SecurityWeek

FTC and fundraising software company Blackbaud reach settlement over poor security practices that led to a major data breach.

Joseph Garrison has received an 18-month prison sentence for accessing 60,000 DraftKings user accounts using credential stuffing.

Law enforcement in 50 countries partner to take down ransomware, banking malware, and phishing threats. 

President Biden would veto Republican lawmakers’ attempt to overturn the SEC’s recent cyber incident disclosure rules. 

A nation-state threat actor accessed internal Cloudflare systems using credentials stolen during the Okta hack.

Dutch regulators impose a 10 million euro ($10.8 million) fine on ride-hailing app Uber for lack of transparency in treating the personal data of its drivers.

Former CIA software engineer sentenced to 40 years in prison for biggest theft of classified information in CIA history and for possession of child sexual abuse images and videos.

Albania’s Institute of Statistics (INSTAT) suffered a cyberattack which affected some of its systems.

In an unprecedented move, CISA is demanding that federal agencies disconnect all instances of Ivanti Connect Secure and Ivanti Policy Secure products within 48 hours.

Snyk discloses information on Leaky Vessels, several potentially serious container escape vulnerabilities affecting Docker and others.

Video: Top US cyber officials testify on China’s cyber threat to U.S. national security and critical infrastrcuture.

Daniel James Junk sentenced to six years in prison for stealing millions in cryptocurrency through SIM swapping.

New York attorney general is suing Citibank for failing to protect customers against hackers and fraudsters who have stolen millions.

Pegasus spyware from NSO Group was used in Jordan to hack the cellphones of journalists, lawyers, human rights and political activists.

Johnson Controls confirms that the recent ransomware attack resulted in data theft and says expenses reached $27 million. 

The cybersecurity industry has taken limited action to reduce cybersecurity process friction, reduce mundane tasks and improve overall user experience.

Apple releases first security update for Vision Pro VR headset as CISA issues warning about exploitation of iOS vulnerability.

Chinese government hackers are busily targeting water treatment plants, the electrical grid, transportation systems and other critical infrastructure inside the United States, FBI Director Chris Wray told lawmakers.

The US government neutralizes a botnet full of end-of-life Cisco and Netgear routers being by a notorious Chinese APT group.

SecurityWeek interviews Del Rodillas, Senior Director of Product Management at Palo Alto Networks, about the integration of IT and OT in the ICS threat landscape.