Editor's Message

Welcome to DBD. On March 8th we celebrated our 4th Anniversary and the 1st Anniversary of our PRiSM application, officially endorsed by the SANS Institute. Despite recent personal issues that have impacted the amount of time I have been able to dedicate to both projects, I have been doing my best to keep everything as up-to-date as possible, and I would like to take this opportunity to thank everyone for their patience and support whilst I navigate through this very difficult time. Stay safe. :)



Monday 25 May 2020

Data Breaches Digest - Week 22 2020

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 25th May and 31st May 2020.


31st May

Covid cyberattacks ramp up in South Africa under lockdown

Cybersecurity solutions company shares ways to secure distance learning environment

Hacker leaks database of dark web hosting provider

Here's how easyJet customers targeted in a cyber attack may get £2,000

How to Remove Malware and Viruses From Your Android Phone

Ransomware Attack Kidnaps Austrian City

Sri Lanka: No data breach occured in cyber-attack attempts

Telework cannot be ignored any longer − but what’s in it?

TV Licence Scam: Warning signs Britons should look for as cyber crime rises in lockdown

Viruses about! Cyber-security update for lenders

30th May

4 Dos and 4 Don’ts of B2B Portal Security

80,000 Credit Cards’ Data Leaked In Exchange For Cryptocurrency

Amtrak resets user passwords after Guest Rewards data breach

An advanced and unconventional hack is targeting industrial firms

Bank Of America Admits Data Breach With PPP, Notifies Customers

Bank of America data breach – was your info exposed?

“Bigfooty.com” Leaked Sensitive Data of About 100,000 Users

Cybersecurity trends that you need to be kept posted about

Dark Web Merchants Sell Thousands of Stolen Credit Card Numbers

Former IT Administrator Sentenced in Insider Threat Case

Hackers target Google Docs, Microsoft Sway to steal user credentials

How to stay safe from web-based malware

How to Use Risk Management Techniques to Improve Remote Work

New Research Reveals – Data of Over 80K Credit Cards Was Put Up for Sale for Crypto on Dark Web

NHS contact tracing undermined by hackers sending fraudulent warnings to public

Passwords on the rise despite evidence that they are increasingly unable to protect, finds Thales

The devastating home theft you’ll never see coming

Warning as Britons lose £4.6 million in shock lockdown scams - how to protect yourself

29th May

4.75 crore Indian users' Truecaller data at risk, available for just Rs 75,000; company denies claims

5 Ways to Secure Your Brand’s Remote Work Environment

70 million records exposed in data leak from AFL fan website, cyber researchers claim

American Civil Liberties Union sues facial recognition firm Clearview AI and accuses the company of 'unlawful, privacy-destroying surveillance activities'

Are connected cars vulnerable to hackers?

BigFooty.com Leaks 70 Million Records from Sports Fan Members

Bristol: Warning to parents after cyber criminals attack school website

C-suite employees most vulnerable to cyber attacks

‘Digital Tartar’ And Its Impact On Business Wellbeing

Distrust of Big Tech is Contract Tracing’s Biggest Hurdle

Five Data Breaches that Put Victims at Greater Risk of COVID-19 Scams

Google sees resurgence in state-backed hacking, phishing attacks

Hackers left customer data untouched — PLDT

How security testing could change after COVID-19

How to protect your business from COVID-19-themed vishing attacks

In Cybersecurity, Best Practices Are The Worst

Judge demands Capital One release Mandiant cyberforensic report on data breach

Kentucky: Cameron, Harmon criticize data breach handling; Beshear responds

Kentucky: Potential data breach of unemployment system occurred in April

Minneapolis Hit with DDoS Attack amid Social Unrest

Minted confirms data breach as Shiny Hunters sell its database

New report warns hundreds of terabytes of potentially sensitive corporate data is now stored on USBs located in employee homes

NSA: Sandworm Actors Exploiting Vulnerability in Exim Mail Transfer Agent

Online retailers could lose £5.9 billion through cyberattacks

Over 600 NTT Customers Hit in Major Data Breach

Phishing attack spoofs World Health Organization to steal email credentials

Ransomware attacks have evolved into something more dangerous

Revealed: Advanced Java-Based Ransomware PonyFinal

Securing the remote workforce during COVID-19 and beyond

Smart Car Source Code Leak May Compromise Customer Safety

Snake Ransomware Slithers Into the Light

State officials investigate April data breach of Kentucky's online unemployment

Test and Trace has not passed data protection impact assessment

The Most Surprising Cybersecurity Weaknesses Every CEO Should Know About

TrueCaller Data of 4.75 Crore Indians for Sale On Dark Web

Using Active Directory to Check for Leaked Passwords

What are our GDPR obligations as a business?

