Last year, we compiled a list of 2022’s most poorly handled data breaches looking back at the bad behavior of corporate giants when faced with hacks and breaches. That included everything from downplaying the real-world impact of spills of personal…
Tag: Security News | TechCrunch
Meet the cybercriminals of 2023
Once again we look back at the past year in cybercrime and those who we lost… to the law. This year was no different to last: we saw another round of high-profile busts, arrests, sanctions, and prison time for some…
Meet the cyber-criminals of 2023
Once again we look back at the past year in cybercrime and those who we lost… to the law. This year was no different to last: we saw another round of high-profile busts, arrests, sanctions, and prison time for some…
Amnesty confirms Apple warning: Indian journalists’ iPhones infected with Pegasus spyware
Apple’s warnings in late October that Indian journalists and opposition figures may have been targeted by state-sponsored attacks prompted a forceful counterattack from Prime Minister Narendra Modi’s government. Officials publicly doubted Apple’s findings and announced a probe into device security.…
India pressed Apple on state-sponsored warnings, report says
Apple’s warnings in late October that Indian journalists and opposition figures may have been targeted by state-sponsored attacks prompted a forceful counterattack from Prime Minister Narendra Modi’s government. Officials publicly doubted Apple’s findings and announced a probe into device security.…
MOVEit, Capita, CitrixBleed and more: The biggest data breaches of 2023
This year, 2023, was a hell of a year for data breaches, much like the year before it (and the year before that, etc.). Over the past 12 months, we’ve seen hackers ramp up their exploitation of bugs in popular…
CBS, Paramount owner National Amusements says it was hacked
National Amusements, the cinema chain and corporate parent giant of media giants Paramount and CBS, has confirmed it experienced a data breach in which hackers stole the personal information of tens of thousands of people. The private media conglomerate said…
Hackers stole $2 billion in crypto in 2023, data shows
For yet another year, hackers stole billions of dollars in crypto. But for the first time since 2020, the trend is downwards, according to crypto security firms. This year, hackers stole around $2 billion dollars in crypto across dozens of…
What VCs are looking for in the next wave of cybersecurity startups
The next wave of successful startups will help companies harness GenAI to improve organizational productivity while preventing attacks. © 2023 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch Read the…
These are the cybersecurity stories we were jealous of in 2023
Back in 2018, my former colleague at VICE Motherboard Joseph Cox and I started publishing a list of the best cybersecurity stories that were published elsewhere. It wasn’t just a way to tip our hats at our friendly competitors; by…
Cisco to acquire cloud-native networking and security startup Isovalent
Cisco announced this morning that it intends to acquire Isovalent, a cloud-native security and networking startup that should fit well with the company’s core networking and security strategy. The companies did not share the purchase price. Isovalent has helped develop…
Tech gifts you shouldn’t buy your family and friends for the holidays
It’s the season to go a little overboard on gift giving. But this year, give the gift of good security (and privacy) and eschew tech that can have untoward risks or repercussions. We’re not talking about things that go boom…
SimSpace raises $45M to simulate tech stacks for cyber training
SimSpace, a startup that creates digital replicas of organizations’ tech and networking stacks for cybersecurity training, has raised $45 million in a funding round led by L2 Point Management. Bringing the company’s total raised to $70 million, the investment comes…
Anti-ransomware startup Halcyon lands fresh $40M tranche
2023 proved to be a be a challenging year on the ransomware front after a brief lull in 2022. According to data from cryptocurrency tracing firm Chainalysis, victims had paid ransomware groups well over $400 million combined as of July…
Authorities claim seizure of notorious ALPHV ransomware gang’s dark web leak site
An international group of law enforcement agencies have seized the dark web leak site of the notorious ransomware gang known as ALPHV, or BlackCat. “The Federal Bureau of Investigation seized this site as part of a coordinated law enforcement action…
Comcast says hackers stole data of close to 36 million Xfinity customers
