Chinese Hacker Pwns 81K Sophos Devices With Zero-Day Bug

December 11, 2024 at 05:52PM The US government has charged Chinese national Guan Tianfeng for allegedly hacking 81,000 Sophos firewall devices in 2020 using a severe zero-day vulnerability (CVE-2020-12271). An arrest warrant has been issued, and a $10 million reward is offered for information about him and his operations in China. ### Meeting Takeaways: 1. … Read more

Fired Disney staffer accused of hacking menu to add profanity, wingdings, while removing allergen info

October 30, 2024 at 11:24AM A former Disney employee, Michael Scheuer, was arrested for hacking into the company’s systems post-termination, altering restaurant menus to eliminate allergen information and redirect QR codes. These actions could have posed serious health risks. Charged with multiple violations, he faces significant prison time if convicted. A bond hearing is pending. … Read more

U.K. Hacker Charged in $3.75 Million Insider Trading Scheme Using Hacked Executive Emails

September 30, 2024 at 10:48PM The U.S. Department of Justice has charged a U.K. national, Robert Westbrook, with executing a fraudulent scheme that allowed him to gain unauthorized access to corporate executives’ Microsoft 365 accounts, enabling him to generate millions in profits through securities fraud. Westbrook could face up to 20 years in prison and … Read more

Deadbeat Dad Hacks State Registry to Fake His Own Death

August 21, 2024 at 03:32PM 39-year-old Jesse Kipf from Kentucky received an 81-month prison sentence for various offenses, including cyber intrusion into a government death registry system to fake his own death and committing computer fraud and identity theft. He attempted to avoid paying $116,000 in child support and also infiltrated business and government networks, … Read more

Former IT manager pleads guilty to attacking high school network

December 18, 2023 at 10:03AM Former IT manager of a New Jersey high school, Conor LaHiff, admitted to cyberattacking his ex-employer following termination. He pleaded guilty to unauthorized damage to protected computers, targeting Apple and IT administrator accounts. His actions caused over $5,000 in losses to the school. LaHiff faces up to 10 years in … Read more

Cloud engineer wreaks havoc on bank network after getting fired

December 12, 2023 at 02:48PM Ex-First Republic Bank cloud engineer, Miklos Daniel Brody, was sentenced to two years in prison for causing over $220,000 in damage to his former employer’s computer network by using his company-issued laptop to watch pornography. He pleaded guilty to violating the Computer Fraud and Abuse Act and making false statements … Read more

Cloud engineer gets 2 years for wiping ex-employer’s code repos

December 12, 2023 at 10:05AM Cloud engineer Miklos Daniel Brody was sentenced to two years in prison and ordered to pay $529,000 in restitution for wiping his former employer’s code repositories, First Republic Bank. The bank, with over 7,000 employees and $6.75 billion in annual revenue, closed on May 1, 2023, and was sold to … Read more

E-Root admin faces 20 years for selling stolen RDP, SSH accounts

October 19, 2023 at 06:49PM Sandu Diaconu, operator of the illegal E-Root marketplace, has been extradited to the U.S. to face a potential 20-year prison sentence for selling access to compromised computers. Diaconu was arrested in the U.K. after authorities seized E-Root’s domains. The U.S. seeks both imprisonment and forfeiture of Diaconu’s criminal proceeds. E-Root … Read more

E-Root market admin faces 20 years for selling stolen RDP, SSH accounts

October 19, 2023 at 06:42PM Sandu Diaconu, operator of the E-Root marketplace, has been extradited to the U.S. to face a maximum imprisonment penalty of 20 years. He is accused of selling access to compromised computers. Evidence suggests over 350,000 compromised systems were listed for sale on E-Root, including government systems and those from various … Read more