Why Hackers Target SMBs

World’s Largest Sovereign Wealth Fund Loses Millions in Likely BEC scam

Zero trust security: A cheat sheet

28th May

A New Free Monitoring Tool to Measure Your Dark Web Exposure

A New Ransomware Deploys Human-Operated Attacks Against Healthcare Sector

Ambry Genetics Corporation Discloses Hack and Theft of 230,000 Customer Records

American Civil Liberties Union (ACLU) sues facial recognition startup Clearview AI for privacy and safety violations

Another College Ransomware Attack Strikes Michigan State

Another Day, Another Significant Data Breach – What We Know About the EasyJet Cyber-attack

As Organizations Become Aware of Security Vulnerabilities in Cloud-Based Collaboration Applications, It’s Time to Act

Asian perspectives on cybersecurity laws

Austrian City of Weiz Falls Victim to NetWalker's Ransomware Attack

Bank of America suffers data breach in Paycheck Protection Program application process

C-Level Executives the Weakest Link in Organizations’ Mobile Security

C-suite execs often pressure IT teams to make security exceptions for them

Capital One Required to Produce Forensic Report in Class Action

CEOs Fear Falling Victim to Next Big Breach, Says Study

Chinks in the armour: Why the post COVID-19 cloud is easy game for cybercriminals

Cisco discloses security breach that impacted VIRL-PE infrastructure

COVID 19 – Remote Working & Data Protection – Risk Mitigation Strategies

Cyber crime has never been cheaper

Cyber thugs target healthcare

Cybercrime continues to be a threat as remote working grows

Cybersecurity: Half of employees admit they are cutting corners when working from home

Cybersecurity in The Age of Coronavirus - Changing Dynamics

Data Drives Business, So Why Aren't Companies Doing More To Protect It?

Data Loss Spikes Under COVID-19 Lockdowns

Data protection best practice more important than ever in cloud environment

Department of Homeland Security Cybersecurity: Top 10 Vulnerabilities Still Being Exploited

Don’t be phish food! Tips to avoid sharing your personal information online

Enforcement proves the Achilles heel for GDPR

‘Evolution of IoT attacks’ study exposes the race between cybercriminals and cybersecurity

'Failed cyberattack on Israel was designed to trigger a humanitarian disaster'

Findings from the 2020 Verizon Data Breach Investigations Report

Fortune 500 company NTT discloses security breach

Guide to preventing coronavirus phishing and ransomware

Hackers breach data of Education and Culture Ministry’s 1.3 million civil servants

Hackers hid ransomware in virtual machines

Hackers share database containing passwords and personal data from 26 MILLION LiveJournal for free on dark web forum

Half of workers 'cut corners' on IT security during Covid-19 remote working

How can organisations protect themselves from NAS ransomware attacks?

How hoteliers can mitigate data breaches

How to fight a virus: Lessons from cybersecurity

How user credentials from LiveJournal wound up on the Dark Web

Inside a ransomware gang’s attack toolbox

Is your business ready for post-Covid-19 cybersecurity?

Law firm: Phishing Still Top Cause of Data Security Incidents

Law firms under constant cyber-attack

Manager denies any wrongdoing over confidential company data

Massive shift to digital space increases the need for Cyber Security experts

Michigan State University hit by ransomware gang

Michigan State University (MSU) computer system breached in ransomware attack

Minneapolis city websites victim of cyber attack

Minted discloses data breach after 5 Million user records sold online

Moving to the cloud for an easier life? Cybercriminals are coming with you

NetWalker Ransomware – What You Need to Know

NSA warns of new Sandworm attacks on email servers

Over-Stretched and Under-Resourced: General Data Protection Regulation Two Years On

People know reusing passwords is risky – then do it anyway

PLDT holds probe after hackers defaced its Twitter support page

PLDT should notify customers if data breached, says privacy commission

PonyFinal Ransomware Targets Enterprise Servers Then Bides Its Time

Ransomware attack affects 13,146 patients' info at Alaska surgical practice

Ransomware attack threatens to release stolen Michigan State University files

Ransomware attacks: How firms can understand the impact and respond effectively

Ransomware Demands Soared 950% in 2019

Ransomware On The Rise As Home Working Increases

Ransomware’s revival

Remote and home devices are now the weakest link

Remote work could be putting sensitive corporate data at risk

Scam Financial Conduct Authority (FCA) email targets brokers

Security risk from remote workers is a problem for HR as well as IT

Sensitive Data Belonging to European Officials Leaked in a Major EU Parliament Breach

Service providers brace for up to 1.5 billion network attacks in 2020

Solving the security challenges of remote working

Studies highlight security issues for brands

Taking responsibility for cyber security in a truly virtual world

Telehealth IT Security: What Clinicians Need to Know & Tips to Keep Your Practice Secure

Test platform leaks Bank of America clients’ Covid-19 PPP loan applications

The Bank of America is the latest victim of a data breach

The personal cost of security breaches

The Security Risks You’re Probably Overlooking — and How to Fix Them

These types of businesses are in serious need of a cyber policy

Tips for educating employees on cybersecurity preparedness

Toll Group confirms attackers 'accessed' personal and payroll data of staff

Toll's cyber attacker has published the stolen data on the dark web

Truecaller data of 47 million Indians breached, company denies

UN warns of cyberattacks on medical facilities

'Valak' gives crooks flexibility in multi-stage malware attacks

Verizon report analysis: Money not espionage at the heart of cyber-crime breaches

Vermont Updates its Data Breach Notification Law

Washington: State recovers $300M in stolen unemployment money, but many jobless still waiting for help

What is Vulnerability Management?

