Security

Third member of LockBit ransomware gang has been arrested

U.S. prosecutors in New Jersey on Friday publicly announced charges against Rostislav Panev, 51, a dual Russian-Israeli national accused of being a key developer in the LockBit ransomware gang. Panev is currently in Israeli custody and faces extradition to the United States. LockBit is one of the most prolific ransomware gangs, accused of launching crippling […]

Third member of LockBit ransomware gang has been arrested Read More »

Ransomware attack on health giant Ascension hits 5.6 million patients

A May ransomware attack on Ascension, a U.S. healthcare giant with more than 140 hospitals and dozens of senior living facilities, allowed hackers to steal personal and sensitive health information on 5.6 million patients, according to a new filing with Maine’s attorney general. The cyberattack caused widespread disruption across its hospital system, with some staff

Ransomware attack on health giant Ascension hits 5.6 million patients Read More »

Why Apple sends spyware victims to this nonprofit security lab

Before the elections, the cybersecurity team of U.S. vice president and then-presidential candidate Kamala Harris reached out to Apple asking for help, according to Forbes, after a tool that’s designed to detect spyware on iPhones flagged anomalies on two devices belonging to campaign staffers. Apple declined to forensically analyze the phones, per Forbes.  The company’s

Why Apple sends spyware victims to this nonprofit security lab Read More »

India’s Rapido exposed user and driver data through leaky website feedback form

Rapido, a popular ride-hailing platform in India, has fixed a security issue that exposed personal information associated with its users and drivers, TechCrunch has exclusively learned. The flaw, discovered by security researcher Renganathan P, was related to a website form meant to collect feedback from Rapido auto-rickshaw users and drivers. The form exposed the full

India’s Rapido exposed user and driver data through leaky website feedback form Read More »

US government urges high-ranking officials to lock down mobile devices following telecom breaches

The U.S. government is urging senior politicians and high-ranking officials to lock down their devices amid the ongoing Chinese breaches of at least eight major telecom providers. In an advisory on Wednesday, U.S. cybersecurity agency CISA said that “highly-targeted officials,” including those in government, should enable advanced security features, such as Apple’s Lockdown Mode, which

US government urges high-ranking officials to lock down mobile devices following telecom breaches Read More »

North Korea-linked hackers accounted for 61% of all crypto stolen in 2024

Alongside the rising adoption and value of crypto assets, theft is also on the rise. This year, the total value of cryptocurrency stolen surged 21%, reaching a substantial $2.2 billion. And according to a Chainalysis report released on Thursday, more than half of this amount was stolen by North Korea-affiliated hacking groups. Earlier this year,

North Korea-linked hackers accounted for 61% of all crypto stolen in 2024 Read More »

Bugs in a major McDonald’s India delivery system exposed sensitive customer data

A major McDonald’s delivery system in India exposed the personal information of its customers and drivers due to several simple security flaws, TechCrunch has exclusively learned. The flaws, discovered by security researcher Eaton Zveare, were found in the APIs of the delivery system associated with McDonald’s India (West & South), which is owned by Hardcastle

Bugs in a major McDonald’s India delivery system exposed sensitive customer data Read More »

Tracker firm Hapn spilling names of thousands of GPS tracking customers

GPS tracking firm Hapn is exposing the names of thousands of its customers due to a website bug, TechCrunch has learned. A security researcher alerted TechCrunch in late November to customer names and affiliations — such as the name of their workplace — spilling from one of Hapn’s servers, which TechCrunch has seen.  Hapn, formerly

Tracker firm Hapn spilling names of thousands of GPS tracking customers Read More »

How the ransomware attack at Change Healthcare went down: A timeline

A ransomware attack earlier this year on UnitedHealth-owned health tech company Change Healthcare likely stands as one of the largest data breaches of U.S. health and medical data in history. Months after the February data breach, a “substantial proportion of people living in America” are receiving notice by mail that their personal and health information

How the ransomware attack at Change Healthcare went down: A timeline Read More »

Nebraska sues Change Healthcare over security failings that led to medical data breach of over 100 million Americans

The U.S. state of Nebraska has sued the healthtech giant Change Healthcare over a series of alleged security failings that resulted in a historical data breach exposing the sensitive health information of at least 100 million Americans.  In a complaint filed this week, Nebraska’s attorney general Mike Hilgers claims UnitedHealth-owned Change Healthcare failed to implement

Nebraska sues Change Healthcare over security failings that led to medical data breach of over 100 million Americans Read More »