Cyberattacks: Page 24
-
sdecoret via Getty Images
Breach hits GoTo, the parent company of LastPass
Damage caused by a cyberattack on a shared cloud storage service is adding to the fallout for both companies.
By Matt Kapko • Jan. 24, 2023 -
Stein Photo via Getty Images
Los Angeles school system shifts timeline of ransomware attack
Post-breach investigations are complex. The timeline and scope of damage inflicted often change as investigations unfold.
By Matt Kapko • Jan. 24, 2023 -
Justin Sullivan/Getty Images via Getty Images
Experts question T-Mobile’s security culture as breach cycle churns
The gap between the threat actor’s intrusion and T-Mobile’s detection underscores multiple unresolved challenges.
By Matt Kapko • Jan. 20, 2023 -
Justin Sullivan via Getty Images
T-Mobile breached again, 37M customer accounts exposed
The incident marks the latest in a series of data breaches, the worst of which occurred in August 2021 and exposed the data of at least 76.6 million people.
By Matt Kapko • Jan. 19, 2023 -
Sean Gallup via Getty Images
PayPal warns 35,000 customers of exposure following credential stuffing attack
Impacted customers were notified of the incident nearly a month after it was discovered. It’s unclear where or how customer account credentials were obtained.
By Matt Kapko • Jan. 19, 2023 -
solarseven via Getty Images
World Economic Forum officials warn global instability could lead to catastrophic cyber event
A report released at the WEF said top business leaders and security experts fear heightened geopolitical tensions could result in a major attack in the next two years.
By David Jones • Jan. 19, 2023 -
Rafael Henrique/Zumapress/Newscom
Mailchimp hit by second cyberattack in 6 months, 133 customers impacted
The social engineering incident is similar to an August cyberattack that targeted customers in the crypto industry.
By David Jones • Jan. 19, 2023 -
Techa Tungateja via Getty Images
CircleCI probe links malware placed on engineer’s laptop to larger breach
An unauthorized actor, after stealing a valid SSO session, was able to exfiltrate data, including customer environment variables, tokens and keys.
By David Jones • Jan. 13, 2023 -
iStock via Getty Images
Citrix flaw exploited in ransomware attack against small US business
Threat actors linked to ransomware group Royal are actively exploiting a vulnerability in two Citrix products, researchers found.
By David Jones • Jan. 13, 2023 -
sdecoret via Getty Images
CircleCI working with AWS to identify, revoke keys impacted by security incident
The company assured customers there is no indication that AWS accounts were accessed. CircleCI has scheduled an incident report for Jan. 17.
By David Jones • Jan. 12, 2023 -
Justin Sullivan via Getty Images
Ransomware attack exposes California transit giant’s sensitive data
Vice Society, a prolific ransomware group, leaked data it claims to have stolen from San Francisco’s Bay Area Rapid Transit.
By Matt Kapko • Jan. 10, 2023 -
DKosig via Getty Images
FCC revives push to speed up telecom incident disclosures
Telecom operators are a primary target for threat actors. A change to breach reporting rules is long overdue, one analyst said.
By Matt Kapko • Jan. 10, 2023 -
iStock via Getty Images
Rackspace confirms ransomware attack hit a small percentage of its Hosted Exchange customers
The cloud services firm said an investigation found no evidence the attackers read, misused or disseminated customer data or emails.
By David Jones • Jan. 6, 2023 -
Techa Tungateja via Getty Images
Slack employee tokens stolen, GitHub repository breached
The firm said the threat actor downloaded private code repositories, but none had customer data or the company’s code base.
By David Jones • Jan. 5, 2023 -
Thinkhubstudio via Getty Images
Freight company Wabtec discloses June cyberattack impacting US, overseas operations
The Pittsburgh-based company began notifications in late December, months after stolen data posted on a LockBit site.
By David Jones • Jan. 4, 2023 -
David McNew via Getty Images
Ransomware hit US schools at steady rate in 2022
The true numbers are likely much greater. Not all incidents are publicly disclosed or claimed as such by threat actors on the dark web.
By Matt Kapko • Jan. 4, 2023 -
Courtesy of Rackspace Technology
Rackspace recovers old emails as customers await answers from ransomware probe
The cloud-services company previously said an investigation into the ransomware incident was almost complete, but has not yet released key details.
By David Jones • Dec. 22, 2022 -
Courtesy of Rackspace Technology
Apple CIO steps down from Rackspace board citing new job duties
Rackspace announced additional management changes while it recovers from a ransomware attack on its Hosted Exchange business.
By David Jones • Dec. 19, 2022 -
katleho Seisa via Getty Images
Little Rock School District approves $250K payment in ransomware settlement
Federal agencies including the FBI discourage paying ransoms in such cyberattacks as there is no guarantee victims will recover their files.
By Anna Merod • Dec. 19, 2022 -
Motortion via Getty Images
Rackspace executives stand by ransomware response
Chief Product Officer Josh Prewitt said the company restored email access to more than three-quarters of its Hosted Exchange customers. But Rackspace officials pushed back on alleged connections to ProxyNotShell.
By David Jones • Dec. 16, 2022 -
vchal via Getty Images
Rackspace blames ransomware attack on financially motivated threat actor
The cloud services firm says an investigation into the Dec. 2 ransomware attack is close to wrapping up.
By David Jones • Dec. 15, 2022 -
anyaberkut via Getty Images
Threat actors abuse legitimate Microsoft drivers to bypass security
Researchers from Mandiant and SentinelOne say attackers have deployed malware that can allow them to get around security controls.
By David Jones • Dec. 13, 2022 -
The image by Jimmy Emerson, DVM is licensed under CC BY-ND 2.0
California authorities confirm cyber intrusion, LockBit claims ransomware hit
Multiple state agencies are responding to support California's Department of Finance, though officials say no state funds were compromised.
By Matt Kapko • Dec. 12, 2022 -
Techa Tungateja via Getty Images
Rackspace says more than two-thirds of customers regained email access
The cloud company continued efforts to transition customers to Microsoft 365 following a Dec. 2 ransomware attack.
By David Jones • Dec. 12, 2022 -
gorodenkoff via Getty Images
Rackspace scrambles to assist customers as ransomware probe continues
Microsoft is assisting the multicloud services firm after a ransomware attack left thousands of customers unable to access emails on Exchange.
By David Jones • Dec. 8, 2022
Previous