What to Do if Your Old LiveJournal Password Was Leaked

Working from home opens up new data security threat

27th May

3 Questions Your Board Has About Cybersecurity

5 Cybersecurity Best Practices for Tackling Ransomware

23% of leading banks had an exposed database with potential data leakage

26 million LiveJournal credentials leaked online, sold on the dark web

26 million logins believed to be stolen from LiveJournal in 2017 pop up on hacker forum

28% of IT security managers in the META region missed important family dates because of data breaches

Account credentials of 26+ million LiveJournal users leaked online

After a breach, users rarely change their passwords, and when they do, they're often weaker

Another Alleged FIN7 Cybercrime Gang Member Arrested

Anti Phishing Cybersecurity Awareness Training Program For Employees

Arbonne breach of 3,500+ Californian residents’ PII could test privacy law

Autonomous vehicles must have a cybersecurity development framework

Bank of America Experiences Potential PPP Application Data Breach

Creating an emergency ready cybersecurity program

Cyber alert: tackling the unseen risk that could sink your business in 2020

Data Breach at Bank of America

Data Of 29 Million Indian Job Seekers Leaked On Dark Web

Debunking The Myth That Greater Compliance Makes IT More Secure

Despite lacking security tools, 84% of organisations support remote work

Don’t let responsibility float away into the cloud

Employment Agency and Data Protection: A Hong Kong Perspective

Former student sues Wichita State over data breach

Former UK prosecutor: Work from home options trigger new internal compliance concerns

Hackers Sell Data from 26 Million LiveJournal Users on Dark Web

Home Is Where The Hack Is: Remote Workforces Present Security Challenges

Ireland: Data Protection Commission (DPC) bares teeth to big tech with beefed-up enforcement

Kansas University Data Breach Affects Current, Former Students

Key and secrets management: The weak link in strong data protection

Make the Case for Security Spend

Man arrested following data breach at Los Al Unified

Nearly One Fifth of Law Firms Show Signs of Compromise

Netwalker Ransomware Tools Reveal Attacker Tactics and Techniques

Network Vulnerability: It May Not Mean What You Think It Means

New Zealand: Earthquake Commission (EQC) apologises for leakage of claims info

Personal data of 2.9 crore Indian job seekers leaked on dark web

PonyFinal deployed in human-operated ransomware attacks

Ransomware's big jump: ransoms grew 14 times in one year

Scammers steal "hundreds of millions" using fake unemployment claims

Security is still an issue, despite success telecommuting during pandemic

Standing Privilege: The Attacker's Advantage

Stormont now probing historical abuse victims data breach

Survey says 40% of online users in APAC experienced personal data leak

Taiwan’s Personal Data Protection Rules

The need for a holistic approach in the battle against ransomware

Toll data published on the dark web: What does it mean for you?

Top EU data protection agency under pressure to act against Internet giants as GDPR turns 2 years old

Truecaller denies breach after data of 4.75 crore Indians appear on dark web

Truecaller Denies Data Breach After Reports Claim Selling 4.75 Cr Indians' Data On Dark Web

‘Weaver Fundraising’ Is Sending Notices of a Data Breach

26th May

3 Hacking Forums Hacked! Database Leaked Online

3-week lapse for AIS data breach

Abuse victims' group says it's 'too late' for apologies over major data breach

Arbonne MLM data breach exposes user passwords, personal info

As UK Data Breach Reports Drop, Britain’s Privacy Watchdog Reveals Surge in Other Cyber Incidents

Australian customer experience firm Stellar hit by ransomware

China to set individual privacy rights in first civil code

Cloud Security: 5 Serious Emerging Cloud Computing Threats to Avoid

Coronavirus: Cyber criminals target UAE hospitals and people working from home

Customers’ data of 3 crypto wallets, 1 investment platform hacked

Cut Hacker Dwell Time to Save Your Bottom Line

Cyber Security Threats That All IT Teams Need To Know

Cyberattacks against hospitals must stop, says Red Cross

Cybercriminals after money more than anything else

Cyberstress: How Technology Is Changing Our Brains

Cyberthreats During the Pandemic Are on the Rise

Data on 29 Million Indian Jobseekers Leaked

Data breach scam shows cryptoexchanges have a big hackable vulnerability

Database of 8 billon Thai Internet Records Exposed in Major Data Breach

Determining Liability For Security Breaches Isn't Black And White

Domino’s Pizza scam warning: Fast food text scam spreads on WhatsApp

EasyJet faces £18 billion class-action lawsuit over data breach

EasyJet faces billions in potential liability over data breach

EasyJet faces class-action lawsuit over data breach

EasyJet subject of class action lawsuit over massive data breach

Europol, Capgemini team up in cybercrime prevention, awareness campaigns

Florida Unemployment System Hit by Data Breach

From Mr Robot to cybercrime vigilante

GDPR - 2 Years On

Hackers are more active under lockdown

Hackers leak Zoomcar data of 3.5 million Indians on dark web

Hacker Stealing SQL Databases to Extort Online Shop Owners

Here's how EasyJet customers targeted in a cyber attack may get £2,000

Historical Institutional Abuse: Stormont to investigate data breach

How businesses can secure themselves in a post-COVID world

How do I select a backup solution for my business?

