Collaborate Disseminate
In 2022, DataBreaches wondered whether a group with no name might be the most successful group we had never heard about. Our impression that the group was unique was somewhat confirmed in 2024, when it walked away from a ransom offer of $1.8 million. … Continue reading Silent Ransom Group (SRG): Uncovering DNS Fast Flux Infrastructure
Tiffany Wang reports: IBM and AT&T lacked basic security controls and hid nation-state hacking breaches from the government, a former IBM threat intelligence official alleged in a newly unsealed lawsuit. Former IBM Vice President of Threat Intellig… Continue reading Ex-Threat Intel Exec Accuses IBM and AT&T of Hiding Hacks
DataBreaches recently recommended an article by Alberto Daniel Hill about digital security in Argentina, Uruguay, and Mexico. In describing his article, DataBreaches reported: In one section of his report, Hill calls out a company for allegedly manufac… Continue reading Was “ExPresidents” a real hacker or a fabricated account?
This is what incident response and accountability should look like in the U.S., too, but almost never does. The Chosun Daily reports: OTT platform Tving, TVING, has faced controversy over leaking members’ personal information, with its represent… Continue reading KR: Tving CEO Apologizes for Unprecedented Data Leak
Steve Zurier reports: The Cloud Security Alliance (CSA) found that 80% of organizations that miss the 24-hour patch window report security incidents involving known vulnerabilities. CSA’s study, released June 2, also found that even pre-production cont… Continue reading Most organizations that miss 24-hour patch window report breaches
Jacob Goldberg and Irwin Loy report: A cyber-attack targeting the World Food Programme has exposed sensitive personal information belonging to some 600,000 households in Gaza, the UN’s food agency has confirmed, in what may be the largest-known breach … Continue reading Data of 600,000 Gaza households exposed in World Food Programme cyberattack
Jason Koebler reports: Hackers say that they used Meta’s AI support chatbot to break into a host of high-profile Instagram profiles by asking the support bot to change the email address associated with the target account. The claims coincide with a ser… Continue reading Hackers Simply Asked Meta AI to Give Them Access to High-Profile Instagram Accounts. It Worked
Alberto Daniel Hill’s report is a must-read for anyone who wants to begin to understand what is going on in Argentina, Uruguay, and Mexico with respect to digital security. One of the many limitations of being a solo blogger is that there are ent… Continue reading Alberto Daniel Hill’s Cybermidnight Coverage of the Latin American Digital Sovereignty Crisis (March–June 2026)
The Bombay High Court granted interim relief to HDFC AMC after a ransomware group called “Morpheus” allegedly stole over 680 GB of sensitive company and investor data. The court barred unidentified hackers from publishing or sharing the information, wa… Continue reading Bombay High Court Issues Injunction Prohibiting Hackers From Publishing Allegedly Hacked HDFC Investor Data
Microsoft is ticking off a lot of researchers this week by claiming that those who dump proof-of-concept exploits for vulnerabilities they have not responsibly disclosed are enabling criminal activity, and that Microsoft will track them and bring cases… Continue reading Microsoft’s incident response is getting a failing grade from researchers