Cybersecurity

NSA and International Partners Release Cybersecurity Advisory to Combat Chinese APT Actors Targeting Critical Infrastructure

The National Security Agency (NSA), in collaboration with U.S. and allied cybersecurity agencies, has issued a joint Cybersecurity Advisory (CSA) alerting organizations to ongoing...

Farmers Insurance Discloses Data Breach Affecting 1.1 Million Customers

Farmers Insurance, one of the largest insurers of homes, vehicles, and small businesses in the United States, confirmed late last week that it suffered...

MathWorks Confirms Ransomware Breach Impacting Over 10,000 Individuals

MathWorks, the company behind MATLAB and Simulink, has confirmed a ransomware attack that compromised personal data belonging to more than 10,000 people. The breach...

CISA, FBI, and Federal Partners Respond to Cyberattack on Nevada State Systems

The Cybersecurity and Infrastructure Security Agency (CISA) is coordinating with Nevada state officials and federal partners to respond to a cyberattack that struck the...

Grubhub Reports Data Breach Linked to Third-Party Contractor

Grubhub has disclosed a security breach that exposed customer and driver contact information due to unauthorized access through a third-party service provider. The Illinois-based...

Canadian Indicted in $65 Million Crypto Fraud Scheme

A Canadian man has been indicted on five federal charges for allegedly exploiting security flaws in two decentralized finance (DeFi) platforms, fraudulently obtaining approximately...

EU Begins Enforcement of Landmark AI Law, Imposing Tough Restrictions and Fines

The European Union has officially begun enforcing its groundbreaking artificial intelligence (AI) law, marking a major step in global AI regulation. As of Sunday,...

Texas Bans Chinese-Owned AI and Social Media Apps from Government Devices

Texas Governor Greg Abbott (R) has issued an order banning state officials from using Chinese-owned technology, including the artificial intelligence startup DeepSeek and the...

Gmail Security Warning: AI-Powered Scams Targeting Users in Sophisticated Attacks

Cybercriminals are evolving, and their latest weapon is artificial intelligence. Hackers are using AI-driven attacks to bypass even the most secure defenses, posing a...

Hacker Breaches Nonprofit Healthcare Provider, Steals Data of Over 1 Million Patients

A cybercriminal has stolen the sensitive medical and personal information of more than one million patients from Community Health Center (CHC), a Connecticut-based nonprofit...

Largest Medical Data Breach in U.S. History Affects 190 Million

UnitedHealth Group has confirmed that a February 2024 ransomware attack on its subsidiary, Change Healthcare, compromised the personal and medical data of approximately 190...

Record-Breaking 5.6 Tbps DDoS Attack Highlights Growing Cyber Threats

In a year marked by unprecedented cyber challenges, Cloudflare revealed a record-breaking Distributed Denial of Service (DDoS) attack peaking at 5.6 Terabits per second...
dhs

Former CIA Analyst Pleads Guilty to Sharing Top Secret National Defense Information

A former CIA analyst admitted guilt on Tuesday to illegally retaining and transmitting Top Secret National Defense Information, which was later shared publicly on...

CISA Issues Cybersecurity Alert on Feature Used by Aircraft Worldwide to Prevent Mid-Air Collisions

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an advisory regarding vulnerabilities in the Traffic Alert and Collision Avoidance System (TCAS) II, a...

Pennsylvania Cyber Attack Causes Disruption to State Courts Website

On Sunday, the official website of Pennsylvania's state courts agency was hit by a cyberattack, causing temporary disruptions to several online systems. Despite the...
cybersecuurity

Much Ado About Zero Trust

What is Zero Trust? A zero trust network is not a new concept, but it has become more popular in recent years. The Zero Trust...

DOE Investing $12M to Enhance Cybersecurity of Energy Systems

The U.S. Department of Energy (DOE) on Wednesday announced that it is investing $12 million for six new research, development, and demonstration (RD&D) projects...

Crypto Trader Wintermute Hit by $160 Million Hack

Hackers have stolen digital assets worth around $160 million from crypto trading firm Wintermute, according to a tweet from its CEO on Tuesday. CEO...
uber breach

Uber Investigates Hack After Report of Breach

Uber said on Thursday it is investigating a possible breach of its network after a hacker gained access on Thursday to the company’s internal...

