cybersecurity

Security bugs in ransomware leak sites helped save six companies from paying hefty ransoms

A security researcher says six companies were saved from having to pay potentially hefty ransom demands, in part thanks to rookie security flaws found in the web infrastructure used by the ransomware gangs themselves. Two companies received the decryption keys to unscramble their data without having to pay the cybercriminals a ransom, and four hacked […]

Security bugs in ransomware leak sites helped save six companies from paying hefty ransoms Read More »

Home security giant ADT says it was hacked

ADT confirmed this week that it was recently hacked, compromising some customer data. The home security company did not say when the cyberattack and data breach occurred, but disclosed that the attackers accessed the company’s databases containing customer home addresses, email addresses and phone numbers. In a brief regulatory filing published late Wednesday, ADT said

Home security giant ADT says it was hacked Read More »

Hackers could spy on cellphone users by abusing 5G baseband flaws, researchers say

A group of researchers say they have uncovered a series of security flaws in different 5G basebands — essentially processors used by cellphones to connect to mobile networks — which could have allowed hackers to stealthily hack victims and spy on them.  The researchers from Pennsylvania State University presented their findings at the Black Hat

Hackers could spy on cellphone users by abusing 5G baseband flaws, researchers say Read More »

UK data watchdog fines NHS vendor Advanced for security failures prior to LockBit ransomware attack

U.K. data protection authorities have issued a provisional fine of more than £6 million to NHS vendor Advanced after finding that the company failed to properly secure the information of thousands of people later stolen in a ransomware attack. In a statement, the U.K. Information Commissioner’s office (ICO) said it issued the fine after determining

UK data watchdog fines NHS vendor Advanced for security failures prior to LockBit ransomware attack Read More »

Cyberattack knocks Mobile Guardian MDM offline and wipes thousands of student devices

A cyberattack on Mobile Guardian, a U.K.-based provider of educational device management software, has sparked outages at schools across the world and left thousands of students unable to access their files.  Mobile Guardian acknowledged the cyberattack in a statement on its website, saying it identified “unauthorized access to the iOS and ChromeOS devices enrolled to

Cyberattack knocks Mobile Guardian MDM offline and wipes thousands of student devices Read More »

How the theft of 40M UK voter register records was entirely preventable

A cyberattack on the U.K. Electoral Commission that resulted in the data breach of voter register records on 40 million people was entirely preventable had the organization used basic security measures, according to the findings from a damning report by the U.K.’s data protection watchdog published this week. The report published by the U.K.’s Information

How the theft of 40M UK voter register records was entirely preventable Read More »

Pharma giant Cencora is alerting millions about its data breach

Cencora has so far notified over a million people around the U.S. that their personal and protected health information was compromised in a data breach earlier this year, TechCrunch has found. The pharmaceutical giant in May said that a February incident resulted in the compromise of patients’ data, which Cencora obtained through partnerships with drug

Pharma giant Cencora is alerting millions about its data breach Read More »

Bumble and Hinge allowed stalkers to pinpoint users’ locations down to 2 meters, researchers say

A group of researchers said they found that vulnerabilities in the design of some dating apps, including the popular Bumble and Hinge, allowed malicious users or stalkers to pinpoint the location of their victims down to 2 meters.  In a new academic paper, researchers from the Belgian university KU Leuven detailed their findings when they

Bumble and Hinge allowed stalkers to pinpoint users’ locations down to 2 meters, researchers say Read More »

Lineaje raises $20M to help organizations combat software supply chain threats

The software supply chain faces threats from all sides. A 2024 report by the Ponemon Institute found that over half of organizations have experienced a software supply chain attack, with 54% having experienced one within the past year. Supply chain attacks typically target services from third-party vendors or open source software that make up a

Lineaje raises $20M to help organizations combat software supply chain threats Read More »

HealthEquity data breach affects 4.3 million people

HealthEquity is notifying 4.3 million people following a March data breach that affects their personal and protected health information. In its data breach notice, filed with Maine’s attorney general, the Utah-based healthcare benefits administrator said that although the compromised data varies by person, it largely consists of sign-up information for accounts and information about benefits

HealthEquity data breach affects 4.3 million people Read More »