Posing as Quanta Computer, Lithuanian took $100 million from Google and Facebook through a phishing scam involving email spoofing and forged paperwork. How can companies protect themselves against business email compromise?
Some of the largest ad companies alleged to have quietly paid millions of dollars to some of the largest ad blocker companies to be able to continue to track and target consumers with ads.
The greatest present threat to CI/CD security is insufficient flow control, or a lack of mechanisms in place to require additional approval prior to allowing code to be pushed down the pipeline.
For the most part the exposure appears to have been limited to names and bank details for both active members of the UK armed forces and veterans. The UK government has named SSCL, a business services provider, as the source of the third party breach.
Citizen Lab reports that the new Pegasus spyware zero-click zero-day impacts the most recent version of iOS (16.6) and likely prior versions dating back to the iPhone 8. As with the prior Pegasus attack vector, victims only need to receive a iMessage to be compromised; they do not need to open the message or interact with it.
The FBI software is used for keyword-based social media tracking and advertises a "predictive analytics" feature, leading to natural questions about its potential use for surveillance.
Figure Technology Solutions, a fintech company specializing in blockchain lending, borrowing, and trading, was hit by a data breach that leaked the PII of nearly a million people.
The attack has been attributed to an older remote access trojan that was able to take out 49% of the modems from the ISP's ASN, in what is believed to be a targeted cyber attack intended to cause a prolonged outage of internet routers.
Spanish data protection authority AEPD called the two infringements that led to the GDPR fine "very serious." Both relate to Google's transfer of EU citizen data to the US.
A cyber attack disclosed by Clorox in mid-August is now expected to negatively impact first quarter results for 2024 due to "widescale disruption" that the company is still struggling to recover from. A recent SEC filing indicates that product shortages through this period should also be expected.
