cybersecurity

Hackers are exploiting a new Fortinet firewall bug to breach company networks

Security /

Security researchers say malicious hackers have been exploiting a newly discovered vulnerability in Fortinet firewalls to break into corporate and enterprise networks. In an advisory published Tuesday, security product maker Fortinet confirmed that a critical-rated vulnerability in its FortiGate firewalls, tracked as CVE-2024-55591, is “being exploited in the wild.”  Fortinet made patches available, but security […]

Hackers are exploiting a new Fortinet firewall bug to breach company networks Read More »

UK plans to ban public sector organizations from paying ransomware hackers

Security /

U.K. public sector and critical infrastructure organizations could be banned from making ransom payments under new proposals from the U.K. government.  The U.K.’s Home Office launched a consultation on Tuesday that proposes a “targeted ban” on ransomware payments. Under the proposal, public sector bodies — including local councils, schools, and NHS trusts — would be

UK plans to ban public sector organizations from paying ransomware hackers Read More »

A breach of a data broker’s trove of location data threatens the privacy of millions

Security /

A hack and data breach at location data broker Gravy Analytics is threatening the privacy of millions of people around the world, whose smartphone apps unwittingly revealed their location data collected by the data giant. The full scale of the data breach isn’t yet known, but the alleged hacker has already published a large sample

A breach of a data broker’s trove of location data threatens the privacy of millions Read More »

UK domain giant Nominet confirms cybersecurity incident linked to Ivanti VPN hacks

Security /

Nominet, the U.K. domain registry that maintains .co.uk domains, has experienced a cybersecurity incident that it confirmed is linked to the recent exploitation of a new Ivanti VPN vulnerability. In an email to customers, seen by TechCrunch, Nominet warned of an “ongoing security incident” under investigation. Nominet said hackers accessed its systems via “third-party VPN

UK domain giant Nominet confirms cybersecurity incident linked to Ivanti VPN hacks Read More »

Meet the Chinese ‘Typhoon’ hackers preparing for war

Security /

Of the cybersecurity risks facing the United States today, few loom larger than the potential sabotage capabilities posed by China-backed hackers, which senior U.S. national security officials have described as an “epoch-defining threat.” The U.S. says Chinese government-backed hackers have — in some cases for years — been burrowing deep into the networks of U.S.

Meet the Chinese ‘Typhoon’ hackers preparing for war Read More »

Cannabis company Stiiizy says hackers accessed customers’ ID documents

Security /

Popular Los Angeles-based cannabis brand Stiiizy has confirmed that hackers accessed reams of sensitive customer data, including government-issued documents and medical cannabis cards, during a November cyberattack. In a data breach notice filed with California’s attorney general this week, Stiiizy said it was notified by its point-of-sale processing vendor that an “organized cybercrime group” had

Cannabis company Stiiizy says hackers accessed customers’ ID documents Read More »

Facebook awards researcher $100,000 for finding bug that granted internal access

Security /

In October 2024, security researcher Ben Sadeghipour was analyzing Facebook’s ad platform when he found a security vulnerability that allowed him to run commands on the internal Facebook server housing that platform, essentially giving him control of the server.   After he reported the vulnerability to Facebook’s owner Meta, which Sadeghipour said took just one hour

Facebook awards researcher $100,000 for finding bug that granted internal access Read More »

PowerSchool says hackers stole students’ sensitive data, including Social Security numbers, in data breach

Security /

Edtech giant PowerSchool has warned customers that hackers accessed its customers’ highly sensitive information — including student Social Security numbers, grades, and medical information — during a recent data breach, TechCrunch has learned.  In an FAQ obtained by TechCrunch that was sent to affected customers this week, PowerSchool says that “sensitive personal information” was accessed during

PowerSchool says hackers stole students’ sensitive data, including Social Security numbers, in data breach Read More »

Hackers are exploiting a new Ivanti VPN security bug to hack into company networks

Security /

U.S. software giant Ivanti has warned that a zero-day vulnerability in its widely-used enterprise VPN appliance has been exploited to compromise the networks of its corporate customers. Ivanti said on Wednesday that the critical-rated vulnerability, tracked as  CVE-2025-0282, can be exploited without any authentication to remotely plant malicious code on Ivanti’s Connect Secure, Policy Secure,

Hackers are exploiting a new Ivanti VPN security bug to hack into company networks Read More »