Security Affairs

DECEMBER 23, 2023

Accesses to personal accounts of Companies House customers of Xeinadin. The gang threatens to publish the data if the company does not contact them within the deadline of 25 December 2023. “We suggest Xeinadin management to contact us and correct their mistakes, preventing a huge leak of customer data. .

Ransomware 121

Ransomware Data breaches Access IT 121

Krebs on Security

DECEMBER 13, 2022

Federal Bureau of Investigation (FBI) to build cyber and physical threat information sharing partnerships with the private sector, this week saw its database of contact information on more than 80,000 members go up for sale on an English-language cybercrime forum. InfraGard , a program run by the U.S.

Sales 360

Sales Energy and Utilities Communications Data breaches 360

Krebs on Security

SEPTEMBER 20, 2021

In a bid to minimize these scenarios, a growing number of major companies are adopting “ Security.txt ,” a proposed new Internet standard that helps organizations describe their vulnerability disclosure practices and preferences. An example of a security.txt file. well-known/security.txt. ” GET READY TO BE DELUGED.

Retail 300

Retail Security Encryption IT 300

Krebs on Security

MARCH 23, 2021

The phishers had access for more than 24 hours, and sources tell KrebsOnSecurity the intruders used that time to steal Social Security numbers and sensitive files on thousands of state workers, and to send targeted phishing messages to at least 9,000 other workers and their contacts. Source: sco.ca.gov. .

Phishing 274

Phishing Data breaches Access Passwords 274

Krebs on Security

MARCH 20, 2024

The site offers to sell a report containing photos, police records, background checks, civil judgments, contact information “and much more!” ” Imagine that: Two different people-search companies mentioned in the same story about fantasy football. How many more fake companies and profiles are connected to this scheme?

Marketing 244

Marketing Cloud Privacy Data Privacy 244

Security Affairs

JANUARY 25, 2024

Cisco addressed a critical flaw in its Unified Communications and Contact Center Solutions products that could lead to remote code execution. Cisco released security patches to address a critical vulnerability, tracked as CVE-2024-20253 (CVSS score of 9.9), impacting multiple Unified Communications and Contact Center Solutions products.

Communications 115

Communications IT Access Security 115

Security Affairs

OCTOBER 27, 2023

The Boeing Company, commonly known as Boeing, is one of the world’s largest aerospace manufacturers and defense contractors. The gang claims to have stolen a huge amount of sensitive data from the company and threatens to publish it if Boeing does not contact them within the deadline (02 Nov, 2023 13:25:39 UTC).

Ransomware 129

Ransomware Manufacturing Military Sales 129

Security Affairs

SEPTEMBER 17, 2023

According to the statement published on the CardX official website on September 15th, the company experienced a cybersecurity incident that exposed personal information related to personal loan and cash card applications. The company assures that this information cannot be used for financial transactions.

Cybersecurity 126

Cybersecurity Access Security IT 126

Security Affairs

JANUARY 10, 2024

The company immediately launched an investigation into the incident and discovered that threat actors in August gained access to a company server and stolen unencrypted files. The company recommends that impacted individuals monitor account statements, explanations of benefits, and credit bureau reports.

Data breaches 99

Data breaches Ransomware Access Security 99

Security Affairs

MARCH 12, 2024

In practice, fake insurance operators contact victims through calls, messages, or sponsorships on social networks, offering policies at advantageous prices. After the first contact via instant messaging channels, further documents are then requested and a quote is provided.

Insurance 96

Insurance Education Sales Personal data 96

Security Affairs

APRIL 10, 2024

A ransomware group contacted the organization claiming the theft of data. Our discovery was confirmed when the attacker, a foreign ransomware gang, contacted GHC-SCW claiming responsibility for the attack and stealing our data,” continues the notification letter.

Data breaches 111

Data breaches e-Discovery Ransomware Insurance 111

Krebs on Security

FEBRUARY 14, 2024

Roughly a week ago, KrebsOnSecurity was contacted by Hold Security , a Milwaukee-based cybersecurity firm. Internet’s CEO Travis Carter , KrebsOnSecurity forwarded one of Mr. Carter’s own recent emails to him, along with a request to understand how exactly the company managed to screw things up so spectacularly.

Education 333

Education Data breaches Government Security 333

Security Affairs

APRIL 8, 2024

The company announced that it deleted DOJ data from its systems after the incident. According to the data breach notification sent by Greylock McKinnon Associates to the Main Attorney General, the company was the victim of a sophisticated cyberattack. The data breach occurred on May 30, 2023, and was discovered on February 7, 2024.

Data breaches 107

Data breaches Insurance Cybersecurity Government 107

Krebs on Security

APRIL 5, 2021

“The company has been hacked, data has been stolen and will soon be released as the company refuses to protect its peoples’ data.” ” The message above was sent to a customer of RaceTrac Petroleum , an Atlanta company that operates more than 650 retail gasoline convenience stores in 12 southeastern states.

Ransomware 286

Ransomware Personal data Retail Privacy 286

Security Affairs

OCTOBER 27, 2023

Cybernews contacted the company for an official comment but received no reply at the time of writing. In 2018, business magazine Fast Company selected the company as one of the Top 50 Most Innovative Companies in the World. Launched nine years ago, the New York-based platform has publicly raised $56.5

Authentication 101

Authentication Passwords Access Privacy 101

Security Affairs

JANUARY 30, 2024

Schneider Electric is a multinational company that specializes in energy management, industrial automation, and digital transformation. BleepingComputer first reported the attack that hit the Sustainability Business division of the company on January 17th. BleepingComputer contacted Schneider Electric which confirmed the data breach.

