Cyberattacks: Page 14
-
Retrieved from Progress Software on January 18, 2024
MOVEit liabilities mount for Progress Software
The company revealed multiple government investigations are underway into the MOVEit vulnerability. It’s also party to more than 100 class-action lawsuits.
By Matt Kapko • Jan. 30, 2024 -
"Schneider Electric Torgauer Straße auf dem EUREF-Campus Berlin-Schöneberg" by Igor Calzone1 is licensed under CC BY-SA 4.0
Schneider Electric hit by ransomware attack against its sustainability business division
Cactus ransomware reportedly claimed credit for the mid-January attack, and the company unit hopes to restore operations in the next couple of days.
By David Jones • Jan. 30, 2024 -
Stephen Brashear via Getty Images
Midnight Blizzard attack seen as another sign of Microsoft falling short on security
Critics say the hack of senior Microsoft executives’ emails is another example of a longstanding series of security lapses and foot-dragging by the company.
By David Jones • Jan. 26, 2024 -
Courtesy of HPE
HPE hit by a monthslong cyberattack on its cloud-based email
The attack by Midnight Blizzard, the group that recently hit Microsoft, stole emails and data from HPE employees in cybersecurity and other business units.
By Matt Kapko • Jan. 25, 2024 -
maciek905 via Getty Images
Trading platform EquiLend down following cyberattack
The prolific criminal group LockBit has reportedly claimed credit for the attack, raising further questions about the risks facing the securities and banking industries.
By David Jones • Jan. 25, 2024 -
TU IS via Getty Images
US data compromises surged to record high in 2023
Breached organizations are withholding critical information more often than ever, underscoring a trend toward opaque notices, the Identity Theft Resource Center said.
By Matt Kapko • Jan. 25, 2024 -
Daphne Howland/Cybersecurity Dive
VF Corp. cyberattack impacted 35.5M consumers
The North Face and Vans parent company originally reported the incident at the height of the holiday season.
By Kaarin Moore • Jan. 23, 2024 -
Stephen Brashear / Stringer via Getty Images
Microsoft to overhaul internal security practices after Midnight Blizzard attack
After Microsoft disclosed a state-sponsored actor stole data from senior executives, experts are raising questions about its security capabilities and practices.
By David Jones • Jan. 22, 2024 -
guvendemir via Getty Images
LoanDepot ransomware attack exposes data on almost 17M customers
The number of individuals impacted makes it the most widespread compromise of customer data in the spree of attacks targeting the real estate sector.
By Matt Kapko • Jan. 22, 2024 -
Just_Super via Getty Images
Ivanti Connect Secure exploitation accelerates as Moody’s calls impact credit negative
A suspected state-linked hacker is manipulating an integrity tool used to check systems as customers still await an initial patch.
By David Jones • Jan. 19, 2024 -
Retrieved from Progress Software on January 18, 2024
Progress Software shakes off MOVEit’s financial consequences, maintains customers
Executives described the file-transfer service as one of its stronger performing products and said customers remain loyal.
By Matt Kapko • Jan. 18, 2024 -
Just_Super via Getty Images
Ivanti Connect Secure exploitation accelerates, 1,700 devices compromised worldwide
Researchers warn additional threat actors are actively working to take advantage of two chained together vulnerabilities.
By David Jones • Jan. 17, 2024 -
DKosig via Getty Images
Wealthy countries boast superior cyber defenses
A nation’s economic prosperity is directly linked to greater defense capabilities, but no country is overachieving in cyber defense, according to SecurityScorecard.
By Matt Kapko • Jan. 17, 2024 -
Retrieved from Colorado State University on January 09, 2024
Deep DiveProgress Software’s MOVEit meltdown: uncovering the fallout
Businesses use the file-transfer service because it checks the compliance boxes for keeping data safe. Though initial attacks were targeted, thousands of bystanding businesses were hit indiscriminately.
By Matt Kapko , Julia Himmel • Jan. 16, 2024 -
Getty Plus via Getty Images
Elevated ransomware activity hit nearly 5,200 organizations in 2023
While ransomware activity remains high, the number of unique ransomware families used for these attacks decreased by more than half, Rapid7 researchers found.
By Matt Kapko • Jan. 12, 2024 -
Colin Anderson Productions pty ltd
Ivanti Connect Secure attacks part of deliberate espionage operation
Researchers warn the previously unknown actor has developed custom malware designed to maintain persistent access on targeted networks and evade detection.
By David Jones • Jan. 12, 2024 -
Getty Images via Getty Images
Ivanti Connect Secure devices face active exploitation, patch schedule staggered
Unauthenticated attackers can take control of systems by exploiting the zero days, which a suspected state-linked threat actor is chaining together.
By David Jones • Jan. 11, 2024 -
iStock/Getty Images Plus via Getty Images
5 cybersecurity trends to watch in 2024
Preventative measures remain woefully unmet, the scourge of ransomware is as bad as its ever been, and a wave of new incident reporting and compliance regulations are taking hold. Buckle up, 2024 is here.
By David Jones , Matt Kapko • Jan. 10, 2024 -
JHVEPhoto via Getty Images
Fidelity National Financial cyberattack impacts up to 1.3M customers
While data was stolen and the company faces lawsuits, it does not consider the attack material to the business.
By David Jones • Jan. 10, 2024 -
WhataWin/Getty Images via Getty Images
DDoS attack traffic surged in 2023, Cloudflare finds
Elevated malicious DDoS activity coincided with mass exploits of the novel zero-day vulnerability HTTP/2 Rapid Reset, which threat actors used to launch DDoS attacks last year.
By Matt Kapko • Jan. 9, 2024 -
guvendemir via Getty Images
LoanDepot caught in mortgage industry cyberattack spree
The non-bank mortgage lender is the fourth major real estate industry organization hit by a cyberattack since late October.
By Matt Kapko • Jan. 8, 2024 -
Marko Georgiev / Stringer via Getty Images
Merck reaches settlement in closely watched NotPetya insurance case
The pharmaceutical giant previously won a New Jersey court decision involving $700 million of a $1.4 billion dispute over war-exclusions language related to the attack.
By David Jones • Jan. 8, 2024 -
GOCMEN via Getty Images
Extent of a cyber specialist law firm’s data breach grows
A two-week long breach exposed a trove of highly sensitive information on Orrick’s clients. The pool of victims quadrupled between its July and December disclosures.
By Matt Kapko • Jan. 5, 2024 -
Getty Images via Getty Images
Xerox discloses a subsidiary’s breach following ransomware claim of data theft
Inc, a relatively new threat group, previously claimed to have stolen company data.
By David Jones • Jan. 3, 2024 -
Zephyr18 via Getty Images
First American Financial confirms threat actors stole and encrypted data
The title insurance giant said the cyberattack is contained, but it is still working to determine whether the incident will have a material impact.
By David Jones • Updated Jan. 4, 2024
Previous
