Cl0p ransomware gang has indicated that this is only the first “batch” and that it has even more victims to menace in the coming weeks. The victims range across all types of both private sector and public operations, everything from state and federal government agencies to oil giant Shell.
The newly discovered firmware backdoor impacts most of the Gigabyte motherboards that are currently on the market, with at least 271 models listed by security researchers.
Bad news continues to pile up for investment research firm Zacks as new reporting from the Have I Been Pwned website indicates the company was unaware of a massive data breach that began in 2021 and compromised over 8.8 million customer records.
The Verizon DBIR for 2023 is out, and it shows an increase in social engineering as an entry point for threat actors. Attackers would prefer to do as little hacking as possible, and the availability of stolen credentials is making that a realistic business plan.
The RaidForums database leak looks to have taken place in late September 2020, long before international law enforcement moved in on the hacking forum. Someone appears to have been sitting on this information for some time.
The biggest single target in this recent spree of cyber attacks is UK payroll provider Zellis, and the list of downstream companies that have been compromised is composed of some impressive names: British Airways, the BBC, Jaguar Land Rover, and Aer Lingus among others.
Data breach involving the Lockbit ransomware gang and a major provider of US government-subsidized medical care has resolved in about the worst way possible, with the sensitive personal information of nearly nine million patients dumped to the public.
An SDK module used to implement small casino-style mini-games in Android apps is infected with spyware, and is found in at least 101 Android apps available through the Play Store. Based on raw download and install numbers, up to 421 million could be impacted.
Report finds that Chinese hackers have been roaming through the networks of private US critical infrastructure companies for years now, often keeping their presence a secret for extended periods via the use of “living off the land” techniques.
Security exploit on the password manager allows anyone with privileged access to the system and any kind of memory dumps to locate strings that each contain one unprotected plaintext character from the master password.