From CISA.gov, a #StopRansomware advisory: Medusa is a ransomware-as-a-service (RaaS) variant first identified in June 2021. As of February 2025, Medusa developers and affiliates have impacted over 300 victims from a variety of critical infrastructure sectors with affected industries including medical, education, legal, insurance, technology, and manufacturing. The Medusa ransomware variant is unrelated to the MedusaLocker variant […]
The following is a press release issued yesterday by NY Attorney General Letitia James: NEW YORK – New York Attorney General Letitia James today filed a lawsuit against several insurance companies doing business as National General and Allstate Insurance Company (Allstate) for failing to protect New Yorkers’ personal information from cyberattacks. In 2020 and 2021, National General […]
Since the Hamas attack in October 2023, more and more Israelis have armed themselves with guns. Now the Sri Lanka Guardian reports that Israeli gun owners are in a state of heightened alert, fearing for their safety due to a breach and leak of their personal information and details: In a severe cybersecurity breach with […]
State and local governments continue to be targeted by threat actors. Here are three current situations in the news: Mission, Texas. Valley Central reports: The cybersecurity attack on the city of Mission has prompted the Mayor to declare a state of local disaster. Mayor Norie Gonzalez Garza sent a letter to Texas Governor Greg Abbott, […]
Tech Radar reports on an exposed data set discovered by a researcher: A dataset contai,ning 820,750 records totaling 122GB has been discovered online, most likely belonging to German tracking software firm Lost & Found, which primarily services the aviation industry. As revealed by security researcher, Jeremiah Fowler, this was in an unprotected and publicly exposed dataset […]
Top Class Actions reports: Mortgage lender loanDepot agreed to a $25 million settlement to resolve claims it failed to prevent a 2024 data breach that compromised the information of 16.9 million customers. The loanDepot settlement benefits individuals who received a data breach notice from loanDepot informing them their information may have been compromised in a data […]
Dark Reading reports: Medusa ransomware attacks are increasingly becoming a core tool for a threat group known as “Spearwing,” which has amassed hundreds of victims since 2023; nearly 400, in fact, have been listed on its leak site. The ransom demands when using Medusa ransomware range from $100,000 to a whopping $15 million, according to […]
Bleeping Computer reports: Japanese telecommunication services provider NTT Communications Corporation (NTT) is warning almost 18,000 corporate customers that their information was compromised during a cybersecurity incident. The data breach was discovered in early February 2025, but the exact date when the hackers gained initial access to NTT’s systems hasn’t been determined. “NTT Communications Corporation discovered […]
ABC News reports that the Department of Justice has announced indictments against 12 Chinese nationals involved in cyberespionage in U.S. v. Wu Haibo et al., U.S. v. Yin Kecheng, U.S. v. Zhou Shuai et al.: Twelve Chinese nationals, including mercenary hackers, law enforcement officers and employees of a private hacking company, have been charged in connection with global […]
Candid.Technology reports: A ransomware gang called Hunters International has claimed responsibility for the ransomware attack on Indian tech firm Tata Technologies. The group has listed the company on its dark web leak site and adds that they stole over 730,000 files amounting to nearly 1.4 TB of data, threatening to leak to the public within […]
