Threat group has a specific focus on corporate M&A that are in the works. This mass cyber espionage campaign has been going on since at least December 2019.
The mass shift to working from home precipitated by the Covid-19 pandemic created massive security challenges. A full 30% of remote workers under the age of 24 say that they circumvent or ignore security policies when they get in the way of getting work done.
Online shopping platform Pandabuy confirms a data breach that impacted over 1.3 million customers after an apparent cover-up when data surfaced on BreachForums.
Threat actor is offering the alleged WhatsApp data leak for a relatively low cost, dividing it up by country of origin and offering each package for prices in the range of several thousand dollars via a dark web forum.
A rash of car thefts has erupted as some of the Korean car-makers models have a USB-A shaped slot that can be exposed by removing the steering column cover, and this slot grants direct access to the engine.
As cyber crime groups grow and "corporatize," they find themselves under pressure to keep up with wages. Operating expenses are largely devoted to paying employees and contractors for their work, with 80% a typical number.
U.S. Cyber Trust Mark, a labeling program intended to make the relative security level of smart devices more apparent to consumers, is based on a NIST standard first put forward in a February 2022 white paper, addressing a longstanding problem with shortcomings in IoT security.
Infosec firm Qualys admitted it was an Accellion FTA data breach victim but denied experiencing a ransomware attack after the Clop ransomware gang published customer order documents.
Use of 'pandemic drones' to enforce social distancing has come under fire over concerns of possible privacy violations. The police surveillance drones would yell at people not observing the rules and also have sensors to detect health conditions.
The White House may be at risk of cyber attacks with the recent exodus of at least a dozen senior officials from the cyber security team and the removal of duties and security privileges of those remaining.
