Scores of US credit unions offline after ransomware infects backend cloud firm Trellance
The Register reports: Read more at The Register.
Fortune-Telling Website WeMystic Exposes 13m+ User Records
Cybernews reports: Telling the future is a tricky business, and failure to foretell your own mishaps doesn’t help. The content platform WeMystic is a good example of this, with the Cybernews research team discovering that it exposed its users’ sensitive data. WeMystic offers its users astrology, spiritual well-being, and esotericism alongside an online shop for […]
Federal investigators confirm multiple US water utilities hit by hackers
CNN reports: Following a recent cyberattack at a Pennsylvania water utility, federal officials have confirmed that multiple additional water utilities in the US running the same industrial equipment have been breached by hackers, two people briefed on the matter told CNN. The federal Cybersecurity and Infrastructure Security Agency briefed Senate and House staffers on the […]
Staples confirms cyberattack behind service outages, delivery issues
Bleeping Computer reports: American office supply retailer Staples took down some of its systems earlier this week after a cyberattack to contain the breach’s impact and protect customer data. Staples operates 994 stores in the US and Canada, along with 40 fulfillment centers for nationwide product storage and dispatch. The disclosure comes after multiple Reddit reports posted […]
Ex-worker phished former employer to illegally hack network and steal data
Graham Cluley provides another example of a former employee going rogue and harming their former employer: Once again companies are being warned to be wary of past employees who may turn rogue. 28-year-old Andrew Mahn, of Derry, New Hampshire, has pleaded guilty to charges that he illegally hacked the network of his former company, telecoms firm Motorola, after he […]
KyberSwap Hacker Demands To Be Kyber Director (1)
The Crypto Times reports on an astonishing situation: The hacker behind KyberSwap’s $46 million exploit has shared a message with the KyberDAO Multisig wallet demanding to become Kyber Director and taking complete control over the company. In the onchain encoded message, the hacker has stated several demands as a part of the settlement and asked to be granted […]
Okta Says Hackers Stole Data For All Customer Support Users
The Wall Street Journal reports: Okta said hackers stole data for all of its customer support system users in a breach that the identity-verification company disclosed last month. Okta Chief Security Officer David Bradbury said all Okta Workforce Identity Cloud and Customer Identity Solution customers are affected by the hack, except for government customers that use […]
Ransomware attack on Ardent Health Services causes outages in multiple hospitals and states
Ardent Health Services owns and operates 30 hospitals and health systems with 200+ sites of care with more than 1,400 aligned providers in six states. Earlier today, they posted a security incident notice on their site: Ardent Health Services and its affiliated entities (“Ardent”) became aware of an information technology cybersecurity incident on the morning of […]
Nvidia’s Data Breach Blunder: A Case Study in Cybersecurity Negligence
TechStory reports: Nvidia, a renowned technology company, is facing a lawsuit alleging that one of its workers stole sensitive data from a former employer, Valeo, and then mistakenly divulged the stolen material during a video conference screen-sharing mishap. According to the lawsuit, Mohammad Moniruzzaman, a former Valeo employee who joined Nvidia in 2021, downloaded a […]
Henry Schein re-encrypted by BlackCat again
DataBreaches.net reports on a ransomware incident where the victim was re-encrypted — and then re-encrypted again. From there, things took a downward turn, with AlphV getting mad at Henry Schein and Coveware and re-encrypting Henry Schein to put more pressure on them to negotiate and pay. DataBreaches.net provides a chronology of updates, including what seems […]