New T-Mobile Breach Affects 37 Million Accounts
Krebs on Security
JANUARY 19, 2023
T-Mobile today disclosed a data breach affecting tens of millions of customer accounts, its second major data exposure in as many years.
Thu.Jan 19, 2023
228 
T-Mobile Says Hackers Stole Data of 37 Million Customers
Data Breach Today
JANUARY 19, 2023
Unauthorized Party Obtained Access to Company API for Approximately 6 Weeks T-Mobile disclosed Thursday that hackers had access for approximately 6 weeks to an application programming interface that exposed customer data including names, dates of birth and email addresses.
Join 31,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Trending Sources
EmojiDeploy Attack Chain Targets Misconfigured Azure Service
Dark Reading
JANUARY 19, 2023
Multiple misconfigurations in a service that underpins many Azure features could have allowed an attacker to remotely compromise a cloud user's system
Subsurface: The Ultimate Data Lakehouse Conference
Speaker: Panel Speakers
We’ve just opened registration for Subsurface LIVE 2023! Learn how to innovate with open source technologies such as Apache Arrow, Delta Lake, and more. Register now to secure your spot at Subsurface LIVE being held March 1-2, 2023.
PayPal Breach Exposed PII of Nearly 35K Accounts
Dark Reading
JANUARY 19, 2023
The credential-stuffing attack, likely fueled by password reuse, yielded personal identifiable information that can be used to verify the authenticity of previously stolen data
Sign up to get articles personalized to your interests!
Information Management Today brings together the best content for information management professionals from the widest variety of industry thought leaders.
More Trending
Attackers Crafted Custom Malware for Fortinet Zero-Day
Dark Reading
JANUARY 19, 2023
The "BoldMove" backdoor demonstrates a high level of knowledge of FortiOS, according to Mandiant researchers, who said the attacker appears to be based out of China
BlueVoyant CEO on How to Remediate Supply Chain Defense Bugs
Data Breach Today
JANUARY 19, 2023
Jim Rosenthal on Why Supply Chain Tools Must Go Beyond Detection and Include Fixes BlueVoyant has strengthened its ability to monitor the remediation of supply chain issues and integrate that with questionnaire activity, CEO Jim Rosenthal says.
Massive Adware Campaign Shuttered
Dark Reading
JANUARY 19, 2023
Mainly Apple iOS in-app ads were targeted, injecting malicious JavaScript code to rack up phony views
BitKeep to Reimburse Hacking Victims by March
Data Breach Today
JANUARY 19, 2023
The Crypto Wallet to Launch Compensation Portal Soon for Further Details Cryptocurrency wallet BitKeep says it will compensate victims of a December 2022 hack that cost the users $8 million. The wallet says it will pay victims in USDT stablecoin to counter asset fluctuation.
Data Value Scorecard Report
Advertisement
This report examines the quantitative research of data leaders on data value and return on investment.
Security Analysis of Threema
Schneier on Security
JANUARY 19, 2023
A group of Swiss researchers have published an impressive security analysis of Threema. We provide an extensive cryptographic analysis of Threema, a Swiss-based encrypted messaging application with more than 10 million users and 7000 corporate customers.
Lessons to Learn From CircleCI's Breach Investigation
Data Breach Today
JANUARY 19, 2023
Beware: Malware Bypassed Antivirus; Attackers Reused Stolen Single Sign-On Tokens Essential reading for network defenders: CircleCI's report into its recent breach, which began when malware infected an engineer's laptop.
As Social Engineering Tactics Change, So Must Your Security Training
Dark Reading
JANUARY 19, 2023
Craft specific awareness training for high-exposure teams like finance, and reinforce other critical awareness training across the organization
Ransomware Remains Top Cyberthreat, Former NCSC Chief Says
Data Breach Today
JANUARY 19, 2023
Ciaran Martin Warns High-Profile Attacks Will Increase in 2023 The former head of the U.K.'s
TCO Considerations of Using a Cloud Data Warehouse for BI and Analytics
Advertisement
Enterprises poured $73 billion into data management software in 2020 – but are seeing very little return on their data investments. 22% of data leaders surveyed have fully realized ROI in the past two years, with 56% having no consistent way of measuring it.
Cybersecurity in the Metaverse Will Require New Approaches
eSecurity Planet
JANUARY 19, 2023
Despite challenges faced by Meta and others, there remains optimism for the metaverse. The PwC 2022 U.S. Business and Consumer Metaverse Survey highlights this. The survey, which included over 5,000 consumers and 1,000 U.S.