Comcast has confirmed that hackers exploiting a critical-rated security vulnerability accessed the sensitive information of almost 36 million Xfinity customers. This vulnerability, known as “CitrixBleed,” is found in Citrix networking devices often used by big corporations and has been under…
Vans, Supreme owner VF Corp. says personal data stolen and orders impacted in suspected ransomware attack
VF Corporation, the U.S.-based owner of apparel brands including Vans, Supreme, and The North Face, has confirmed a cyberattack has impacted the company’s ability to fulfill orders ahead of Christmas, one of the biggest retail events of the year. The…
Why extortion is the new ransomware threat
Cybercriminals are becoming more aggressive in their effort to maximize disruption and compel the payment of ransom demands, and now there’s a new extortion tactic in play. In early November, the notorious ALPHV ransomware gang, also known as BlackCat, attempted…
Mr. Cooper hackers stole personal data on 14 million customers
Hackers stole the sensitive personal information of more than 14.6 million Mr. Cooper customers, the mortgage and loan giant has confirmed. In a filing with Maine’s attorney general’s office, Mr. Cooper said the hackers stole customer names, addresses, dates of…
MongoDB investigating security incident that exposed data about customer accounts
Database management giant MongoDB says it’s investigating a security incident that has resulted in the exposure of some information about customers. The New York-based MongoDB helps more than 46,000 companies, including Adobe, eBay, Verizon, and the U.K.’s Department for Work…
As the SEC’s new data breach disclosure rules take effect, here’s what you need to know
Starting from today, December 18, publicly-owned companies operating in the U.S. must comply with a new set of rules requiring them to disclose “material” cyber incidents within 96 hours. The regulation represents a significant shake-up for organizations, many of which…
Google moves to end geofence warrants, a surveillance problem it largely created
Google will soon allow users to store their location data on their devices rather than on Google’s servers, effectively ending a long-running surveillance practice that allowed police and law enforcement to tap Google’s vast banks of location data to identify…
Ubiquiti fixes glitch that exposed private video streams to other customers
Ubiquity, the networking and video surveillance camera maker, has fixed a bug that users say mistakenly allowed them access to the accounts and private live video streams of other customers. Reports first emerged on Reddit that some customers received push…
Supply chain attack targeting Ledger crypto wallet leaves users hacked
Hackers compromised the code behind a crypto protocol used by multiple web3 applications and services, the software maker Ledger said on Thursday. Ledger, a company that makes a widely used and popular crypto hardware and software wallet, among other products,…
Distributional wants to develop software to reduce AI risk
Companies are increasingly curious about AI and the ways in which it can be used to (potentially) boost productivity. But they’re also wary of the risks. In a recent Workday survey, enterprises cite the timeliness and reliability of the underlying…
Microsoft disrupts cybercrime operation selling fraudulent accounts to notorious hacking gang
Microsoft says it has successfully dismantled the infrastructure of a cybercrime operation that sold access to fraudulent Outlook accounts to other hackers, including the notorious Scattered Spider gang. The group, tracked by Microsoft as “Storm-1152”, is described as a major…
Apple will no longer give police users’ push notification data without a warrant
Apple said it will no longer give over records of users’ push notifications to law enforcement unless the company receives a valid judge’s order. In its law enforcement guidelines updated this week, Apple said law enforcement and government agencies can…
Apple introduces protection to prevent thieves from getting your passwords
Apple introduced new security settings with the iOS 17.3 developer beta on Tuesday to prevent thieves from entering your passcode to get your info including account passwords. Apple will likely roll out the final version of iOS 17.3 in a…
Guardz collects $18M to expand its AI-based security platform for SMBs
Thanks to advances in AI, small and medium businesses have become a significant target in the world of cybercrime, accounting for roughly half of all breaches worldwide by some estimates. Now, one of the companies building security tools for SMBs…
Bitcoin ATM company Coin Cloud got hacked. Even its new owners don’t know how.
