From ransomware schemes to supply chain attacks, this year melded classic hacks with extraordinary circumstances WHAT A WAY to kick off a new decade. 2020 showcased all of the digital risks and cybersecurity woes you’ve come to expect in the modern era, but this year was unique in the ways Covid-19 radically and tragically transformed life around the...Read More
Security researchers at Google say they’ve found a number of malicious websites which, when visited, could quietly hack into a victim’s iPhone by exploiting a set of previously undisclosed software flaws. Google’s Project Zero said in a deep-dive blog post published late on Thursday that the websites were visited thousands of times per week by unsuspecting victims,...Read More
US mobile network operator Sprint said hackers broke into an unknown number of customer accounts via the Samsung.com “add a line” website. “On June 22, Sprint was informed of unauthorized access to your Sprint account using your account credentials via the Samsung.com ‘add a line’ website,” Sprint said in a letter it is sending impacted customers....Read More
The server contained source code, passwords, configuration details, and other sensitive information related to GE Aviation’s internal infrastructure.It was one of the 5,495 publicly available Jenkins instances as indexed by Shodan. A publicly available Jenkins server of GE Aviation was found spilling sensitive data out in the open. Security researcher Bob Diachenko came across this...Read More
The CBP said that one of its contractors transferred copies of license plate images and traveler photos collected by CBP to the company’s network, which was later compromised by an attacker.The agency did not reveal the name of the contractor, however, CBP’s public statement sent to the Washington Post included the name “Perceptics” in the...Read More
The information that could be accessed during the breach includes Social Security numbers, bank account details, credit card numbers, as well as medical information.American Medical Collection Agency (AMCA) immediately responded by taking down the web payment page, as well as migrated its web payments portal services to a third-party vendor. What happened? American Medical Collection...Read More
Pacers Sports & Entertainment (PSE), the legal entity behind the Indiana Pacers and the Indiana Fever NBA and WNBA basketball teams, respectively, announced a cybersecurity breach on Friday during which hackers gained access to sensitive user information. In a press release published yesterday, the company blamed the cybersecurity breach on phishing campaign during which hackers managed to...Read More
Attackers gained access to seller accounts and siphoned off loan funds which were intended to be used for business and startup costs.Amazon noted that the accounts were likely compromised by phishing techniques that tricked sellers into providing their account details and login credentials. What is the issue? Amazon has revealed that it was hit with...Read More
A stream of Chipotle customers have said their accounts have been hacked and are reporting fraudulent orders charged to their credit cards — sometimes totaling hundreds of dollars. Customers have posted on several Reddit threads complaining of account breaches and many more have tweeted at @ChipotleTweets to alert the fast food giant of the problem. In most cases, orders were put through under...Read More
FruitFly Surveillance Malware Hits American Macs Law enforcement agents are investigating what appears to be a slice of malicious code, dubbed FruitFly, that’s been hitting Mac users in recent weeks. According to Forbes, Patrick Wardle, an ex-NSA analyst who now does research for cybersecurity firm Synack, says he saw around 400 infections, but there’s likely...Read More
