Scott Ikeda, Senior Correspondent at CPO Magazine

Russian hacker in front of a laptop showing HPE security breach of email

HPE Security Breach: Company Reports Russian Hackers in Its Email Environment

January 29, 2024

The HPE security breach is not known to be related to the recent announcement from Microsoft that Russian hackers had penetrated the inboxes of its senior leadership. It instead appears to have a connection to a May 2023 attack that the company had previously disclosed.

Hacker typing password on laptop showing data leak

Cyber Security News

“Mother of All Breaches” Data Leak Pulls Together 26 Billion Records From Thousands of Prior Breaches

January 26, 2024

The 1.2 terabyte MOAB file is broken up into over 3,800 folders, each one representing a prior data leak that saw personal information or credentials make their way to the open internet. In total there are over 26 billion records.

Microsoft office building showing Russian state-sponsored hackers security breach

Cyber Security News

Russian State Sponsored Hackers Behind Microsoft’s Corporate Email Security Breach

January 25, 2024

Microsoft has named "Midnight Blizzard," an established team of Russian state sponsored hackers also referred to as NOBELIUM and Cozy Bear, as the culprit behind a recent security breach that compromised high-level corporate email accounts.

Hands typing on keyboard with unlocked padlock showing leaked credentials and passwords

Cyber Security News

71 Million Leaked Credentials From Naz.API Stolen Account List Added to Have I Been Pwned

January 22, 2024

Leading data breach cross-checking service Have I Been Pwned has added about 71 million email addresses from "Naz.API," a new dataset circulating on the dark web that contains a massive collection of leaked credentials and plaintext passwords.

Computer code on a screen with a skull showing crypto drainer malware

Cyber Security News

$87 Million Lost to Crypto Drainer as Inferno Malware Fools Customers With Coinbase, Seaport Connection Protocols

January 18, 2024

The Inferno Drainer malware that plagued the crypto world throughout 2023 ultimately compromised about 130,000 victims and stole about $87 million in total, according to a new report from Group-IB. It was part of a broader movement of "crypto drainer" services that some security experts believe is poised to become the next big thing in cybercrime in 2024.

Data Protection News

New GDPR Complaint Filed Against Meta by noyb; Company Accused of Ignoring Right to Withdraw Consent With “Privacy Fee”

January 18, 2024

noyb's GDPR complaint asserts Meta’s privacy fee makes it impossible for existing service users to withdraw consent without paying. That in turn flies in the face of a GDPR stipulation (found in Article 7).

Programmer working on computer showing AI developers and cyber threats

Cyber Security News

NIST Warns AI Developers of “Poisoning” Methods, Cyber Threats That Reverse Engineer Models

January 15, 2024

NIST has released a guideline paper meant to give AI developers a bird's-eye view of potential cyber threats that may present during the development and early deployment of their models.

Wall Street building in New York City showing SEC's X account hack with approval of Bitcoin ETF

Cyber Security News

Hack of SEC’s X Account Used to Prank the Crypto World With News of Bitcoin ETF Approval

January 12, 2024

The crypto world has been anticipating the approval of Bitcoin ETFs by the SEC. A group of hackers touched off premature celebration on Tuesday when they gained control of the SEC's X account, using the unauthorized access to post a fake approval message.

User typing password showing 23andMe data breach blamed on password reuse

Cyber Security News

23andMe Responds to Data Breach Lawsuit by Blaming Customers for Re-Using Passwords

January 10, 2024

23andMe's defense as regards data privacy laws is essentially to claim that a data breach did not actually occur, given that the incident stemmed from the failure of certain users to change passwords that had been exposed elsewhere.

OpenAI on cell phone screen showing EU data privacy rules

Data Protection News

OpenAI Shifts EU Data Privacy Responsibility to Dublin Office

January 10, 2024

A recent change to its EU terms of service and an email sent out to some ChatGPT users indicates that OpenAI is now formally under the watch of the Irish DPC in terms of its responsibility to EU data privacy regulations.

HPE Security Breach: Company Reports Russian Hackers in Its Email Environment

“Mother of All Breaches” Data Leak Pulls Together 26 Billion Records From Thousands of Prior Breaches

Russian State Sponsored Hackers Behind Microsoft’s Corporate Email Security Breach

71 Million Leaked Credentials From Naz.API Stolen Account List Added to Have I Been Pwned

$87 Million Lost to Crypto Drainer as Inferno Malware Fools Customers With Coinbase, Seaport Connection Protocols

NIST Warns AI Developers of “Poisoning” Methods, Cyber Threats That Reverse Engineer Models

Hack of SEC’s X Account Used to Prank the Crypto World With News of Bitcoin ETF Approval

23andMe Responds to Data Breach Lawsuit by Blaming Customers for Re-Using Passwords

Data Breach at Denmark’s Central Population Registry Impacts 8.8 Million People

ASOS Data Breach Led to Customers Receiving Unauthorized Push Notifications

Wikimedia: Rogue AI Agents Traced Back to OpenAI Made Unauthorized Edits, Attempted to Compromise Etherpad

A Wave of AI-Powered Cyber Attacks Hits Numerous South Korean Banks, Exposing Sensitive PII