Collaborate Disseminate
Zack Whittaker reports: A security vulnerability in a stealthy Android spyware operation called Catwatchful has exposed thousands of its customers, including its administrator. The bug, which was discovered by security researcher Eric Daigle, spilled t… Continue reading Data breach reveals Catwatchful ‘stalkerware’ is spying on thousands of phones
Lawrence Abrams reports: An ex-ransomware negotiator is under criminal investigation by the Department of Justice for allegedly working with ransomware gangs to profit from extortion payment deals. The suspect is a former employee of DigitalMint, a Chi… Continue reading DOJ investigates ex-ransomware negotiator over extortion kickbacks
Ravie Lakshmanan reports: Cybersecurity researchers are calling attention to phishing campaigns that impersonate popular brands and trick targets into calling phone numbers operated by threat actors. “A significant portion of email threats with P… Continue reading Hackers Using PDFs to Impersonate Microsoft, DocuSign, and More in Callback Phishing Campaigns
Caroline Byrne writes: One in five U.S. law firms were targeted in a cyberattack in the past year and nearly one in 10 lost data or suffered exposure, according to a comprehensive study by a Swiss tech company. The numbers, which demonstrate the extent… Continue reading One in Five Law Firms Hit by Cyberattacks Over Past 12 Months
Ravie Lakshmanan reports: The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has levied sanctions against Russia-based bulletproof hosting (BPH) service provider Aeza Group to assist threat actors in their malicious act… Continue reading U.S. Sanctions Russian Bulletproof Hosting Provider for Supporting Cybercriminals Behind Ransomware
Brian Krebs reports: Agents with the Federal Bureau of Investigation (FBI) briefed Capitol Hill staff recently on hardening the security of their mobile devices, after a contacts list stolen from the personal phone of the White House Chief of Staff Sus… Continue reading Senator Chides FBI for Weak Advice on Mobile Security
Connor Jones reports: Security experts have uncovered a hole in Cl0p’s data exfiltration tool that could potentially leave the cybercrime group vulnerable to attack. The vulnerability in the Python-based software, which was used in the 2023-2024 … Continue reading Cl0p cybercrime gang’s data exfiltration tool found vulnerable to RCE attacks
Bill Toulas reports: Kelly & Associates Insurance Group (dba Kelly Benefits) is informing more than half a million people of a data breach that compromised their personal information. The Maryland-based health and life insurance agency has issued a… Continue reading Kelly Benefits updates its 2024 data breach report: impacts 550,000 customers
Vanessa Brown reports: Qantas has confirmed that six million customers could be impacted by a mammoth cyber incident at one of the airline’s contact centres, impacting personal data. The concerning incident was detected by the national carrier on Monda… Continue reading Qantas customers involved in mammoth data breach
The Centers for Medicare & Medicaid Services (CMS) has been busy issuing notices about breaches this week. First, it warned providers about a fraud scheme involving medical records requests. Now it is notifying Medicare beneficiaries whose informat… Continue reading CMS Sending Letters to 103,000 Medicare beneficiaries whose info was involved in a Medicare.gov breach.