TikTok Denies it Was Hacked After Hacker Group’s Claim of Massive Data Breach

TikTok denied a hacker group’s claim that it was able to obtain the source code and user data from the popular video-sharing platform. The hacker,...

InterContinental Hotels Group Confirms Cyberattack

Holiday Inn owner, Intercontinental Hotels Group (IHG), has confirmed the company has been hit by a cyberattack. IHG owns hotel brands such as Holiday Inn,...
hack

FBI, CISA Warn Ransomware Attacks on Schools May Increase

Intelligence experts in the United States are warning schools of the increased chance of cyberattacks as schools resume. In a public advisory issued Tuesday, the...

Twitch Confirms Data Breach

Game-streaming platform Twitch on Wednesday confirmed a data breach which reportedly divulged confidential company information and streamers' earnings. In a statement, the company said that...

Neiman Marcus Breach Compromises Data of 4.6 Million Customers

Luxury goods store Neiman Marcus said Friday that it was in the process of notifying 4.6 million online customers that some of their data...
nsa

NSA, CISA Release Guidance on Selecting and Hardening Remote Access VPNs

The National Security Agency and the Cybersecurity and Infrastructure Security Agency (CISA) released a joint Cybersecurity Information Sheet on Thursday, detailing factors to consider...

Senators Introduce Bipartisan Legislation to Mandate Reporting of Cyber Attacks and Ransom Payments

Sen. Gary Peters, D-Mich., chairman of the Senate Committee on Homeland Security and Governmental Affairs, and Sen. Rob Portman, R-Ohio, the committee’s ranking member,...

CISA Releases New Tool to Help Organizations Protect Against Insider Threats

The Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday released an Insider Risk Mitigation Self-Assessment Tool aimed at assisting public and private sector organizations...

Senate Democrat Introduces Legislation to Strengthen U.S. Cybersecurity

Sen. Gary Peters (D-Mich.) on Friday introduced a pair of bills to address vulnerabilities in America’s cybersecurity defenses. The Continuity of Economy Act of 2020 would...

FBI Warns on Increase in Exploitation of Mobile Banking Apps by Criminals

The FBI on Wednesday warned that malicious cyber actors were targeting mobile banking apps. As the public increases its use of mobile banking apps,...

U.S. Senators Press Trump Administration to End Weaponization of Facial Recognition Technology

Severeal U.S. senators on Wednesday pressed Trump administration officials to end federal law enforcement’s weaponizing of facial recognition technology against peaceful protesters exercising their First...

EU Watchdog to Establish Taskforce to Investigate TikTok; Question’s Use of Clearview’s Facial Recognition Tech

An EU taskforce will examine the practices of Chinese video app TikTok, and sent a strong warning with regard to the use of Clearview...
windows

DHS Warns of Windows 10 Vulnerability to Cyberattack Due to Exploit Code in the Wild

The Department of Homeland Security's cybersecurity advisory division has warned Windows 10 users of the possibility of a wave of cyberattacks due to the...

Nintendo Revises Number of Hacked Accounts: Says About 300,000 Accessed

Japanese gaming giant Nintendo has admitted that an additional 140,000 user accounts were accessed by unauthorized means, pushing the number up to about 300,000....

Lawmakers Query DHS on Use of Predator Drone to Monitor George Floyd Protesters

Some Democrats on the House Committee on Oversight and Reform queried the Department of Homeland Security (DHS) on what it termed "the use of...

Amtrak Discloses Data Breach

The National Railroad Passenger Corporation (Amtrak) has disclosed a data breach which may have led to the compromise of customer personally identifiable information (PII). In...

Security Researchers Find Personal Data of 20 Million Taiwanese Citizens on Darkweb Marketplace

Personally identifiable information belonging to more than 20 million Taiwanese citizens was allegedly found by security researchers on a darknet marketplace. In a blog...

U.S. Attorney’s Office Releases Tips For Protecting Children From Online Predators During COVID-19

United States Attorney Andrew Birge offered tips to help parents and guardians keep their children safe from on-line predators. "With schools and entertainment facilities closed...

Eagle Eye Networks Deploys Over 13,000 Cameras In Mexico City in City-Wide Surveillance Project

Eagle Eye Networks, a provider of cloud video surveillance, announced on Thursday what it termed one of the fastest completions of a large scale,...
nsa

NSA Releases Advisory Addressing Risk from Transport Layer Security Inspection

The National Security Agency (NSA) has released a Cyber Advisory that addresses managing risk from Transport Layer Security Inspection (TLSI). The document defines TLSI (a...
phone

Tips on Safeguarding Data Before Upgrading Mobile Phones

The Federal Trade Commission (FTC) has released an article with tips on how to protect personal information before trading in a mobile phone for...

