Chinese cyberspies, Musk’s Beijing ties, labelled ‘real risk’ to US security by senator

November 20, 2024 at 06:55PM Senator Richard Blumenthal warned that U.S. tech companies’ ties to China pose national security risks during a hearing on cybersecurity threats. CrowdStrike revealed its findings on Liminal Panda, a Beijing-backed cyber-espionage group targeting telecommunications networks. Blumenthal criticized companies like SpaceX and Apple for prioritizing profits over American security. ### Meeting … Read more

China’s ‘Liminal Panda’ APT Attacks Telcos, Steals Phone Data

November 20, 2024 at 03:38PM A new threat actor, Liminal Panda, has been spying on mobile phones in Asia and Africa for over four years, targeting telecommunications networks to gather sensitive data for potential use by the Chinese state. The group’s tactics involve network-based attacks and exploiting telecommunications infrastructure for economic and political espionage. ### … Read more

China-Backed Hackers Leverage SIGTRAN, GSM Protocols to Infiltrate Telecom Networks

November 20, 2024 at 02:27AM A new China-linked cyber espionage group named Liminal Panda targets telecommunications entities in South Asia and Africa, employing advanced tools for unauthorized access and data extraction. CrowdStrike highlights prior misattribution and notes that these activities exploit trust relationships among telecom providers, underscoring vulnerabilities in critical infrastructure to state-sponsored attacks. ### … Read more

T-Mobile US ‘monitoring’ China’s ‘industry-wide attack’ amid fresh security breach fears

November 18, 2024 at 03:48PM T-Mobile US is monitoring an industry-wide cyber-espionage campaign believed to be conducted by Chinese government-backed hackers. Though the company has not confirmed being compromised, it stated there were no significant impacts or evidence of data theft. The FBI recently reported similar breaches across multiple telecoms. **Meeting Takeaways:** 1. **Cyber-Espionage Campaign … Read more

China-backed crews compromised ‘multiple’ US telcos in ‘significant cyber espionage campaign’

November 13, 2024 at 09:04PM The US government has identified a significant cyber espionage campaign by China-linked attackers targeting multiple telecommunications networks, resulting in data theft and compromised private communications of political figures. The FBI and CISA are assisting affected companies and enhancing cyber defenses, urging potential victims to report to local authorities. ### Meeting … Read more

Free, France’s second largest ISP, confirms data breach after leak

October 28, 2024 at 01:49PM French ISP Free confirmed a data breach affecting 19.2 million customers, with personal information, including 5.11 million IBAN numbers, stolen. The company has filed a criminal complaint and notified authorities. Although no passwords or bank card details were accessed, impacted subscribers are being informed and advised to monitor for unusual … Read more

Chinese cyberspies reportedly breached Verizon, AT&T, Lumen

October 7, 2024 at 01:24PM Chinese cyberspies breached US broadband networks at Verizon, AT&T, and Lumen Technologies, potentially compromising wiretapping systems used for court-ordered surveillance. The snoops may have accessed systems that share domestic data with law enforcement, and the FBI is investigating. The breach is connected to previous Chinese hacking efforts, with concerns raised … Read more

AT&T Data Breach: ‘Nearly All’ Wireless Customers Exposed in Massive Hack

July 12, 2024 at 08:51AM AT&T revealed a massive hack affecting nearly all wireless subscribers. Customer call and text records were breached from as early as May 2022, and the stolen data includes phone numbers and call details but not personal info. The incident is linked to a series of data heists targeting Snowflake customers, … Read more

Frontier warns 750,000 of a data breach after extortion threats

June 7, 2024 at 02:46PM Frontier Communications suffered a data breach affecting 750,000 customers due to a cyberattack by RansomHub ransomware operation. Customers’ personal information, including names and Social Security Numbers, was exposed. Although no financial data was compromised, customers are advised to enroll in free credit monitoring and identity theft services. RansomHub threatened to … Read more

Severe Vulnerabilities in Cinterion Cellular Modems Pose Risks to Various Industries

May 13, 2024 at 06:22AM Cybersecurity researchers disclosed critical security flaws in Cinterion cellular modems, potential targets for threat actors, risking access to sensitive information and code execution. The flaws, including heap overflow, privilege escalation, and exposure of sensitive information, were presented at OffensiveCon. Recommendations to mitigate threats include disabling non-essential SMS messaging and conducting … Read more