404 Media reports: Hackers say that they used Meta’s AI support chatbot to break into a host of high-profile Instagram profiles by asking the support bot to change the email address associated with the target account. The claims coincide with a series of high-profile Instagram account takeovers, including the Barack Obama White House account, the Chief Master […]
KRCR reports: California Attorney General Rob Bonta announced a lawsuit Thursday against genetic testing company 23andMe, now known as Chrome Holding Company, accusing the company of failing to protect millions of users’ sensitive genetic information during a massive 2023 data breach. According to the lawsuit, the breach exposed the personal information of nearly 7 million users […]
You’ve trained your employees well to avoid falling for phishing or social engineering attempts. Have you trained them on what to do when someone shows up who appears to be from your firm’s IT support? The Record reports: A cyber extortion group linked to the now-defunct Conti ransomware syndicate is increasingly targeting U.S. law firms […]
WJAR reports: A data breach four months ago has Warwick-based Beacon Mutual Insurance notifying people whose personal information was compromised in the incident. A message on the company website states more than 131,000 people in Rhode Island are impacted. NBC 10 News has learned the number includes thousands of state workers. Files that were hacked included Social […]
Technology.org reports: The group behind it, a fast-rising crew called TeamPCP, says it reached roughly 4,000 of GitHub’s code repositories. GitHub confirmed the breach Tuesday night and counted at least 3,800 compromised repositories, all of them holding GitHub’s own code rather than customer data, according to what it has found so far. For years, supply […]
TechCrunch reports: New York public health provider NYC Health + Hospitals says a months-long data breach that allowed hackers to steal personal data, medical records, and fingerprints scans affects at least 1.8 million people. NYCHHC is the largest public health system in the United States and provides healthcare to over a million New Yorkers, the majority of whom […]
When the federal agency that directs organizations and agencies to quickly attend to vulnerabilities and breaches has its own breach, people notice. Brian Krebs reports: Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA […]
CNN reports: US officials suspect Iranian hackers are behind a series of breaches of systems that monitor the amount of fuel in storage tanks serving gas stations in multiple states, according to multiple sources briefed on the activity. The hackers responsible have exploited automatic tank gauge (ATG) systems that were sitting online and unprotected by passwords, allowing them […]
When education software giant Instructure announced on May 1 that its widely used Canvas software was unavailable as it investigated a data security incident, it suggested the breach was mostly contained. That turned out to be overly optimistic. While the firm posted updates on its site as its services returned to service, the ShinyHunters group that attacked them continued to […]
From the Google Threat Intelligence Group’s Executive Summary: Read more at Google.
