• View

Hackers use Unitronics PLCs that are exposed to breach a US water facility

The Cybersecurity & Infrastructure Security Agency, or CISA, has issued a warning that malevolent actors leveraged online vulnerabilities in Unitr... Read more

A Welltok data breach resulting from a MOVEit hack

Health plans nationwide were informed about the MOVEit hack, which affected 8.5 million people, by the healthcare software company Welltok. The May 2... Read more

Image

Okta: Breach Affected All Customer Support Users

When KrebsOnSecurity broke the news on Oct. 20, 2023 that identity and authentication giant Okta had suffered a breach in its customer support depa... Read more

Attackers are actively using a newly discovered vulnerability in Google Chrome

A zero-day vulnerability that is being actively exploited in the wild is among the seven security flaws in Google’s Chrome browser that have been fix... Read more

Image

ID Theft Service Resold Access to USInfoSearch Data

One of the cybercrime underground’s more active sellers of Social Security numbers, background and credit reports has been pulling data from hacked a... Read more

DP World Australia has issued a statement confirming that employee data stolen

DP World Australia has issued a detailed statement on the incident and its ongoing investigations after completely suspending its port operations in... Read more

After a ransomware attack, six states’ Ardent hospital emergency rooms were disrupted

The healthcare company Ardent Health Services, which manages 30 hospitals in six states in the United States, revealed today that a ransomware attack... Read more

Cyberattacks and data theft claims are being looked into by General Electric

General Electric is looking into allegations that a threat actor broke into the business’s development environment through a cyberattack and released... Read more

Rhysida ransomware group attacked the British Library

One of the biggest libraries in the world and the National Library of the United Kingdom, the British Library, has confirmed that internal data was s... Read more

Cybercriminals and nation-state hackers target the “Citrix Bleed” vulnerability

Federal cyber officials warned on Tuesday that nation-state hackers and cybercriminal gangs are both taking advantage of a vulnerability affecting Ci... Read more

Tmax Leaks 2TB of Sensitive Data

TmaxSoft, a software provider based in South Korea, has revealed over 50 million confidential records, including phone numbers, emails, and internal... Read more

Image

Play Ransomware Enters the Commercial Space

The “.play” extension is added by the ransomware after files have been encrypted, hence the name “play.” Additionally, the email address of the ranso... Read more

Unveiling Splunk’s Critical RCE Vulnerability

Cybersecurity experts have uncovered a critical Remote Code Execution (RCE) vulnerability in Splunk, a leading platform for data analysis and securit... Read more

Toyota Suffers Cyberattack By Medusa Ransomware Gang

A ransomware group by the name of Medusa has posted screenshots of multiple documents and a data file tree on its website, claiming to have taken con... Read more

Image

Alleged Extortioner of Psychotherapy Patients Faces Trial

Prosecutors in Finland this week commenced their criminal trial against Julius Kivimäki , a 26-year-old Finnish man charged with extorting a once po... Read more

Image

Microsoft Patch Tuesday, November 2023 Edition

Microsoft today released updates to fix more than five dozen security holes in its Windows operating systems and related software, including thre... Read more

Image

It’s Still Easy for Anyone to Become You at Experian

In the summer of 2022, KrebsOnSecurity documented the plight of several readers who had their accounts at big-three consumer credit reporting bureau... Read more