In November, the cybersecurity collective vx-underground wrote on X, formerly Twitter, that unknown hackers were claiming to have breached Coin Cloud, a bankrupt Bitcoin ATM company. According to vx-underground, the hackers claimed to have stolen 70,000 pictures of customers taken…
Bitcoin ATM company Coin Cloud got hacked. Even its new owners don’t know how
In November, the cybersecurity collective vx-underground wrote on X, formerly Twitter, that unknown hackers were claiming to have breached Coin Cloud, a bankrupt Bitcoin ATM company. According to vx-underground, the hackers claimed to have stolen 70,000 pictures of customers taken…
Ukraine’s largest mobile operator Kyivstar downed by ‘powerful’ cyberattack
Ukraine’s largest telecommunications operator Kyivstar says it has been hit by a “powerful” cyberattack that has disrupted phone and internet services for millions of people across the country. In a Facebook post confirming the incident on Tuesday, Kyivstar wrote that…
23andMe changes to terms of service are ‘cynical’ and ‘self-serving,’ lawyers say
Two days before 23andMe disclosed that hackers had accessed the personal and genetic data of almost 7 million customers, the genetic testing giant updated its terms of service. The changes are an effort to make it more difficult for the…
US healthcare giant Norton says hackers stole millions of patients’ data during ransomware attack
Kentucky-based non-profit healthcare system Norton Healthcare has confirmed that hackers accessed the personal data of millions of patients and employees during an earlier ransomware attack. Norton operates more than 40 clinics and hospitals in and around Louisville, Kentucky, and is…
DNA companies should receive the death penalty for getting hacked
DNA companies should receive the death penalty for getting hacked Personal data is the new gold. The recent 23andMe data breach is a stark reminder of a chilling reality – our most intimate, personal information might not be as secure…
Ex-Uber CSO Joe Sullivan on why he ‘had to get over’ shock of data breach conviction
Before joining Uber as chief security officer in 2015, Joe Sullivan served for two years as a federal prosecutor with the United States Department of Justice, where he specialized in computer hacking and IP issues. He worked on a number…
Ex-Uber CSO Joe Sullivan on why he ‘had to get over’ shock data breach conviction
Before joining Uber as chief security officer in 2015, Joe Sullivan served for two years as a federal prosecutor with the United States Department of Justice, where he specialized in computer hacking and IP issues. He worked on a number…
US indicts alleged Russian hackers for years-long cyber espionage campaign against Western countries
U.S. authorities have indicted two hackers linked to Russia’s Federal Security Service (FSB) for allegedly carrying out a years-long cyber espionage campaign targeting government officials. The Department of Justice alleged on Thursday that Ruslan Aleksandrovich Peretyatko, an officer with the…
WhatsApp adds support for disappearing voice messages
While today’s bigger news from the world of Meta’s messaging apps was the rollout of end-to-end encryption in Messenger, the company is also bringing another useful feature to its WhatsApp users: disappearing voice messages. The new feature will allow users…
Apple says it is not aware anyone using Lockdown Mode got hacked
Last year, Apple launched a special new protection for at-risk users — such as journalists and activists — called Lockdown Mode, designed to limit some regular iPhone, iPad, Mac and Watch features with the goal of minimizing the possibility of…
Opal Security, which helps companies manage access and identities, raises $22M
VC investment trends in the cybersecurity market suggest a sector in decline — at least within the context of recent months. According to Crunchbase, cybersecurity deal count fell during Q3 to 153 deals from 181 in Q2. In a more…
Meta finally starts rolling out default end-to-end encryption for Messenger
After years of promises and limited tests, Meta has started rolling out default end-to-end encryption protection for Messenger. In an announcement, Mark Zuckerberg said that personal chats and calls will get default end-to-end encryption. However, encryption for group chats still…
Your mobile password manager might be exposing your credentials
A number of popular mobile password managers are inadvertently spilling user credentials due to a vulnerability in the autofill functionality of Android apps. The vulnerability, dubbed “AutoSpill,” can expose users’ saved credentials from mobile password managers by circumventing Android’s secure…