How to Protect Privacy While Mining Millions of Patient Records

How Using AI Vastly Improves Threat Detection

In land of big data, China sets individual privacy rights

‘In the hands of cyber criminals’: Man sues Wichita State University (WSU) over hack of decades-old student data

Irish Data Protection Commission Completes Inquiry into Twitter Data Breach

Jersey: Islanders among victims of EasyJet hack

Lawsuit filed over Ohio Pandemic Unemployment data breach

List of ransomware that leaks victims' stolen files if not paid

Malicious actor holds at least 31 stolen SQL databases for ransom

Managing data privacy risks in corporate investigations - some key considerations for businesses in the Asia-Pacific region

Mathway breach latest caper for Shiny Hunters

Maze ransomware gang leak Banco BCR card data

PGMBM issues £18bn class action claim against EasyJet over data breach

Qihoo & Baidu disrupt malware botnet with hundreds of thousands of victims

Ransomware Attack Hits One Public Figure After Another

Securing Data in Cloud Email and Messaging Applications

SIM swap fraud – an explainer

Stop collecting employee data from cameras, Teck told

Texas Court Backs Phishing Attack Insurance Claim

The Biggest Cause of Data Breaches is (Again) Frustratingly Banal

The Earthquake Commission (EQC) accidentally leaks details of 8000 claims

The Opportunity and Challenges of Offering Managed Security

The security trends set to arise from coronavirus

The surge of SaaS applications to aid remote working

Third-party access creates huge security risks

Truecaller Data Being Sold On Dark Web Doesn’t Belong To Its Users, Says Company

Turla hacker group steals antivirus logs to see if its malware was detected

Value of data security

Verizon Data Breach Investigations Report Finds an Increase in Web Application Breaches

Why Your Approach To Cybersecurity May Require Shifting Your Mindset

World leaders: Work together to stop cyberattacks plaguing healthcare systems

25th May

2.9 crore Indian job seekers’ data leaked on Dark Web

5 Tips to Prevent Your IoT Project from Taking a Wrong Turn

28% of Data Breaches in 2020 Involved Small Businesses

AI plays major role in automating cyber security threat detection and prevention

Breach Report: staying alert in the face of cyber dark ages

Building cybercrime preparedness in a digital era

Cyber security attacks

Deloitte Sued By Unemployed Ohioans Who Are Unhappy Their SSNs and Addresses Were Visible For All to See

Easyjet customers to sue over data breach

EasyJet faces huge class-action lawsuit over data breach

Easyjet hit with £18 billion lawsuit over customer data breach

Every CTO Must Take Action on These 4 Edtech Issues

GDPR: The First Two Years and Future Challenges

GDPR 2nd Anniversary: Take a Tall Stance in 2020

GDPR at Two: Critics Slam Patchy Enforcement, Sluggish Investigations

GDPR enforcement held back by lack of resources, report says

Ghana: Data breach - Disclosure needed from Chamber of Telecommunications - CSS

Government supplier Interserve hit by cyber attacks

Growing Threat of Destructive Attacks is One of the Top Cyber Risks Organizations Face

Hacker extorts online shops, sells databases if ransom not paid

Historical abuse survivors taking legal action after private details shared

Historical Institutional Abuse: Brendan McAllister 'will not resign' over data breach

Homeworkers may see employers breach GDPR

How to avoid being hacked while playing in an online casino?

In a massive data breach, over 8 billion Thai internet user records leaked

Information security risk assessments of suppliers

Massive Xbox Data Leak Similarly Follows Nintendo Data Breach

Maze gets rampant: exposes card numbers of Costa Rica Bank clients

Mercedes-Benz Data Leak: Embarrassing But Endurable

Microsoft warns of massive COVID-19 phishing attack: Pandemic has made India a playground for cyber scammers

Northern Ireland customers sue EasyJet after major data breach

On Anniversary of GDPR Enactment, Israel’s Privacy Laws Still Far Behind

Pandemic Unemployment Assistance applicants believe second data breach took down site Sunday

Phishing campaign hijacks Google Firebase storage

Popular Maths Site Investigates ‘Potential Data Compromise’

Quidd data breach exposes 4 million users, including youngsters

Ragnar Locker ransomware uses a clever trick to dodge detection

RangeAmp attacks can take down websites and CDN servers

Ransomware Attacks Are Exploding in the Education Sector

Ransomware attacks are targeting the education sector, report reveals

Research: Women Are Better at Cybersecurity Than Men

Retailer IN SPORT's head office hit by ransomware

SIM Swap Traps BlockFi Too in “Temporary Data Breach”

States plead for cybersecurity funds as hacking threat surges

Thousands of enterprise systems infected by new Blue Mockingbird malware gang

ThreatList: People Know Reusing Passwords Is Dumb, But Still Do It

Trezor Calls Claims of Hardware Wallets’ Data Breach a ‘Hoax’

UK businesses reported 2,629 security incidents to ICO in Q4

UK Data Breach Reports Decline

Unprepared remote workers put cybersecurity at risk

What is the dark web? Your questions answered, in plain English

Why Is 3sYqo15hiL Such A Popular Password?

