Suspected state-sponsored hackers compromised at least 100 employees of at least 21 natural gas producers before staging a cyber attack on the eve of the Russian invasion.
Nikkei, the world’s largest business news outlet, which owns over 40 affiliates, including The Financial Times, and has more than 3.7 million paid subscribers and over 1.7 million daily readers, has confirmed a data breach that leaked personal information after threat actors compromised its Slack accounts.
Colorado Department of Higher Education (CDHE) has suffered a massive data breach leaking sensitive personal information of current and former students and educators spanning over a decade.
A phishing campaign by the North Korean government-linked hacking group Kimsuky is leveraging a malicious Chrome extension to steal Gmail emails from high-value targets.
Threat actors hijack thousands of reputable domains and subdomains to deliver over 5 million malicious emails daily in a mass ad fraud campaign dubbed SubdoMailing.
The 18th installment of the DBIR surveyed 22,052 total cyber attacks logged by Verizon's internal threat research team, over half of which (12,195) involved confirmed data breaches. Credential abuse continues in the lead at 22%. Exploitation of vulnerabilities is now up to 20%, followed by phishing at 16%.
Attackers exfiltrated sensitive data from thousands of websites, desktop, and mobile applications in a supply chain attack leveraging typo-squatting in popular NPM packages.
CISA added the Ransomware Readiness Assessment module to the CSET toolset to assist organizations of varying maturity levels to assess their cybersecurity posture against attacks.
Grab’s expansion has faced a number of challenges, not the least of which is a string of privacy breaches over the past two years.
The LabHost phishing service had been active since 2021 and was responsible for the theft of at least 480,000 credit and debit card numbers with 64,000 pin numbers. According to the London Metropolitan Police, university students were among the 37 suspects recently rounded up in a law enforcement operation that took down the LabHost phishing service.