Macy’s Stock Drops in Wake of Data Breach

Macy's confirmed on Tuesday that its website suffered a security breach for a week in October exposing the personal information of customers including their...
dji drone

WhiteFox Secures Remote ID for Drone Manufacturer DJI

WhiteFox, a provider of drone security,partnered with the world's largest drone manufacturer DJI to secure drone and operator identity during the United Nations International...
drone

Lawmaker Urges Justice Department to Prevent Drones from Interfering with Firefighting

Senator Dianne Feinstein (D-Calif.) on Friday wrote to the Department of Justice to exercise its legal authority to prevent drones from interfering with firefighting...

UniCredit Says 2015 Breach Exposed Data of 3 Million Clients

UniCredit said on Monday that it has uncovered a data breach involving the personal records of 3 million domestic clients, the third security incident...

NordVPN Admits to a 2018 Data Center Breach

Virtual private network provider NordVPN has confirmed that it was hacked March 2018. This admission comes after rumors that the company had been breached. According...

NIST Releases Plan For Federal Engagement in the Development of AI Standards

National Institute of Standards and Technology (NIST) last week announced the release of its long-anticipated Plan for federal engagement and U.S. leadership on artificial...
texas flag

Texas Hit With Ransomware Targeted Against 23 Organizations Connected to Local Government Departments

A cybersecurity incident on August 2019 in the U.S. state of Texas in which about 23 entities connected to smaller local governments where hit...

US Grants Huawei Another 90-Day Extension to Purchase From American Suppliers

The Trump administration has extended a deadline for U.S. businesses to cut ties with Chinese telecommunications firm Huawei, according to a statement by Department...

DHS CISA Warns That Iranian Hackers Increasingly Using Destructive ‘Wiper’ Attacks

The Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Security Agency (CISA) Director Christopher C. Krebs on Saturday released a statement in response to...

Hackers Target Mobile Phone Networks in Sophisticated Cyber Espionage Attack

Hackers compromised companies in more than 30 countries with the aim of gathering information on individuals in government, law-enforcement and politics, according to a...
nsa

NSA Releases Advisory on BlueKeep Vulnerability

The National Security Agency (NSA) has released a cybersecurity advisory for CVE-2019-0708—a vulnerability dubbed BlueKeep. Although Microsoft has issued a patch, potentially millions of...
breach

11.9 Million Patients Affected by Quest Diagnostics Breach

Medical testing company Quest Diagnostics revealed on Monday that a third-party billing company has been hit by a data breach affecting 11.9 million patients....

HSCC Releases Medical Device and Health IT Joint Cybersecurity Plan

The Healthcare and Public Health Sector Coordinating Council (HSCC) on Wednesday released new recommendations for manufacturing and managing the security of medical devices for...

DOE Awards $40 Million in Funding for Grid Modernization Initiative

The Department of Energy (DOE) last week announced $40M in FY19 funding for the Grid Modernization Initiative (GMI). The GMI, a crosscutting initiative involving...

International Ransomware Attack Could Cost $193B in Economic Damages: Report

A new report from the Cyber Risk Management (CyRiM) project has projected that an international ransomware attack could cost $193 billion in damages. Such...

US Intelligence Officials Warn China, Russia Pose Biggest Espionage and Cyberattack Threats

China and Russia possess cyber capabilities capable of disrupting US critical infrastructure, including power networks, US companies, the military and election systems. Iran and...

Apple Facetime Privacy Breach: New York AG and Governor Announce Investigation

New York Attorney General Letitia James and Governor Andrew Cuomo on Wednesday announced an investigation into Apple’s failure to warn consumers about the FaceTime...

Justice Department Announces Efforts to Disrupt Joanap Botnet Used By North Korean Hackers

The Justice Department on Wednesday announced what it called “an extensive effort” to map and further disrupt, through victim notifications, the Joanap botnet –...

Airbus Says Systems Breached in Cyberattack

Airbus on Wednesday said it had detected a cyberattack on its commercial aircraft business information systems which resulted in unauthorized access to data. Affected...

