A hacker claims to have stolen 440 GB of data from cybersecurity firm Fortinet, exploiting an Azure SharePoint vulnerability. The breach, dubbed “Fortileak,” was revealed on a forum with access credentials shared online. HackRead reports: Dubbed Fortileak by the hacker, the breach allegedly originates from an exposure in Fortinet’s Azure SharePoint instance. In the forum post, the […]
A blockbuster proposed settlement has been announced involving a ransomware attack last year. The ransomware attack by BlackCat resulted in 134,000 patients of Lehigh Valley Health Network having their data accessed, exfiltrated, and in some cases, leaked online. Distressingly, the threat actors cruelly leaked nude photos of identifiable cancer patients as part of the incident. […]
How many times have the government and intel firms warned us that decryptors provided by ransomware gangs do not always work and a significant percentage of victims wind up not recovering all their files even though they paid the ransom? Here’s another example from The Register, where an unnamed victim company paid the Hazard ransomware […]
Slim CD is a Florida-headquartered processing gateway that handles electronic payments, including credit card payments for US and Canadian based merchants. On or about June 15, 2024, it detected suspicious activity in its computer environment. SC Media reports that the firm, has notified nearly 1.7 million credit card holders that their data may have been […]
If you rented a car from Avis, you may be receiving a notification letter about an August data breach they experienced. Bleeping Computer explains: American car rental giant Avis notified customers that unknown attackers breached one of its business applications last month and stole some of their personal information. According to data breach notification letters sent to […]
More than a year after other victims of the MOVEit hacking incident notified people, the the Centers for Medicare & Medicaid Services (CMS) and Wisconsin Physicians Service Insurance Corporation (WPS) are notifying people whose protected health information was acquired by the Clop gang: The MOVEit data breach may be long in the rear-view mirror, but […]
On Thursday, the Department of Justice announced it had unsealed an indictment alleging six Russian nationals with conspiracy to commit computer intrusion and wire fraud conspiracy. Five of the defendants were officers in Unit 29155 of the Russian Main Intelligence Directorate (GRU), a military intelligence agency of the General Staff of the Armed Forces. The […]
Iran International reports: An Iranian entity paid hackers $3 million in ransom to dissuade them from releasing the data of over 20 hacked banks, Politico reported, confirming Iran International’s earlier report about the “biggest-ever” cyberattack on Iran’s banking system. Iran International reported on August 14 that the major cyberattack targeted several Iranian banks, leading to […]
The first response to “What do we do when our business has been hacked?” should not include, “Figure out who we blame” — or thrown under public transportation in this case. The Register reports: The Transport for London (TfL) “cyber incident” is heading into its third day amid claims that a popular appliance might have […]
The high cost of cybersecurity breaches on corporate reputation
Even when customers do not leave following a data breach, they may still lose confidence. A new survey confirms the reputation hit corporations fear suffering. FinTech Global reports: A recent study highlighted by ISACA points to a staggering 78% of industry professionals ranking the reputational impact as the paramount concern following cyberattacks. Given the digital […]