Data Breach News, Vulnerabilities
December 06, 2023
1530 views 2 mins 0

CISA Releases Advisory on Threat Actors Exploiting CVE-2023-26360 Vulnerability in Adobe ColdFusion

From CISA, December 5: Today, CISA released a Cybersecurity Advisory (CSA), Threat Actors Exploit Adobe ColdFusion CVE-2023-26360 for Initial Access to Government Servers, to disseminate known indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs). The vulnerability in ColdFusion (CVE-2023-26360) presents as an improper access control issue and exploitation of this CVE can result in […]

News, Critical Infrastructure, Data Breach News
December 05, 2023
1473 views 0 secs 0

Britain says no evidence of Sellafield nuclear site hacking

Reuters reports:  Britain has no records or evidence to suggest that networks at the Sellafield nuclear site were the victim of a successful cyber attack by state actors, the government said on Monday following a report by the Guardian newspaper. The Guardian reported that Sellafield, which carries out nuclear fuel reprocessing, nuclear waste storage and […]

Data Breach News, New Threats, News, Vulnerabilities
December 05, 2023
1447 views 16 secs 0

Russian state-sponsored hackers exploiting Outlook vulnerability, Microsoft warns

Cybernews reports: Microsoft is urging Outlook users to patch and update their systems to mitigate a new threat from Russia. Hackers associated with the Kremlin’s military intelligence agency GRU are exploiting the vulnerability to access victim’s emails. Microsoft warned that a nation-state actor tracked as Forest Blizzard is actively exploiting a vulnerability to provide secret, […]

Data Breach News
December 05, 2023
1416 views 35 secs 0

How sweet it isn’t: Hershey’s notifies 2,214 after phishing attack

ABC reports: The Hershey Company headquartered in Pennsylvania is notifying some customers their data may have been compromised. The data breach happened between September 3 and September 4, and it impacted 2,214 people, according to the company’s filing with the Maine Attorney General. This data included first and last names, health and medical information, credit card numbers […]

Data Breach News
December 05, 2023
1254 views 2 mins 0

Investigation continues after Hendersonville City cybersecurity breach

The Hendersonville Times-News in North Carolina reports: A cyber-threat analyst who has been quoted in national news articles believes even more people could be at risk from the cybersecurity incident reported last week that targeted Hendersonville city employees. On Nov. 29, Hendersonville City Manager John Connet sent out a statement to city employees telling them […]

Data Breach News
December 05, 2023
814 views 23 secs 0

23andMe confirms hackers stole ancestry data on 6.9 million users

23andMe Welcome Banner

TechCrunch reports: On Friday, genetic testing company 23andMe announced that hackers accessed the personal data of 0.1% of customers, or about 14,000 individuals. The company also said that by accessing those accounts, hackers were also able to access “a significant number of files containing profile information about other users’ ancestry.” But 23andMe would not say how […]

Data Breach News
December 05, 2023
1351 views 58 secs 0

Iran-linked hackers claim to leak troves of documents from Israeli hospital

The Record reports: A hacker group allegedly linked to Iran claimed to have leaked thousands of medical records from an Israeli hospital, including those of Israeli soldiers. In a cyberattack on Ziv Medical Center in the city of Safed, near the border with Syria and Lebanon, the hackers claimed to have accessed 500GB of data dating back […]

Data Breach News, Malware Ransomware
December 03, 2023
1402 views 2 mins 0

Ransomware gang tests new approach to extort victims

Researchers and analysts who track developments in ransomware leak sites are buzzing this morning about a post by the AlphV (“BlackCat”) threat actors. Normally, threat actors try to extort their victims and then, if the victims do not pay or respond, they start leaking information about the attack and any data. This time, AlphV is […]

Data Breach News, Healthcare, News
December 02, 2023
1480 views 52 secs 0

Southwestern Ontario hospitals facing $480M class action after patient data breached, sold on dark web

canada gavel

CTV reports: A group of southwestern Ontario hospitals is facing a potential $480-million class action lawsuit after at least 270,000 patients in the region had their data breached and reportedly sold by hackers on the dark web. The breach, first detected on Oct. 23, targeted Bluewater Health, Chatham-Kent Health Alliance, Erie Shores HealthCare, Hôtel-Dieu Grace […]