The Breach News

US Imposes Sanctions on Cryptocurrency Exchange SUEX for Supporting Ransomware Groups

The U.S. Treasury Department has taken decisive action by sanctioning the Russian cryptocurrency exchange Suex. This move is in response to the exchange’s alleged involvement in facilitating and laundering transactions linked to at least eight variants of ransomware. The action aligns with governmental efforts aimed at reducing the financial efficacy…

Read MoreUS Imposes Sanctions on Cryptocurrency Exchange SUEX for Supporting Ransomware Groups

Australia Enacts Legislation Imposing Fines of Up to $50 Million on Companies for Data Breaches

The Australian government has enacted a significant legislative measure aimed at increasing penalties for companies that experience serious or repeated data breaches. This new bill raises the maximum fine from AU$2.22 million to AU$50 million, or 30% of an entity’s adjusted turnover during the relevant period, or three times the…

Read MoreAustralia Enacts Legislation Imposing Fines of Up to $50 Million on Companies for Data Breaches

Delmia Apriso Systems Compromised

Critical Infrastructure Under Siege: CISA Warns of Active Exploits Targeting Manufacturing Software The Cybersecurity and Infrastructure Security Agency (CISA) has issued a grave warning regarding ongoing cyberattacks targeting a widely utilized manufacturing operations management platform developed by French multinational Dassault Systèmes. This marks the second alert from CISA in just…

Read MoreDelmia Apriso Systems Compromised

Unauthorized Access

Title: Cybersecurity Alert: Latest Claims of Gmail Security Breach Debunked In a recent development concerning online security, Google has officially dismissed assertions of a Gmail security breach purported to affect millions of users. The allegations, which gained traction through various online channels, have been categorized as unfounded, underscoring the necessity…

Read MoreUnauthorized Access

Cisco Issues Patch for Critical URWB Vulnerability in Industrial Wireless Systems

Cisco has issued security updates to mitigate a critical vulnerability identified in its Ultra-Reliable Wireless Backhaul (URWB) Access Points. This flaw poses a risk that could allow unauthenticated, remote attackers to execute commands with elevated privileges on affected devices. Cataloged as CVE-2024-20418, with a maximum CVSS score of 10.0, the…

Read MoreCisco Issues Patch for Critical URWB Vulnerability in Industrial Wireless Systems

New APT Hacker Group Targeting Hotels and Governments Globally

A sophisticated advanced persistent threat (APT) has been identified as the perpetrator behind a series of global cyberattacks targeting hotels, various governmental entities, international organizations, engineering firms, and law offices. This campaign has come to the attention of cybersecurity experts worldwide. The Slovak cybersecurity firm ESET has attributed these attacks…

Read MoreNew APT Hacker Group Targeting Hotels and Governments Globally

French Electricity Provider Penalized for Storing User Passwords Using Vulnerable MD5 Algorithm

In a recent regulatory action, the French data protection authority, Commission nationale de l’informatique et des libertés (CNIL), has imposed a €600,000 fine on Électricité de France (EDF) for non-compliance with the European Union’s General Data Protection Regulation (GDPR). This penalty highlights ongoing challenges companies face in protecting sensitive consumer…

Read MoreFrench Electricity Provider Penalized for Storing User Passwords Using Vulnerable MD5 Algorithm

Everest Exposes AT&T Data Breach, Seeks $1M for Dublin Airport Passenger Information

The Everest ransomware group, notorious for its cybercriminal activities, has reportedly leaked a database purportedly belonging to AT&T Carrier, the official recruitment platform for the telecommunications giant. This platform is primarily used by applicants and employees for job applications, resume submissions, and managing career information. In a further unsettling development,…

Read MoreEverest Exposes AT&T Data Breach, Seeks $1M for Dublin Airport Passenger Information

California’s New Laws: A Snapshot of Pay Ranges, Layoffs, and Data Breaches – The Business Journal

California Implements New Laws Addressing Pay Transparency, Layoffs, and Data Security In a significant legislative move, California has enacted new laws aimed at enhancing workplace protections and transparency regarding pay, layoffs, and data security breaches. This legislative package comes at a time when data vulnerabilities and employee rights are in…

Read MoreCalifornia’s New Laws: A Snapshot of Pay Ranges, Layoffs, and Data Breaches – The Business Journal