Infosys subsidiary named as source of Bank of America data leak

February 13, 2024 at 12:31AM Infosys’s US subsidiary, IMS, suffered a cyber security incident, resulting in a data breach. Personal data of 57,028 people, including Social Security Numbers, was exposed. The breached information includes names, addresses, birth dates, and other sensitive account details, potentially putting victims at risk of identity fraud. The alleged involvement of … Read more

Bank of America warns customers of data breach after vendor hack

February 12, 2024 at 06:36PM Bank of America warns customers of data breach by service provider, exposing personal information including names, addresses, social security numbers, and financial data. Infosys McCamish Systems, with over 57,000 clients affected, was compromised by a ransomware attack. Bank of America is investigating, while cybersecurity authorities estimate LockBit gang has extorted … Read more

Rhysida Ransomware Cracked, Free Decryption Tool Released

February 12, 2024 at 08:39AM Cybersecurity researchers at Kookmin University and Korea Internet and Security Agency have discovered an “implementation vulnerability” in Rhysida ransomware, enabling the first successful decryption of its data. The findings led to the development of a recovery tool distributed by KISA, achieving data decryption by exploiting implementation vulnerabilities in ransomware. The … Read more

Europe’s largest caravan club admits wide array of personal data potentially accessed

February 12, 2024 at 07:53AM The Caravan and Motorhome Club (CAMC) is still uncertain about whether members’ data was stolen in a January cyberattack. Forensic investigation has not confirmed data access, but potentially compromised information includes names, addresses, policy details, and personal claims data. CAMC aims to directly notify affected members and advises precautionary measures … Read more

Alert: New Stealthy “RustDoor” Backdoor Targeting Apple macOS Devices

February 10, 2024 at 02:21AM A new Rust-based macOS backdoor, codenamed RustDoor, has been targeting users since November 2023. It masquerades as an update for Microsoft Visual Studio, affecting both Intel and Arm architectures. The malware is capable of gathering and exfiltrating information to a command-and-control server, with links to prominent ransomware families. The U.S. … Read more

New macOS Backdoor Linked to Prominent Ransomware Groups

February 9, 2024 at 04:09PM Bitdefender reports the discovery of the macOS backdoor RustDoor, linked to ransomware families Black Basta and Alphv/BlackCat. The malware supports Intel and Arm architectures and has been undetected since November 2023. It harvests and exfiltrates files, generates victim IDs, and has variants with different functionalities, including impersonating applications. From the … Read more

Uncle Sam sweetens the pot with $15M bounty on Hive ransomware gang members

February 8, 2024 at 10:03PM The US government has presented a $5 million reward for Hive ransomware gang members, reinforcing an existing $10 million reward. The FBI has added a $5 million reward for information leading to arrests. Following the FBI’s control of the gang’s network, decryption keys were provided to over 1,300 victims, preventing … Read more

US offers $10 million for tips on Hive ransomware leadership

February 8, 2024 at 01:04PM The U.S. State Department is offering rewards of up to $10 million for information on the Hive ransomware gang, known for extorting $100 million from companies globally. The FBI infiltrated Hive’s network, providing decryption keys to victims and preventing $130 million in ransom payments. The rewards total over $135 million … Read more

Fortinet warns of new FortiSIEM RCE bugs in confusing disclosure

February 7, 2024 at 07:57PM Fortinet warns of two unpatched patch bypasses, tracked as CVE-2024-23108 and CVE-2024-23109, for the critical remote code execution vulnerability in FortiSIEM. Originally considered duplicates, Fortinet now confirms they are valid variants of the original flaw, CVE-2023-34992. Upcoming FortiSIEM versions will address these vulnerabilities, so immediate upgrading is strongly recommended. Based … Read more

Fulton County Court System Still Hobbled by Cyberattack

February 7, 2024 at 04:25PM Fulton County, Georgia, grapples with the aftermath of a cyberattack causing a power outage and disruptions to court filings and tax processing. This has led to concerns about the future of court cases and the overall system. Criminal defense attorney Joshua Schiffer highlighted the strain on the judicial process, with … Read more