Collaborate Disseminate
Ransomware scum LockBit claims it did the dirty deed Equinox, a New York State health and human services organization, has begun notifying over 21 thousand clients and staff that cyber criminals stole their health, financial, and personal information i… Continue reading Healthcare org Equinox notifies 21K patients and staff of data theft
No word on when or if the issue will be fixed Chinese government-linked snoops are exploiting a zero-day bug in Fortinet’s Windows VPN client to steal credentials and other information, according to memory forensics outfit Volexity.… Continue reading China-linked group abuses Fortinet 0-day with post-exploit VPN-credential stealer
This malware is FREE for EVERY crook ($300 decryption keys sold separately) A Russian citizen has been extradited from South Korea to the United States to face charges related to his alleged role in the Phobos ransomware operation.… Continue reading Russian suspected Phobos ransomware admin extradited to US over $16M extortion
More than 100M rely on gear rife with vulnerabilities, says EPA OIG Nearly a third of US residents are served by drinking water systems with cybersecurity shortcomings, the Environmental Protection Agency’s Office of Inspector General found in a recent… Continue reading America’s drinking water systems have a hard-to-swallow cybersecurity problem
Amazing that these two bugs got into a production appliance, say researchers Palo Alto Networks (PAN) finally released a CVE identifier and patch for the zero-day exploit that caused such a fuss last week.… Continue reading Palo Alto Networks tackles firewall-busting zero-days with critical patches
Strategies for mitigating external access vulnerabilities and safeguarding sensitive data Webinar As organizations increasingly rely on third-party contractors, vendors, and service providers, the security risks associated with third-party access can … Continue reading Navigating third-party risks
Fastidious attacker then tidied up email trail behind them A Maryland AI company has confirmed to the Securities and Exchange Commission (SEC) that it lost $250,000 to a misdirected wire payment.… Continue reading Crook breaks into AI biz, points $250K wire payment at their own account
Get hands-on cybersecurity training this seasonal challenge Sponsored Post Are you ready to pit your wits against the cyber exercises featured in the Holiday Hack Challenge 2024: Snow-maggedon?… Continue reading Join in the festive cybersecurity fun
Security researcher’s reverse engineering effort reveals undocumented reboot timer that will make life harder for attackers Apple’s latest mobile operating system, iOS 18, appears to have added an undocumented security feature that reboots devices if t… Continue reading iOS 18 added secret and smart security feature that reboots iThings after three days
Plus: Maxar Space Systems confirms employee info stolen in digital intrusion Updated Ford Motor Company says it is looking into allegations of a data breach after attackers claimed to have stolen an internal database containing 44,000 customer records… Continue reading Ford ‘actively investigating’ after employee data allegedly parked on leak site