US senator warns governments are spying on Apple and Google users via push notifications
U.S. senator Ron Wyden (D-OR) has warned in a letter to the Justice Department that unidentified governments are spying on Apple and Google phone users through their push notifications. The letter says his office received a tip last year that…
CISA says US government agency was hacked thanks to ‘end of life’ software
U.S. cybersecurity agency CISA has warned that unknown hackers broke into the servers of a federal government agency by taking advantage of a previously known vulnerability in software that no longer receives updates — meaning the agency couldn’t have patched…
Millions of patient scans and health records spilling online thanks to decades-old protocol bug
Thousands of exposed servers are spilling the medical records and personal health information of millions of patients due to security weaknesses in a decades-old industry standard designed for storing and sharing medical images, researchers have warned. This standard, known as…
Used by only a few nerds, Facebook kills PGP-encrypted emails
In 2015, as part of the wave of encrypting all the things on the internet, encouraged by the Edward Snowden revelations, Facebook announced that it would allow users to receive encrypted emails from the company. Even at the time, this…
23andMe confirms hackers stole ancestry data on 6.9 million users
On Friday, genetic testing company 23andMe announced that hackers accessed the personal data of 0.1% of customers, or about 14,000 individuals. The company also said that by accessing those accounts, hackers were also able to access “a significant number of…
ArmorCode raises $40M to consolidate security data in one place
ArmorCode, a cybersecurity platform that gathers vulnerability data from connected apps and software infrastructure, consolidating the data into a single location and standardizing it for analysis, has raised $40 million in a Series B round led by HighlandX with participation…
23andMe says hackers accessed ‘significant number’ of files about users’ ancestry
Genetic testing company 23andMe announced on Friday that hackers accessed around 14,000 customer accounts in the company’s recent data breach. In a new filing with the U.S. Securities and Exchange Commission published Friday, the company said that, based on its…
Apple releases security updates for iOS, iPadOS and macOS, fixing two actively exploited zero-days
Apple has released security updates for iPhones, iPads and Macs to patch against two vulnerabilities, which the company says are being actively exploited to hack people. The technology giant rolled out new software updates, iOS and iPadOS 17.1.2, and macOS…
Security flaws in court record systems used in five US states exposed sensitive legal documents
Witness lists and testimony, mental health evaluations, detailed allegations of abuse, and corporate trade secrets. These are some of the sensitive legal court filings that security researcher Jason Parker said they found exposed to the open internet for anyone to…
After a week-long outage, Fidelity National Financial confirms cyberattack is now ‘contained’
Fidelity National Financial, or FNF, one of the largest real estate services companies in the United States, said it “contained” a recent cyberattack that engulfed its many subsidiaries and customers in a state of chaos for more than a week.…
Good news, startups: Q3 software results are changing the tech narrative
New data from Salesforce, Zuora, Okta, Nutanix and Snowflake makes it plain that several tech sectors are doing better than a lot of people expected. © 2023 TechCrunch. All rights reserved. For personal use only. This article has been indexed…
Founder of spyware maker Hacking Team arrested for attempted murder: local media
The founder of the infamous and now-defunct spyware maker Hacking Team was arrested on Saturday after allegedly stabbing and attempting to murder a relative, according to multiple news reports. David Vincenzetti, who launched Hacking Team in 2003, was arrested when…
Feds seize Sinbad crypto mixer allegedly used by North Korean hackers
As part of an international law enforcement investigation, the FBI and the Dutch Financial Intelligence and Investigation Service have seized the websites of a crypto mixer that was allegedly used by North Korean hackers and several cybercriminals to launder stolen…
Why is cybersecurity venture funding so tepid despite the strong demand?
