Recent Security News

  • Multiple lawsuits target 23andMe for failure to protect client data

    October 13, 2023 at 04:09PM Genetic testing provider 23andMe is facing multiple class action lawsuits in the U.S. after a data breach that affected millions of customers. The breach involved a leaked CSV file containing the data of around 1 million Ashkenazi Jews who used the service. 23andMe claims that the breach was a result…

    Read More

  • Microsoft: October Windows 10 security updates fail to install

    October 13, 2023 at 04:02PM Microsoft has acknowledged an issue where Windows 10 security updates, specifically the KB5031356 security update, may fail to install with 0x8007000d errors. Reports of this problem have been surfacing since October 10. Microsoft is currently investigating the root cause of the issue and encourages affected users to file a report…

    Read More

  • Security Pros Warn that EU’s Vulnerability Disclosure Rule is Risky

    October 13, 2023 at 03:48PM The European Union (EU) is considering a rule that would require software publishers to disclose unpatched vulnerabilities to government agencies within 24 hours of exploitation. However, many IT security professionals are concerned about the potential abuse of this rule. They argue that the 24-hour window is too short and could…

    Read More

  • 530K people’s info feared stolen from cloud PC gaming biz Shadow

    October 13, 2023 at 03:05PM French cloud service Shadow has confirmed that criminals stole a database containing customer data in a social-engineering attack against one of its employees. The stolen data includes personal information such as names, email addresses, dates of birth, billing addresses, and credit card expiration dates. The company reassured customers that no…

    Read More

  • Bungled ransomware raid targeting WS_FTP servers demanded just 0.018 BTC

    October 13, 2023 at 02:22PM Security researchers have discovered the first ransomware campaign targeting organizations using a vulnerability in Progress Software’s WS_FTP Server. The campaign, carried out by the “Reichsadler Cybercrime Group,” demanded a ransom of 0.018 Bitcoin (approximately $500) to recover encrypted files. Sophos’s product prevented the download of the ransomware payload, and patches…

    Read More