Risky Biz News reports: The FTC has fined security camera firm Verkada $2.95 million for failing to implement cybersecurity measures to protect its systems. The fine is related to a March 2021 security breach when a hacker accessed customer data and video footage from over 150,000 Verkada cameras. The hacker used the cameras to access and leak footage from psychiatric hospitals, […]
There are those who may say, “Better late than never.” There are probably also those who say, “How should egregiously late notification be punished?” SC Media reports that some people are first being notified of the 2023 MOVEit data breach: The Texas Dow Employees Credit Union (TDECU) on Aug. 23 sent letters to more than […]
Why would an organization whose breach affected 150 people pay $1 million ransom to get a decryptor key? How critical are the organization’s activities to justify such a large payment? Large payments are more likely to be associated with the healthcare sector or critical infrastructure than with a non-profit organization like the American Radio Relay […]
Halliburton is a major player in oil and gas supplies. A cyberattack resulted in its taking systems offline. CNN reports: Halliburton confirmed on Friday that it was hit by a cyberattack that forced the major oilfield services company to take systems offline. In a filing, Halliburton said it became aware on Wednesday that an “unauthorized third […]
Earlier this week, chipmaker Microchip Technology Incorporated acknowledged that a cyberattack had impacted its systems last weekend and disrupted operations in a number of facilities. Bleeping Computer explained: Due to an incident, some Microchip Technology manufacturing facilities operate at reduced capacity, affecting the company’s ability to meet orders. Microchip Technology also had to take steps […]
Lawsuits often follow a healthcare data breach, but understanding what drives litigation trends can help healthcare organizations prepare. Jill McKeon explains: When a healthcare data breach occurs, lawsuits filed by affected individuals often follow. In fact, data breach lawsuits are on the rise across all industries, according to a 2024 report from law firm BakerHostetler. In 2023, the firm handled more […]
Questions continue to abound following a data leak that reportedly contained 2.9 billion records with Americans’ personal information. Investigative journalist Brian Krebs summarizes what is known about the data in the breach, its authenticity, and the company behind the data. HaveIBeenOwned.com’s Troy Hunt analyzed the leaked data and found it is a somewhat disparate collection of consumer and […]
From the Cleveland FBI: On August 12, FBI Cleveland announced the disruption of “Radar/Dispossessor”—the criminal ransomware group led by the online moniker “Brain”—and the dismantling of three U.S. servers, three United Kingdom servers, 18 German servers, eight U.S.-based criminal domains, and one German-based criminal domain. Since its inception in August 2023, Radar/Dispossessor has quickly developed […]
The BBC reports: The FBI has opened an investigation into allegations from the Trump campaign that it was targeted by hackers working for the Iranian government. “We can confirm the FBI is investigating the matter,” the agency said in a short statement on Monday without specifically naming the former president or Iran. A Trump campaign […]
Leaked Environment Variables Allow Large-Scale Extortion Operation of Cloud Environments – Researchers
Researchers at Palo Alto Network have reported a serious risk to organizations using cloud services that may result in an organization’s files being deleted and held for ransom. The risk is not due to any vulnerability with the cloud services themselves. The risk is due to the victim organizations misconfiguring their settings and inadvertently exposing […]