PHP open-source team averted a potential supply chain attack after hackers compromised their self-managed Git server and inserted malicious code in PHP’s “under development” version.
Staff Correspondent at CPO Magazine
Alicia Hope has been a journalist for more than 5 years, reporting on technology, cyber security and data privacy news.
Hackers compromised carding site Card Mafia exposing 300,000 user account credentials. A hacker later offered the stolen data for free on a different hacking forum.
Cyber insurance firm CNA Financial potentially leaked clients’ data after being the victim of a sophisticated cyber attack that disrupted services. Data obtained may help hackers optimize targeting of firm’s customers.
California State Comptroller’s office leaked details of 9,000 people after a Microsoft 365 email account of an Unclaimed Property Division employee was hacked in a phishing attack.
NCC Group and Bad Packets detected cyber attacks targeting F5 critical vulnerabilities after proof-of-concept code and patches were released. CISA advised users to prioritize the installation of updates.
Mimecast’s forensic investigation found that SolarWinds hackers accessed limited source code repositories and account details after compromising customers' Microsoft 365 tenants.
McAfee researchers discovered a cyber espionage campaign involving Chinese Red Delta and Mustang Panda hackers trying to steal 5G technology secrets using a fake Huawei website.
Acer reportedly suffered a REvil ransomware attack. The threat actors posted some files as proof and demanded the highest recorded ransom payment of $50 million in Monero.
GRIMM researchers discovered three 15-year-old bugs allowing local privilege escalation, while ZDI found another Linux vulnerability could allow remote code execution without authentication.
Molson Coors filed a security incident with the Security and Exchange Commission acknowledging a cyber attack that took its systems offline, suggesting a ransomware attack.
