FCC Fines Telco Giants $200 Million for Sharing Customers' Location Data Without Consent

UnitedHealth breach began with Citrix flaw exploit, Telegram yanks and then restores Ukraine security agency access, TikTok ban could extend CapCut video editor, Canadian lawmakers in an uproar over Chinese hacker targeting, Google blocked 2.28 million Android apps last year, Apple leaves EU Safari users exposed to web tracking,

Coffee County Shut Down Access to State Voter Registration System Following Cyberattack

Okta warns of unprecedented spike in credential stuffing attacks, Spy.pet crumbles after Discord ban, Ukraine hacking group claims attack on Russian telecom provider, Belarus hacktivists claim attack on country's security agency, UK bans devices that come with weak passwords, Canada's London Drugs temporarily shutters 79

Best Infosec-Related Long Reads for the Week of 4/20/24

How a lifelong hacker plunged Finland into a crisis, The challenges and opportunities posed by cybercrime take-downs, No consensus on TikTok's national security threat, ShotSpotter funnels data to police after contract cancellation, The existential threat of LLM optimization Metacurity is pleased to offer our free and premium subscribers

Health Giant Kaiser Shared Millions of Members' Data With Third-Party Advertisers

FBI warns of unlicensed crypto transfer services, CISA reports success with ransomware warning pilot program, ByteDance says its critical algorithms foreclose sale of TikTok, Traffic generated by USPS scam texts rivals that of USPS, Attorneys General urge UnitedHealth to take meaningful action,  Thoma Bravo to buy Darktrace for $5.32

State-Sponsored Spies Are Targeting Cisco Adaptive Security Appliances in Global Hacking Campaign

Samourai Wallet founders charged for criminal money-laundering, Election hackers shift focus to major players, Czech and Ukraine cops expose bank fraud gang, Pegasus used against hundreds in Poland, France seeks new sanctions to target Russian disinformation, Sweden faces a dry weekend due to liquor logistics firm attack, much more Cisco

Listen to the Hilarious Call Between a Ransomware Hacker and a Random Company Employee

'I'm sorry. I'm a hacker and I don't care about the law.' About three weeks ago, Lorenzo Franceschi-Bicchierai of TechCrunch reported a hilarious phone call between a hacker who claimed to represent the ransomware gang DragonForce and a rank-and-file employee he encountered

US Cracks Down on Four Alleged Iranian Hackers With Sanctions, $10 Million Reward

TikTok ban passes but is no slam dunk, Hackers release part of El Salvador's Bitcoin code, State Department imposes visa restrictions on 13 people linked to spyware, DPRK hackers are exploiting antivirus update mechanism, Chinese and Russian hackers use edge devices in espionage attacks, Google delays end of

Change Healthcare Cops to Paying Ransom, Warns Wide Swath of Health Information Could Have Been Stolen

Indiana wastewater plant targeted by Russian hackers, New Fancy Bear tool steals credentials, Hackers try to implant malware on Ukraine soldiers' apps, Former FSB counterintel chief sentenced to nine years, New HIPAA rule protects abortion data, Attackers were able to issue bank orders in Brazil, much more

Section 702 Renewed With Expanded Spying Powers

TikTok ban bill heads to Senate with likely passage, Nation-state hacking group breached Mitre, Hedgey Finance exploited for nearly $45 million, Belarusian hacktivist group claims attack on fertilizer plant, DPRK IT workers work as animators to raise regime funds, Chinese hackers infiltrated Volkswagen for five years, EU police chiefs go

Best Infosec-Related Long Reads for the Week of 4/13/24

Lessons from the XZ Utils backdoor, Sextortion driving teen boys to suicide, America's hypocritical TikTok ban, The secretive global ships that keep the internet running, The 1980s war on beeper use by teens

Law Enforcement Disruption of Malicious Cyber Actors Is Gaining Steam

According to Metacurity’s timeline of law enforcement disruptions of malicious cyber actors, the rate of these actions is picking up steam in 2024, with the take-down of LabHost marking the fifth known action so far, compared to eight total in all of 2023. Yesterday's disruption of the

FBI's Wray Ramps Up Rhetoric on Chinese Hackers, Says They're Poised to Deal a 'Devastating Blow'

Frontier Communications forced to shut down some systems following cyberattack, Akira gang has earned $42M, Jury finds Mango Markets exploiter guilty, Hacker claims theft from financial crime database, LastPass users targeted by CryptoChameleon, FIN7 targeted US carmaker, Ransomware attack threatens US and European blood supply, Cybersec pros ask Congress to