Why Retailers Should Take Action to Avoid the Next IoT Security Disaster

Working from home for a while? Here’s how to do it securely

ZLoader Banking Malware Resurfaces

Monday 18 May 2020

Data Breaches Digest - Week 21 2020

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 18th May and 24th May 2020.



Guest Post: Kindly provided by Stealth Labs, Inc
US Cybersecurity: 64% Americans Don’t Have Data Breach Response Plan


24th May

3 ways scammers are using coronavirus fears to steal money from you

Android apps downloaded BILLIONS of times from Google Play Store pose massive risk

23rd May

37% increase in cyber attacks in India in Q1 2020

Are you one of 9 million EasyJet customers who might have had their details breached? Four steps you can take to stay safe

Breach Report: staying alert in the face of cyber dark ages

Cybersecurity During COVID-19: What You Need To Know To Protect Yourself

Dangerous Phishing Malware Runs Rampant With Coronavirus Data-Infused Excel Spreadsheets

EasyJet faces £18 billion class action claim over leaked data of 9 million customers

Factors Which Make Cybersecurity Jobs More Immune To Recession

Fake supreme court subpoena phishing scam steals Office 365 credentials

“Home Chef” Admits Data Breach That Compromised 8 Million Users

How to know if a website has been hacked and is on the Dark Web

Identities of 150 survivors of historical abuse exposed in major data breach

India: Protection or threat? Experts say Aarogya Setu poses national security risk

Irish Data Protection Commissioner moves against big tech firms in Ireland

Microsoft warns of massive phishing campaign targeting PCs

Online education site EduCBA discloses data breach after hack

Patterns Of Compromise: The EasyJet Data Breach

Personal Data of Millions of Facebook Users Revealed

Ransomware Gang Posting Financial Details From Bank Attack

The cybersecurity you need to work remotely

Twitter, WhatsApp Sanctions Loom in EU Privacy Crackdown

Zoomcar Data Hacked; 3.5 Million Users’ Details Sold On Dark Web

22nd May

5 Tips for Fighting Credential Stuffing Attacks

25 million user records leak online from popular math app Mathway

40% of APAC consumers have dealt with personal data breaches

85% Organizations Anticipate Remote Working Will Threaten Business Operations

APAC consumers have concerns about online privacy, but let it go for freebies

As hackers sell 8 million user records, Home Chef confirms data breach

Bank of America leak exposes business details of PPP relief applicants

Coronavirus scam stealing 'hundreds of millions' boosted by old data breaches

Create a safe haven for your customers to build loyalty

Data Breaches and Security Incidents Surged to Record High in 2019, Verizon Report Shows

EasyJet Data Breach - What You Need To Know

EasyJet to be sued over customer data breach

EasyJet woes grow after it is hit with massive group action claim over data breach

Former Salesforce Execs Launch Data Protection Startup

FRAUD FEARS - EasyJet data breach and cyber attack: Can I claim compensation if my details were hacked?

GDPR Warning issued to Grandmother for Posting Images of Grandkids Online

Hacker shares 40 million Wishbone user records for free

Hacker Swipes Data On 40 Million Users Of Popular Wishbone App

Hackers post Sensitive Data of Wishbone Users on Darknet

Home Chef involved in a significant data breach

How encryption can help protect your sensitive data

How to become a successful cybersecurity specialist

Illinois: State to notify 32,000 of data breach

Indonesia: Calls mount for comprehensive audit into data breach affecting 2.3 million voters

Indonesia probes breach of data on more than 2 million voters

Labour demands investigation of data breach by outsourcing firm Serco

Microsoft: Beware this massive phishing campaign using malicious Excel macros to hack PCs

Non-Cybersecurity Incidents Outnumber Cyber-Attacks in ICO Report

North Dakota's Contact Tracing App Sends User Data to Third Parties

Organizations Fear Increased Risks Due To Work-From-Home Changes

Personal data of 12 million Facebook users exposed online

Privacy Perils: Take the Threat Out of Take Out

Privilege escalation vulnerability patched in Docker Desktop for Windows

Protect Yourself Against Fraud, Identity Theft and COVID-19 Scams

Ransomware deploys virtual machines to hide itself from antivirus software

Security breaches follow the money

Silent Night Zeus financial botnet sold in underground forums

Snail Mail And Debit Cards: How Washington State Was Bilked Out Of Millions

The Little Clinic Announces PHI Incident

Tusla fined again for data breach

UK: Opposition slam contact tracing scheme chaos amid fresh data breach

UK businesses quick to spot cyberbreaches, but failing to stop them

What Can Crypto Crisis Managers Learn From BlockFi's Silence & tBTC's Openness?