Has late-stage investing declined so much that no technology subsector can really post impressive investment numbers? © 2023 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch Read the original article:…
Hacker claims theft of Shadowfax users’ information
A hacker claims to be selling millions of user records relating to Indian startup Shadowfax, which offers logistics services to e-commerce and hyperlocal platforms across the country. The pseudonymous hacker said in a listing on a known cybercrime forum that…
British Library confirms customer data was stolen by hackers, with outage expected to last ‘months’
The British Library has told customers that their personal data may have been stolen during a recent ransomware attack that knocked the library’s systems and website offline for the past month. In a notice sent to customers this week, which…
Okta admits hackers accessed data on all customers during recent breach
U.S. access and identity management giant Okta says hackers stole data about all of its customers during a recent breach of its support systems, despite previously stating that only a fraction of customers were affected. Okta confirmed in October that…
LockBit claims cyberattack on India’s national aerospace lab
The notorious ransomware gang LockBit has claimed responsibility for a cyberattack targeting India’s state-owned aerospace research lab. On Wednesday, LockBit added the National Aerospace Laboratories (NAL) to its dark web leak site, which ransomware gangs use to extort victims for…
Europol arrest hackers allegedly behind string of ransomware attacks
Europol and its international law enforcement partners have arrested five individuals who authorities accuse of involvement in a string of ransomware attacks affecting more than 1,800 victims worldwide. The arrested individuals, which include the criminal gang’s ringleader, 32, and four…
AWS brings Amazon One palm-scanning authentication to the enterprise
Amazon’s cloud computing subsidiary AWS (Amazon Web Services) has lifted the lid on a new palm-scanning identity service that allows companies to authenticate people when entering physical premises. Amazon One Enterprise, as the service is called, builds on the company’s…
Ukraine detains Victor Zhora, former top government cyber official
Last week, the Ukrainian government fired two of its top cybersecurity officials, who are accused of embezzlement. Now, one of them has been detained. Ukraine’s senior cabinet official Taras Melnychuk announced the firings in a public post on Telegram last…
Ransomware ‘catastrophe’ at Fidelity National Financial causes panic with homeowners and buyers
Last Tuesday, Fidelity National Financial, or FNF, a real estate services company that bills itself as the “leading provider of title insurance and escrow services, and North America’s largest title insurance company,” announced that it had experienced a cyberattack. Since…
Cyberattack on legal tech provider causing widespread disruption to UK law firms
CTS, a U.K.-based provider of managed IT services for law firms and the professional services industry, is experiencing a cybersecurity incident that is causing ongoing widespread disruption across the legal sector. In a statement on its website, the Cheshire-headquartered CTS…
North Korea-backed hackers target CyberLink users in supply-chain attack
North Korean state-backed hackers are distributing a malicious version of a legitimate application developed by CyberLink, a Taiwanese software maker, to target downstream customers. Microsoft’s Threat Intelligence team said on Wednesday North Korean hackers had compromised CyberLink to distribute a…
Fidelity National Financial shuts down network in wake of cybersecurity incident
Fidelity National Financial, or FNF, a Fortune 500 company that provides title insurance and settlement services for the mortgage and real estate industries, announced on Tuesday that it was the victim of a “cybersecurity incident that impacted certain FNF systems..”…
3 skills could make or break your cybersecurity career in the generative AI era
While many employers emphasize problem-solving skills in job descriptions, the ability to think outside the box is imperative in cybersecurity. © 2023 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch…
Thousands of new honeypots deployed across Israel to catch hackers
On October 7, Hamas launched an unprecedented terrorist attack on Israel, killing more than 1,200 people with hundreds taken hostage. The attack prompted a deadly response from the Israel Defense Forces, which has reportedly left more than 10,000 people dead…
Ukraine fires top cybersecurity officials
The Ukrainian government has fired two of its most senior cybersecurity officials following accusations of alleged embezzlement. Yurii Shchyhol, head of Ukraine’s Ukraine’s State Special Communications Service of Ukraine, or SSSCIP, and his deputy Victor Zhora (pictured), who served as…
