For providers

Attackers have added aggressive social engineering to their arsenal, along with a novel Windows-manipulating persistence mechanism that demands developer vigilance.

Malware authors have iterated on one of the premier encryptors on the market, building something even bigger and better.

Understanding through visibility, managing through governance, and anticipating through continuous deployment will better prepare organizations for the next supply chain attack.

Investigation into the data possibly compromised in the intrusion is still underway but operations of the agency were not impacted, according to an agency spokesperson, who reassured the safety of flights across the country while adding that notifications have already been provided to the country's security authorities.

Infiltration of certain CBIZ databases through the exploitation of a web page vulnerability enabled the theft of individuals' names, birth/death dates, Social Security numbers, contact details, retiree health information, and welfare plan details between June 2 and June 21.

Attackers compromised TDSB's technology testing environment and obtained access to individuals' names, grades, email addresses, birthdates, school names, and student numbers.

Such a flaw, tracked as CVE-2024-4885, stems from improper user input validation of the GetFileWithoutZip method adopted by WhatsUp Gold, noted Summoning Team, which identified and disclosed the issue.

Join KB, Head of Cybersecurity Journalism at KBI.Media, in Cisco Networking Academy's Women Rock-IT webinar this October. Discover how AI is revolutionizing cybersecurity and empowering women in tech.

Data leaked by the threat actor "Satanic" was divided into three CSV files, the first of which contained the full names, phone numbers, phone carriers, country, city, and timezone details, and unique record identifiers for 646,442 individuals around the world who may have had their locations tracked by Tracelo.