The Breach News

Black Basta Ransomware Targets Over 500 Organizations in North America, Europe, and Australia

Black Basta Ransomware Targets Critical Infrastructure Globally The Black Basta ransomware-as-a-service (RaaS) group has made a significant impact since its inception in April 2022, successfully compromising over 500 private and critical infrastructure entities across North America, Europe, and Australia. Recent joint advisories released by leading cybersecurity authorities, including the Cybersecurity…

Read MoreBlack Basta Ransomware Targets Over 500 Organizations in North America, Europe, and Australia

Reasons to Consider Freezing Your Credit

In 2023, personal identification data has become alarmingly less private, with a staggering 81% of Americans experiencing a compromise of their information through various data breaches. This revelation comes from James E. Lee, chief operating officer of the Identity Theft Resource Center, a California-based nonprofit that aims to mitigate the…

Read MoreReasons to Consider Freezing Your Credit

Ivanti Addresses Critical Remote Code Execution Vulnerabilities in Endpoint Manager

On Tuesday, Ivanti addressed several critical security vulnerabilities within its Endpoint Manager (EPM), which could potentially be exploited to achieve remote code execution in specific scenarios. The vulnerabilities, which include six categorized under CVE-2024-29822 through CVE-2024-29827, possess a Common Vulnerability Scoring System (CVSS) score of 9.6. These flaws primarily stem…

Read MoreIvanti Addresses Critical Remote Code Execution Vulnerabilities in Endpoint Manager

CERT-UA Reports: Cyberattacks Target 11 Ukrainian Telecom Providers

Cyberattacks Disrupt Ukrainian Telecommunications Amid Ongoing Conflicts Recent reports from the Computer Emergency Response Team of Ukraine (CERT-UA) indicate that threat actors have compromised the operations of at least 11 telecommunications service providers in Ukraine between May and September 2023. This wave of cyber intrusions is being tracked under the…

Read MoreCERT-UA Reports: Cyberattacks Target 11 Ukrainian Telecom Providers

Florida Man Allegedly Hacks Disney World Menus, Switches Font to Wingdings

As the 2024 presidential election in the United States approaches, recent disclosures by WIRED highlight concerning evaluations from the US government regarding the integrity and security of the electoral process. Information obtained by the nonprofit organization Property of the People indicates that a report from the Department of Homeland Security…

Read MoreFlorida Man Allegedly Hacks Disney World Menus, Switches Font to Wingdings

Doctor Faces $500K HIPAA Penalty: Federal Violations Outpace Hacking Threats

Plastic Surgery Clinic Faces $500K HIPAA Fine Following Ransomware Attack A South Dakota-based plastic surgery clinic has recently found itself at the center of a discussion around cybersecurity and regulatory compliance after paying a ransom of $53,000 to regain access to critical data locked by a ransomware attack. Dr. James…

Read MoreDoctor Faces $500K HIPAA Penalty: Federal Violations Outpace Hacking Threats

SolarMarker Malware Adapts to Counteract Takedown Efforts Through Multi-Layered Infrastructure

SolarMarker Malware Continues to Evolve, Targeting Multiple Sectors Recent investigations by Recorded Future have revealed the complex infrastructure behind the SolarMarker malware, a notorious information-stealing threat. The actors responsible for this malware have created a multi-tiered system designed to complicate law enforcement’s efforts to neutralize it. This infrastructure is divided…

Read MoreSolarMarker Malware Adapts to Counteract Takedown Efforts Through Multi-Layered Infrastructure

CISA Issues Warning About Actively Exploited Apache Flink Security Flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently added a significant security vulnerability affecting Apache Flink to its Known Exploited Vulnerabilities (KEV) catalog. This announcement, made on Thursday, highlights the potential risks associated with an open-source framework widely used for unified stream processing and batch processing, amid reports…

Read MoreCISA Issues Warning About Actively Exploited Apache Flink Security Flaw