The Breach News

Microsoft Reports Over 200 Cyberattacks from Russia Targeting Ukraine

Recent reports indicate that from February 23 to April 8, a coalition of at least six Russia-aligned cyber actors executed over 237 cyberattacks targeting Ukraine. Among these attacks, 38 were particularly destructive, resulting in irreversible data loss across various organizations within the nation. The objective of these cyber operations appears…

Read MoreMicrosoft Reports Over 200 Cyberattacks from Russia Targeting Ukraine

US Auto Insurance Platform ClaimPix Exposed 10.7TB of Data Online

A substantial cache of data belonging to ClaimPix, an Illinois-based auto insurance claims management platform, has recently been identified as being publicly exposed online without any security measures. Cybersecurity researcher Jeremiah Fowler uncovered a database comprising over 5.1 million files—equating to a staggering 10.7 terabytes—completely unprotected by passwords and devoid…

Read MoreUS Auto Insurance Platform ClaimPix Exposed 10.7TB of Data Online

Chinese APT Phantom Taurus Targets MS Exchange Servers Over Three-Year Period

Researchers from Palo Alto Networks have uncovered a cyberespionage campaign linked to a group with ties to China, which has been actively targeting foreign ministries, embassies, and military communications through breaches of Microsoft Exchange email servers. Identified as Phantom Taurus, this group has been under surveillance for nearly three years.…

Read MoreChinese APT Phantom Taurus Targets MS Exchange Servers Over Three-Year Period

Malicious Go Package Takes Advantage of Module Mirror Caching for Ongoing Remote Access

Recent findings by cybersecurity researchers have unveiled a software supply chain attack that specifically targets the Go programming ecosystem. This operation involves a harmful package engineered to provide adversaries with remote access to compromised systems. The malicious package, identified as github.com/boltdb-go/bolt, is a deceptive imitation of the legitimate BoltDB database…

Read MoreMalicious Go Package Takes Advantage of Module Mirror Caching for Ongoing Remote Access

Russian Hackers Focusing on Diplomatic Targets Across Europe, the Americas, and Asia

A series of sophisticated phishing campaigns targeting diplomatic and governmental organizations has been linked to a Russian-state sponsored hacking group known as APT29, or Cozy Bear. This threat actor has been active since January 17, 2022, employing a range of techniques that highlight their ongoing interest in gathering sensitive diplomatic…

Read MoreRussian Hackers Focusing on Diplomatic Targets Across Europe, the Americas, and Asia

Google’s New AI Ransomware Defense: Effective, but Limited

Ransomware attacks have increasingly become a pressing digital threat as their sophistication grows, extending beyond traditional data-encrypting malware to include data grab-and-leak tactics. While the conventional form of ransomware that encrypts data and demands a ransom remains prevalent, Google has recently introduced a new defense mechanism for its Drive for…

Read MoreGoogle’s New AI Ransomware Defense: Effective, but Limited