Up to 350,000 people at risk after Capcom ransomware attack

The video game company’s investigation into precisely how much data might have been exfiltrated from its network has been hampered by its servers being encrypted by the targeted ransomware attack, and access logs being deleted by the hackers. Continue reading Up to 350,000 people at risk after Capcom ransomware attack→

The North Face resets passwords after credential-stuffing attack

An undisclosed number of customers of outdoor clothing retailer The North Face have had their passwords reset by the company, following a credential-stuffing attack.

The company has revealed that on October 9, 2020, it became aware that hackers had … Continue reading The North Face resets passwords after credential-stuffing attack→

The North Face resets passwords after credential-stuffing attack

An undisclosed number of customers of outdoor clothing retailer The North Face have had their passwords reset by the company, following a credential-stuffing attack. The company has revealed that on October 9, 2020, it became aware that hackers had use… Continue reading The North Face resets passwords after credential-stuffing attack→

Free tools from Recorded Future that can make you a security intelligence expert

Graham Cluley Security News is sponsored this week by the folks at Recorded Future. Thanks to the great team there for their support! There has never been a better time to be a cybercriminal. From extortion ransomware to cyberespionage campaigns, malic… Continue reading Free tools from Recorded Future that can make you a security intelligence expert→

Microsoft says it’s time for you to stop using SMS and voice calls for multi-factor authentication

Microsoft says you would be better off using a smartphone authentication app or hardware security key to generate your one-time-password instead.

Read more in my article on the Hot for Security blog. Continue reading Microsoft says it’s time for you to stop using SMS and voice calls for multi-factor authentication→

Smashing Security podcast #204: Green buttons, Olympic attacks, and… an apology

There’s been a cybersecurity goof in the wake of the US presidential elections, the US fingers the hackers responsible for disrupting the Winter Olympics in South Korea, and we take a long hard look at long hard legal mumbojumbo…

All this and much… Continue reading Smashing Security podcast #204: Green buttons, Olympic attacks, and… an apology→

Millions of hotel guests worldwide have their private details exposed

A sloppy lack of security by a hotel reservation platform has left highly sensitive information about millions of people worldwide exposed.

Security experts uncovered a misconfigured AWS S3 bucket containing over 10 million files, containing informa… Continue reading Millions of hotel guests worldwide have their private details exposed→

Campari staggers to its feet following $15 million Ragnar Locker ransomware attack

Campari was targeted by hackers using the Ragnar Locker ransomware. According to some reports, the malware attack managed to encrypt data on 24 of the company’s servers around the world, and the hackers responsible have demanded a cryptocurrency ransom… Continue reading Campari staggers to its feet following $15 million Ragnar Locker ransomware attack→