The Verizon DBIR for 2023 is out, and it shows an increase in social engineering as an entry point for threat actors. Attackers would prefer to do as little hacking as possible, and the availability of stolen credentials is making that a realistic business plan.
The RaidForums database leak looks to have taken place in late September 2020, long before international law enforcement moved in on the hacking forum. Someone appears to have been sitting on this information for some time.
The biggest single target in this recent spree of cyber attacks is UK payroll provider Zellis, and the list of downstream companies that have been compromised is composed of some impressive names: British Airways, the BBC, Jaguar Land Rover, and Aer Lingus among others.
Data breach involving the Lockbit ransomware gang and a major provider of US government-subsidized medical care has resolved in about the worst way possible, with the sensitive personal information of nearly nine million patients dumped to the public.
An SDK module used to implement small casino-style mini-games in Android apps is infected with spyware, and is found in at least 101 Android apps available through the Play Store. Based on raw download and install numbers, up to 421 million could be impacted.
Report finds that Chinese hackers have been roaming through the networks of private US critical infrastructure companies for years now, often keeping their presence a secret for extended periods via the use of “living off the land” techniques.
Security exploit on the password manager allows anyone with privileged access to the system and any kind of memory dumps to locate strings that each contain one unprotected plaintext character from the master password.
It remains to be seen exactly how serious of a cyber risk these new top-level domains will be, but some system administrators are already blocking them out entirely as phishing sites emerge.
Cyber attack on the Philadelphia Inquirer kept a Sunday edition from going to print and lingering issues with newspaper operations continues to keep employees out of the paper’s offices.
When pharmaceutical giant Merck became a casualty of the far-ranging NotPetya cyber attack in June 2017, insurers had claimed that the incident was an “act of war” of the type frequently excepted from insurance claims. New Jersey court has now determined that Merck is entitled to over $1 billion in damages.