Cyberattack Leaves Library With System-Wide Technical Outages
A cyberattack caused system-wide outages at the Boston Public Library; officials found no evidence yet that employee or customer data was taken.
Breaches & threats, page 4 of 4
Newest first. Back to the first page.
Cable TV Provider Cox Communications' Customer Data Exposed in Phishing (Vishing) Scheme
A hacker who impersonated a support agent by phone tricked Cox Communications into exposing customer names, addresses, PINs and account numbers.
Businesses Face Payroll, Scheduling Woes After Ransomware Attack on Kronos
A ransomware attack on Ultimate Kronos Group's Workforce Central disrupted payroll and scheduling for major clients, including Tesla and Puma, for weeks.
The Cyber Centre Releases Report on Cyber Threats Targeting Major International Sporting Events
The Canadian Centre for Cyber Security warns that cybercriminals, hacktivists and state actors are likely to target major sporting events this year.
FastJSON Versions Vulnerable to Deserialization
A flaw in FastJSON's AutoType feature (CVE-2022-25845) lets attackers run code via crafted JSON; upgrading to version 1.2.83 or enabling Safe Mode fixes it.
Florida Credit Union "Taking All Appropriate Steps" After Possible Ransomware Attack
Envision Credit Union reported technical difficulties after the LockBit 2.0 ransomware group threatened to publish the Florida credit union's stolen data.
Nearly 500,000 Fortinet VPN Accounts Leaked By Hackers
Hackers leaked login credentials for nearly 500,000 Fortinet VPN accounts; Fortinet warns unpatched or unreset credentials remain vulnerable.
Heightened Threat Activity Expected as Global Conflicts Intensify
DoS attacks hit Ukraine's defense ministry and major banks as Russia-Ukraine tensions rise; such attacks can serve as cover for larger, damaging operations.
LockBit Ransomware Threat
LockBit 2.0 ransomware spreads via emails disguised as copyright violation notices; opening the attached 'PDF' encrypts the device and deletes shadow copies.
2 Public Wastewater Facilities Hit By Ransomware Attack
Ransomware hit two Maine wastewater plants via an outdated Windows 7 computer, taking office systems down for three days with no data compromised.
Marketing Firm RR Donnelly Has Confirmed That Threat Actors Stole Data in a December Cyberattack
Marketing firm RR Donnelly confirmed data was stolen in a December ransomware attack claimed by the Conti gang, which briefly leaked 2.5GB of files.
Microsoft Azure Vulnerability
FabricScape, a flaw in Azure Service Fabric's Data Collection Agent, lets attackers escalate privileges and take over Linux clusters; patching is the fix.
Fired Credit Union Employee Takes Revenge Deleting 21GB of Data
A fired credit union employee logged back in with active remote credentials and deleted 21GB of data in an act of revenge, costing over $10,000 to restore.
OpenSSL Vulnerability
Two flaws in OpenSSL 3.0.4 can corrupt memory during RSA operations or leak 16 bytes of plaintext from AES OCB encryption; upgrade to fix both.
Palo Alto PAN-OS Vulnerability CVE-2022-0028
A misconfigured URL filtering policy in PAN-OS, CVE-2022-0028, lets attackers use firewalls for reflected denial-of-service attacks; a patch is available.
Over Half a Million Credit Reports and Other Financial Documents Exposed Due to Misconfiguration
A misconfigured database at TransCredit exposed 822,789 records, including credit accounts, loans, banking data, tax IDs and Social Security numbers.
Pro Wrestling Tees Discloses Data Breach After Credit Cards Stolen
Pro Wrestling Tees disclosed a payment skimmer malware breach that exposed customer names, credit card numbers and CVV codes entered at checkout.
Shutterfly Services Disrupted by Ransomware Attack Demanding Millions of Dollars as Ransom
A Conti ransomware attack on Shutterfly encrypted thousands of devices and exposed corporate financial data, legal documents and login credentials.
SonicWall Critical Vulnerability
A SQL injection flaw (CVE-2022-22280, CVSS 9.4) in SonicWall GMS and Analytics On-Prem lets unauthenticated attackers alter the database; upgrade to fix it.
1.4 Million Patients Warned of Data Breach Following Ransomware Attack
A ransomware attack on St. Josephs/Candler Health System exposed names, SSNs, driver's license numbers and health records for 1.4 million patients.
Want to know what this would look like for you?
A 30-minute call. No slides, no audit fee, no obligation. We ask what is breaking and tell you honestly whether we are the right fit.