Recent Security News
-
Samsung UK discloses year-long breach, leaked customer data
November 17, 2023 at 01:01AM Samsung Electronics UK has reportedly suffered a data breach affecting customers who made purchases between July 2019 and June 2020. The breach, which was discovered on November 13, exposed information including names, phone numbers, addresses, and email addresses. This incident marks the third data breach for Samsung in the past…
-
FBI pumps ‘significant’ resources into splatting Scattered Spider
November 16, 2023 at 07:19PM The FBI is intensifying efforts to locate members of the Scattered Spider cyber-crime group, responsible for attacking major casinos and conducting network intrusions. The group exfiltrates data and demands payment in exchange for not leaking or selling the information. Several organizations, including MGM Resorts, experienced significant disruptions, resulting in financial…
-
Dangerous Apache ActiveMQ Exploit Allows Stealthy EDR Bypass
November 16, 2023 at 05:50PM A new proof-of-concept (PoC) exploit for a critical security vulnerability in Apache ActiveMQ allows threat actors to achieve remote code execution (RCE) on vulnerable servers. Despite a patch being available, numerous organizations remain exposed, with the HelloKitty ransomware gang taking advantage. Researchers at VulnCheck have developed a more sophisticated exploit…
-
Long Beach, California turns off IT systems after cyberattack
November 16, 2023 at 05:25PM Long Beach, California, has suffered a cyberattack, leading to the shutdown of portions of their IT network. The city detected the attack and began taking systems offline immediately to prevent further spread. Systems are expected to be offline for several days while the incident is investigated. It is unclear what…
-
FBI shares tactics of notorious Scattered Spider hacker collective
November 16, 2023 at 04:56PM The FBI and CISA have released an advisory on the threat actor known as Scattered Spider. They collaborate with the ALPHV/BlackCat Russian ransomware operation and use social engineering, phishing, and SIM swapping to gain network access. The group consists of young English-speaking members and is known to target large organizations.…