The Chinese hackers were able to dwell for at least several months in 2023 and captured about 5% to 10% of all of the emails sent by the Belgian State Intelligence Service during that time.
A massive data breach has struck the American background screening and drug and alcohol testing service DISA Global Solutions impacting over 3.3 million people.
The Chinese hackers are able to run a massive but stealthy campaign of password-spraying attacks while evading logs, targeting Microsoft 365 accounts that require only basic authentication and do not have MFA enabled.
A disgruntled Black Basta ransomware gang member has leaked extensive chat logs containing various details, including phishing templates and cryptocurrency addresses.
Global shipping company Hipshipper used by Amazon, eBay, and Shopify sellers has suffered a data leak exposing over 14 million shipping records containing personal information.
The total take for the Lazarus hackers was over 400,000 ETH and stETH valued at about $1.5 billion in total. The public report of the crypto theft triggered a wave of about 580,000 withdrawal requests. Bybit says that it has weathered that bank run.
U.S. federal authorities have warned about Ghost ransomware attacks targeting various industries, including critical infrastructure, in over 70 countries. “Beginning...
Talos confirms that at least one known Cisco bug, CVE-2018-0171, was likely to have been actively exploited by Salt Typhoon. But the researchers say that the primary approach was to target legitimate existing credentials, likely through a variety of methods.
As of February 21, Apple device users in the UK began seeing a notice that the iCloud end-to-end encryption feature is no longer available in their region. That stems from a secret order recently issued by the Home Office, only made known to the public due to inside sources leaking it to the media, requiring Apple to start implementing backdoor access to encrypted cloud data and to begin complying immediately.
Google's long-running project to eliminate cookies from Chrome is about to wind up, but it has come with a reversal of course that now allows device fingerprinting. The new Google rules were quietly announced in December of last year but seemed to slip beneath the radar.
