09 Oct Hackers modify online stores’ 404 pages to steal credit cards A new Magecart card skimming campaign hijacks the 404 error pages of online retailer’s websites, hiding malicious code to steal customers’ credit card information. […]
07 Oct Bounty offered for secret NSA seeds behind NIST elliptic curves algo A bounty of $12,288 has been announced for the first person to crack the NIST elliptic curves seeds and discover the original phrases that were hashed to generate them. […]
06 Oct D.C. Board of Elections confirms voter data stolen in site hack The District of Columbia Board of Elections (DCBOE) is currently probing a data leak involving an unknown number of voter records following breach claims from a threat actor known as RansomedVC. […]
06 Oct Blackbaud agrees to $49.5 million settlement for ransomware data breach Cloud computing provider Blackbaud reached a $49.5 million agreement with attorneys general from 49 U.S. states to settle a multi-state investigation of a May 2020 ransomware attack and the resulting data breach. […]
06 Oct FTC warns of ‘staggering’ losses to social media scams since 2021 The Federal Trade Commission says Americans have lost at least $2.7 billion to social media scams since 2021, with the real number likely many times larger due to unreported incidents. […]
06 Oct Genetics firm 23andMe says user data stolen in credential stuffing attack 23andMe has confirmed to BleepingComputer that it is aware of user data from its platform circulating on hacker forums and attributes the leak to a credential-stuffing attack. […]
06 Oct MGM Resorts ransomware attack led to $100 million loss, data theft MGM Resorts reveals that last month’s cyberattack cost the company $100 million and allowed the hackers to steal customers’ personal information. […]
05 Oct Microsoft officially removes Cortana for Windows 11 Insiders Microsoft finally removed the Cortana standalone app from Windows 11 in the latest preview build for Insiders in the Canary Channel. […]
05 Oct Exploits released for Linux flaw giving root on major distros Proof-of-concept exploits have already surfaced online for a high-severity flaw in GNU C Library’s dynamic loader, allowing local attackers to gain root privileges on major Linux distributions. […]
05 Oct China-linked cyberspies backdoor semiconductor firms with Cobalt Strike Hackers engaging in cyber espionage have targeted Chinese-speaking semiconductor companies with TSMC-themed lures that infect them with Cobalt Strike beacons. […]