Ransomware 123

Ransomware Data breaches Digital transformation Encryption 123

Security Affairs

NOVEMBER 2, 2023

Boeing confirmed it is facing a cyber incident that hit its global services division, the company pointed out that flight safety isn’t affected. The Boeing Company, commonly known as Boeing, is one of the world’s largest aerospace manufacturers and defense contractors. In 2022, Boeing recorded $66.61

IT 100

IT Ransomware Manufacturing Military 100

The Last Watchdog

FEBRUARY 5, 2024

Fortunately, effective tools and wise best practices can help mitigate this this exposure enabling companies to indefinitely leverage Exchange Server as a productive, resilient and secure communications tool. One critical issue faced by organizations that rely on Exchange Server is the risk of a corrupt Exchange Server database cropping up.

Risk 239

Risk Cloud Communications Education 239

Krebs on Security

NOVEMBER 2, 2023

Drops are responsible for inspecting and verifying the contents of shipments, attaching the correct shipping label to each package, and sending them off via the appropriate shipping company. The contact information for Kareem , a young man from Maryland, was listed as an active drop. A SWAT panel for stuffers/customers.

Marketing 260

Marketing Retail Blockchain Communications 260

Security Affairs

SEPTEMBER 30, 2023

Exposed records include customers’ names, addresses, dates of reservation, payment method, and contact information. TB) containing names, addresses, dates of reservation, payment method, and contact information. We are giving you 5 days before a catastrophe occurs for your company.”

Ransomware 111

Ransomware Manufacturing Risk IT 111

Security Affairs

DECEMBER 30, 2023

The researcher contacted the company about the leak, and the misconfiguration was promptly fixed. The company has yet to respond to a Cybernews request for an official comment on the matter. The company is registered in Hong Kong. Total exposure time was no longer than 24 hours.

Risk 110

Risk IoT Cybersecurity Access 110

Security Affairs

JANUARY 28, 2024

As of 2022, the company reported an annual ridership of 10,572,100. The company disclosed that attack on January 24, it immediately launched an investigation into the incident and notified appropriate authorities. The company hired external experts to restore impacted systems. ” reads the notice published by the company.

Ransomware 97

Ransomware Data breaches IT Information Security 97

Security Affairs

APRIL 11, 2024

” The company did not attribute the targeted attacks to “any specific state-sponsored attacker” “Initially, Apple explicitly referred to “state-sponsored attacks.” ” Apple started sending such kind of threat notifications in 2021, and since then the company has notified users in more than 150 countries. .”

MDM 87

MDM Cybersecurity Government IT 87

Security Affairs

NOVEMBER 22, 2023

TmaxSoft, a Korean IT company developing and selling enterprise software has leaked over 50 million sensitive records. Our team attributed the dashboard to tmax.co.kr – a website owned by TmaxSoft, one of the Tmax brand companies. The 2 TB-strong Kibana dashboard has been exposed for over two years.

Metadata 103

Metadata Access Cloud IT 103

Schneier on Security

DECEMBER 12, 2022

Apple says the only “major” categories not covered by Advanced Data Protection are iCloud Mail, Contacts, and Calendar because “of the need to interoperate with the global email, contacts, and calendar systems,” according to its press release.

Encryption 116

Encryption Access IT Cloud 116

Security Affairs

FEBRUARY 19, 2024

Schneider Electric is a multinational company that specializes in energy management, industrial automation, and digital transformation. In January, BleepingComputer first reported the attack that hit the Sustainability Business division of the company on January 17th. Cactus Ransomware has just posted Schneider Electric.

Ransomware 100

Ransomware Digital transformation Encryption Retail 100

Security Affairs

JANUARY 31, 2024

Direct Trading Technologies, an international fintech company, jeopardized over 300K traders by leaking their sensitive data and trading activity, thereby putting them at risk of an account takeover. Cybernews contacted the company with our findings. The file shows that some clients are called “idiots” in the company’s system.

Metadata 113

Metadata Passwords Risk Cybersecurity 113

The Guardian Data Protection

MAY 20, 2020

Outsourcer apologises for leaking details of 296 people assisting UK’s Covid-19 fight Coronavirus – latest updates See all our coronavirus coverage The outsourcing company Serco accidentally shared the email addresses of almost 300 contact tracers recruited to assist in the UK government’s coronavirus “test, track and trace” strategy.

IT 145

IT Privacy 145

Security Affairs

DECEMBER 19, 2022

Attackers impersonate legitimate companies and order food products without paying them, according to US agencies threat actors have stolen high-valued shipments from multiple businesses. Crooks create email accounts and websites mimicking those of a legitimate company. ” reads the joint Cybersecurity Advisory (CSA).

Agriculture 116

Agriculture Communications Sales Access 116

Security Affairs

OCTOBER 6, 2023

Hospitality and entertainment company MGM Resorts announced that the costs of the recent ransomware attack costs exceeded $110 million. In September the hospitality and entertainment company MGM Resorts was hit by a ransomware attack that shut down its systems at MGM Hotels and Casinos. ” reads the 8-K report filed with SEC.

Ransomware 114

Ransomware Insurance Cybersecurity IT 114