What can merchants do to avoid falling victim to large-scale ATO attacks?

Who Owns Privacy?

Why outages are as serious as cyber threats

Windows malware opens RDP ports on PCs for future remote access

Wishbone Breach: 40 Million Records Leaked on Dark Web

21st May

7 Recommendations For Small Business Security During COVID-19

85% of Organizations Fear Increased Risk to Business Due to Work-from-Home Changes

#COVID-19: Are We Protected From Cyber Risks?

A Customs and Border Protection recruiter released personal data of 1,300 American University students

Another data breach hits contact tracing scheme

Arkansas Unemployment Data Breach Releases Resident Info

BlockFi discloses failed hack attempt after SIM swapping incident

Budget airline EasyJet suffers major data breach

CEOs fear falling victim to next big breach

Data breach reported at Florida Department of Economic Opportunity

EasyJet Cyber-Attack: How to Avoid an Easy Hack

EasyJet Hit With Massive Breach Exposing Data of 9 Million Flyers

EasyJet security breach affects 9 million customers

Equifax is paying $5.5M to banks, but nothing to victims of the 2017 data breach

Florida’s unemployment website suffers data breach DEO confirms

Free service measures Dark Web information exposure

Hacker leaks 2.3 million Indonesian citizenship data for download

Hackers tried (and failed) to install ransomware using a zero-day in Sophos firewalls

Home Chef Confirms Data Breach Incident Affecting 8 Million Customers

Home Chef delivers data breach news linked to darknet sale of 8 million customer records

Home Chef hacked, eight million users have data breached

How healthcare organizations can combat cyberattacks during the coronavirus

How States Can Secure Public Health Telehealth Deployments

How to Best Avoid Costly Security Breaches

How to get into cybersecurity

I tried to delete myself from the internet. Here's what I learned

Information Security Risk Assessments Of Suppliers

Ireland: HSE’s data breach bodes ill for contact tracing app

Is Home Your Business’s New Network Security Perimeter?

Israeli Sites Hacked In Coordinated Cyber Attack

Jamaica: Attorney General says Data Protection Act will need constant review

Japan investigates potential leak of prototype missile data in Mitsubishi hack

Jersey: Data breaches increase by 40%

Microsoft's GitHub account breached by threat actors Shiny Hunters

Mobile Apps Security Threats And How To Prevent Them

Nepal: Another gov.np domain hacked

New Spectra attack breaks the separation between Wi-Fi and Bluetooth

Over 129m records of Moscow car owners up for sale on the Dark Web

Personal data of 40m Wishbone users being sold by hackers for £6,400

Protect Your PC: How to Work From Home Securely

Real Time Matters in Endpoint Protection

Secure Your Gmail Account Now Before Hackers Take Over Your Accounts! Here's How to Do It!

Security Will Continue To Put Philanthropy At Risk - Here's What You Can Do

Serco leaked email addresses of 300 COVID-19 contact tracers

Severe Data Breaches Could Cost US Small Businesses $555 Billion

ShinyHunters Is a Hacking Group on a Data Breach Spree

Struggle of unemployment claimants compounded by data breach

The price of carelessness: How much data leakage and cybersecurity cost

Thousands of Israeli sites defaced with code seeking permission to access users' webcams

Thousands of people who recently applied for unemployment compromised by data breach

Tips & Tricks For Managing IP Risks Associated With Mobile Devices During COVID-19

To test its security mid-pandemic, GitLab tried phishing its own work-from-home staff. 1 in 5 fell for it

Toll Group data dumped on dark web

Toll's stolen data finds itself on the 'dark web'

Unacademy, Byju’s help clear your doubts, but have few answers on data privacy

Unemployment website back, payments on track after data breach, Arkansas governor says

What to know about the surge of unemployment fraud in Washington State (WA)

Video game developers under siege by cyberattacks seeking to plunder in-game cash

What everyone should know about the pros and cons of online fingerprinting

Why Singapore’s public sector needs Privileged Access Management

WordPress and Managing Third-Party Cyber Risk

20th May

8 Cybersecurity Predictions for 2020 and Beyond

14 Ways To Protect Your IP From Ex-Employees And Competitors

43% of Data Breaches Connected to Application Vulnerabilities: Assessing the AppSec Implications

60% of Insider Threats Involve Employees Planning to Leave

76% of execs losing sleep over being the next high-profile breach

192 Million Records Leaked by Natura & Co., Brazilian Online Retailer

10,000+ patients' info breached in Arizona medical group email hack

Arkansas website that exposed data cost $3 million, was developed on short timeline

