Data Breach Today

SEPTEMBER 7, 2022

Ongoing Attack Affects Hospitality Chain's Reservation System Patrons of InterContinental Hotels Group hotels might need to call the front desk rather than book hotel rooms online due to an ongoing cyberattack.

Cybersecurity 246

Cybersecurity 246

Data Breach Today

JANUARY 4, 2024

Hackers Lock Up Recordings of Court Hearings to Extort Victoria's Court System The court system of Victoria said it had experienced a serious cybersecurity incident in late 2023 that gave hackers access to video recordings of proceedings at multiple courts, including the Supreme Court and the County Court. The hack took place on Dec.

Ransomware 279

Ransomware Cybersecurity Access IT 279

Krebs on Security

JANUARY 30, 2024

Sources close to the investigation tell KrebsOnSecurity the accused was a key member of a criminal hacking group blamed for a string of cyber intrusions at major U.S. Multiple security firms soon assigned the hacking group the nickname “ Scattered Spider.” 9, 2024, U.S. technology companies during the summer of 2022.

Passwords 305

Passwords Phishing Access Encryption 305

Data Breach Today

AUGUST 20, 2021

ClearSky: Attackers Lure Victims With Fake Job Offers Researchers at cybersecurity firm ClearSky say an Iranian APT group, dubbed "Siamesekitten," is targeting Israeli companies in a supply chain attack campaign. The attackers are luring victims with fake job offer emails that direct recipients to websites that download malware.

Cybersecurity 284

Cybersecurity 284

Data Breach Today

AUGUST 10, 2021

Pondurance: Ransomware Group Utilized Backdoors That Persist Some patched on-premises Microsoft Exchange email servers are still proving to be vulnerable. The Conti ransomware group is now leveraging backdoors that persist, cybersecurity consulting firm Pondurance reports.

Ransomware 293

Ransomware Cybersecurity 293

Data Breach Today

AUGUST 27, 2021

Pen-Testing Accreditation Body Says NCC Group Will Revamp Policies and Monitoring Accreditation organization CREST has concluded an investigation into whether NCC Group employees cheated on its penetration-testing exams, finding that the cybersecurity business's training materials violated its rules.

Compliance 300

Compliance Cybersecurity IT 300

Data Breach Today

APRIL 19, 2021

Unified Coordination Groups Were Created to Respond to Cybersecurity Incidents The White House announced Monday that it is "standing down" two Unified Coordination Groups that were created to coordinate the federal response to the SolarWinds supply chain attack and attacks on vulnerable on-premises Microsoft Exchange email servers.

Cybersecurity 315

Cybersecurity IT 315

Data Breach Today

APRIL 9, 2021

ISMG Editors Discuss Hot Topics, Including Health Data Breaches Four editors at Information Security Media Group discuss important cybersecurity issues, including President Biden’s latest cybersecurity proposals and large vendor-related breaches in healthcare.

Cybersecurity 313

Cybersecurity Data breaches Information Security Security 313

Data Breach Today

AUGUST 6, 2021

Also: Dealing With COVID-19 Business Recovery; Zynga Case Goes to Arbitration In the latest weekly update, four editors at Information Security Media Group discuss important cybersecurity issues, including improving federal agencies' cybersecurity and businesses recovering from the pandemic's impact.

Cybersecurity 274

Cybersecurity Government Information Security Security 274

Data Breach Today

APRIL 18, 2022

New guidance provides healthcare entities and medical device makers a jump-start for negotiating critical cybersecurity issues pertaining to procurement contracts, says Jim Jacobson of device manufacturer Siemens Healthineers, co-chair of an industry group that developed the contract template.

Cybersecurity 258

Cybersecurity Manufacturing 258

Data Breach Today

MAY 14, 2020

CISA Warns That Lazarus Group Has Added 3 New Tools A sophisticated hacking group associated with the North Korean government that's been tied to a number of high-profile attacks, including WannaCry, is using three new malware variants, according to the U.S.

Cybersecurity 301

Cybersecurity Government Security 301

Data Breach Today

JUNE 10, 2021

hammers out national infrastructure legislation, implements President Biden's recent cybersecurity executive order and adopts other related initiatives, more attention and funding needs to be allocated to strengthen the healthcare sector's cybersecurity posture, industry groups urge.

Cybersecurity 261

Cybersecurity Security 261

Data Breach Today

APRIL 21, 2023

Eset Says Discovery Solidifies North Korea's Ties to 3CX Attack A North Korean backdoor targeting Linux desktop users shares infrastructure with the hacking group behind the 3CX software supply chain hack.