NCSC Launches Campaign to Help Private Sector Tackle Threats From Nation State Actors

The National Counterintelligence and Security Center (NCSC) on Monday said it is distributing videos, brochures, and other informative materials to help the private sector...

Delivery Robot Goes up in Flames: Manufacturers Blame ‘Human Error’

An autonomous food delivery robot caught fire on a Berkeley, California walkway on Friday. The robot is part of a fleet of robots manufactured...
autonomous

Self-Driving Cars Increasingly Targeted by Vandals in Arizona

Self-driving vehicles have increasingly become the targets of vandals in Arizona with the police there recording at least 21 incidents over the past two...

BT Removes Huawei Equipment From 5G Network Core

Britain’s BT Group said on Wednesday it was removing Huawei Technologies’ equipment from the heart of its 5G mobile network when it is rolled...

NYPD Unveils 14 Newly Acquired Drones and Special Unit to Operate Them

The New York Police Department (NYPD) on Tuesday announced its Unmanned Aircraft System (UAS) program, which will be comprised of newly acquired Unmanned Aerial...

Scammers go Low-Tech to Target Senior Citizens

The FTC issued a warning on Monday about a ruse by scammers to get people to part with money in the form of gift...
irs

Phishing Scams on the rise, Taxpayers Urged not to ‘Take the Bait’

The IRS has warned people to be on the lookout following what it termed “a surge of new, sophisticated email phishing scams.” According to the...

FTC Recommends Precautions to Prevent identity Theft Following Marriott Breach

The Federal Trade Commission (FTC) on Monday released an alert to provide affected users with recommended precautions against identity theft after the recent breach...
dhs

DHS, FBI, NCCIC Issue Alert on SamSam Ransomware

The Department of Homeland Security (DHS) National Cybersecurity and Communications Integration Center (NCCIC) and the Federal Bureau of Investigation (FBI) on Monday issued an...
hack

Quora Hacked: 100 Million Users Affected

Q&A website Quora disclosed on Monday that one of its systems was accessed without authorization by hackers on Friday, with the user data of...

Dem Lawmakers Query Law Enforcement’s Use of Amazon’s Controversial Facial Recognition Software

Eight democratic lawmakers sent a letter to Amazon CEO Jeff Bezos on Thursday reiterating their concern about Amazon’s facial recognition technology, Rekognition, and the...

Hackers Access Marriott Guest Reservation Database, Compromising Data of 500 Million Guests

Marriott International Inc said on Friday that there was unauthorized access to the Starwood guest reservation database, which contained guest information relating to reservations...

Financial Institutions in Singapore Develop Blockchain Settlement System

The Monetary Authority of Singapore (MAS) and Singapore Exchange (SGX) said on Sunday they have successfully developed Delivery versus Payment (DvP) capabilities for the...

French President Macron Launches International Agreement on Cybersecurity Principles

President Emmanuel Macron of France on Monday launched the Paris Call for Trust and Security in Cyberspace aimed at developing common principles for securing...

Salesforce Wins Patent to Detect Spam Email Using Blockchain Technology

Salesforce has won a patent to detect spam emails using blockchain technology. U.S. Patent and Trademark Office (USPTO) published a document, Nov. 7. that...

NCCIC Releases Report on Use of JexBoss by Hackers to Carry Out Exploits

The NCCIS on Thursday released a report on the use of exploitation tool JexBox by hackers to remotely access the systems of victims. Analysis...

Bank of England to Carry Out Test to Gauge Finance Sector’s Resilience to Cyber Attacks

The Bank of England said it will carry out a test on Friday to gauge the financial sector's ability to withstand a major cyberattack....
hacker

DOJ Charges Chinese Intelligence Officials With Recruiting Hackers and Insiders to Steal Aviation Data

The Department of Justice (DOJ) announced Tuesday that 10 Chinese intelligence officers and hackers have been charged with stealing airline engine technology from French...

Nation-State Actors are Becoming More Aggressive in Attacking Our Supply Chain – NCSC Director

Director of the National Counterintelligence and Security Center William Evanina weighed in on the impact of the supply chain problem on America, from an...

U.S. Restricts Exports to Chinese Semiconductor Firm Fujian Jinhua Due to National Security Risks

The Department of Commerce on Monday said it has taken action to restrict exports to Chinese semiconductor firm Fujian Jinhua, due to the belief...

User Data of About 9.4 Million Passengers Compromised in Cathay Pacific Hack

One of Asia’s top airlines, Cathay Pacific said Wednesday that it has discovered “unauthorized access” to the personal data of approximately 9.4 million passengers....

