SolarWinds hack may impact cloud services from major providers such as Microsoft and Amazon, especially since the Orion software stores API keys and other security credentials.
Personal information of over 80 million U.S. households was exposed from an unsecured cloud database, while the owner of the database remains unknown.
The world’s third-largest cybersecurity company Fortinet has disclosed a data breach after a threat actor Fortibitch leaked 440 GB of the company’s allegedly stolen SharePoint data.
KELA found that the sale of network initial access methods in underground forums was worth millions of dollars, and brokers resorted to selling in private conversations.
51 top CEOs from companies such as Amazon, IBM, Dell and JP Morgan Chase are pushing for new federal privacy legislation to establish a stable privacy policy environment.
The U.S. Department of Justice has charged five members of the cybercrime gang Scattered Spider for related cyber attacks affecting numerous individuals and organizations, including Okta, Caesars Entertainment, Twilio, DoorDash, MailChimp, Reddit, and Riot Games.
Telegram, one of the leading privacy-first messaging apps, has become home to a cybercrime ecosystem comparable to dark web forums. It allows for building very large private groups and the use of bots.
The FBI confirmed that North Korea’s state-sponsored hacking group Lazarus carried out the $100 million Horizon bridge crypto theft. The agency said it successfully stopped the transfer of some stolen assets and subsequently published wallet addresses with purloined cryptocurrencies.
The attack on the OpenSea NFT marketplace does not appear to be a code issue or vulnerability, the phishing attacks apparently involved unknown threat actors approaching individual users and tricking them into signing a malicious payload.
An international law enforcement campaign that began in 2020 culminated in the infiltration and control of the botnet's infrastructure, with a beneficial payload delivered to infected devices that scrubs the Emotet malware.
