Schneier on Security

SEPTEMBER 1, 2023

A Brazilian spyware app vendor was hacked by activists: In an undated note seen by TechCrunch, the unnamed hackers described how they found and exploited several security vulnerabilities that allowed them to compromise WebDetetive’s servers and access its user databases. Because #fuckstalkerware,” the hackers wrote in the note.

Spyware 297

Spyware Hacking 297

Heimadal Security

NOVEMBER 9, 2023

A notorious hacker, previously involved in high-profile data breaches of InfraGard and Twitter, has now leaked a substantial LinkedIn database on a clear web hacking forum. The scraped LinkedIn database was leaked in two parts: one containing 5 million user records and the other 35 million records.

Hacking 97

Hacking Data breaches Cybersecurity 97

Schneier on Security

JUNE 28, 2023

The stalkerware company LetMeSpy has been hacked : TechCrunch reviewed the leaked data, which included years of victims’ call logs and text messages dating back to 2013. The leaked data contains no identifying information, which means people whose data was leaked can’t be notified.

Hacking 213

Hacking Spyware Accountability Data breaches 213

Krebs on Security

JUNE 15, 2024

A 22-year-old man from the United Kingdom arrested this week in Spain is allegedly the ringleader of Scattered Spider , a cybercrime group suspected of hacking into Twilio , LastPass , DoorDash , Mailchimp , and nearly 130 other organizations over the past two years. man arrested was a SIM-swapper who went by the alias “ Tyler.”

Hacking 300

Hacking Cybercrime Phishing Passwords 300

Security Affairs

JUNE 3, 2024

Personal information of hundreds of British and EU politicians is available on dark web marketplaces. Nor is it evidence of a hack of the British, European, or French parliaments.” Attackers could then use this information to phish or blackmail the politicians.” ” reads the report. ” concludes the report.

Passwords 145

Passwords Government Accountability Hacking 145

Adam Levin

SEPTEMBER 1, 2020

Databases containing the personal information of millions of U.S. voters have appeared on Russian hacking forums. State and federal government officials have denied that the data was acquired via hacking and have maintained that the data was available through the Freedom of Information Act (FOIA). “[We]

Hacking 281

Hacking Cyber Attacks Authentication Government 281

Schneier on Security

DECEMBER 9, 2020

FireEye was hacked by — they believe — “a nation with top-tier offensive capabilities”: During our investigation to date, we have found that the attacker targeted and accessed certain Red Team assessment tools that we use to test our customers’ security. That group dumped the N.S.A.’s operator put it.

Hacking 334

Hacking Government Cyber threats Malware 334

Schneier on Security

APRIL 26, 2021

Hacking is as old as humanity. To date, hacking has exclusively been a human activity. After hacking humanity, AI systems will then hack other AI systems, and humans will be little more than collateral damage. Most of these hacks don’t even require major research breakthroughs in AI. Not for long.

Hacking 362

Hacking Artificial Intelligence Government Engineering 362

Joseph Steinberg

JANUARY 22, 2024

Hacking et Cybersécurité Mégapoche pour les Nuls , a single-volume book containing French versions of the latest editions of both the best selling CyberSecurity for Dummies by Joseph Steinberg, and Hacking For Dummies by Kevin Beaver, is now available to the public.

Hacking 161

Hacking Cybersecurity Penetration Testing Artificial Intelligence 161

Tech Republic Security

JUNE 21, 2024

Immersing yourself in best practices for ethical hacking, pen-testing and information security can set you up for a career or better-protected business.

Hacking 157

Hacking Information Security 157

Security Affairs

SEPTEMBER 30, 2024

The Department of Justice charged a British national for hacking into the systems of five U.S. The Department of Justice charged the British national Robert Westbrook (39) for hacking into the systems of five U.S. From January 2019 to May 2020, the man carried out a hack-to-trade scheme, earning over $3 million in profits.

Hacking 137

Hacking Accountability Passwords Cybercrime 137

Security Affairs

OCTOBER 16, 2020

Britain’s information commissioner has fined British Airways 20 million pounds for the 2018 hack that exposed data of 400,000 customers. In September 2018, British Airways suffered a data breach that exposed the personal information of 400,000 customers. ” said Information Commissioner Elizabeth Denham.

