1+ week, 4+ day ago   (520+ words) US healthcare provider Nutex Health has disclosed that a threat actor has stolen sensitive data, including of patients, and threatened to publish it online. The Texas-based firm, which delivers care through facilities throughout the US, made the notification in an…...

3+ week, 4+ day ago   (335+ words) A malware-as-a-service (MaaS) campaign has combined ClickFix social engineering with the ErrTraffic delivery service and Cruciferra loader, giving attackers a way to distribute malware while disabling endpoint security processes. In a new advisory published earlier today, eSentire’s Threat Response Unit…...

1+ week, 5+ day ago   (397+ words) One of America’s largest healthcare distributors is investigating a serious data breach which notorious threat actor ShinyHunters has claimed responsibility for. However, the firm revealed in a statement on August 28 that it was investigating an incident “involving third-party applications and…...

6+ day, 12+ hour ago   (424+ words) Berlin’s state government has confirmed that the Rhysida ransomware gang has published a stolen dataset on the dark web, after it refused to pay the threat actor’s extortion demand. The State of Berlin said Rhysida had demanded 30 bitcoins, equivalent to…...

3+ week, 3+ day ago   (443+ words) Attendees of cybersecurity conferences should be on the lookout for malicious outreach following the event, according to a new Huntress blog which details one such interaction. The post, published on August 19, explained that a researcher for the security vendor was…...

1+ week, 4+ day ago   (372+ words) A threat group claiming responsibility for a breach of the UK’s largest airport group appears to have leaked almost all of the 550GB of data it stole online. FulcrumSec posted the data for download on its leak site, claiming to have…...

1+ week, 3+ day ago   (372+ words) The FBI is reportedly investigating a potentially massive breach of identity data that may have swept up the details of as many as 170 million North Americans. First revealed by investigative journalist Brian Krebs, the “Nexus” service offered access to digital…...

3+ week, 6+ day ago   (257+ words) The manufacturer of a popular cryptocurrency hardware wallet has told tens of thousands of its customers to be on the lookout for phishing attempts after it suffered a data breach. SafePal published an update on August 16 claiming that order information…...

3+ week, 4+ day ago   (409+ words) The UK’s data protection watchdog has urged police forces using live facial recognition (LFR) technology to improve their data governance in line with best practice. Emily Keaney, deputy commissioner for regulatory policy at the Information Commissioner’s Office (ICO), said in…...

2+ week, 5+ day ago   (298+ words) Fake recruiter scams have been targeting corporate credentials on mobile devices, using full-screen login pages and pre-qualification checks to reject personal email addresses and focus on enterprise accounts. The August 24 research found that the campaigns had persisted across a range…...