Articles

The U.S. Department of Health and Human Services has warned of a sophisticated wave of social engineering attacks targeting IT help desks across the healthcare and public health sector, marking a notable escalation in tactics against the industry.

AT&T has confirmed a data breach affecting 73 million current and former customers, reversing its earlier denials after mounting evidence pointed to a large trove of leaked customer data.

A vulnerability dubbed ‘Unsaflok,’ discovered at a Las Vegas hacking convention, puts nearly 3 million doors across 13,000 hotels and residences at risk, letting anyone unlock a Saflok RFID lock with a pair of forged keycards.

The SEC has sued IT management company SolarWinds and its CISO Tim Brown, accusing the company of overstating its security posture and downplaying known vulnerabilities in the years leading up to the 2019 Russian-linked espionage attack.

International law enforcement agencies seized the Tor negotiation and data leak sites run by the Ragnar Locker ransomware group, disrupting its operations in a significant win against organized cybercrime.

Okta has revealed that a breach originally estimated to affect less than 1% of customers actually impacted all of them, after attackers gained unauthorized access to a support system report containing names, emails, and other sensitive data.

ICBC Financial Services, a division of the world’s largest bank by revenue, was hit with a ransomware attack that disrupted specific systems, prompting the unit to isolate affected infrastructure to contain further damage.

Google, Cloudflare, and AWS jointly disclosed a zero-day vulnerability called ‘HTTP/2 Rapid Reset’ behind the largest DDoS attack ever recorded, which peaked at 398 million requests per second before Google Cloud mitigated it.

Digital risk protection firm DarkBeam left an Elasticsearch and Kibana interface unsecured, exposing roughly 3.8 billion records that had originally been compiled to alert customers to prior breaches.