Hacking 124

Hacking Data breaches Advertising Information Security 124

Security Affairs

MAY 15, 2024

An international law enforcement operation coordinated by the FBI led to the seizure of the notorious BreachForums hacking forum. BreachForums is a cybercrime forum used by threat actors to purchase, sell, and exchange stolen data, including credentials, and personal and financial information. In March 2023, U.S.

Hacking 135

Hacking Cybercrime Information Security 135

Schneier on Security

JANUARY 29, 2024

The investigation indicates they were initially targeting email accounts for information related to Midnight Blizzard itself.

Hacking 286

Hacking Accountability Passwords Cybersecurity 286

Schneier on Security

MARCH 5, 2020

Right now, pandemic disease experts at the World Health Organization (WHO), the US Centers for Disease Control and Prevention (CDC), and other public-health agencies are gathering information to learn how and where the virus is spreading. Like much of the medical infrastructure, these systems are highly vulnerable to hacking and interference.

Surveillance 347

Surveillance Hacking Government Risk 347

Security Affairs

AUGUST 21, 2024

Researchers have disclosed a critical security vulnerability in Microsoft’s Copilot Studio that could lead to the exposure of sensitive information. An attacker can exploit the vulnerability to access sensitive information. ” reads the advisory published by Microsoft. ” reads the advisory published by Microsoft.

Authentication 124

Authentication Hacking Risk Cybersecurity 124

Dark Reading

JUNE 27, 2023

The attack exposed personal information from pilot applicants, prompting both airlines to ditch their third-party provider and move services internally.

Hacking 98

Hacking 98

Security Affairs

AUGUST 1, 2024

Pharma company Cencora confirmed the theft of personal and health information following the February 2024 data breach. Pharmaceutical giant Cencora confirmed that the threat actors had access to personally identifiable information (PII) and protected health information (PHI) following the February 2024 cyberattack.

Data breaches 126

Data breaches Ransomware Malware Hacking 126

Schneier on Security

FEBRUARY 10, 2023

It’s a series of algorithms that takes an input—financial information for the year—and produces an output: the amount of tax owed. That’s not hacking the tax code. It’s hacking the processes that create them: the legislative process that creates tax law. A hack subverts the intent of a system.

Hacking 238

Hacking Artificial Intelligence Government Software 238

Security Affairs

NOVEMBER 23, 2023

Threat actors spread Atomic Stealer (AMOS) macOS information stealer via a bogus web browser update as part of the ClearFake campaign. Atomic Stealer (AMOS) macOS information stealer is now being delivered via a fake browser update chain tracked as ClearFake, Malwarebytes researchers warn.

Social Engineering 139

Social Engineering Passwords Malware Engineering 139

Schneier on Security

JULY 2, 2021

The first is from Microsoft, which wrote : As part of our investigation into this ongoing activity, we also detected information-stealing malware on a machine belonging to one of our customer support agents with access to basic account information for a small number of our customers. News article.

Hacking 363

Hacking Passwords Malware Accountability 363

Krebs on Security

MARCH 4, 2021

Over the past few weeks, three of the longest running and most venerated Russian-language online forums serving thousands of experienced cybercriminals have been hacked. A note posted by a Verified forum administrator concerning the hack of its registrar in January. Pass this information to people you know. ” On Feb.

Cybercrime 363

Cybercrime Hacking Passwords Accountability 363

Schneier on Security

AUGUST 13, 2020

Interesting paper on recent hack-and-leak operations attributed to the UAE: Abstract: Four hack-and-leak operations in U.S. Although "hacking" tools enable easy access to secret information, they are a double-edged sword, as their discovery means the scandal becomes about the hack itself, not about the hacked information.

Hacking 318

Hacking Cybersecurity 318

Schneier on Security

AUGUST 31, 2022

This is a fun story, detailing the hack a group of high school students perpetrated against an Illinois school district, hacking 500 screens across a bunch of schools. During the call, Duong says, they talked through the hack and he provided more details on ways the school could secure its system.

Hacking 223

Hacking Penetration Testing Accountability Software 223

Krebs on Security

MARCH 14, 2023

men have been charged with hacking into a U.S. ” “ViLE is collaborative, and the members routinely share tactics and illicitly obtained information with each other,” prosecutors charged. The complaint says once they obtained a victim’s information, Singh and Ceraolo would post the information in an online forum.

