Personal data of 665,000 Marina Bay Sands lifestyle rewards members accessed in data security breach

The personal data of 665,000 Marina Bay Sands customers was accessed in a data security breach in October. The “unauthorised access” took place on Oct 19 and Oct 20 and involved the data of some Sands LifeStyle rewards programme members, Read More …

UK: Government has never paid a ransomware demand, minister says

The government has announced that it has never paid a ransom demanded by cybercriminals – and pledged that it never will. The announcement – made to tie in with last week’s meeting of members of the international Counter Ransomware Initiative Read More …

Okta breach happened after employee logged into personal Google account

Okta has revealed details about a recent breach which exposed files belonging to customers. As Malwarebytes explained in their article about 1Password being a victim of this breach, it’s normal for Okta support to ask customers to upload a file Read More …

Rapid7 Observed Exploitation of Atlassian Confluence CVE-2023-22518

As of November 5, 2023, Rapid7 Managed Detection and Response (MDR) is observing exploitation of Atlassian Confluence in multiple customer environments, including for ransomware deployment. We have confirmed that at least some of the exploits are targeting CVE-2023-22518, an improper Read More …

Agonizing Serpens (Aka Agrius) Targeting the Israeli Higher Education and Tech Sectors

Unit 42 researchers have investigated a series of destructive cyberattacks beginning in January 2023 and continuing as recently as October 2023, targeting the education and technology sectors in Israel. The attacks are characterized by attempts to steal sensitive data, such Read More …

Online store exposed millions of Chinese citizen IDs

A security researcher said he discovered millions of Chinese citizen identity numbers spilling online after an e-commerce store left its database exposed to the internet. Viktor Markopoulos, a security researcher working for CloudDefense.ai, said he found the database belonging to Read More …

New Report On Suffolk County Cyber Attack Raises Questions

The former IT commissioner for the Suffolk County Clerk’s department did not alert county officials that the computer network in the clerk’s office was responding to a “radical malware attack” until eight hours after he was alerted, the Press has Read More …

US sanctions Russian accused of laundering Ryuk ransomware funds

The U.S. government has sanctioned a Russian national for allegedly laundering millions of dollars’ worth of victim ransom payments on behalf of individuals linked to the notorious Ryuk ransomware group. According to an announcement from the U.S. Treasury’s Office of Read More …