have been tracking the Chinese APT group’s activity for about two years, and in that time have confirmed at least 70 victims in 23 countries. 48 of these have been government organizations.
The Biden administration’s proposed cybersecurity budget for 2025 would increase spending by over $1 billion, but it is presently queued up behind the ongoing unresolved debate over 2024’s spending.
A massive data breach involving France’s national unemployment agency is thought to impact 43 million people, dating back through 20 years of records of those seeking employment assistance and benefits.