Krebs on Security

JANUARY 11, 2022

By all accounts, the most severe flaw addressed today is CVE-2022-21907, a critical, remote code execution flaw in the “ HTTP Protocol Stack.” ” Microsoft says the flaw affects Windows 10 and Windows 11 , as well as Server 2019 and Server 2022. “Test and deploy this patch quickly.” ” Quickly indeed.

Libraries 281

Libraries Security Access IT 281

Data Breach Today

MAY 24, 2024

Telecom Company Also Faces OAIC Investigation and Potentially Millions in Fines The Australian Communications and Media Authority says it has filed proceedings against Optus in a federal court as the company failed to protect sensitive customer data during a data breach in September 2022.

Data breaches 278

Data breaches Communications IT 278

Krebs on Security

FEBRUARY 28, 2023

Image: Shutterstock.com Three different cybercriminal groups claimed access to internal networks at communications giant T-Mobile in more than 100 separate incidents throughout 2022, new data suggests. But by the time we got to claims made in the middle of May 2022, completing the rest of the year’s timeline seemed unnecessary.

Phishing 346

Phishing Authentication Access Security 346

Krebs on Security

JUNE 15, 2022

On top of the critical heap this month is CVE-2022-30190 , a vulnerability in the Microsoft Support Diagnostics Tool (MSDT), a service built into Windows. Beaumont said other researchers on April 12, 2022 told Microsoft about active exploitation of the MSDT flaw, but Microsoft closed the ticket saying it wasn’t a security issue.

Cloud 275

Cloud Security IT Cybersecurity 275

Data Breach Today

MAY 31, 2022

The Majority of Incidents Entailed Malware Distribution, Phishing and Intrusion Attempts Three months after Russia’s ongoing invasion of Ukraine began, the country takes a look back at the turbulence the nation has faced in its cyber sphere during Q1 2022, and considers the way ahead.

Phishing 289

Phishing IT 289

Data Breach Today

DECEMBER 28, 2022

Russia Continued Its Cyber Offensive With an Average of 10 Cyberattacks a Day Ukraine's domestic intelligence agency revealed this week that it successfully blocked more than 4,500 cyberattacks in 2022.

IT 277

IT 277

Krebs on Security

MARCH 14, 2023

The government alleges that on May 7, 2022, Singh used stolen credentials to log into a U.S. On May 12, 2022, KrebsOnSecurity broke the news that hackers had gained access to a DEA portal that taps into 16 different federal law enforcement databases. .” federal government portal without authorization. ” Image: USDOJ.

Government 289

Government Communications Access Security 289

Data Breach Today

OCTOBER 25, 2023

Remi Thomas to Become Interim CEO After Joining Proofpoint as CFO in February 2023 Proofpoint will have its third CEO since March 2022 after tapping recently-hired CFO Remi Thomas to become its interim top leader.

Cybersecurity 275

Cybersecurity IT 275

Data Breach Today

MAY 18, 2022

30, 2022. EDR Deployments Will be Underway at More Than Half of Federal Agencies This Year EDR deployments will be underway at more than half of federal civilian agencies by the end of September, according to federal officials.

276

276

Data Breach Today

JANUARY 13, 2023

Massachusetts Citizens Excluded From Feds' Case Against Shields Health Care Group Shields Health Care Group, a Massachusetts-based medical imaging services provider, is facing two class action lawsuits filed this week - a consolidated federal case and a similar, separate case filed in state court - both in the wake of the same 2022 data breach affecting (..)

Data breaches 256

Data breaches 256

Data Breach Today

JUNE 21, 2024

Hackers Exploited Coding Error, Says Australian Communications and Media Authority Hackers behind the leak of 10 million records from Australia's second-largest telecommunications carrier Optus exploited a vulnerability the company unwittingly inserted four years earlier into a web portal access control, said the Australian Communications and Media (..)

Data breaches 290

Data breaches Communications Access 290

Data Breach Today

MARCH 20, 2024

Among Those Leaving Is Zohar Alon, Who Was Hired in 2023 to Spearhead Product, R&D Cybereason is carrying out its third round of layoffs in 21 months, with dozens of senior employees expected to be let go, Among the exiting employees is Zohar Alon, the longtime Dome9 Security leader whCybereason is carrying out its third round of layoffs in 21 months, (..)

IT 288

IT Security 288

Data Breach Today

MARCH 13, 2024

Data Security Startup Cyera Seeks to Raise $150M to $200M at a Valuation of $1.55B Cyera is raising between $150 million and $200 million in a new funding round that would value the Silicon Valley-based data security startup at as much as $1.55

Cybersecurity 275

Cybersecurity IT Security 275

Data Breach Today

MAY 29, 2021

2022 Budget Proposal Seeks $750 Million for 'Lessons Learned' From SolarWinds The White House officially released its 2022 federal budget proposal on Friday, and the Biden administration is seeking to spend billions on cybersecurity next year, including $750 million for "lessons learned" from the SolarWinds attack.

Cybersecurity 347

Cybersecurity IT 347

Krebs on Security

JUNE 15, 2024

. — and charged him with stealing at least $800,000 from five victims between August 2022 and March 2023. Urban allegedly went by the nicknames “ Sosa ” and “ King Bob, ” and is believed to be part of the same crew that hacked Twilio and a slew of other companies in 2022.