British Library confirms data stolen during ransomware attack
The British Library, the national library of the United Kingdom and one of the world’s largest libraries, has confirmed that a ransomware attack led to the theft of internal data. In late October, the British Library first disclosed it was…
Hackers accessed sensitive health data of Welltok patients
Hackers accessed the personal data of more than a million people by exploiting a security vulnerability in a file transfer tool used by Welltok, the healthcare platform owned by Virgin Pulse. Welltok, a Denver-based patient engagement company that works with…
Healthcare startups scramble to assess fallout after Postmeds data breach hits millions of patients
More than two million people across the United States will receive notice that their personal and sensitive health information was stolen earlier this year during a cyberattack at Postmeds, the parent company of online pharmacy startup Truepill. For some of…
Cybersecurity investor Ballistic Ventures seeks $300M for new fund
Ballistic Ventures, a venture capital firm dedicated to funding and incubating cybersecurity startups, is looking to raise as much as $300 million for a new fund, according to a regulatory filing. The San Francisco-based VC firm Wednesday filed with the…
Children’s tablet has malware and exposes kids’ data, researcher finds
In May this year, Alexis Hancock’s daughter got a children’s tablet for her birthday. Being a security researcher, Hancock was immediately worried. “I looked at it kind of sideways because I’ve never heard of Dragon Touch,” Hancock told TechCrunch, referring…
Samsung says hackers accessed customer data during year-long breach
Samsung has admitted that hackers accessed the personal data of U.K.-based customers during a year-long breach of its systems. In a statement to TechCrunch, Samsung spokesperson Chelsea Simpson, representing the company via a third-party agency, said Samsung was “recently alerted…
9 million patients had data stolen after US medical transcription firm hacked
Close to nine million patients had highly sensitive personal and health information stolen during a cyberattack on a U.S. medical transcription service earlier this year, representing one of the worst medical related data breaches in recent times. The medical transcription…
US says Royal ransomware gang plans ‘Blacksuit’ rebrand
The U.S. government says Royal, one of the most active ransomware gangs in recent years, is preparing to rebrand or spinoff with a new name, Blacksuit. In an update this week to a previously published joint advisory about the Royal…
Amazon brings its home robot to businesses
In an acknowledgement that cracking the home robotics market is hard, Amazon is bringing its Astro robot to a decidedly more corporate audience. The company today announced Astro for Business, which repurposes Astro as a security robot for small- and…
Digital pharmacy startup Truepill says hackers accessed sensitive data of 2.3 million patients
Truepill, a digital health startup that provides pharmacy fulfillment services for healthcare organizations, has confirmed that hackers accessed the personal data of more than 2.3 million patients. In a data breach notice published on its website, the company says Postmeds,…
Hackers are exploiting ‘CitrixBleed’ bug in the latest wave of mass cyberattacks
Security researchers say hackers are mass-exploiting a critical-rated vulnerability in Citrix NetScaler systems to launch crippling cyberattacks against big-name organizations worldwide. These cyberattacks have so far included aerospace giant Boeing; the world’s biggest bank, ICBC; one of the world’s largest…
Healthcare giant McLaren reveals data on 2.2 million patients stolen during ransomware attack
Michigan-based McLaren Health Care has confirmed that the sensitive personal and health information of 2.2 million patients was compromised during a cyberattack earlier this year. A ransomware gang later took credit for the cyberattack. In a new data breach notice…
Maine government says data breach affects 1.3 million people
The government of Maine has confirmed over a million individuals had personal information stolen in a data breach earlier this year by a Russia-linked ransomware gang. In a statement published Thursday, the Maine government said hackers exploited a vulnerability in…
Maine government says data breach affects 1.3 million residents
The government of Maine has confirmed over a million state residents had personal information stolen in a data breach earlier this year by a Russia-backed ransomware gang. In a statement published Thursday, the Maine government said hackers exploited a vulnerability…
Mr. Cooper says customer data exposed during cyberattack