Bigger budgets have not entailed more security

BlockFi data breach exposes retail customers’ personal data

BlockFi experiences a data breach but says no customer funds lost

BlockFi knowledge breach might have been prevented, Bitcoin specialists say

BlockFi Suffers Data Breach, Funds Remain Safe

Buying illegal access to enterprise networks - costs on dark web skyrocket

Celebrity law firm won’t pay ransom to hackers claiming to have 'dirty laundry' on Trump

CEOs and CISOs disagree on cyber strategies

Colorado Labor Department confirms brief data exposure for pandemic unemployment claimants

Coronavirus: Data breach exposes personal information of some Ohio unemployment applicants

Covve Contacts App Data Breach Exposes 23 Million Emails Addresses and Other Private Details

CYBER RAID - Chinese hackers suspected of EasyJet cyber attack as 9 million customers’ personal details stolen

'Cyberattack on EasyJet will put consumer confidence to the test' warns PCI Pal

Cybersecurity: How to Handle the Nontechnical Aspects of a Data Breach

Cybersecurity survey by Canadian law firm offers surprising results

EasyJet admits security hack of 9 million passenger records

EasyJet data breach: 9 million customers affected

EasyJet data breach: What consumers need to know

EasyJet data breach sees nine million customer details stolen

EasyJet hack: ‘I’ve been left in complete limbo’

EasyJet Reports 9 Million Customers Affected by Security Breach - Credit Card Details of Over 2,000 Customers Stolen

‘Failed mishmash’ of privacy protections insufficient for NHS app users

‘Flight risk’ employees involved in 60% of insider cybersecurity incidents

GoDaddy Web Hosting Accounts Data Breach Underscores Need for Stronger Authentication

Home Chef announces data breach after hacker sells 8 Million user records

Home Chef confirms breach after 8 million user records found on the dark web

Illinois Department of Employment Security (IDES) confirms data breach in online unemployment system

Information of 9 Million Passengers Compromised in EasyJet Data Breach

Japan investigates Mitsubishi Electric breach amid national security concerns

Mal-Innovation on Mobile: A Changing Threat Landscape

Mitsubishi Electric attack likely stole data on new missile

Nearly a quarter of remote workers do not consider data protection when sharing information

NetWalker Ransomware Gang Hunts for Top-Notch Affiliates

No funds lost in BlockFi data breach

Preventing attackers from taking your organization’s data ransom

Private Equity and Cybersecurity: Threats, Consequences, and the Regulatory Framework

Security problem could affect 130K Ohio unemployment seekers

Serco accidentally shares contact tracers' email addresses

Serco exposes contact tracers’ data in email error

Severe Data Breach Could Cost Tech Companies $174 Million per Day

Social Engineering Scams on the Rise Amid the Pandemic

Staying Safe from Cyber Attacks

Toll Group Data Leaked Following Second Ransomware Incident

Verizon Data Breach Investigations Report: Money Is Top Motivator

Will your cyber insurance protect you during COVID-19

With Cyberattack on Iranian Port, Tehran Gets a Warning: Civilian Installations Are a Red Line

19th May

5 tell-tale signs saying your computer has been hacked

65% of European Consumers Worry About Online Fraud. Do You Shop Online Safely?

82% of Indian firms hit by ransomware attacks in a year

Attacks Targeting ICS & OT Assets Grew 2000% Since 2018, Report Reveals

Australian Digital Health Agency (ADHA) details My Health Record breach attempt

BlockFi data breach could have been prevented, Bitcoin experts say

BlockFi’s Data Breach May Allow Criminals to Extort Rich Clients

BlockFi Experiences Data Breach – Crypto Lending Hack

British Airline EasyJet Suffers Data Breach Exposing 9 Million Customers' Data

CEOs, CISOs fear becoming the next big breach target

Criminals scamming Florida unemployment system with fake claims

Cyber hackers target EasyJet and access details of 9million customers in 'highly sophisticated' attack

Data breaches timeline: EasyJet cyberattack exposes over 9M people, and more

EasyJet: Nine million customers' details 'accessed' by hackers

EasyJet admits nine million customers hacked

EasyJet data breach: how to know if you've been affected, and what to do about it

EasyJet data breach hits nine million passengers

EasyJet data breached: over 9 million customers affected

EasyJet hack: How to check if your details have been stolen - and what to do next

EasyJet hack: Passenger data could be sold on dark web after major cyber attack, experts warn

EasyJet hacked as 9m customers' details 'accessed' in massive data breach

EasyJet hit by cyberattack where email and travel details for 9 million customers stolen

EasyJet says 9 million travel records taken in data breach

EasyJet Says Details of Nine Million Customers Accessed in Data Breach

EasyJet says hackers accessed data of 9 million customers

EasyJet Suffered Data Breach Exposing 9 Million Travel Records

GDPR what? European Parliament breach exposes data of 1000s of people

Hackers accessed details of 9 million EasyJet customers, credit card details of 2K+ people

Health records targeted in hack attack

Here’s what security professionals took away from Verizon’s annual data breach report

How to decode a data breach notice

Leveraging Your Microsoft Assets in this Remote Access World

Making Security a Business Priority: Four Things to Communicate to Leadership

Money is still the main motivating factor for hackers, Verizon report finds

Money is still the root of most breaches

Money still makes the cyber-crime world go round - Verizon Business 2020 Data Breach Investigations Report is live

Nine million EasyJet customer details lost in data breach

Phishers are trying to bypass Office 365 MFA via rogue apps

Post-COVID-19 working: The end of passwords?

