The NBA alerted fans of potential phishing attacks after a data breach on a third-party newsletter service provider leaked their personal information.
CISA/NSA Identity and Access Management Guidelines Provide Cybersecurity Guidance for Administrators
CISA and the NSA note that identity and access management vulnerabilities are a particular recent focus for certain state-backed threat groups, and that 40% of data breaches not involving user error or an insider are now facilitated by stolen credentials.
CISA notified 93 critical infrastructure organizations of the presence of a vulnerability that could lead to ransomware attacks, and plans to scale up the program and provide more warnings in the coming months.
The final amount of stolen crypto is still being tallied as investigations continue, but about 56 BTC (about $1.5 million) has been confirmed to be lost. General Bytes has over 15,000 bitcoin ATMs in circulation in over 100 countries.
Lists of unfamiliar chat titles were suddenly appearing in the ChatGPT website's sidebar. It turns out that a ChatGPT bug was displaying chat histories of other users randomly to other people.
Chinese hackers are now focusing on the outer layers of target networks, even antivirus software and firewalls, as an entry point for stealthy cyber attacks that can last for years.
The FBI arrested and charged a New York man Connor Brian Fitzpatrick with cybercrime. Connor is alleged to be the hacking forum “BreachForums” owner and operator, Pompompurin.
Pinduoduo, a popular Chinese shopping app has been suspended from the Google Play Store after traces of malware were found in the code of previous app versions. Suspected purpose was to pore through user data and find information related to competing shopping apps.
Australia’s Latitude Financial Services is investigating a data breach that impacted two third-party service providers, exposing hundreds of thousands of customer records.
The White House budget is seeking a $145 million increase in cybersecurity spending for CISA, $245 million for training cybersecurity professionals in the energy sector, $63 million for the FBI's cyber investigations division, and $215 million for the Treasury Department to implement zero trust architecture and generally bolster its cyber defenses.