BitSight CEO on Going From Security Ratings to Managing Risk
Data Breach Today
JANUARY 19, 2023
Steve Harvey on Why Boards Want to Understand the Risk Factors, Not Just the Rating Security ratings provide a strong indication of potential risk, but boards increasingly want to drill into the underlying risk factors, says CEO Steve Harvey.
Name That Toon: Poker Hand
Dark Reading
JANUARY 19, 2023
Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card
Royal Mail Starts Limited Delivery Abroad After Cyberattack
Data Breach Today
JANUARY 19, 2023
UK Postal Service Testing Workarounds to Tackle Ransomware-Induced Package Backlog The United Kingdom's Royal Mail says it can again deliver simple letters to international destinations as it enters a second week of grappling with the fallout of a ransomware attack.
12 Considerations When Evaluating Data Lake Engine Vendors for Analytics and BI
Advertisement
Businesses today compete on their ability to turn big data into essential business insights. Modern enterprises leverage cloud data lakes as the platform used to store data. 57% of the enterprises currently using a data lake cite improved business agility as a benefit.
Ethically Exploiting Vulnerabilities: A Play-by-Play
Dark Reading
JANUARY 19, 2023
There's a fine line between a hacker and an attacker, but it pays to be proactive. Consider tests by ethical hackers, a red team, or pen testers, and then bolster your company's defenses against malicious attacks
Phishing For Industrial Control Systems
KnowBe4
JANUARY 19, 2023
Mandiant has published a report describing phishing emails that have breached organizations in the industrial sector. Mandiant explains that the majority of phishing attacks are untargeted and opportunistic.
Roaming Mantis Uses DNS Changers to Target Users via Compromised Public Routers
Dark Reading
JANUARY 19, 2023
Is ChatGPT A World Changing Technology? (And Will We All Become “Centaurs”?)
John Battelle's Searchblog
JANUARY 19, 2023
Watching the hype cycle build around OpenAI’s ChatGPT, I can’t help but wonder when the first New York Times or Atlantic story comes out calling the top – declaring the whole thing just another busted Silicon Valley fantasy, this year’s version of crypto or the metaverse.
Checklist Report: Preparing for the Next-Generation Cloud Data Architecture
Advertisement
Data architectures have evolved dramatically. It is time to reconsider the fundamental ways that information is accumulated, managed, and then provisioned to the different downstream data consumers.
Critical Microsoft Azure RCE flaw impacted multiple services
Security Affairs
JANUARY 19, 2023
Researchers found a new critical remote code execution (RCE) flaw impacting multiple services related to Microsoft Azure.
How South Africa's Largest Law Firm Was Fined R5.5m for Not Educating Customers
KnowBe4
JANUARY 19, 2023
Africa’s largest law firm ordered to pay R5.5 million to a woman who fell victim to a hacking syndicate. When Judith Hawarden was buying a house, hackers changed the bank account number in a PDF emailed to her by ENSafrica, the law firm handling the conveyancing.
Cisco fixes SQL Injection flaw in Unified CM
Security Affairs
JANUARY 19, 2023
A high-severity flaw (CVE-2023-20010) was found in Cisco Unified Communications Manager and Unified Communications Manager Session Management Edition.
Pwned or Bot
Troy Hunt
JANUARY 19, 2023
It's fascinating to see how creative people can get with breached data. Of course there's all the nasty stuff (phishing, identity theft, spam), but there are also some amazingly positive uses for data illegally taken from someone else's system.
7 Ways to Supercharge Your ABM Strategy with Real-Time Intent
Advertiser: ZoomInfo
Streaming real-time intent is a homerun for marketing and sales’ account-based marketing (ABM) strategies. With real-time buyer insights, you can be first-in-line to provide solutions and lead better, hyper-personalized conversations.
SynSaber Releases ICS Vulnerabilities & CVEs Report Covering Second Half of 2022
Dark Reading
JANUARY 19, 2023
ICS/OT cybersecurity firm finds 35% of CVEs in second half of 2022 unpatchable
NortonLifeLock Says Customer Accounts were Compromised in Credential-Stuffing Attack
IT Governance
JANUARY 19, 2023
NortonLifeLock customers have been warned that their accounts may have been compromised in a security breach. The company, which specialises in antivirus software and identity theft protection, said that 925,000 people were targeted in a credential-stuffing attack.
The Media Industry Is the Most Vulnerable to Cyber Attacks, Report Shows
Dark Reading
JANUARY 19, 2023
The report highlights concerning security stats following two years of extreme tech growth
Let's personalize your content