Disney Discontinues Slack After Data Breach Incident Recently, the widely-used corporate communication platform Slack faced a significant cyberattack, resulting in the breach of terabytes of sensitive data. In response to this security incident, the Walt Disney Company, which had previously relied on Slack for its internal communications, has announced its…
On September 27, 2024, the Irish Data Protection Commission (DPC) revealed that it has imposed a €91 million fine, roughly equivalent to $101.5 million, alongside a formal reprimand against Meta Ireland. This action stems from the company’s unintentional practice of storing user passwords in plaintext—meaning the passwords were maintained without…
The Hidden Threat of Active Directory Certificate Services Vulnerabilities In the ever-evolving landscape of cybersecurity, vulnerabilities are discovered at an alarming pace, challenging organizations to keep their defenses up-to-date. Among these threats lies a particularly insidious issue: vulnerabilities within Active Directory Certificate Services (AD CS). These vulnerabilities, often understated, pose…
CrowdStrike has issued a warning about a new threat actor attempting to exploit the recent Falcon Sensor update issues to distribute suspicious installation files aimed at German customers. This targeted campaign was identified following a spear-phishing attempt on July 24, 2024, which involved a fraudulent installer masquerading as the CrowdStrike…
Censys has released detailed findings regarding the infrastructure of Fox Kitten, an Iranian cyberespionage group known for its global targeting of organizations. Utilizing insights from a joint Cybersecurity Advisory (CSA) from the FBI, CISA, and DC3, Censys has expanded the understanding of this threat, uncovering additional hosts potentially linked to…
Ongoing Phishing Threat Targets iPhone Users in the UK Recent phishing campaigns have raised alarms for iPhone users across the United Kingdom, prompting authorities to issue warnings regarding potential scams that aim to steal personal information. Victims of these attacks are lured into clicking deceptive links that falsely promise to…
T-Mobile Penalized with $31.5 Million Fine Over Data Breaches T-Mobile has recently incurred a significant financial penalty from the Federal Communications Commission (FCC), amounting to $31.5 million, as a consequence of data breaches that compromised customer information. This decision underscores the regulatory scrutiny surrounding telecommunications companies in light of increasing…
The RansomHub ransomware group has emerged as a significant cyber threat, with reports indicating it has successfully compromised and encrypted data from over 210 victims since its formation in February 2024, according to U.S. government sources. The attackers are linked to an operation that has selected targets across a wide…
The cyber espionage landscape has witnessed a significant threat from the nation-state actor known as SideWinder, which has recently launched a campaign specifically targeting ports and maritime facilities across the Indian Ocean and Mediterranean Sea regions. This campaign has garnered attention for its sophisticated spear-phishing techniques aimed at several countries,…
