A phishing campaign by the North Korean government-linked hacking group Kimsuky is leveraging a malicious Chrome extension to steal Gmail emails from high-value targets.
A mid-March data breach at Australian financial service provider Latitude was initially estimated as impacting a little over a quarter of a million of its customers. Latitude now says that 14 million records were exposed, including passport numbers.
Italian supercar maker Ferrari disclosed a data breach impacting an unknown amount of customer data after a hacker demanded ransom, a request that the company turned down.
GitHub has shared a DMCA filing from Twitter that indicates source code leak was apparently posted on the site shortly after Elon Musk's introductory round of layoffs began.
The NBA alerted fans of potential phishing attacks after a data breach on a third-party newsletter service provider leaked their personal information.
CISA/NSA Identity and Access Management Guidelines Provide Cybersecurity Guidance for Administrators
CISA and the NSA note that identity and access management vulnerabilities are a particular recent focus for certain state-backed threat groups, and that 40% of data breaches not involving user error or an insider are now facilitated by stolen credentials.
CISA notified 93 critical infrastructure organizations of the presence of a vulnerability that could lead to ransomware attacks, and plans to scale up the program and provide more warnings in the coming months.
The final amount of stolen crypto is still being tallied as investigations continue, but about 56 BTC (about $1.5 million) has been confirmed to be lost. General Bytes has over 15,000 bitcoin ATMs in circulation in over 100 countries.
Lists of unfamiliar chat titles were suddenly appearing in the ChatGPT website's sidebar. It turns out that a ChatGPT bug was displaying chat histories of other users randomly to other people.
Chinese hackers are now focusing on the outer layers of target networks, even antivirus software and firewalls, as an entry point for stealthy cyber attacks that can last for years.
