A January 13, 2025 press release from Texas Attorney General Ken Paxton: Texas Attorney General Ken Paxton sued Allstate and
Governments have routinely urged ransomware victims not to pay ransom demands, as it only encourages them to attack even more
24 hours. That’s the gap between PowerSchool’s disclosure of a hacking incident affecting teacher and student data and the filing
New York’s Governor Hochul signed two bills into law in December that modify New York’s breach notification law. One that
For a while, it was just a recommendation. Now it’s mandatory. Federal civilian agencies were ordered to secure their Microsoft
Consumer Alerts
Have you ever been approached by someone offering you money for a picture of yourself and your identity documents like
If you’re still using default passwords or easy-to-brute-force passwords, your days are numbered. Boing Boing reports: Read more at BoingBoing.
Miscellaneous News
Forbes reports that some new research suggests that 100 million macOS users are at risk from a new attack involving a
Can you effectively monitor employee activity to prevent and root out insider threats, or are you turning your workplace into
The Cl0p gang that previously successfully attacked file transfer software platforms by exploiting zero-day vulnerabilities is now starting to leak data from yet another campaign targeting file transfer software. This time, it’s CLEO. Cybersecurity Dive reports: Blue Yonder said it is investigating a threat after Clop listed the supply chain management company among nearly 60 companies the ransomware group claims it hacked. The attacks were linked to exploited vulnerabilities in Cleo file-transfer software, according to researchers from Zscaler and Huntress. […] The
Court-Authorized Operation Removes PlugX Malware from Over 4,200 Infected U.S. Computers Note: View the affidavit here. The Justice Department and FBI today announced a multi-month law enforcement operation that, alongside international partners, deleted “PlugX” malware from thousands of infected computers worldwide. As described in court documents unsealed in the Eastern District of Pennsylvania, a group of hackers sponsored by the People’s Republic of China (PRC), known to the private sector as “Mustang Panda” and “Twill Typhoon,” used a version of PlugX
WSJ reports: Two brokerage units of Robinhood Markets agreed to pay $45 million to settle an investigation by the Securities and Exchange Commission into a range of alleged violations, including one stemming from a 2021 data breach that exposed millions of customer names and emails. The settlement is the latest in a string of big penalties paid by Robinhood as it has grown from a disruptive startup into a more established financial firm. In the November 2021 breach, email addresses
As previously reported, a hacker claimed to have acquired a massive amount of data from Gravy Analytics. A sample of the data, confirmed by 404Media, was posted on a Russian-language forum by a user called “Nightly,” with a threat that if payment was not made, all of the data would be leaked. That post was subsequently removed and has not reappeared, leading many people to suspect that Gravy Analytics paid the hacker’s extortion demand. Gravy Analytics has not confirmed or
Proposed order will prohibit GoDaddy from misleading customers about its security protections and require it to establish a robust information
Details from more than 15,000 devices exposed If you use Fortinet, Computing.co.uk has information that you need to know: Hackers
Governments have routinely urged ransomware victims not to pay ransom demands, as it only encourages them to attack even more
The Change Healthcare ransomware attack that was first disclosed in February 2024 continues to cause problems and make headlines. HIPAA
The Record reports: Insurance firm Globe Life is being extorted by hackers after data on more than 5,000 people was
Cisco should have a bit of a professional red face or black eye this week after hackers leaked data acquired
