Thomson Reuters database leak exposed 3TB of platform information and customer data after the media company left three databases unsecured and publicly accessible for days.
Staff Correspondent at CPO Magazine
Alicia Hope has been a journalist for more than 5 years, reporting on technology, cyber security and data privacy news.
Verizon prepaid customers suffered a SIM swap attack after hackers breached their accounts using the last four digits of their credit card numbers likely obtained via stolen employee accounts.
Snake oil marketing tactics by cybersecurity vendors complicate organizations’ security stack and expand the attack surface, according to Egress cybersecurity hype report. 91% of decision-makers found it difficult to select cybersecurity vendors due to unclear marketing about their specific offerings.
Security firm disclosed a Microsoft data breach that exposed customer data affecting over 65,000 organizations in 111 countries. Microsoft expressed disappointment at the security firm for exaggerated numbers and releasing a search tool.
Symantec warned that a Chinese state-sponsored cyber espionage group responsible for hacking a U.S. state legislature and potentially a defense company had renewed interest in the country.
Vulnerability allows hackers to extract private encryption keys hardcoded in Siemens industrial devices to execute sophisticated attacks or take over whole product lines.
Fortinet warned customers to immediately patch an authentication bypass critical vulnerability in FortiSwitch Manager, FortiGate, and FortiProxy which are being actively exploited in the wild.
Cybercriminals design and test email phishing attacks to bypass Microsoft email defenses with nearly a fifth (18.8%) of phishing messages reaching their targets.
The FBI, CISA, and NSA issued a joint cybersecurity advisory about multiple APT groups that comprised a defense organization and exfiltrated sensitive data over a significant period.
Russian hackers Killnet, notorious for crippling DDoS attacks, claimed responsibility for cyber attacks that shut down multiple state government websites.
