12 Jul Rite Aid confirms data breach after June ransomware attack Pharmacy giant Rite Aid confirmed a data breach after suffering a cyberattack in June, which was claimed by the RansomHub ransomware operation. […]
12 Jul DNS hijacks target crypto platforms registered with Squarespace A wave of coordinated DNS hijacking attacks targets decentralized finance (DeFi) cryptocurrency domains using the Squarespace registrar, redirecting visitors to phishing sites hosting wallet drainers. […]
12 Jul Netgear warns users to patch auth bypass, XSS router flaws Netgear warned customers to update their devices to the latest available firmware, which patches stored cross-site scripting (XSS) and authentication bypass vulnerabilities in several WiFi 6 router models. […]
12 Jul Massive AT&T data breach exposes call logs of 109 million customers AT&T is warning of a massive data breach where threat actors stole the call logs for approximately 109 million customers, or nearly all of its mobile customers, from an online database on the company’s Snowflake account. […]
11 Jul ARRL finally confirms ransomware gang stole data in cyberattack The American Radio Relay League (ARRL) finally confirmed that some of its employees’ data was stolen in a May ransomware attack initially described as a “serious incident.” […]
11 Jul Signal downplays encryption key flaw, fixes it after X drama Signal is finally tightening its desktop client’s security by changing how it stores plain text encryption keys for the data store after downplaying the issue since 2018. […]
11 Jul Google increases bug bounty rewards five times, up to $151K Google has announced a fivefold increase in payouts for bugs found in its systems and applications reported through its Vulnerability Reward Program, with a new maximum bounty of $151,515 for a single security flaw. […]
11 Jul Dallas County: Data of 200,000 exposed in 2023 ransomware attack Dallas County is notifying over 200,000 people that the Play ransomware attack, which occurred in October 2023, exposed their personal data to cybercriminals. […]
11 Jul CRYSTALRAY hacker expands to 1,500 breached systems using SSH-Snake tool A new threat actor known as CRYSTALRAY has significantly broadened its targeting scope with new tactics and exploits, now counting over 1,500 victims whose credentials were stolen and cryptominers deployed. […]
11 Jul Advance Auto Parts data breach impacts 2.3 million people Advance Auto Parts is sending data breach notifications to over 2.3 million people whose personal data was stolen in recent Snowflake data theft attacks. […]