Operations at numerous European airports, including the continent’s busiest, Heathrow Airport, were disrupted by a cyber attack affecting a boarding and check-in software provider.
State Farm, the insurance giant with more than 83 million customers, was hit by a credential stuffing attack with unknown number of customer accounts compromised.
Many organizations affected by Log4j’s zero-day vulnerability with mass internet scanning detected, suggesting the remote code execution flaw was actively targeted in the wild.
A Palantir rant against "business as usual" in Silicon Valley criticized the valley's various tech giants as being out of touch with the needs of American people.
Scattered Spider, ShinyHunters, and LAPSUS$ are the three groups involved, and have collectively been the most active of the major cybercrime gangs over roughly the past year. The groups all had prior ties via "The Com," a broader collection of cyber criminals that loosely affiliate and come together for singular projects in a fluid way.
A Hong Kong deepfake scam that netted HK$200 million made use of a fake video conference with multiple company executives. The employee that was targeted reportedly did suspect fraud at first, but nevertheless ended up making a total of 15 bank transfers.
Many have raised privacy concerns over FBI’s plan to develop a social media surveillance tool which will proactively identify and reactively monitor persons of interest or suspects in ongoing cases.
A subdomain of Ferrari was compromised and used to host an NFT scam, but appears to have netted only a few hundred dollars in Ethereum before it was identified and taken down.
The decision to scrap the data protection bill came from a parliamentary review process. IT minister Ashwini Vaishnaw has told reporters that work was already underway on a new personal data law, no doubt to the delight of big tech companies.
A major data breach at health insurance giant Blue Shield of California appears to be a case of misconfiguring advertising analytics tools. Between April 2021 and January 2024, Google Analytics was misconfigured causing some personal information and potentially sensitive health data related to claims and searches to be available to Google’s ad network.