Cybersecurity 176

Cybersecurity IT 176

Krebs on Security

JUNE 29, 2023

Nikita Kislitsin , formerly the head of network security for one of Russia’s top cybersecurity firms, was arrested last week in Kazakhstan in response to 10-year-old hacking charges from the U.S. ”] Kislitsin was hired by Group-IB in January 2013, nearly six months after the Formspring hack. Department of Justice.

Cybersecurity 236

Cybersecurity Passwords Government Security 236

Data Breach Today

MARCH 26, 2021

Editors Address Exchange Hacks, Insider Threats and More Four editors at Information Security Media Group review the latest cybersecurity issues, including Microsoft Exchange server hacks, insider threat management and implementing a "collective defense."

Cybersecurity 300

Cybersecurity Information Security Security 300

KnowBe4

JULY 27, 2023

Amid potential concerns by governments, customers, and prospects about ties with the Russian government, the cybersecurity vendor Group-IB continues in its promise to separate itself from Russia.

Cybersecurity 79

Cybersecurity Marketing Government IT 79

Security Affairs

APRIL 16, 2024

The Dark Angels (Dunghill) ransomware group claims the hack of the chipmaker Nexperia and the theft of 1 TB of data from the company. The Dark Angels (Dunghill) ransomware group claims responsibility for hacking chipmaker Nexperia and stealing 1 TB of the company’s data. The chipmaker has 14,000 employees as of 2024.

Ransomware 110

Ransomware Manufacturing Insurance Cybersecurity 110

Data Breach Today

JANUARY 21, 2023

Crypto Mining Campaign Targets Public Cloud Environments, Increases Security Risks Cybersecurity researchers say a Chinese for-profit threat group tracked as 8220 Gang is targeting cloud providers and poorly secured applications with a custom-built crypto miner and IRC bot.

Cloud 157

Cloud Mining Risk Cybersecurity 157

Data Breach Today

APRIL 3, 2019

Mark Warner Several industry groups have offered suggestions - ranging from better cyber information sharing to new regulatory "safe harbors" for entities complying with best practices - in response to Sen. Mark Warner's recent request seeking ideas for improving healthcare sector cybersecurity.

Cybersecurity 155

Cybersecurity 155

Krebs on Security

FEBRUARY 9, 2023

Department of the Treasury says the Trickbot group is associated with Russian intelligence services, and that this alliance led to the targeting of many U.S. Members of the Trickbot Group publicly gloated over the ease of targeting the medical facilities and the speed with which the ransoms were paid to the group.”

Ransomware 185

Ransomware Government Cybersecurity Blockchain 185

Krebs on Security

SEPTEMBER 30, 2023

Earlier this week, KrebsOnSecurity revealed that the darknet website for the Snatch ransomware group was leaking data about its users and the crime gang’s internal operations. ru, the very same account Truniger used to recruit hackers for the Snatch Ransomware group back in 2018. ru account and posted as him.

Ransomware 206

Ransomware Data breaches Encryption Systems administration 206

Data Breach Today

FEBRUARY 15, 2021

SentinelOne and Tenable Also Make Notable Acquisitions Security firms Herjavec Group, SentinelOne and Tenable were all involved in merger and acquisition activity this past week, continuing a consolidation wave within the cybersecurity industry.

Cybersecurity 260

Cybersecurity Security 260

Data Breach Today

OCTOBER 4, 2023

billion cybersecurity, big data and digital unit. Current Atos Security Leader to Leave as Company Gets 3rd CEO In Less Than 2 Years Atos snagged the longtime European CEO of Accenture Technology to lead its soon-to-be-independent $5.76

Big data 272

Big data Security Cybersecurity IT 272

Data Breach Today

FEBRUARY 13, 2021

SentinelOne and Tenable Also Involved in Notable Acquisitions Security firms Herjavec Group, SentinelOne and Tenable were all involved in merger and acquisition activity this past week, continuing this latest consolidation wave within the cybersecurity industry.

Cybersecurity 261

Cybersecurity Security 261

Data Breach Today

MARCH 26, 2021

Exchange Hacks, Insider Threats and More Four editors at Information Security Media Group review the latest cybersecurity issues, including Microsoft Exchange server hacks, insider threat management and implementing a "collective defense."

Cybersecurity 261

Cybersecurity Information Security Security 261

Krebs on Security

JULY 24, 2020

Thousands of people graduate from colleges and universities each year with cybersecurity or computer science degrees only to find employers are less than thrilled about their hands-on, foundational skills. How did the cybersecurity practitioners surveyed grade their pool of potential job candidates on these critical and very important skills?

