PDF document metadata can contain a variety of information that provides attackers with the reconnaissance details they need to execute a more targeted and sophisticated attack, including ID numbers.
UPS Canada has disclosed an extended data breach from February 2022 to April 2023. Attackers were able to access customer shipping information that should have been private, and are believed to have used some of it in an SMS phishing campaign.
Apria healthcare data breach has exposed the personal, medical, and financial information of up to 1.8 million individuals. The cyber intrusions occurred from April 5 to May 7, 2019, and from August 27 to October 10, 2021.
New report from Elliptic finds a major spike in cross-chain crypto laundering to $7 billion in the past year. North Korea's state-backed Lazarus group is a major driver, responsible for about 13% ($900 million) alone.
A cyber attack has compromised UK fashion retailer JD Sports with 10 million records of customer data stolen from online purchases made between November 2018 and October 2020.
Big data in politics has become big news in the United Kingdom as the Guardian newspaper reports that the vote for the UK to leave the European Union saw two international companies manipulating public opinion through the use of big data mining techniques.
A recent breach of biometrics giant Suprema has exposed 28 million records of facial recognition and fingerprint data including unencrypted username-password combinations stored in plain text.
Credential stuffing attacks directed at LiveJournal's social media service Dreamwidth appear to be fueled by a hack six years ago that exposed 26 million of their usernames and passwords.
Talos confirms that at least one known Cisco bug, CVE-2018-0171, was likely to have been actively exploited by Salt Typhoon. But the researchers say that the primary approach was to target legitimate existing credentials, likely through a variety of methods.
The death of a woman who needed urgent care at a German hospital is being blamed on equipment being unavailable due to a ransomware attack.
