If you rented a car from Avis, you may be receiving a notification letter about an August data breach they experienced. Bleeping Computer explains: American car rental giant Avis notified customers that unknown attackers breached one of its business applications last month and stole some of their personal information. According to data breach notification letters sent to […]
On Thursday, the Department of Justice announced it had unsealed an indictment alleging six Russian nationals with conspiracy to commit computer intrusion and wire fraud conspiracy. Five of the defendants were officers in Unit 29155 of the Russian Main Intelligence Directorate (GRU), a military intelligence agency of the General Staff of the Armed Forces. The […]
Iran International reports: An Iranian entity paid hackers $3 million in ransom to dissuade them from releasing the data of over 20 hacked banks, Politico reported, confirming Iran International’s earlier report about the “biggest-ever” cyberattack on Iran’s banking system. Iran International reported on August 14 that the major cyberattack targeted several Iranian banks, leading to […]
Bloomberg reports an update on the cyberattack of the WazirX cryptocurrency exchange. The attack, suspected to be linked to the Lazarus Group in North Korea, resulted in the theft of $234 million from the Indian exchange and left WazirX announcing that they were unlikely to recover 43% of the stolen funds. The attacker behind India’s […]
Risky Biz News reports: The FTC has fined security camera firm Verkada $2.95 million for failing to implement cybersecurity measures to protect its systems. The fine is related to a March 2021 security breach when a hacker accessed customer data and video footage from over 150,000 Verkada cameras. The hacker used the cameras to access and leak footage from psychiatric hospitals, […]
There are those who may say, “Better late than never.” There are probably also those who say, “How should egregiously late notification be punished?” SC Media reports that some people are first being notified of the 2023 MOVEit data breach: The Texas Dow Employees Credit Union (TDECU) on Aug. 23 sent letters to more than […]
Why would an organization whose breach affected 150 people pay $1 million ransom to get a decryptor key? How critical are the organization’s activities to justify such a large payment? Large payments are more likely to be associated with the healthcare sector or critical infrastructure than with a non-profit organization like the American Radio Relay […]
Halliburton is a major player in oil and gas supplies. A cyberattack resulted in its taking systems offline. CNN reports: Halliburton confirmed on Friday that it was hit by a cyberattack that forced the major oilfield services company to take systems offline. In a filing, Halliburton said it became aware on Wednesday that an “unauthorized third […]
If you don’t audit your vendors, will you know if they are really adhering to the security provisions of your contract with them? Maybe you’ll get lucky, and disgruntled employees will blow the whistle. The Register reports: The US is suing one of its leading research universities over a litany of alleged failures to meet […]
Leaked Environment Variables Allow Large-Scale Extortion Operation of Cloud Environments – Researchers
Researchers at Palo Alto Network have reported a serious risk to organizations using cloud services that may result in an organization’s files being deleted and held for ransom. The risk is not due to any vulnerability with the cloud services themselves. The risk is due to the victim organizations misconfiguring their settings and inadvertently exposing […]