Hackers have demanded a ransom and threatened to release private financial data stolen after a Paris Olympic venue, the Grand Palais exhibition hall, was hit by a ransomware attack.
The headline items from the 2024 Verizon DBIR include a 180% jump in vulnerability exploitation from 2023's numbers, and non-malicious employee elements continuing to play a role in over two-thirds of breaches as phishing remains a major threat.
The 18th installment of the DBIR surveyed 22,052 total cyber attacks logged by Verizon's internal threat research team, over half of which (12,195) involved confirmed data breaches. Credential abuse continues in the lead at 22%. Exploitation of vulnerabilities is now up to 20%, followed by phishing at 16%.
A new regulatory filing disclosed that genetic testing company 23andMe leaked the ancestry information of nearly 7 million users in the October 2023 data breach.
A credential stuffing attack on biotechnology firm 23andMe has resulted in a data theft incident exposing millions of genetic profiles and personal data records.
23andMe's defense as regards data privacy laws is essentially to claim that a data breach did not actually occur, given that the incident stemmed from the failure of certain users to change passwords that had been exposed elsewhere.
There are two pieces of legislation already in front of Congress that would set reporting requirements for ransomware payments, each proposing different time windows for different industries and company sizes. A third now seeks a 48-hour limit.
Microsoft announced a breach where they uncovered misconfigured security rules in one internal database that exposed 250 million customer service records for almost whole of December.
Officials have warned that the NHS patient data stolen in the University of Manchester cyber attack could become publicly available with potential ramifications. The incident impacted UoM, which holds patient information of 1.1 million patients across 200 hospitals.
A two-day international summit held in the UK has concluded with an agreement on AI safety, with 28 countries that represent most of the leading forces in AI development getting on board.
