The perpetrator of a recent attack on Microsoft also seems to have been behind a December security breach of Hewlett Packard Enterprise (HPE), the second time it hit the company in the space of a year.
The new MOAB is by far the largest COMB or “combo file” spans some 26 billion records in total and seems to include nearly all of the big data leaks of the past decade and beyond.
While a break-in by a group of Russian state sponsored hackers might initially seem understandable, the Microsoft security breach was eventually traced back to a simple password spray on a legacy test account with some questionable permissions.
Dataset contains some 24 million email addresses that security researchers say were not previously logged by Have I Been Pwned, and many of the leaked credentials are accompanied by plaintext passwords.
Crypto drainers in an “as a service” model burst onto the scene in 2022, but 2023 was the year that they ascended to “major threat” status. Inferno malware is thus far the most successful example in terms of victim count (about 130,000) and stolen assets (about $87 million worth).
AI models rely heavily on huge troves of data to train, and according to NIST that presents a serious challenge for the industry that has no easy solutions. The NIST paper goes into impressive detail about all of the cyber threats that can be anticipated at this point, and should be required reading for AI developers.
Hackers broke into the SEC’s X account to issue a fake announcement that Bitcoin ETF has been approved, luring major crypto exchanges (and even major news outlets) into signal-boosting the fake news.
The operation is thought to have begun in March of last year, and the Russian hackers likely had access from May, but wide-ranging access to the telecoms provider’s full network was established by November.
23andMe seems committed to “it’s the customer’s fault” as their means of legal defense in the data breach suit, no matter how legally viable it might be or how much PR damage it might do. It will be interesting to see if the company actually improves its position.
Russia is hacking residential cameras that can be redirected to look over targets of interest, such as air defense and power systems. Ukraine officials have already ordered about 10,000 of these cameras blocked from the internet, and it is asking anyone with a surveillance camera that could potentially film a target of interest to disconnect it.