BR: Instituto Federal Do Pará Attack Claimed By BlackCat The Instituto Federal Do Pará (IFPA) is a public education institution in Brazil. On January 21, it was added to the leaks site of the AlphV (BlackCat) group with a message saying, “The guys decided to ignore our ransom demands, so the data of their employees…
JD Sports hit by cyber-attack that accessed 10m customers’ data
Mark Sweney reports: The fashion retailer JD Sports said the personal and financial information of 10 million customers was potentially accessed by hackers in a cyber-attack. The company said incident, which affected some online orders made by customers between November 2018 and October 2020, targeted purchases of products of its JD, Size?, Millets, Blacks, Scotts…
Kremlin-linked Russian businessman faces U.S. trial for hack-and-trade scheme
Nate Raymond reports: A wealthy Russian businessman with ties to the Kremlin faces trial on Monday on U.S. charges that he participated in a vast scheme that generated tens of millions of dollars in illegal trading profits using corporate information stolen through hacking. Jury selection is scheduled to begin in federal court in Boston in…
Doctor Paid $60k in Bitcoin to Hire Dark Web Hitmen
Habiba Rashid reports: Ronald Craig Ilg, 56, was sentenced to eight years in prison for hiring hitmen on the dark web to assault and kidnap victims. The doctor in Spokane, Washington paid $60,000 in Bitcoin as payment for the tasks he asked the hitmen to perform. […] … the first was a former colleague, also a Spokane-area doctor….
Why Is No One Ever Penalised for Data Breaches in India?
Srinivas Kodali has a commentary that begins: Indian software service companies are some of the most profitable entities in the world. They provide technology solutions that power Fortune 500 companies and governments across the world, but is their code always secure? The answer is never a simple binary response but more complex in the real…
Multiple Vulnerabilities Found In Healthcare Software OpenEMR
Alessandro Mascellino reports: Researchers have found three separate vulnerabilities in OpenEMR, an open-source software for electronic health records and medical practice management. Clean code experts at Sonar published an advisory Wednesday about the discovered flaws by security researcher Dennis Brinkrolf. Thanks to responsible disclosure, the vulnerabilities were addressed in October 2022. Anyone using OpenEMR should update to one of the updated…