Credit monitoring giant TransUnion has suffered an apparent Salesforce data breach, affecting over 4.4 million people, with ShinyHunters claiming responsibility.
The CRI guidance does not really focus on whether or not to make ransomware payments, instead stressing that victims should make early contact with law enforcement (regardless of their ultimate decision) and that they have many options to explore.
As cyber crime groups grow and "corporatize," they find themselves under pressure to keep up with wages. Operating expenses are largely devoted to paying employees and contractors for their work, with 80% a typical number.
German fuel suppliers have been hit by a cyber attack threatens fuel supply. Nature of attack has yet to be identified, but the extent of the disruption would indicate ransomware or a malicious malware attack that wiped files.
Ethereum DeFi system Polygon has announced that it patched a critical vulnerability that stood to put some $24 billion of its MATIC coins at risk. The company kept the issue quiet for weeks as it worked to patch it out.
WhatsApp accounts could be deactivated simply by sending a request from any email address, so long as the attacker knew the associated phone number. Going forward, the account deactivation process now involves a follow-up message that requests verification of ownership of the associated phone number.
A bad year for the security of cross-chain bridges continues as Nomad has been hit by a crypto hack that drained about $190 million in its stored funds.
New report from Elliptic finds a major spike in cross-chain crypto laundering to $7 billion in the past year. North Korea's state-backed Lazarus group is a major driver, responsible for about 13% ($900 million) alone.
Hackers were impersonating cybersecurity companies by sending phishing emails asking the target to callback to resolve potential network compromise. Victims are then guided to install remote administration tools.
Leading forklift manufacturer Crown Equipment has confirmed that the prolonged disruption resulted from a cyber attack by an international cybercriminal organization.
