Collaborate Disseminate
Alexander Martin reports: Shares in a British automaker supplier plummeted 55% Wednesday as it warned that a cyberattack on Jaguar Land Rover (JLR) was impacting its business, adding to concerns that the incident is sending a “shockwave” through the co… Continue reading JLR ‘cyber shockwave ripping through UK industry’ as supplier share price plummets by 55%
Lawrence Abrams reports: The ShinyHunters extortion group claims to have stolen over 1.5 billion Salesforce records from 760 companies using compromised Salesloft Drift OAuth tokens. For the past year, the threat actors have been targeting Salesforce c… Continue reading ShinyHunters claims 1.5 billion Salesforce records stolen in Drift hacks
In May, Tiffany & Co. confirmed a data breach affecting an unspecified number of customers in South Korea. Tiffany is one of LVMH Moët Hennessy Louis Vuitton’s 75 high-end brands in six different sectors. On May 26, Tiffany Korea emailed sel… Continue reading Tiffany discloses data breach involving gift cards — second breach disclosure in recent months
Ax Sharma reports: Security researchers have identified at least 187 npm packages compromised in an ongoing supply chain attack, with a malicious self-propagating payload to infect other packages. The coordinated worm-style campaign dubbed ‘Shai-… Continue reading Self-propagating supply chain attack hits 187 npm packages
From Latvian Public Media: The Kurzeme Regional Court has decided to overturn the acquittal of the District Court and to find guilty an official of a state institution for disclosing confidential information and a board member of a company for inciting… Continue reading Latvian health authority official and IT company head fined for data breach
Joanna England reports: Akamai Technologies, the cybersecurity and cloud computing company that powers and protects business online, has found that bad actors are using a new quadruple extortion tactic in ransomware campaigns, while double extortion re… Continue reading Ransomware’s new frontier: Extortion attacks evolve in Asia Pacific
Mathew J. Schwartz reports: A member of the band of native English-speaking adolescent hackers lately calling itself Scattered Lapsus$ Hunters published Friday a semi-coherent screed proclaiming the collective would be “going dark.” Many cy… Continue reading Scattered Spider Tied to Fresh Attacks on Financial Services
Conor Brian Fitzpatrick, aka “Pompompurin” was re-sentenced today in federal court in Virginia. The government had sought a prison sentence of at least 188 months for the former owner of the original BreachForums, while the defense sought p… Continue reading Conor Brian Fitzpatrick Re-Sentenced: Three years in prison plus 20 years supervised release for former BreachForums owner
From Europol: A high-value cybercrime suspect has been added to the EU Most Wanted list. The individual, a Ukrainian national, is believed to be a leading figure in an organised crime network responsible for the 2019 ransomware attack against a major N… Continue reading New fugitive uploaded to EU Most Wanted list for major ransomware attacks
Wayne Jones reports: A report by the Financial Times revealed that the Securities and Exchange Commission (SEC) plans to issue crypto firms notices of technical violations before taking action. The move is a shift away from the aggressive enforcement a… Continue reading SEC to Notify Crypto Businesses of Technical Violations Before Taking Action: Report