Report from Momentum Cyber finds that the first half of 2021 was the busiest on record for the cybersecurity market in terms of investment and strategic activity. The torrid pace has been indirectly driven by the massive spike in ransomware attacks.
For the first time in its publication history of nearly 20 years, Verizon's annual Data Breach Investigations Report (DBIR) is tracking vulnerability exploitation as the leading initial access method for attackers. Stolen credentials had been the #1 method for the entirety of the report's history up to this year.
Moltbook has been the talk of social media the past week, as its AI agent user base seemingly does everything from conspire against humanity to form new religions. But, relegated to the less sensational world of security news, a data leak has already exposed masses of API authentication tokens, private messages and email addresses.
The WeChat privacy questions stem from numerous users posting logins from unknown devices to their accounts, sometimes at very late and odd hours. Users are speculating about Chinese law enforcement inspecting accounts using some sort of a backdoor.
North Korean hackers are running cyber attacks that focus on fraudulent cash-outs at ATM machines by hacking payment systems, augmenting with use of social engineering elements.
Microsoft's threat research team says that the Chinese hackers breached at least two dozen organizations in total, including government email accounts at multiple federal agencies. Campaign reportedly began in mid-May.
The 2018 Marriott data breach was one of the biggest of its type in history, and was initially looking at receiving one of the biggest fines of £99 million. However, the UK ICO has reduced the penalty to £18.4 million.
Attack campaigns conducted against Ukrainian government agencies and businesses have been linked to an initial access broker that appears to be staffed with former members of the Conti ransomware gang.
About 26 Million Fortune 1000 Employee Credentials Available on the Dark Web, Password Reuse Rampant
SpyCloud found about 26 million Fortune 1000 employee credentials circulating on the dark web. Password reuse, weak passwords, and infostealers were responsible for the leaks.
FBI arrested a Russian hacker who offered a $1 million bribe to a Russian speaking Tesla employee to install malware for a ransomware attack.
