SecurityWeek

JPMorgan Chase Bank last week sent out notification letters to inform customers that their personal information might have been inadvertently exposed to other customers.

The number of T-Mobile customers confirmed to be affected by the recent hacker attack has reached more than 54 million, the wireless operator said in an update shared on Friday.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) this week published a new document providing recommendations on how to prevent data compromise during ransomware attacks.

Google disclosed the details of a Windows ​​AppContainer flaw after Microsoft said it would not fix it, but the software giant later reversed course and said it could address it after all.

Slovenia-based ACROS Security this week announced the release of patches that address additional attack vectors for the PetitPotam vulnerability.

The Internet Systems Consortium (ISC) this week publicly announced the availability of patches for a high-severity denial-of-service (DoS) vulnerability affecting its BIND DNS software.

China passed a sweeping privacy law aimed at preventing businesses from collecting sensitive personal data Friday, as the country faces an uptick in internet scams and Beijing targets tech giants hoovering up personal data.

Japanese cryptocurrency exchange Liquid on Thursday announced it fell victim to an attack that resulted in large amounts of crypto-currency assets being stolen.Liquid announced that hackers were able to compromise its warm wallets, stealing various amounts of Ethereum, Bitcoin, Stablecoins, Ripple, and other tokens.

Cisco this week published information on a critical code execution vulnerability affecting its small business RV110W, RV130, RV130W, and RV215W routers, but cautioned that there are no plans to release security fixes.

More than 600 vulnerabilities affecting industrial control system (ICS) products were disclosed in the first half of 2021, according to industrial cybersecurity firm Claroty.

Not-for-profit integrated health organization Memorial Health System is in the process of restoring operations after falling victim to a cyberattack on Sunday.The health system operates three hospitals (Marietta Memorial Hospital, Selby General Hospital, and Sistersville General Hospital) and multiple provider clinics and outpatient service sites.

My first article in this series covered why visibility into industrial environments is challenging yet necessary, highlighting three key questions to ask when evaluating industrial cybersecurity solutions.

Software repository platform GitHub is once again encouraging users to enable two-factor authentication (2FA) to better secure their accounts.The Microsoft-owned hosting service has had support for 2FA for eight years, and is now pushing for a wider use of the feature after it stopped accepting account passwords for authenticating Git operations.

A court in Belarus declared Wednesday a group of hackers who claim to have carried out a massive hack on the interior ministry in an attack on President Alexander Lukashenko's regime to be an "extremist" organisation.

U.S. Census Bureau computer servers uninvolved with the 2020 census were exploited last year during a cybersecurity attack, but hackers’ attempts to keep access to the system were unsuccessful, according to a watchdog report released Wednesday.The attack took place in January 2020 on the bureau’s remote access servers.

Over the past several months, an Iran-linked threat actor tracked as Hexane has attempted to breach numerous Israeli organizations using supply chain tools, according to a new report from security vendor ClearSky.

Threat detection and response solutions provider Blumira on Wednesday announced raising $10.3 million in a Series A funding round led by early-stage venture capital firm Mercury.

Blockchain security company CertiK this week announced raising $24 million in Series B+ funding, which adds to the $37 million Series B announced last month. To date, the company has raised more than $70 million.

T-Mobile has confirmed that hackers have stolen files storing information on millions of current and former customers.

Several major industrial control system (ICS) vendors have issued security advisories in response to the discovery of the NicheStack vulnerabilities collectively tracked as INFRA:HALT.