INTERPOL operation reveals further insights into ‘globalization’ of cyber scam centres
A December 8 press release from Interpol begins: Read more at INTERPOL.
Kentucky healthcare giant says 2.5 million people affected by May ransomware attack
The Record reports: A ransomware attack in May exposed 2.5 million patients of hospitals connected to healthcare giant Norton Healthcare. In notices submitted to regulators in Maine and California last week, the company said it discovered the attack on May 9 and later confirmed that it was dealing with a ransomware incident. After an investigation, the company said the […]
Disgruntled Cloud Engineer Sentenced to Two Years in Prison for Intentionally Damaging His Former Employer’s Computer Network After He Was Fired
Miklos Daniel Brody Retaliated Against His Former Employer, a Bank, byDamaging the Bank’s Cloud System and Stealing Valuable Computer Code SAN FRANCISCO – Miklos Daniel Brody was sentenced to 24 months in prison todayfor a network intrusion and for making false statements to a governmentagency, announced United States Attorney Ismail J. Ramsey and United StatesSecret […]
Ukraine’s top mobile operator hit by biggest cyber attack of war so far
Reuters reports: Ukraine’s biggest mobile network operator, Kyivstar, was hit on Tuesday by what appeared to be the biggest cyber attack of the war with Russia so far, knocking out mobile and internet services for millions. Kyivstar has 24.3 million mobile subscribers – more than half of Ukraine’s population – as well as over 1.1 […]
Threat Actor Targets Recruiters With Malware
Infosecurity Magazine reports: Proofpoint has warned recruiters of a skilled threat actor targeting them with emails designed to deploy malware. TA4557 is a financially motivated threat actor known to distribute the More_Eggs backdoor, which is designed to establish persistence, profile the targeted machine and drop additional payloads. Throughout 2022 and most of 2023 the actor has […]
North Korean hackers Lazarus Group takes new Telegram tactics
SiliconAngle reports: Cisco Systems Inc.’s Talos Intelligence unit posted today new findings about the North Korean hacking group called Lazarus that outline new ways it’s targeting attacks. “We have observed Lazarus target companies in the manufacturing, agricultural and physical security sectors,” their analysts wrote in the post. The group has been around since 2010 and was responsible most recently […]
Apple: 2.5B Records Exposed, Marking Staggering Surge in Data Breaches
Dark Reading reports the findings of an Apple-commissioned study supports the adoption of end-to-end encryption to protect sensitive data from theft or misuse: In 2021 and 2022, data breaches exposed a staggering 2.6 billion personal records — some 1.5 billion of them last year alone. That number will likely be even higher in 2023 if […]
23andMe updates user agreement to prevent data breach lawsuits
You have a massive data breach from a credential stuffing attack that affects millions of users’ sensitive genetic information, and then you change your terms of service to make it harder for people to sue you in the event of a data breach? How will that go over with the public and potential users? Bleeping […]
AlphV (BlackCat) leak site reportedly taken down by law enforcement
DataBreaches.net reports that RedSense has confirmed that the disappearance of AlphV’s (BlackCat’s) leak site on the dark web yesterday was due to law enforcement action. Law enforcement has not issued any press release as yet. Read more at DataBreaches.net.
CarePointe ENT Settles HIPAA Lawsuit with Indiana Attorney General
The HIPAA Journal reports: In late September 2023, Indiana Attorney General Todd Rokita filed a lawsuit against CarePointe ENT over a ransomware attack and data breach that affected 48,742 individuals. A settlement has been reached that will see CarePointe pay $125,000 to resolve alleged violations of the Health Insurance Portability and Accountability (HIPAA) Act and […]