British Airways Says Cyberattack Bigger Than Previously Thought

The cyberattack on British Airways affected even more customers than previously thought, the company said on Thursday. In September, the organization announced that hackers had...
ransom

Super Micro Denies Allegations Chinese Hacked Chips: To Review Hardware

Super Micro Computer Inc on Monday stated in a letter to customers it will review its hardware for any proof of installation of malicious...

Google Hid Google+ Security Bug That Exposed Information of Almost 500,000 Users

Google’s Vice President of Engineering Ben Smith on Monday revealed that the company will shut down the consumer version of its social network Google+...
server

Chinese Government Allegedly Infiltrates Servers of Multiple U.S. Companies: Amazon, Apple Deny

The Chinese government managed to gain access to the servers of almost 30 U.S. companies, including Apple and Amazon, according to a Bloomberg report. The...

50 Million Users Affected in Latest Facebook Security Breach

Facebook said Friday it has discovered a security issue affecting almost 50 million accounts. According to Facebook, attackers exploited a vulnerability in Facebook’s code...

Port of San Diego’s IT Systems Disrupted by Ransomware Attack

The Port of San Diego said Thursday it is partnering with the Federal Bureau of Investigation (FBI) and the Department of Homeland Security (DHS)...
uber breach

Uber Reaches $148 Million Settlement With U.S. States Over 2016 Breach

Uber has reached a $148 million settlement with 50 U.S states, including Washington, D.C., to resolve allegations that it failed to report a significant...

White House to Prioritize Cyber Offense on Hackers in New Cyber Strategy

The Trump administration on Thursday warned foreign hackers of its intention to increase offensive measures as part of a new national cyber security strategy. “We...
hacker

Wyden Says State-Backed Hackers Targeted U.S. Senate Staff

A Democratic senator said in a letter to Senate leaders Wednesday that foreign government hackers continue to target the personal accounts of U.S. senators...

We Are at The Edge of Realizing the Potentials of Bug Bounties and Crowdsourced Security – Hackerone

More organizations are taking advantage of bug bounty programs to strengthen their security postures. It simply makes sense – crowdsource the best cyber talent...
equifax

ICO Slams Equifax With Maximum £500,000 Fine Over 2107 Breach

UK’s Information Commissioner's Office (ICO) has issued Equifax with a £500,000 (US$660,000) fine for failing to protect up to 15 million citizens' personal data. The...
breach

Hackers Steal Newegg Customer Data Via Malicious Javascript Code

Online retailer Newegg is the latest victim of the actors behind Magecart, a financial theft group responsible for the recent breach of British Airways...

NCCIC Issues Advisory on Potential Hurricane Florence Phishing Scams

The National Cybersecurity & Communications Integration Center (NCCIC) has urged for increased vigilance against malicious cyber activity seeking to exploit interest in Hurricane Florence. Fraudulent...
cyber

Symantec Offers Free ‘Spoof Proof’ Campaign Website Testing Service Ahead of Elections

Cybersecurity firm Symantec on Tuesday said it is offering a free service to enable political candidates and campaigns test the security and authenticity of...
ai

SAP Pioneers Development of Guiding Principles for Artificial Intelligence

German software firm SAP on Tuesday published what it called guiding principles for artificial intelligence. With the trend towards greater integration of AI into...

Multiple PHP Vulnerabilities Could Allow Attackers Control Affected Systems

The Multi-State Information Sharing & Analysis Center (MS-ISAC) has released an advisory on multiple Hypertext Preprocessor (PHP) vulnerabilities. An attacker could exploit one of...

UK’s Mass Surveillance Exposed by Snowden Ruled Unlawful

The European Court of Human Rights (ECHR) on Thursday ruled that UK's bulk interception powers, exposed by the whistleblower Edward Snowden, is illegal. In a...
phone

AT&T, Verizon, Sprint and T-Mobile Demo Standardized Mobile Authentication

The Mobile Authentication Taskforce, comprised of AT&T, Sprint, T-Mobile and Verizon, will showcase its authentication solution that is less dependent on passwords to secure...
cyber

Trump Signs Executive Order Allowing Sanctions for Election Meddling

President Trump on Wednesday signed an executive order allowing sanctions on foreign companies, organizations or entities the government determines to have interfered in U.S....