Silicon Valley venture capital (VC) juggernaut Sequoia is backing a fledgling Danish startup to build a next-gen software composition analysis (SCA) tool, one that promises to help companies filter through the noise and identify vulnerabilities that are a genuine threat.…
Tag: Security News | TechCrunch
LoanDepot says 16.6M customers had ‘sensitive personal’ information stolen in cyberattack
About 16.6 million LoanDepot customers had their “sensitive personal” information” stolen in a cyberattack earlier this month, which the loan and mortgage giant has described as a ransomware attack. The loan company said in a filing with federal regulators on…
LoanDepot says 16.6 million customers had ‘sensitive personal’ information stolen in cyberattack
About 16.6 million LoanDepot customers had their “sensitive personal” information” stolen in a cyberattack earlier this month, which the loan and mortgage giant has described as ransomware. The loan company said in a filing with federal regulators on Monday that…
Hackers breached Microsoft to find out what Microsoft knows about them
Wouldn’t you want to know what tech giants know about you? That’s exactly what Russian government hackers want, too. On Friday, Microsoft disclosed that the hacking group it calls Midnight Blizzard, also known as APT29 or Cozy Bear — and…
LoanDepot outage drags into second week after ransomware attack
LoanDepot customers say they have been unable to make mortgage payments or access their online accounts following a suspected ransomware attack on the company last week. The mortgage and loan giant said on January 8 that it was working to…
FTC bans another data broker from selling consumers’ location data
The U.S. Federal Trade Commission has continued its crackdown on data brokers with a settlement banning data aggregation company InMarket from selling consumers’ precise location data. Texas-based InMarket, which debuted as CheckPoints at TechCrunch Disrupt 2010, provides a marketing platform that…
Vans, Supreme owner VF Corp says hackers stole 35 million customers’ personal data
VF Corp., the parent company of the popular apparel brands Vans, Supreme, and The North Face, said Thursday that hackers stole the personal data of 35.5 million customers in a December cyberattack. The Denver, Colorado-based company reported the data breach…
Web monitors say Gaza week-long internet outage is longest yet
Internet monitoring firms say a near-total internet blackout in Gaza is reaching its seventh day, the longest outage of the ongoing Israel-Hamas conflict so far. Doug Madory, the director of internet analysis at Kentik, told TechCrunch in a Signal message…
Google says Russian espionage crew behind new malware campaign
Google researchers say they have evidence that a notorious Russian-linked hacking group — tracked as “Cold River” — is evolving its tactics beyond phishing to target victims with data-stealing malware. Cold River, also known as “Callisto Group” and “Star Blizzard,”…
PSA: Anyone can tell if you are using WhatsApp on your computer
Anyone who knows your WhatsApp number can figure out if you are only using the mobile app, or its companion web or desktop apps, a security researcher found. Tal Be’ery, the co-founder and CTO of crypto wallet maker ZenGo, found…
As hacks worsen, SEC turns up the heat on CISOs
Over the past year we’ve seen Uber’s former chief security officer convicted in federal court for mishandling a data breach, a federal regulator charge SolarWinds’ security chief with allegedly misleading investors prior to its own cyberattack, and new regulations that…
Hackers begin mass exploiting Ivanti VPN zero-day flaws
Malicious hackers have begun mass-exploiting two critical zero-day vulnerabilities in Ivanti’s widely-used corporate VPN appliance. That’s according to cybersecurity company Volexity, which first reported last week that China state-backed hackers are exploiting the two unpatched flaws in Ivanti Connect Secure…
Snyk acquires Helios to bolster its AppSec platform
Snyk, the well-funded developer-focused security company, today announced that it has acquired Helios, a Tel Aviv-based startup that helps developers troubleshoot and understand their microservices in production. Snyk will use Helios to bolster its recently launched AppRisk service, its application…
Spot Technologies, now with $2M, will see AI security tech go into Mexico Walmarts
Spot’s flagship product, VisionX, taps into deep learning and computer vision technologies to analyze consumer and theft behaviors. © 2023 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch Read the…
Framework says hackers accessed customer data after phishing attack on accounting partner
U.S. repairable laptop maker Framework has confirmed that hackers accessed customer data after successfully phishing an employee at its accounting service provider. In an email sent to affected customers, Framework said that an employee at Keating Consulting, its primary external…
Hyundai Motor India fixes bug that exposed customers’ personal data
Hyundai’s India subsidiary has fixed a bug that exposed its customers’ personal information in the South Asian market. TechCrunch reviewed a portion of the exposed data that included the registered owner name, mailing address, email address, and phone number of…
A geofence warrant typo cast a location dragnet spanning two miles over San Francisco
Civil liberties advocates have long argued that “geofence” search warrants are unconstitutional for their ability to ensnare entirely innocent people who were nearby at the time a crime was committed. But errors in the geofence warrant applications that go before…
State-backed hackers are exploiting new Ivanti VPN zero-days — but no patches yet
U.S. software giant Ivanti has confirmed that hackers are exploiting two critical-rated vulnerabilities affecting its widely-used corporate VPN appliance, but said that patches won’t be available until the end of the month. Ivanti said the two vulnerabilities — tracked as…
EU lawmakers under pressure to fully disclose dealings with child safety tech maker, Thorn
More trouble for European Union lawmakers in a controversial area of tech policymaking — namely the bloc’s proposed legislation to apply surveillance technologies, such as client-side scanning, to digital messaging to try to detect child sexual abuse material (CSAM). This…
A startup’s guide to cyberthreats — threat modeling and proactive security
Cybersecurity is a complex and multifaceted field, and even with thorough threat modeling, there’s always a risk of compromise. © 2023 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch Read…