Q1 2020 sees more data breaches than ever before

Quarter of a million customers exposed as Brazilian cosmetics brand suffers data leak

Show Them the Money: Cyber Attackers Desire Financial Gain More Than Espionage

SMBs see cyberattacks that rhyme with large enterprises due to cloud shift

The unexpected cyber threat inside your business

Ukraine Nabs Suspect in 773M Password ‘Megabreach’

Use the ABC of cyber safety

Verizon's data breach report highlights how unsecured cloud storage opens door to attacks

Verizon 2020 Data Breach Report: Money Still Makes the Cyber-Crime World Go Round

Verizon issues its Business 2020 Data Breach Investigations Report

18th May

8 ways local governments can enhance security while working remotely

15% of Small Businesses Experienced a Cybersecurity Threat in 2019

$18m in cryptocurrency exposed to theft in “dangerously unsafe” marketplaces

86% of data breaches are conducted for financial gain

Anglo-Eastern suffers ransomware attack

BlueScope reports cyber incident affecting Australian operations

Breach of Dating App Mobifriends Highlights the Ongoing Problem of Password Reuse

Celebrity law firm won’t pay ransom to hackers claiming to have ‘dirty laundry’ on Trump

Chicago Children's Hospital Sued Over Data Breaches

Co-operative Banks - A Cybersecurity disaster waiting to happen

Covve revealed as source of data breach impacting 23m individuals

Cyber Insurers Get Tough on Risk Assessments Amid Coronavirus Pandemic

Cyber Insurers Increase Scrutiny Amid Pandemic

Dark Data Dreams

Data protection and GDPR: what are my legal obligations as a business?

E-commerce platforms ‘under attack’, cybersecurity must be improved

Edison Mail bug exposed users’ email accounts to complete strangers

Edison Mail rolls back iOS update after emails reach wrong inbox

Edison Mail security vulnerability exposed accounts to other people

Equifax finally coughs up the money for its 2017 monster hack...to the banks for having to cancel your cards

Equifax Offers to Pay Banks $30.5 Million for Data Breach Claims

European supercomputers hacked, apparently to mine cryptocurrency

Extent of Taiwanese government data breaches still unknown to public

FBI: ProLock ransomware gains access to victim networks via Qakbot infections

Hacking Streak Forces European Supercomputers Offline in Midst of COVID-19 Research Effort

How Bots Can Attack Your Web Application – And How To Stop Them

I know what you leased last summer: Asset database leak hits Capita, Rolls-Royce, Tesco (every little helps, eh?)

Identity-related breaches are on the rise

Identity-related breaches on the rise, prevention still a work in progress

Improving Cyber Hygiene with Greater Social Cybersecurity Engagement

Ireland fines country's child and family agency €75,000 for data breach

Malaysia’s data protection practices still have some way to go

Many firms expect their remote workers to put them at risk of a data breach

Mercedes-Benz onboard logic unit (OLU) source code leaks online

Mitigating Cybersecurity Risks In Remote Work Environments

Multiple supercomputers across Europe targeted for cryptocurrency mining

Network security in a world of encryption

Over 190 Law Firms Affected by Advanced Data Leak That Exposed Over 10,000 Legal Documents

“PentaGuard” Hacking Crew Busted in Romania

'PERFECT CYBER STORM' - How hackers could cause a cyber doomsday during coronavirus pandemic – from shutting down hospitals to crashing banks

Protecting Organization From Cyber-Threats: Business at Risk During COVID-19

Ransomware attack 'especially disruptive' to appellate courts including Texarkana

Ransomware Gang Arrested for Spreading Locky to Hospitals

Recent cyber attacks just the tip of the iceberg for Australia

Refocusing Cybersecurity Best Practices on Security Hygiene

Remote working carries data breach risk for companies

Research finds remote working security concerns

REvil Ransomware Gang Threatens to Release Dirt on Trump

REvil ransomware hackers threatening to release “dirty laundry” on Donald Trump

Samsung, Rolls-Royce Information Exposed by Leaky Database, Security Firm Says

Scammers Are Flooding Depop and Hacking Users

Shiny new Azure login attracts shiny new phishing attacks

State unemployment agency confirms data breach

Stop & Shop, Giant find skimming devices in self-checkouts at six stores

Ten Crucial Privacy Statistics That May Surprise You

Texas Department of Transportation (TxDOT) hit by a ransomware attack

The 3 Top Cybersecurity Myths & What You Should Know

The History And Future Of Passwords (And What’s Next)

The Inconvenient Truth of Cybersecurity Failures

The New DIBBS Password Format Explained

Warning! Nigerian crime ring stealing millions in U.S. unemployment money

Why a cybersecurity framework for autonomous vehicles is now vital