The UK Information Commissioner’s Office (ICO) has fined Advanced Computer Software Group Ltd £3.07 million over a 2022 ransomware attack that exposed the sensitive personal data of 79,404 people, including National Health Service (NHS) patients. […] Go to Source Author: Bill Toulas
Category Archives: Security
Despite Oracle denying a breach of its Oracle Cloud federated SSO login servers and the theft of account data for 6 million people, BleepingComputer has confirmed with multiple companies that associated data samples shared by the threat actor are valid. […] Go to Source Author: Lawrence Abrams
Cloud-based streaming company StreamElements confirms it suffered a data breach at a third-party service provider after a threat actor leaked samples of stolen data on a hacking forum. […] Go to Source Author: Bill Toulas
A new cybercrime platform named ‘Atlantis AIO’ provides an automated credential stuffing service against 140 online platforms, including email services, e-commerce sites, banks, and VPNs. […] Go to Source Author: Bill Toulas
230M stolen passwords met complexity requirements—and were still compromised. Passwords aren’t going away for now, but there are new technologies that may increasingly replace them. Learn more from Specops Software about how to protect your passwords. […] Go to Source Author: Sponsored by Specops Software
A threat actor named ‘RedCurl,’ known for stealthy corporate espionage operations since 2018, is now using a ransomware encryptor designed to target Hyper-V virtual machines. […] Go to Source Author: Bill Toulas
Two malicious packages were discovered on npm (Node package manager) that covertly patch legitimate, locally installed packages to inject a persistent reverse shell backdoor. […] Go to Source Author: Bill Toulas
Google has fixed a high-severity Chrome zero-day vulnerability exploited to escape the browser’s sandbox and deploy malware in espionage attacks targeting Russian organizations. […] Go to Source Author: Sergiu Gatlan
CrushFTP warned customers of an unauthenticated HTTP(S) port access vulnerability and urged them to patch their servers immediately. […] Go to Source Author: Sergiu Gatlan
Cloudflare has announced that its R2 object storage and dependent services experienced an outage lasting 1 hour and 7 minutes, causing 100% write and 35% read failures globally. […] Go to Source Author: Bill Toulas