Phishing 311

Phishing Passwords Authentication Encryption 311

Data Breach Today

SEPTEMBER 19, 2021

He is now facing a statutory maximum sentence of 35 years in federal prison when sentenced in January 2022. Matthew Gatrel Offered Subscription-Based Computer Attack Platforms An Illinois man has been found guilty of running subscription-based distributed denial of service attacks that enabled customers to launch DDoS strikes of their own.

354

354

Data Breach Today

FEBRUARY 22, 2023

US, India and East Asia Were Top Targets in 2022, Microsoft Report Says In a new report, tech giant Microsoft says distributed denial-of-service attacks became shorter in duration but more potent in 2022.

IoT 290

IoT 290

Data Breach Today

FEBRUARY 16, 2024

Mark Sokolovsky Has Fought Extradition From the Netherlands Since March 2022 Arrest A Dutch court extradited a Ukrainian national to the United States, where he faces criminal charges related to his role in the malware-as-a-service Raccoon Stealer.

260

260

Krebs on Security

JANUARY 30, 2024

technology companies during the summer of 2022. stole at least $800,000 from at least five victims between August 2022 and March 2023. 2022 that an intrusion had exposed a “limited number” of Twilio customer accounts through a sophisticated social engineering attack designed to steal employee credentials.

Passwords 340

Passwords Phishing Access Encryption 340

Data Breach Today

JANUARY 25, 2024

Lee, COO of the group, explained why the number of compromises grew so dramatically - from 1,801 incidents in 2022 to 3,205 in 2023. Lee Calls for Uniform Breach Reporting Supply chain attacks and zero-day exploits surged in 2023, helping to set yet another record for data breaches tracked by the Identity Theft Resource Center.

Data breaches 311

Data breaches 311

Data Breach Today

OCTOBER 3, 2024

CorrectCare to Settle Lawsuit After 'Inadvertently' Exposing PHI on Web for Months A misconfigured web server and the exposure of sensitive information for nearly 600,000 prison inmates in 2022 will cost medical claims processing company CorrectCare $6.49

299

299

Data Breach Today

FEBRUARY 14, 2023

The Tonto Team Used Spear-Phishing Emails to Target Group-IB Employees Group-IB says a July 2022 spear-phishing attempt on its own employees came from the Chinese threat actor known variously as Tonto Team and CactusPete. Tonto Team may be a unit of China's People's Liberation Army.

Phishing 334

Phishing Government IT 334

Data Breach Today

JANUARY 18, 2024

Coldriver' Has Been Sending Backdoors Embedded in PDFs Since November 2022 A Russian domestic intelligence agency hacking group known for long-lasting logon credential phishing campaigns against Western targets is now deploying malware embedded into PDFs, say security researchers from Google.

Phishing 296

Phishing Security 296

Data Breach Today

OCTOBER 7, 2024

Dutch authorities extradited him in February after arresting him in March 2022. Federal Court A Ukrainian national pleaded guilty Monday in U.S. federal court to one count of conspiracy to commit computer intrusion in connection with his role in the malware-as-a-service Raccoon info stealer criminal operation.

298

298

Data Breach Today

MAY 27, 2024

Class Action Law Firms Seek Access to Commissioned Deloitte Report Into Mega-Breach The Federal Court of Australia has rejected a request from telecommunications giant Optus to keep private a detailed digital forensic investigation report conducted by Deloitte into the massive data breach it suffered in 2022, exposing private information pertaining (..)

Data breaches 296

Data breaches Access IT 296

Data Breach Today

MARCH 27, 2024

In 2023, 97 new zero-days came to light, up from 62 in 2022.

296

296

Krebs on Security

JANUARY 25, 2023

23, 2022, KrebsOnSecurity alerted big-three consumer credit reporting bureau Experian that identity thieves had worked out how to bypass its security and access any consumer’s full credit report — armed with nothing more than a person’s name, address, date of birth, and Social Security number. 9, 2022 and Dec.

Mining 331

Mining Paper Access Security 331

Data Breach Today

FEBRUARY 15, 2024

Pediatric Tech Vendor Hit by 2022 Data Breach Affecting 3 Million - Mostly Children An electronic health record and practice management software firm says the only way to avoid bankruptcy from the consolidation of nine proposed class action lawsuits filed in the wake of a 2022 data breach is to settle the case for $4 million.

Data breaches 241

Data breaches 241

Data Breach Today

AUGUST 10, 2022

An ISMG Overview of the Technology Buzz Leading Up to Black Hat Conference 2022 ISMG caught up with 11 security executives in Las Vegas on Tuesday to discuss everything from open-source intelligence and Web3 security to training new security analysts and responding to directory attacks.

Security 320

Security 320

Data Breach Today

JUNE 17, 2022

The State of Passwordless in 2022, New Identity Technologies In the latest weekly update, Jeremy Grant, coordinator of the Better Identity Coalition, joins three editors at ISMG to discuss important cybersecurity issues, including where we are with passwordless, if we are getting closer to a U.S.

Privacy 316

Privacy Authentication Cybersecurity 316