Around 1500 UK charities have potentially suffered data breaches following a cyber incident impacting third-party CRM provider Beacon. Personal details held by these charities, including those operating in sensitive areas such as healthcare and victim support, are believed to have… Read More "Healthcare and Victim Support Charities Affected by Beacon Cyber Incid"
Researcher Shares CrowdStrike Privilege Escalation Zero Day
A security researcher has published details of what appears to be a zero-day privilege escalation exploit in CrowdStrike. The individual, identified by their online moniker “Nightmare Eclipse” (aka Infinite Nightmare, MSNightmare) posted the details to GitHub on September 3. “FalconFlank… Read More "Researcher Shares CrowdStrike Privilege Escalation Zero Day"
Multiple Class Action Lawsuits Filed Against IDScan
Law firms are circling after reports emerged last week of a potential mega-breach of driver’s license information. At least four class-action lawsuits have been filed in the US District Court for the Eastern District of Louisiana against IDScan.net, the company… Read More "Multiple Class Action Lawsuits Filed Against IDScan"
Trezor Supply Chain Breach Now Impacts 81,000 Customers
Cryptocurrency wallet manufacturer Trezor has revealed that a breach at a key shipping partner has affected 67,000 more customers than originally thought. In an update posted on September 4, the hardware specialist said it was informed that the trove stolen… Read More "Trezor Supply Chain Breach Now Impacts 81,000 Customers"
BigBear 2 PhaaS Campaign Steals 5000+ Microsoft Credentials
Security researchers have uncovered a new phishing-as-a-service (PhaaS) operation which they claim has already exfiltrated more than 5100 Microsoft 365 credential records from victims. Bigbear 2.0 is based on adversary-in-the-middle framework Evilginx2, according to CloudSEK. The research outfit managed to… Read More "BigBear 2 PhaaS Campaign Steals 5000+ Microsoft Credentials"
THost9 Android RAT Pairs Packed Loader With ADB Worm
A packed Android remote access trojan (RAT) has combined a concealed loader with a worm that scans for exposed Android Debug Bridge (ADB) services and installs itself on reachable devices. Dark Atlas said in research published on September 8 that… Read More "THost9 Android RAT Pairs Packed Loader With ADB Worm"
AI Coding Tools Now a Prime Target for Threat Actors, Google Warns
The rapid integration of AI-assisted coding tools has become a primary target for threat actors, a new report from Google Threat Intelligence Group (GTIG) has warned. This shift in software development practices has contributed to several large-scale software supply chain… Read More "AI Coding Tools Now a Prime Target for Threat Actors, Google Warns"
Grindr Settles UK Data Privacy Claims for £26m
Grindr has agreed to pay £26m ($35.2m) to settle a UK group action over allegations that it unlawfully processed users’ personal data and misused private information before 2020. The settlement was reached on September 2 and disclosed to investors two… Read More "Grindr Settles UK Data Privacy Claims for £26m"
France Establishes New Government-Focused Cyber Incident Response Unit
The French national cybersecurity agency (ANSSI) will be equipped with a new cyber incident response unit dedicated to help state services. This new mechanism, called Interministerial Response & Action against Data Breaches (Réponse & Action Interministérielle face aux Violations de… Read More "France Establishes New Government-Focused Cyber Incident Response Unit"
Data Overtakes Skills as Top Threat Hunting Challenge, SANS Study Find
Data has overtaken skills as the number one barrier for threat hunters, for the first time in the five years the SANS Institute has surveyed the industry. The research organization polled 500 cybersecurity practitioners and leaders across North America, Europe,… Read More "Data Overtakes Skills as Top Threat Hunting Challenge, SANS Study Find"