The Breach News

New Phishing Kit Circumvents Two-Factor Authentication Security

Anti-Phishing, DMARC, Cybercrime, Fraud Management & Cybercrime Astaroth Kit Available for $2,000 on Telegram, Capable of Real-Time Authentication Interception Prajeet Nair (@prajeetspeaks) • February 13, 2025 Researchers have identified a phishing kit named Astaroth that employs session hijacking to circumvent two-factor authentication. (Image: Shutterstock) A recently emerged phishing kit, Astaroth,…

Read MoreNew Phishing Kit Circumvents Two-Factor Authentication Security

Alberta Privacy Commissioner Probes PowerSchool Data Breaches

Understanding Recent Cybersecurity Incidents: Insights and Implications In recent weeks, various cybersecurity incidents have underscored the ever-growing challenges businesses face in safeguarding their digital assets. These breaches reveal not only the vulnerabilities present in today’s digital landscape but also the sophisticated tactics employed by adversaries seeking to exploit them. By…

Read MoreAlberta Privacy Commissioner Probes PowerSchool Data Breaches

CISA Budget Reductions Leave US Critical Infrastructure Vulnerable to Emerging Threats

Critical Infrastructure Security, Government, Industry Specific Does CISA’s Ambiguous Future Increase Risks for Nation-State Cyber Attacks? Chris Riotta (@chrisriotta) • February 13, 2025 CISA’s challenges present significant cybersecurity threats to U.S. critical infrastructure. The future of the Cybersecurity and Infrastructure Security Agency (CISA) has come under scrutiny following recent significant…

Read MoreCISA Budget Reductions Leave US Critical Infrastructure Vulnerable to Emerging Threats

Microsoft Exposes ‘BadPilot’ Campaign Amid Seashell Blizzard Targeting the US and UK

Russian GRU-associated hackers have been exploiting known software vulnerabilities to gain unauthorized access to critical networks around the globe, especially targeting sectors in the United States and the United Kingdom since 2021. A hacking collective linked to Russian military intelligence has been surreptitiously infiltrating computer networks worldwide, including those in…

Read MoreMicrosoft Exposes ‘BadPilot’ Campaign Amid Seashell Blizzard Targeting the US and UK

Clop Ransomware Lurking in Networks: A Persistent Threat Exploiting Vulnerabilities for Extended Periods

In the realm of cybercrime, ransomware attacks present a particularly insidious challenge. Unlike conventional theft, which typically concludes with the removal of assets, ransomware attacks initiate a cycle of coercion that threatens the very survival of organizations. Cybercriminals often follow a systematic approach: they first infiltrate a network, pilfer sensitive…

Read MoreClop Ransomware Lurking in Networks: A Persistent Threat Exploiting Vulnerabilities for Extended Periods

Microsoft Addresses Two Zero-Day Vulnerabilities in February Update

Cybercrime, Data Breach Notification, Data Security Also: Google Addresses YouTube Vulnerabilities That Could Have Compromised User Emails Anviksha More (AnvikshaMore) • February 13, 2025 Image: Shutterstock ISMG publishes a weekly summary of significant cybersecurity incidents globally. This week’s highlights include crucial updates from Microsoft, Ivanti, and Google to address critical…

Read MoreMicrosoft Addresses Two Zero-Day Vulnerabilities in February Update

Data Breach Strikes GrubHub, Exposing Users to Phishing Threats – CPO Magazine

Data Breach Exposes GrubHub Customers to Phishing Threats CPO Magazine reports a significant data breach impacting GrubHub, a prominent player in the food delivery industry. This incident raises serious concerns regarding the security of customer data and the potential for increased phishing attacks on affected individuals. The breach has compromised…

Read MoreData Breach Strikes GrubHub, Exposing Users to Phishing Threats – CPO Magazine