Cyber Security
News
Roku Data Breached: 15,000 Roku Accounts Sold for Only 50¢ Each on Dark Web
Roku Data Breach has resulted in more than 15,000 Roku accounts sold at a mere 50¢ price. Analysts say there ...
News
Acer Data Breached: Acer Philippines Employee Data Leaked on a Hacking Forum
Acer Philippines has officially confirmed a huge employee data leak. The breach occurred through a third-party vendor responsible for managing ...
News
Stanford Ransomware Attack: Data of 27,000 People Stolen Allegedly by Akira Ransomware
Stanford University has reported a Ransomware attack involving its Department of Public Safety (SUDPS) network. As a result of the ...
Security Spotlight
Hackers Abuse WordPress Plugin Flaw (CVE-2023-6000) to Infect 3,300 Websites
Hackers are compromising WordPress sites by taking advantage of a WordPress plugin flaw found in outdated versions of the Popup ...
Ransomware
Equilend Data Stolen in a Ransomware Attack, Equiland Warns Employees
EquiLend Holdings, a securities lending platform based in New York, has confirmed in Equilend data breach notification letters that employee ...
Security Spotlight
New DoNex Ransomware Targets Enterprises in the Wild
Organizations in the United States and Europe are facing a significant threat from a new strain of the “DoNex ransomware.” ...
Security Spotlight
Microsoft Says Russian Hackers “Midnight Blizzard” AKA ‘Nobelium’ Stole Source Code in Cyberespionage
Microsoft recently announced that it had discovered a cyber attack conducted by Russian hackers group called “Midnight Blizzard” AKA ‘Nobelium’. ...
Security Spotlight
Magnet Goblin Hackers Exploit 1-day Vulnerabilities to Deploy NerbianRAT Linux Malware
The Magnet Goblin hackers, driven by financial motives, use 1-day vulnerabilities to breach servers and install custom Linux malware NerbianRAT ...
Ransomware
Play Ransomware Leaked 65,000 Stolen Swiss Government Documents
The National Cybersecurity Centre (NCSC) of Switzerland recently published a report detailing their analysis of a data breach that occurred ...
News
This Week in Cybersecurity – 4th March to 8th March UnitedHealth Cyberattack Fallout Stretches Beyond Class Action Lawsuits
UnitedHealth Cyberattack Results in Class Action Lawsuits, Change Healthcare Makes a $22 Million Ransom Payment, Houser LLP and Epic Games ...
News
UnitedHealth Cyberattack is ‘A Mess’, Ongoing Fallout Poses Threat to Financial Health of Medical Providers
Impact of UnitedHealth Cyberattack on Healthcare Providers Medical providers in Minnesota are describing the aftermath of the UnitedHealth Cyberattack as ...
News
AlphV Received a $22 Million Payment After Change Healthcare Ransomware Attack, the Second Largest Ransom Payment!
Evidence on the Bitcoin blockchain indicates that Change Healthcare, the victim of a significant may have made a substantial payment. ...
Security Spotlight
American Express Data Breach 2024: Credit Card Data and Personal Information of Customers Compromised
UPDATE 3/4/24: American Express clarified that it was a merchant processor who was hacked and not one of their service ...
Ransomware
City of Hamilton Hit by Ransomware Attack
Hamilton ransomware attack has significantly disrupted city services for more than a week. During a virtual call on Monday afternoon, ...
Security Spotlight
Class Action Lawsuits Follow Houser LLP Data Breach
Houser LLP, a business litigation law firm, is facing a class action lawsuit in California federal court. The lawsuit alleges ...
Cybersecurity
Ukraine Claims Russian Defense Ministry Hacked by GUR
According to an official press release on a Ukrainian government domain, the Main Intelligence Directorate (GUR) of Ukraine’s Ministry of ...
Ransomware
Fortnite game Developer Epic Games Breached by Mogilevich Ransomware
UPDATE 3/3/24: A Mogilevich spokesperson has confirmed that the whole Epic Games Breach Fiasco was a money-minting scam and is ...
Ransomware
Epic Games Data Breach Update! Mogilievich’s Ransomware Group Confesses Epic Games Breach Was a Scam
The Mogilievich ransomware group has now admitted that their claim regarding the Epic Games data breach was false. A new ...
News
‘UNC1945’ Uses GTPDOOR Linux Malware to Target Mobile Operators
Security researcher HaxRob has recently identified a Linux backdoor called GTPDOOR that has not been previously documented. This backdoor appears ...
News
Hackers Leverage Okta Phishing Attacks to Target FCC and Popular Crypto Firms
Hackers are using a new phishing kit called CryptoChameleon in advanced Okta phishing attacks. The phishing kit is currently being ...
