LATEST POST
Accenture contractor removed from FBI following damaging data breach, sources say
This is the kind of press a contractor dreads. Reuters reports that the FBI has removed an Accenture contractor on Monday because its failure to patch a vulnerability in Oracle’s PeopleSoft in a timely manner reportedly allowed the troubling FBI data breach by ShinyHunters. In a statement to Reuters, a senior FBI official confirmed that an unidentified contractor […]
ASOS hacked? Customers receive frightening app notification claiming retailer hacked
Eastern Eye reports that ASOS customers received a bizarre app notification claiming the fashion retailer had been hacked, with attackers allegedly threatening to leak data unless the company engaged with them. “Dear Asos DPO and IT, we have fully compromised the Snowflake instance,” the message said. “Engage with us, or we will leak it.” It […]
US, Australia warn of latest Citrix vulnerability after NetScaler advisory
Another new vulnerability is giving cybercriminals the ability to crash Citrix NetScaler appliances, as The Record reports: Customers began reporting strange exploitation incidents on Friday, even on appliances that were up to date on all patches. Citrix confirmed late on Friday that it was “tracking a newly observed issue” related to some customer-managed NetScaler deployments […]
Alleged ShinyHunters Member Detained in Jordan
Cyber Security News reports that a Jordanian youth known as “Rey” and “Hikki-Chan” online has been detained in Jordan as a suspected member of ShinyHunters. Reuters broke the story, reporting that sources told them Saif al-Din Khader was cooperating with the FBI to help them identify other hackers linked to the group. Two sources said […]
Law enforcement seizes KillSec’s site, three arrested, including alleged teen leader
A 16 year-old arrested as the leader of a ransomware gang? The news had experienced cybersecurity professionals shaking their heads and sighing in chat rooms. The Register reports: Police suspect a 16-year-old was the main operator of KillSec, a ransomware group linked to around 1,000 suspected attacks worldwide. Authorities announced on Thursday that an international […]
OpenAI has notified over 100 organizations about its own AI agents; California subpoenas it
The Register reports that the California Attorney General has subpoenaed OpenAI as part of an investigation into the AI lab’s models escaping their testing environments and interacting with or potentially altering other entities’ systems. Attorney General Rob Bonta’s press release doesn’t reveal exactly what information the investigative demand requires OpenAI to produce. NotebookCheck reports that by […]
Iranian accused of hacking American universities extradited from Montenegro
Once again, the United States’ best chance of catching some criminals is to hope they travel to a country that will extradite them to us. The Record reports: An Iranian national accused by the U.S. of taking part in dozens of breaches involving the theft of academic data and intellectual property has been extradited from […]
ShinyHunters Says They Won’t Publish Massive Trove of FBI Employee Data and Never Intended To
404 Media continued its excellent reporting on the ShinyHunters attack that compromised the FBI job portal and exfiltrated sensitive information on intelligence personnel and others. The hackers behind the massive FBI breach told 404 Media on Monday they do not intend to publish the data. The breach, in which the hackers stole personal information on […]