After the breach of Kaseya and thousands of clients downstream from it by REvil ransomware, the perpetrators disappeared abruptly but Kaseya appears to have received a decryption key nearly three weeks into the attack.
Saudi Aramco data breach leaking 1 TB of proprietary company information and full employee profiles came about due to a third party security lapse at an unnamed contractor.
F5 Labs says web application security is the greatest cybersecurity challenge, and the cause for more than half of all the largest software security incidents experienced over the last 5 years.
Report found that most organizations that suffered successful ransomware attacks since 2019 had perimeter defenses in place and had trained their employees on phishing.
The breach of the Microsoft Exchange email server software is estimated to have hit tens of thousands of victims. The Biden administration has formally declared that Chinese state-backed APT groups were behind the original cyber attacks.
Hackers accessed subscribers’ information and ported their mobile numbers in the Mint data breach after potentially compromising a subscriber management software or a user account.
The Pegasus spyware sold by NSO Group, supposed to only be available to law enforcement and intelligence agencies for legitimate and legal uses, appears to be widely available to repressive governments with little oversight.
New vulnerability disclosure rules announced by the Chinese government have raised the prospect of "zero-day hoarding," as anything discovered in the country must now be reported to the CCP and to no one else (in most cases).
As ransomware attacks surge and hackers become increasingly bold, the Biden administration is forging ahead with a package of new measures that includes up to $10 million for information that leads to the identification of attackers that hit critical infrastructure.
Nearly 100% of companies suffered at least one data breach in past 18 months. Most cited inadequate identity management and the lack of visibility as the major cloud security threat.
