French ISP Confirms Cyberattack, Data Breach Affecting 19M

October 29, 2024 at 02:00PM Free, France’s second-largest ISP, reported a cyberattack that compromised internal management tools and customer data, affecting over 19 million accounts. The hacker attempted to sell stolen data on the Dark Web. Free confirmed no sensitive information was compromised and has notified affected customers while filing a criminal complaint. **Meeting Takeaways: … Read more

Vulnerabilities Exposed Millions of Cox Modems to Remote Hacking

June 4, 2024 at 06:24AM Cox Communications recently patched several vulnerabilities in their modems, preventing potential remote takeovers by hackers. Discovered in March by expert Sam Curry, the flaws allowed attackers to bypass authorization, gaining control of millions of modems and potentially accessing customer data. Cox promptly addressed the issue after being notified. Key Meeting … Read more

Cox fixed an API auth bypass exposing millions of modems to attacks

June 3, 2024 at 05:12PM Cox Communications fixed an authorization bypass vulnerability discovered by bug bounty hunter Sam Curry, preventing remote attackers from resetting modem settings and stealing sensitive customer information. The largest private broadband company in the U.S., Cox provides services to nearly seven million homes and businesses across over 30 states. The company … Read more

Turkish hackers Sea Turtle expand attacks to Dutch ISPs, telcos

January 8, 2024 at 03:46PM Sea Turtle, a Turkish state-backed cyber espionage group, has expanded its spying campaigns to the Netherlands, targeting telcos, media, ISPs, and Kurdish websites. Using DNS hijacking and traffic redirection, they conduct man-in-the-middle attacks to acquire economic and political intelligence aligned with Turkish interests. Analysts at Hunt & Hackett observed these … Read more