Mr. Cooper, the mortgage and loan giant with more than four million customers, has confirmed customer data was compromised during a recent cyberattack. In an updated notice on its website published Thursday, Mr. Cooper said that it was “still investigating…
SysAid warns customers to patch after ransomware gang caught exploiting new zero-day flaw
Software maker SysAid is warning customers that hackers linked to a notorious ransomware gang are exploiting a newly discovered vulnerability in its widely used IT service automation software. SysAid chief technology officer Sasha Shapirov confirmed in a blog post Wednesday…
Secure messaging app Signal moves a step closer to launching usernames
End-to-end encrypted messaging app, Signal, is getting closer to launching a much anticipated feature that will allow users to share only a username in order to connect with other users, rather than having to reveal the phone number linked to…
OpenAI blames DDoS attack for ongoing ChatGPT outage
OpenAI has confirmed that a DDoS (distributed denial-of-service) attack is behind “periodic outages” affecting ChatGPT and its developer tools. ChatGPT, OpenAI’s AI-powered chatbot, has been experiencing sporadic outages for the past 24 hours. Users who attempted to access the service…
UK’s online safety regulator puts out draft guidance on illegal content, saying child safety is priority
The UK’s newly empowered Internet content regulator has published the first set of draft Codes of Practice under the Online Safety Act (OSA) which became law late last month. More codes will follow but this first set — which is focused…
Sumo Logic urges customers to reset API keys following security breach
Sumo Logic, a U.S.-based cloud data analytics and log analysis company, is urging users to reset API keys after discovering a security breach. In a security notice published this week, Sumo Logic confirmed it had discovered evidence of a potential…
Google-led App Defense Alliance joins Linux Foundation, with Meta and Microsoft joining too
The App Defense Alliance (ADA), an initiative set up by Google back in 2019 to combat malicious Android apps infiltrating the Play app store, has joined the Joint Development Foundation (JDF), a Linux Foundation project focused on helping organizations working…
23andMe data theft prompts DNA testing companies to switch on 2FA by default
DNA testing and genealogy companies are stepping up user account security by mandating the use of two-factor authentication, following the theft of millions of user records from DNA genetic testing giant 23andMe. Ancestry, MyHeritage, and 23andMe have begun notifying customers…
Malwarebytes makes B2B unit spin-off official, launches ThreatDown
U.S.-based cybersecurity giant Malwarebytes today launched ThreatDown, a new brand that encompasses its business software portfolio and B2B-focused unit, the company confirmed to TechCrunch. Earlier this year, Malwarebytes let go of approximately 100 employees as part of a wider plan to…
Online store exposed millions of Chinese citizen IDs
A security researcher said he discovered millions of Chinese citizen identity numbers spilling online after an e-commerce store left its database exposed to the internet. Viktor Markopoulos, a security researcher working for CloudDefense.ai, said he found the database belonging to…
US sanctions Russian accused of laundering Ryuk ransomware funds
The U.S. government has sanctioned a Russian national for allegedly laundering millions of dollars worth of victim ransom payments on behalf of individuals linked to the notorious Ryuk ransomware group. According to an announcement from the U.S. Treasury’s Office of…
Confirmed: Palo Alto has acquired Talon Cyber Security, sources say for $625M
Palo Alto Networks has just confirmed one more major piece of security startup M&A out of Israel: it has acquired Talon Cyber Security, a specialist in building enterprise browsers for securing distributed workforces sources. Source say the deal is valued…
Android’s new real-time app scanning aims to combat malicious sideloaded apps
Android’s in-built security engine Google Play Protect has a new feature that conducts a real-time analysis of an Android app’s code and blocks it from installing the app if it’s considered potentially harmful. Google announced in October the new real-time…
PSA: Your chat and call apps may leak your IP address
Your favorite messaging and calling app could reveal your IP address to the person on the other end of a call. And that, essentially, is because most chat apps default to using peer-to-peer connections — meaning you and the person…
Mortgage and loan giant Mr. Cooper blames cyberattack for ongoing outage
Mortgage and loan giant Mr. Cooper says a “cybersecurity incident” earlier this week was the cause of an ongoing outage, adding that the company is “working to resolve the issue.” The Texas-based company said in a statement on its website that…