CVE Vulnerability Alerts
SolarWinds Vulnerability Exploitation Prompts Immediate Response from Federal Agencies
TOP CYBERSECURITY HEADLINES
Application Security
The DockerDash Vulnerability: Understanding Its Impact on Docker Desktop and CLI
This Week’s Security Spotlight
Application Security
Microsoft Investigates Outlook Crashing on iPad Devices due to Coding Error
Network Security
TP-Link’s Vulnerability: Critical Patch for VIGI Cameras
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
Ford Customer Data Breach: Threat Actors Claim Exfiltration of Internal Database
A threat actor claims a Ford Motor Company data breach, exposing 44,000 customer records including names, addresses, and purchase details. Ford has yet to comment.
Sitting Ducks Cyber Attacks: 800,000+ Domains at Risk
A new report reveals over 800,000 domains are vulnerable to "Sitting Ducks" cyberattacks, a DNS hijacking technique used by cybercriminals to gain control of websites ...
TEAM Software Data Breach Exposes Sensitive Information of Nearly 100,000 Individuals
A data breach at TEAM Software exposed the sensitive personal information of approximately 99,525 individuals, including Social Security numbers, driver's license numbers, and medical information. ...
T-Mobile Data Breach Confirmed Amidst Wave of Telecom Hacks
T-Mobile confirms a data breach in a recent wave of attacks targeting US telecom companies. Learn about the extent of the T-Mobile hack and the ...
Hungary Defense Procurement Agency Hacked by INC Ransomware
Hungarian officials confirmed a cyberattack on its defense procurement agency, with the INC Ransomware group claiming responsibility and demanding a $5 million ransom. Sensitive procurement ...
Mirai Malware Spreads Via GeoVision Zero-Day Exploit
A Mirai malware botnet is leveraging a zero-day vulnerability (CVE-2024-11120) in outdated GeoVision devices to deploy malware, potentially for DDoS attacks or cryptomining. Thousands of ...
This Week In Cybersecurity: 11th November to 15th November
Stop and Shop Parent Company ‘Ahold Delhaize’ hit by Cyberattack Ahold Delhaize confirmed a significant cyberattack impacting its U.S. network, causing disruptions to online services ...
300,000 Patients Impacted by Major Law Firm Data Breach at Thompson Coburn
A massive law firm data breach exposed the personal information of 300,000 patients, leading to a class-action lawsuit highlighting cybersecurity failures and the high value ...
₹2,000 Crore WazirX Cyberattack Culprit Arrested
A Bengal man, SK Masud Alam, has been arrested by Delhi Police in connection with the ₹2,000 crore WazirX cyberattack. The investigation highlights vulnerabilities in ...
Alltech Consulting Data Breach Exposes Over 216,000 Job Seekers’ Personal Information
Alltech Consulting, a recruitment firm, suffered a major data breach exposing personal information of over 216,000 job seekers. The breach was uncovered by cybersecurity researcher ...
Volt Typhoon Rebuilds Malware Botnet After FBI Disruption
The Chinese state-sponsored hacking group Volt Typhoon has successfully rebuilt its KV-Botnet malware botnet, targeting outdated Cisco and Netgear routers, despite an FBI disruption earlier ...
Stop and Shop Parent Company ‘Ahold Delhaize’ hit by Cyberattack
Ahold Delhaize, parent company of Stop & Shop and Hannaford, confirms a significant cybersecurity incident impacting its US network. Learn about the ongoing disruption and ...
Set Forth Data Breach: 1.5 Million Individuals Affected by Cyberattack
Debt relief company Set Forth suffered a major data breach, exposing the sensitive personal information of roughly 1.5 million individuals. The cyberattack compromised crucial data.
SelectBlinds Data Breach: 200,000 Customers Impacted by E-Skimming Attack
The SelectBlinds data breach exposed 206,238 customers' payment card details and personal information via a sophisticated e-skimming attack lasting nearly nine months.
Halliburton Ransomware Attack Costs Energy Giant $35 Million
Halliburton's August ransomware attack crippled IT systems, causing $35 million in losses and highlighting the vulnerability of even the largest corporations to cyber threats. The ...
Halliburton Confirms Data Breach in Recent Cyberattack
Oil Giant Halliburton Confirms RansomHub Involvement in Data Breach in its Latest SEC Filing Oil and gas giant Halliburton has confirmed in a filing to ...
Amazon Data Breach: Employee Information Exposed After Vendor Hack
A massive Amazon data breach exposes millions of employee records after a third-party vendor was compromised. Learn about the extent of the breach and the ...
Schneider Electric Dev Platform Hack Confirmed: 400k Rows of User Data Stolen
Schneider Electric, a global leader in energy management and automation solutions, recently confirmed it was targeted by the Hellcat ransomware group, resulting in a significant ...
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability Advisory
On November 6, 2024, Palo Alto Networks published a security advisory in response to claims regarding a potential remote code execution (RCE) vulnerability in the ...
Washington Court System Cyberattack Causes Multi-Regional Services Disruption
On November 3, 2024, the Washington State Administrative Office of the Courts (AOC) detected unauthorized activity within its networks, prompting immediate action. While the specifics ...