February 22, 2024 at 08:04PM Avast has agreed to pay $16.5 million after the FTC accused the antivirus vendor of selling customer data to third parties. The company must destroy web browsing data transferred to its subsidiary, Jumpshot, and obtain express consent for data licensing from users. Avast disputes the allegations but has settled with … Read more
February 20, 2024 at 09:41AM German software developer, PSI Software SE, confirmed a ransomware attack on its internal infrastructure. The company, with over 2,000 employees, specializes in software solutions for energy suppliers and operational management. Its systems were disconnected post-attack to prevent data loss. Experts from the Federal Office for Information Security are assisting in … Read more
February 18, 2024 at 08:38PM The US government is offering rewards of up to $15 million for information leading to the takedown of the APLHV/Blackcat ransomware gang. Critical infrastructure attacks by APLHV are a significant concern. Siemens has reported critical vulnerabilities across various devices. The EncroChat service takedown continues to aid law enforcement in criminal … Read more
February 12, 2024 at 06:36PM Bank of America warns customers of data breach by service provider, exposing personal information including names, addresses, social security numbers, and financial data. Infosys McCamish Systems, with over 57,000 clients affected, was compromised by a ransomware attack. Bank of America is investigating, while cybersecurity authorities estimate LockBit gang has extorted … Read more
February 9, 2024 at 04:09PM AnyDesk disclosed details about a recent hacker attack, revealing the breach was discovered in mid-January with initial intrusion occurring in late December 2023. The company confirmed no evidence of malicious software being distributed to customers and is revoking certificates and pushing out software updates. It also enforced a password reset … Read more
February 4, 2024 at 10:42AM Clorox incurred $49 million in costs following a cyberattack in 2023, leading to system shutdowns, order processing delays, and product shortages. The company anticipates an additional $50-$60 million in costs in 2024. While it suspects the attack may have been ransomware, details about the attack remain undisclosed. Dominic Alvieri suggested … Read more
February 4, 2024 at 10:42AM Wisconsin man Joseph Garrison, 19, was sentenced to 18 months in prison for his involvement in a credential stuffing attack targeting a fantasy sports and betting website. He accessed 60,000 user accounts using stolen credentials, stealing approximately $600,000. Garrison surrendered to authorities and pleaded guilty. Two others were charged in … Read more
February 1, 2024 at 08:20PM Cloudflare revealed that suspected government spies infiltrated their system by using credentials stolen from the October 2023 Okta security breach. The intruders gained access to Atlassian and other systems, potentially extracting source code and sensitive information. Cloudflare, assisted by a security firm, is working to bolster their security measures following … Read more
January 24, 2024 at 11:40AM Global financial technology firm EquiLend faced a cyberattack resulting in system disruptions and unauthorized network access. The company is working to restore affected services, engaging third-party experts for investigation. A recent acquisition by U.S. private equity firm WCAS is pending, with an additional $200 million investment committed. EquiLend’s Next Generation … Read more
January 19, 2024 at 09:00AM VF Corporation, parent company of popular fashion brands like Vans and North Face, reported that 35.5 million customers were affected by a cyber-attack in December. However, sensitive data such as social security numbers and financial information were unaffected, and there is no evidence that customer passwords were compromised. The attack … Read more