New York attorney general, Letitia James, has filed a lawsuit against Allstate’s National General unit, alleging the company failed to adequately protect consumer data and neglected to report data breaches that exposed thousands of driver’s license numbers. The lawsuit, filed… Read More "New York Sues Allstate Over Data Breach and Security Failures"
The dozens of USDS cuts last week hit teams like product management, design, and procurement. Kamens and other sources told WIRED that he is the only person from the USDS engineering team who was fired. He and others speculate that… Read More "DOGE’s USDS Purge Included the Guy Who Keeps Veterans’ Data Safe Online"
The threat actor known as Blind Eagle has been linked to a series of ongoing campaigns targeting Colombian institutions and government entities since November 2024. “The monitored campaigns targeted Colombian judicial institutions and other government or private organizations, with high… Read More "Blind Eagle Hacks Colombian Institutions Using NTLM Flaw, RATs and GitHub-Based Attacks"
The company also announced that its Abuse VRP program paid out 40% more year-over-year in 2024, based on more than 250 valid bugs targeting Google products for abuse and misuse issues, to a total of over $290,000 in rewards. Rewards… Read More "Google paid nearly $12 million to bug hunters last year"
A new cyber-threat campaign targeting Colombian government institutions and organizations since November 2024 has been linked to the threat group Blind Eagle, also known as APT-C-36. The attackers have been distributing malicious .url files that mimic the effects of the recently… Read More "Blind Eagle Targets Colombian Government with Malicious .url Files"
As the so-called Department of Government Efficiency continues to rampage through the United States government by making sweeping cuts to the federal workforce, numerous ongoing lawsuits allege that the group’s access to sensitive data violates the Watergate-inspired Privacy Act of… Read More "$1.4 Billion Stolen From ByBit in Biggest Crypto Theft Ever"
Retrospective detection involves a thorough analysis of historical data including past logs, endpoint activities, and network activities. This analysis identifies initially missed malicious behavior as well as reveals the true extent of the threat. It automatically searches historical network data… Read More "Leveraging Retrospective Detection for Zero-Day Threats"
Inside the most innocent-looking image, a breathtaking landscape, or a funny meme, something dangerous could be hiding, waiting for its moment to strike. No strange file names. No antivirus warnings. Just a harmless picture, secretly concealing a payload that can… Read More "How XWorm Hides Inside Images"
Lesen Sie, welche Unternehmen in Deutschland aktuell von Cyberangriffen betroffen sind. Roman Samborskyi | shutterstock.com Sie denken, Ihre Sicherheitsmaßnahmen können Sie langfristig vor Cyberangriffen schützen? Oder dass Ihr Unternehmen zu klein und damit uninteressant für Hacker ist? Egal, ob Sie… Read More "Diese Unternehmen hat es schon erwischt"
Three critical vulnerabilities in Ivanti software have recently been added to the US Cybersecurity and Infrastructure Security Agency’s (CISA) Known Exploited Vulnerabilities (KEV) catalog. In a new security advisory published on March 10, CISA added five new flaws to its… Read More "CISA Urges All Organizations to Patch Exploited Critical Ivanti Flaws"
