Bill Toulas reports: A new report shows that hackers are selling access to 576 corporate networks worldwide for a total cumulative sales price of $4,000,000, fueling attacks on the enterprise. The research comes from Israeli cyber-intelligence firm KELA which published its Q3 2022 ransomware report, reflecting stable activity in the sector of initial access sales…
Category: Commentaries and Analyses
FTC Brings Action Against Ed Tech Provider Chegg for Careless Security that Exposed Personal Data of Millions of Customers
The Federal Trade Commission is taking action against education technology provider Chegg Inc. for its lax data security practices that exposed sensitive information about millions of its customers and employees, including Social Security numbers, email addresses and passwords. Chegg allegedly failed to fix problems with its data security despite experiencing four security breaches since 2017….
Serious breach of cellphone users’ data
The News (Pakistan) reports: The personal data of the subscribers of the telecom companies operating in Pakistan has once again been seriously compromised as various mobile applications and web portals are providing access to individual subscribers’ data on the internet. Recently, a video of a mobile application named ‘Asan Bash’ went viral on social media claiming…
Young Finnish man detained in absentia over data breach at Vastaamo
The Vastaamo psychotherapy clinic hack and extortion attempt in Finland, first disclosed in 2020, remains one of the most sensitive and disturbing breaches DataBreaches has ever covered. Past news items about it can be found here. Now there is an update. Aleksi Teivainen of Helsinki Times reports: The District Court of Helsinki on Friday detained…
Hacked Documents: How Iran Can Track and Control Protesters’ Phones
Sam Biddle and Murtaza Hussain report: As furious anti-government protests swept Iran, the authorities retaliated with both brute force and digital repression. Iranian mobile and internet users reported rolling network blackouts, mobile app restrictions, and other disruptions. Many expressed fears that the government can track their activities through their indispensable and ubiquitous smartphones. Iran’s tight…
Suffolk cyberattack: County consultant also lobbies for vendor hired to fortify system
Mark Harrington and Sandra Peddie report: A consulting firm hired to help manage Suffolk County’s response to a ransomware attack also has served as a lobbyist for the computer security company brought in more than three years ago to analyze and fortify Suffolk’s networks, according to a Newsday analysis of records. Computer security experts and…