Remote workers faced a barrage of over 100,000 phishing attacks over the last four months, mostly involving the impersonation of Google-branded websites, according to a report by Barracuda Networks.
Hackers stole and published the login credentials of major tech and Fortune 500 companies, accessed CCTV cameras, and probed portals after breaching two large data centers in Asia.
A data leak at Lloyds Banking Group stemming from an IT glitch exposed the personal information of nearly half a million customers, enabling them to see each other’s transactions.
Iranian APT groups targeted critical infrastructure entities by exploiting known Microsoft Exchange Server and Fortinet vulnerabilities using malicious and legitimate tools.
Global shipping company Hipshipper used by Amazon, eBay, and Shopify sellers has suffered a data leak exposing over 14 million shipping records containing personal information.
Leaked document saw a Facebook engineer lament the international privacy regulations that the company is now subject to, describing them as a "tsunami." Facebook now faces some sort of user data compliance requirements in over 100 countries.
FlexBooker, a commonly used appointment scheduling and calendar service, is apologizing to its customers after 3.7 million records appeared on a dark web hacker forum following a DDoS attack.
A software security flaw in PayPal’s loan app leaked customer data for 6 months, forcing the payment giant to issue refunds after unauthorized transactions occurred in some affected accounts.
Google says it blocks 18 million daily malware and phishing emails related to COVID-19 plus another 240 million daily spam messages related to the coronavirus pandemic.
GitHub's State of the Octoverse report has found that open source vulnerabilities are continuing to go undetected for as long as four years on average and developers have an average patch time of roughly a month.
