Cyber News

The U.S. Department of Justice has indicted former Google engineer Linwei Ding for allegedly stealing AI trade secrets to benefit two companies he was affiliated with in China, exposing him to significant prison time if convicted.

President Biden signed an executive order restricting the sale of Americans’ personal data to countries of concern, including China, Russia, Iran, North Korea, Cuba, and Venezuela, aiming to curb misuse of sensitive information by foreign adversaries.

UnitedHealth Group confirmed a cyberattack attributed to nation-state hackers targeting its Optum subsidiary’s Change Healthcare platform, forcing an IT shutdown that disrupted operations across the company’s 50-state footprint.

The Anatsa banking trojan has infiltrated the Google Play Store by posing as legitimate apps, racking up over 150,000 downloads while targeting Android users across the UK, Germany, Spain, Slovakia, Slovenia, and the Czech Republic.

ExpressVPN has discontinued the split tunneling feature in its Windows app after discovering a vulnerability that had been leaking some users’ domain visits to unprotected DNS servers for almost two years.

Cloudflare disclosed that a nation-state attacker breached its internal Atlassian server, compromising its Confluence wiki, Jira database, and Bitbucket source code system using credentials and tokens stolen from the earlier Okta breach.

Ransomware gang Blackcat (ALPHV) claims to have stolen 300GB of data, including classified documents, from Technica Corporation, and is threatening to release sensitive material tied to U.S. intelligence agencies including the FBI.

Hewlett-Packard Enterprise disclosed that Russian threat actor Midnight Blizzard, also known as Nobelium, Cozy Bear, and APT29, breached its cloud-hosted email environment in May 2023 and exfiltrated sensitive data.

Verified government and business accounts on X, marked with gold and grey checkmarks, are increasingly being hijacked to spread fraudulent cryptocurrency schemes and phishing operations, including one incident involving a cyber threat intelligence firm’s own account.

An Apple-commissioned study led by an MIT professor found a sharp rise in data breaches and compromised records between 2021 and 2022, totaling 2.6 billion exposed records and underscoring the growing importance of end-to-end encryption.