SecurityWeek

Lending giant LoanDepot (NYSE: LDI) said that roughly 16.6 million individuals were impacted as a result of a ransomware attack.

Varonis finds one vulnerability and three attack methods that can be used to obtain NTLM hashes via Outlook and two Windows programs.

Conor Brian Fitzpatrick, the owner of the cybercrime website BreachForums, was sentenced to time served and supervised release.

CVE-2023-34048, a vCenter Server vulnerability patched in October 2023, had been exploited as zero-day for a year and a half.

France's data protection watchdog fines Yahoo 10 million euros for not respecting users' refusals of internet-tracking "cookies"

Noteworthy stories that might have slipped under the radar: WhatsApp privacy issue remains unpatched, spying via tablet ambient light sensors, and the Bigpanzi botnet. 

A Russian government-backed hacking team broke into Microsoft’s corporate network and stole emails and attachments from senior executives.

The US government’s cybersecurity agency CISA ramps up the pressure on organizations to mitigate two exploited Ivanti VPN vulnerabilities.

Security researchers flag multiple severe vulnerabilities in open source AI/ML solutions MLflow, ClearML, Hugging Face.

US charges Russian cybercriminals, including man allegedly involved in hacking of Neiman Marcus and Michaels Stores in 2013. 

Apparel and footwear brands owner VF Corp shares more details on the impact of a December 2023 ransomware attack.

CISA, FBI and EPA document aims to help water and wastewater organizations improve their cyber resilience and incident response.

The number of Ivanti VPN appliances compromised through exploitation of recent flaws increases and another vulnerability is added to exploited list.

VMware warns customers that CVE-2023-34048, a vCenter Server vulnerability patched in October 2023, is being exploited in the wild. 

Kansas Courts needs funding to cover the costs of bringing computer systems back online, pay vendors, improve cybersecurity and hire three additional cybersecurity officials.

Seven vulnerabilities found in Rapid SCADA could be exploited to gain access to sensitive industrial systems, but they remain unpatched.

Kusari has raised $8 million to help organizations gain visibility into and secure their software supply chain.

Russian threat group ColdRiver has developed Spica, a malware that enables it to compromise systems and steal information. 

Organizations can earn up to $3 million in federal funding for cyber tools securing the clean energy infrastructure.

Seattle identity and authentication startup Oleria has attracted renewed interest from venture capital investors.