Cybersecurity 363

Cybersecurity Security IT Communications 363

Security Affairs

APRIL 23, 2024

North Korea-linked APT groups Lazarus , Andariel , and Kimsuky hacked multiple defense companies in South Korea, reported the National Police Agency. The Police states that the attacks are carried out in the form of an all-out war that see the contribution of multiple APT groups. concludes the advisory.

Authentication 74

Authentication Passwords Cloud Cybersecurity 74

Security Affairs

APRIL 15, 2024

The Ukrainian hacking group Blackjack used a destructive ICS malware dubbed Fuxnet in attacks against Russian infrastructure. The Blackjack group is believed to be affiliated with Ukrainian intelligence services that carried out other attacks against Russian targets, including an internet provider and a military infrastructure.

IoT 123

IoT Access Communications Military 123

Data Breach Today

JANUARY 23, 2023

Cryptomining Campaign Targets Public Cloud Environments, Increases Security Risks Cybersecurity researchers say a Chinese for-profit threat group tracked as 8220 Gang is targeting cloud providers and poorly secured applications with a custom-built crypto miner and IRC bot.

Cloud 130

Cloud Risk Cybersecurity Security 130

Security Affairs

MARCH 16, 2024

North Korea-linked Lazarus APT group allegedly using again the mixer platform Tornado Cash to launder $23 million. North Korea-linked Lazarus APT group allegedly has reportedly resumed using the mixer platform Tornado Cash to launder $23 million. Blockchain cybersecurity firm Elliptic linked the theft of $112.5 and Blender.io.”

Blockchain 117

Blockchain Cybersecurity IT Information Security 117

Data Breach Today

MARCH 13, 2023

Recently-Emerged Threat Actor Focuses on Asia Pacific Cybersecurity researchers say they've almost certainly spotted traces of the recently-emerged advanced persistent threat group Dark Pink, now apparently attacking victims with a newly improved obfuscation routine to evade anti-malware measures.

Cybersecurity 130

Cybersecurity 130

Data Breach Today

MARCH 26, 2024

Industry Groups Welcome Help for Hospitals and Others - But Oppose Penalties Proposed federal sticks and carrots to incentivize the health sector to implement stronger cybersecurity standards are already meeting opposition from some industry groups that say financial help is welcome but payment penalties for perceived laggards likely will do more harm (..)

Cybersecurity 282

Cybersecurity 282

Data Breach Today

SEPTEMBER 29, 2021

Group-IB's Ilya Sachkov Arrested on Treason Charges; Cybersecurity Leaders Speak Out The founder of Group-IB, one of Russia's largest cybersecurity companies, has been detained on state treason charges and will be held in custody for two months, with alleged crimes punishable by up to 20 years in prison, according to wire reports.

Cybersecurity 176

Cybersecurity 176

Data Breach Today

AUGUST 12, 2021

Clearer Lines of Demarcation Needed, House Members Say In a letter sent to National Cyber Director Chris Inglis this week, a bipartisan group of lawmakers says clearer lines of demarcation are needed to better define the responsibilities of federal officials involved in cybersecurity.

Cybersecurity 205

Cybersecurity 205

Security Affairs

NOVEMBER 15, 2021

ESET researchers reported that the North Korea-linked Lazarus APT group is targeting cyber security community with a trojanized pirated version of the popular IDA Pro reverse engineering software. ESETresearch discovered a trojanized IDA Pro installer, distributed by the #Lazarus APT group. Threat actors bundled the IDA Pro 7.5

Cybersecurity 104

Cybersecurity Ransomware Security IT 104

Security Affairs

NOVEMBER 20, 2023

The DarkCasino APT group leveraged a recently disclosed WinRAR zero-day vulnerability tracked as CVE-2023-38831. Researchers at cybersecurity firm NSFOCUS analyzed DarkCasino attack pattern exploiting the WinRAR zero-day vulnerability tracked as CVE-2023-38831. ” reads the report published by NSFOCUS.

Phishing 136

Phishing Archiving Financial Services Cybersecurity 136

Data Breach Today

JUNE 30, 2020

State Coordinators Would Be Appointed by CISA A bipartisan group of U.S. senators is calling for federal funding for cybersecurity coordinators in every state. Meanwhile, a measure introduced in the House would restore the position of cybersecurity director in the White House.

Cybersecurity 222

Cybersecurity 222