T-Mobile disclosed a second data breach in 2020 in which hackers illegally accessed call-related and customer proprietary network information for about 200,000 subscribers.
Staff Correspondent at CPO Magazine
Alicia Hope has been a journalist for more than 5 years, reporting on technology, cyber security and data privacy news.
Sansec researchers found a new Magecart credit card skimmer capable of exfiltrating payment information from stores on multiple eCommerce platforms, including ZenCart, WooCommerce, Shopify and BigCommerce.
Microsoft disclosed that besides using the trojanized Orion software on its platform, SolarWinds hackers accessed Microsoft source code after compromising internal accounts.
SolarWinds hack may impact cloud services from major providers such as Microsoft and Amazon, especially since the Orion software stores API keys and other security credentials.
CISA says that SolarWinds hack possibly affected federal, state, and local government agencies and critical infrastructure entities dealing with gas, electricity, and manufacturing.
NSA issued an advisory that hackers were exploiting VMWare’s and SolarWinds’ Orion vulnerabilities to perform federated login and execute attacks as part of SolarWinds hack.
Microsoft detected a second hacking team targeting Orion software and running its campaign parallel to the Russian hacking group; SolarWinds acknowledges the threat.
Recent SEC filing disclosed that 18,000 customers installed the SolarWinds backdoor while Microsoft said that it alerted 40 customers targeted by the Russian state-sponsored hackers.
Security researchers discovered 33 vulnerabilities in millions of devices using four popular open-source libraries. The bugs allow attacks, including remote code execution and DDoS.
Nation-state hackers with suspected links to Russia were behind the security breach at FireEye. The attackers stole Red Team tools and searched for government customer information.
