There’s an update on a lawsuit filed in 2018 that I knew nothing about concerning a breach that occurred in 2017 that I knew nothing about. It’s been one of those days. Thankfully, reporting by Dave Stafford of the Indiana Lawyer showed up in my searches today: A divided Indiana Court of Appeals has reinstated…
Hackers preparing to launch ransomware attacks against hospitals arrested in Romania
Some good news for a change. Catalin Cimpanu reports: Romanian law enforcement has cracked down today on a hacker group that was preparing to launch ransomware attacks on Romanian hospitals. Three hackers were arrested and had their homes searched in Romania and a fourth in the Republic of Moldova. Romanian authorities said the four were…
Multi-millions: Sodinokibi attackers demand $42 million of celebrity law firm, threaten to publish dirt they claim to have on President Trump
I honestly cannot think of a more ironic name for a blog than the Sodinokibi (REvil) ransomware operators calling their website “Happy Blog.” Reading their updates today, they certainly didn’t seem happy, especially with Coveware, a firm that has assisted numerous ransomware victims. The firm’s services include helping negotiate ransom amounts and payment. But something…
Wright County notifies residents of 2019 email hack; COVID-19 response somewhat delayed notification
Notification of Data Security Incident May 13, 2020 Wright County, Minnesota – Notification of Data Security Incident This notice is to inform Wright County residents of a data security incident that potentially affected the personal information of county residents and non-residents in Wright County’s possession. We take the privacy and security of private information we…
A cybercrime store is selling access to more than 43,000 hacked servers
Catalin Cimpanu reports: MagBo, a shadowy online marketplace where hackers sell and buy hacked servers, is doing better than ever and has soared in popularity to become the largest criminal marketplace of its kind since its launch in the summer of 2018. Two years later, the MagBo portal has grown more than 14 times in…
Danger zone! Brit research supercomputer ARCHER’s login nodes exploited in cyber-attack, admins reset passwords and SSH keys
Gareth Corfield reports: Updated One of Britain’s most powerful academic supercomputers has fallen victim to a “security exploitation” of its login nodes, forcing the rewriting of all user passwords and SSH keys. The intrusion, which is understood to be under investigation by GCHQ offshoot the National Cyber Security Centre (NCSC), rendered the ARCHER high-performance computing (HPC)…