Cybersecurity firm Kaspersky Lab has discovered an iOS malware variant spreading via an iPhone zero-click exploit in iMessage. Russia has accused the NSA of targeting the country’s diplomatic missions and Apple of providing backdoors.
The investment research firm’s first disclosed data breach took place between November 2021 and August 2022, and a notification on January 25 of this year indicated that 820,000 customers were impacted. That number has now been revised to 8.8 million.
An adware campaign involving over 60,000 Android apps has infected devices since October 2022. Researchers warned that the infected Android apps could start distributing potent malware, including credential stealers, banking trojans, and ransomware.
Motherboards from one of the world's biggest manufacturers have a firmware backdoor present that impacts systems running Windows. Gigabyte motherboards are most commonly found in high-end gaming PCs, and collectively there may be millions of tainted pieces of hardware.
Ransomware gang Cl0p posted a list of victims of its MOVEit cyber attacks. Among what it calls the 'first batch' of its targets are both federal and state government agencies, major banks and investment firms, and universities.
An Illinois hospital has attributed its permanent shutdown to a ransomware attack that disrupted healthcare, communication, and IT systems, preventing it from making insurance claims.
A complaint about the company's data access request process is set to cost Spotify €5 million in fines, though it took four years of wrangling to determine that a GDPR violation took place.
After being informed of the planned launch of the AI chatbot in the EU, the DPC instructed Google to file a data protection impact assessment. The launch is waiting on Google to address privacy concerns.
A joint advisory detailing LockBit ransomware’s tactics and mitigations disclosed that the cybercrime gang extorted $91 million from US companies since 2020 after 1,700 attacks.
Oregon DMV and Louisiana OMV were impacted by the MOVEit cyber attack exposing sensitive information of virtually all the states’ ID and driver’s license holders.
