F5 Credential Stuffing Report found that credential spills doubled between 2016 and 2020 while credential stuffing became the preferred attack method.
Staff Correspondent at CPO Magazine
Alicia Hope has been a journalist for more than 5 years, reporting on technology, cyber security and data privacy news.
About 26 Million Fortune 1000 Employee Credentials Available on the Dark Web, Password Reuse Rampant
SpyCloud found about 26 million Fortune 1000 employee credentials circulating on the dark web. Password reuse, weak passwords, and infostealers were responsible for the leaks.
The supply chain attack method leverages commonly-used dependency managers and private or non-existent dependencies to install malicious code and backdoors in internal applications.
UK's NCSC issued an alert over the growing risk of ransomware attacks as threat actors diversified attack vectors and monetization methods, with some victims hit by repeat attacks shortly after paying a ransom.
The FTC reported that identity theft doubled during the pandemic as scammers targeted COVID-19 relief payments to individuals and government-sponsored loans for small businesses.
Suspected Chinese hackers exploited a second SolarWinds hack to compromise the National Finance Center, which processes salaries for agencies including the FBI and the DHS.
KELA found that the sale of network initial access methods in underground forums was worth millions of dollars, and brokers resorted to selling in private conversations.
Hacker created a Telegram bot to sell information belonging to 533 million Facebook users. Buyers could search users' mobile numbers using account IDs or vice versa.
Hackers breached UScellular’s retail CRM software and accessed customer data, including PIN and CPNI, and ported some subscribers’ mobile phone numbers to a different carrier.
DDoS extortion gangs returned and made new ransom demands as Bitcoin price surged. Four out five Radware customers who received the threats experienced intense DDoS attacks.