Hacking 272

Hacking Government Media Accountability 272

Security Affairs

NOVEMBER 21, 2024

Threat actors already hacked thousands of Palo Alto Networks firewalls exploiting recently patched zero-day vulnerabilities. Shadowserver researchers, who are tracking the number of compromised Palo Alto Networks firewalls, reported that approximately 2,000 have been hacked due to a CVE-2024-0012/CVE-2024-9474 campaign. 173.239.218[.]251

Firewall 91

Firewall Hacking VPN Cybersecurity 91

Tech Republic Security

NOVEMBER 12, 2019

A member of IBM's X-Force Red team hacked two CBS reporters for three weeks. Find out what information she gathered, as well as what phishing entails.

Social Engineering 120

Social Engineering Hacking Engineering Phishing 120

Security Affairs

FEBRUARY 26, 2024

Recently the leak of a collection of files apparently stolen from the Chinese government hacking contractor, I-Soon, exposed Chinese hacking capabilities. Recently someone has leaked on GitHub [ 1 , 2 ] a collection of files apparently stolen from the Chinese hacking firm, I-Soon.

Hacking 134

Hacking Government Spyware Marketing 134

Security Affairs

NOVEMBER 18, 2024

The Library of Congress discloses the compromise of some of its IT systems, an alleged foreign threat actor hacked their emails. “An unidentified “adversary” hacked into the email system for the Library of Congress, accessing information sent via email between January and September 2024, the Library said.”

Hacking 66

Hacking Government Data breaches Information Security 66

Security Affairs

OCTOBER 6, 2024

broadband providers, potentially accessing information from systems the federal government uses for court-authorized network wiretapping requests.” internet-service providers in recent months in pursuit of sensitive information, according to people familiar with the matter.” and its allies for hacking activities in July.

Hacking 145

Hacking Government Internet Internet 145

Graham Cluley

OCTOBER 25, 2024

A US $10 million reward is being offered to anyone who has information about four members of an Iranian hacking group.

Hacking 94

Hacking Government 94

Security Affairs

NOVEMBER 10, 2024

US CFPB warns employees to avoid work-related mobile calls and texts following China-linked Salt Typhoon hack over security concerns. internet-service providers in recent months in pursuit of sensitive information, according to people familiar with the matter.” and its allies for hacking activities in July.

Hacking 130

Hacking Internet Internet Mobile 130

SecureWorld News

FEBRUARY 23, 2023

In a breach that's making headlines, hackers managed to steal data from the company, including sensitive employee information and upcoming game content. vx-underground also reported that a hacker managed to break into an Activision Slack channel, post offensive messages, and steal information related to upcoming "Call of Duty" releases.

Hacking 83

Hacking Phishing Data breaches Information Security 83

Security Affairs

SEPTEMBER 22, 2023

Air Canada, the flag carrier and largest airline of Canada, announced that the personal information of some employees was exposed as a result of a recent cyberattack. Air Canada, the flag carrier and largest airline of Canada, announced that threat actors had access to the personal information of some employees during a recent cyberattack.

DDOS 138

DDOS Data breaches Cyber Attacks Mobile 138

Graham Cluley

OCTOBER 31, 2023

The personal information of more than 815 million people in India has reportedly been leaked online. According to local media reports, hackers have offered for sale the personally identifiable information (PII) - including that found on Aadhaar identity cards - belonging to hundreds of millions of Indian residents.

Data breaches 109

Data breaches Hacking Media 109

Bleeping Computer

JUNE 18, 2024

AMD is investigating whether it suffered a cyberattack after a threat actor put allegedly stolen data up for sale on a hacking forum, claiming it contains AMD employee information, financial documents, and confidential information. [.]

Hacking 121

Hacking 121

Security Affairs

NOVEMBER 23, 2022

The operators behind the Ducktail information stealer continue to improve their malicious code, operators experts warn. WithSecure observed several multi-stage subvariants of DUCKTAIL that are used to deliver the final payload, the researchers highlighted that this is the primary information stealer malware in all cases.

Malware 138

Malware Accountability Media Marketing 138