LATEST POST
Investigation finds KT lax femtocell security leaked data of 22,227 and hid infected servers
A breach affecting South Korea’s second largest mobile carrier, KT, continues to have ramifications for the carrier. Chosun Biz reports: The joint public-private investigation team (hereafter, the investigation team) operated by the Ministry of Science and ICT announced interim findings on the KT hacking and breach incident on the 6th. The investigation team said that, […]
Nearly half of retail ransomware attacks stem from unknown security gaps: Report
The Economic Times reports: Cybersecurity firm Sophos has released its fifth annual State of Ransomware in Retail report, highlighting how visibility gaps across retail networks continue to leave businesses vulnerable. The survey of 361 IT and security leaders across 16 countries found that 46% of ransomware attacks in the sector originated from previously unknown security […]
Lawsuits, Investigations Piling Up in Conduent Hack
Bank Info Security reports: Proposed federal class action litigation is piling up against Conduent Business Solutions following its recent public disclosure that an October 2024 hacking incident potentially compromised personal and health information of more than 10.5 million people. As of Tuesday, at least nine proposed class action lawsuits have been filed since Oct. 27 […]
Credentials and Misconfigurations Behind Most Cloud Breaches, Says AWS
HackRead reports: Read more at HackRead.
Chicago firm that offers ransomware incident response had rogue workers carrying out their own hacks, FBI says
Chicago Sun-Times reports: Rogue employees of a Chicago company that specializes in negotiating ransoms to mitigate cyber attacks were carrying out their own piracy in a plot to extort millions of dollars from a series of companies, prosecutors say. Kevin Tyler Martin, a ransomware threat negotiator for River North-based DigitalMint at the time of the […]
Penn hacker claims to have stolen 1.2 million donor records in data breach
Bleeping Computer reports: A hacker has taken responsibility for last week’s University of Pennsylvania “We got hacked” email incident, saying it was a far more extensive breach that exposed data on 1.2 million donors and internal documents. On Friday, University of Pennsylvania alumni and students began receiving multiple offensive emails from Penn.edu addresses claiming the university […]
Russia finally bites the cybercrooks it raised, arresting suspected Meduza infostealer devs
The Register reports: Russia’s Interior Ministry says police have arrested three suspects it believes helped build and spread the Meduza infostealer. A statement issued by spokesperson Irina Volk via the Ministry’s Telegram channel on Thursday included video footage of all three arrests of men described as “young IT specialists” who are alleged to have helped […]
Michael R. Schwartz, M.D., Data Incident Notice
Notice of Data Security Incident On October 23, 2025, Michael R. Schwartz, M.D., Inc. (“the Practice”) mailed notification letters to certain individuals whose information may have been involved in a recent data security incident. On or about August 25, 2025, the Practice became aware that an unauthorized party gained remote access to one computer within […]