Tag: security breaches

Homeland Security warns over ‘wormable’ Windows 10 bug

Homeland Security’s cybersecurity advisory unit is warning Windows 10 users to make sure that their systems are fully patched, after exploit code for a “wormable” bug was published online last week. The code takes advantage of a security vulnerability patched by Microsoft back in March. The bug caused confusion and…

Read More

A new Java-based ransomware targets Windows and Linux

Security researchers have discovered a new kind of ransomware that uses a little-known Java file format to make it more difficult to detect before it detonates its file-encrypting payload. Consulting giant KPMG’s incident response unit was called in to run the recovery effort at an unnamed European educational institute hit…

Read More

How to decode a data breach notice

Over the years I’ve seen hundreds, probably thousands, of data breach notifications warning that a company’s data was lost, stolen or left online for anyone to grab. Most of them look largely the same. It’s my job to decode what they actually mean for the victims whose information is put…

Read More

EasyJet says 9 million travel records taken in data breach

EasyJet, the U.K.’s largest airline, said hackers have accessed the travel details of 9 million customers. The budget airline said 2,200 customers also had their credit card details accessed in the data breach, but passport records were not accessed, a company statement said. EasyJet did not say when the security…

Read More

US Marshals says prisoners’ personal information stolen in data breach

A data breach at the U.S. Marshals Service exposed the personal information of current and former prisoners, TechCrunch has learned. A letter, sent to those affected and obtained by TechCrunch, said the Justice Department notified the U.S. Marshals on December 30, 2019 of a data breach affecting a public-facing server…

Read More

Decrypted: Chegg’s third time unlucky, Okta’s new CSO, Rapid7 beefs up cloud security

Ransomware is getting sneakier and smarter. The latest example comes from ExecuPharm, a little-known but major outsourced pharmaceutical company that confirmed it was hit by a new type of ransomware last month. The incursion not only encrypted the company’s network and files, hackers also exfiltrated vast amounts of data from…

Read More