In at least two of the attacks, those on Co-op and Marks and Spencer, the DragonForce group is confirmed to have used very similar social engineering approaches to convince the IT help desks to have an employee password reset.
UK retailer the Co-op has confirmed and apologized for the data theft stemming from a cyber attack on its systems, claimed by the Dragonforce ransomware operation.
UK retailer Harrods is the most recent victim of a cyber attack, hot on the heels of similar cybersecurity incidents affecting Marks & Spencer and the Co-op, prompting an NSCS advisory.
Microsoft claims that its new passwordless methods reduce password use by over 20% and result in users signing in faster. The company added passkeys as an option for personal accounts along with a password manager for Windows Hello early last year.
Canadian power utilities Emera and Nova Scotia have suffered cyber attacks that forced the companies to shut down some business application servers.
Opet notes that the SaaS model is usually the default option for whatever software a company might need, and often is the only option available. That means a global concentration of risk such that numerous third-party security breaches could cascade.”
Called the "Policy Puppetry Attack," the new prompt injection attack focuses on formatting requests to look like the contents of one of the policy files that AI models rely on for their security and safety guidelines.
Dialysis company DaVita has suffered an Interlock ransomware attack that disrupted some operations and allegedly leaked over 1.5 terabytes of sensitive patient data.
SK Telecom, South Korea’s largest mobile network operator, warns about a malware attack that leaked sensitive USIM data, exposing subscribers to potential SIM swaps and surveillance.
A new report from Google's Threat Intelligence Group (GTIG) finds that 75 zero-days were exploited in the wild last year, with a little over half involving spyware.
