Data Breaches
The recently disclosed Xfinity data breach, which involved exploitation of the CitrixBleed vulnerability, impacts 36 million individuals
Hi, what are you looking for?
SecurityWeek
Data Breaches
A cyberattack caused disruptions at the toy and game giant earlier this year and the company is now disclosing a data breach.
Data Breaches
Nutex Health has informed the SEC that it recently detected unauthorized access and data exfiltration.
Cybercrime
A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard.
Data Breaches
The private equity firm appears to have been targeted as part of a campaign focusing on major financial companies.
Data Breaches
Comcast’s Xfinity says customer data, including credentials, were compromised in an attack exploiting the CitrixBleed vulnerability
Data Breaches
Mr. Cooper has confirmed that personal and bank account information was compromised in a recent cyberattack.
Data Breaches
VF Corporation (NYSE: VFC), which owns and operates some of the biggest apparel and footwear brands, has been hit by a ransomware attack that...
Data Breaches
Delta Dental of California says over 6.9 million individuals were impacted by a data breach caused by the MOVEit hack.
Data Breaches
The SEC has provided some important clarifications on its new cyber incident disclosure requirements, which come into effect on December 18.
Data Breaches
MongoDB CISO Lena Smart said the company was not aware of any exposure to the data that customers store in the MongoDB Atlas product.
Data Breaches
Hacktivists stole and leaked online the personal information of 45,000 Idaho National Laboratory employees.
Data Breaches
Air Force Disciplines 15 as IG Finds That Security Failures Led to Massive Classified Documents Leak
Air Force disciplines 15 personnel as the inspector general finds that security failures led to massive classified documents leak.
Data Breaches
Toyota Germany is informing customers that their personal data has been stolen in a ransomware attack last month.
Data Breaches
The FBI has issued guidance for SEC data breach reporting requirements and how disclosures can be delayed.
Data Breaches
Compromised data includes names, dates of birth, Social Security numbers, health and insurance information, and driver’s license numbers.
Data Breaches
A study commissioned by Apple shows that 2.6 billion personal data records were compromised in breaches in the past two years.
Data Breaches
Personal genetics firm 23andMe said hackers accessed the personal information about 6.9 million of its members.
Cybercrime
Russian national Vladimir Dunaev pleaded guilty to involvement in the development and use of the TrickBot malware that caused tens of millions of dollars...
Cybercrime
Recorded Future calculates that North Korean state-sponsored threat actors are believed to have stolen more than $3 billion in cryptocurrency.
Cybercrime
Office supply retail giant confirms security incident disrupted online orders, communications channels and customer service lines.
Data Breaches
ZeroedIn says personal information of 2 million individuals was compromised in an August 2023 data breach that impacts customers such as Dollar Tree.
Cloud Security
Researchers at Aqua call urgent attention to the public exposure of Kubernetes configuration secrets, warning that hundreds of organizations are vulnerable to this “ticking...
Data Breaches
Car parts giant AutoZone says nearly 185,000 individuals were impacted by a data breach caused by the MOVEit hack.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)