UK Cops Bust Teen In Connection with MGM Resorts Ransomware Attack

Spain busts three NoName hackers, Treasury sanctions two Cyber Army of Russia Reborn members, LA County Superior Court shuttered by ransomware attack, eBay former security manager sentenced for cyberstalking, Rho Markets exploited for $7.5m, WazirX suspends platform following $230m attack, much more

Special Report: IT Disruptions Continue as CrowdStrike Sees Crisis Receding

Airlines and NHS continue to struggle while a 'significant' number of devices return online, CrowdStrike dishes more details, Microsoft releases an automated tool, Experts worry about resilience, Cryptocurrency industry, China were seemingly unaffected

Best Infosec-Related Long Reads for the Week of 7/13/24

How acoustic engineers caught Russia sabotaging undersea cables, Making a fortune selling fake and stolen identities, TikTok's interference threats, Software attestation is falling short, New source code attack that hides vulnerabilities from human reviewers, and more

Judge Dismisses Charges Against SolarWinds and Its CISO

Russian nationals plead guilty for roles in LockBit, USPS shared customer data with ad and tech giants, Traffic light controller flaw open to malicious hackers, Malware attacks by China's APT41 step up, Revolver Rabbit buys 500K domains for infostealer, US data breach victim count soars, much more

Special Report: Massive Global IT Outages Triggered by Faulty CrowdStrike Update

Cascading and catastrophic IT outages have hit thousands of organizations worldwide after CrowdStrike issued a faulty update in its Falcon Sensor product that caused Windows operating systems to crash.

Indian Crypto Exchange Lost $230 Million in an Apparent North Korean Attack

Cellebrite used to access Trump shooter's phone, Medisecure hack affected half of Australians, TX man sentenced to nine months for booter service, Cisco fixes severe flaw, Life360 customer data leaked, Crypto service Fractal ID hacked, Mt. Gox hack victims targeted by brute force attacks, much more

Operation Jackal III Busts Hundreds Connected to West African Online Financial Fraud

Info on 2.2m Rite Aid customers stolen, 15m+ email addresses for Trello customers leaked, CISA warns of GeoTools' flaw active exploitation, Ransomware attack shutters Bassett Furniture, Hackers steal $11m from Li.Fi protocol, Crypto phishing app Angel Drainer shuts down, much more

Kaspersky Decamps the US Following Government Ban

FBI gained easy access to Trump shooter's phone, Philippines charges two Russian nationals for stealing $5.8m in crypto, Controversy erupts over Firefox ad tracking, 1.5m Exim MTAs remain unpatched against critical bug, Hacker returns some of victim's stolen crypto, much more

Massive Wave of DNS Attacks Target DeFi Domains Registered With Squarespace

Hacktivist group reportedly breached Disney's internal Slack, Cambodian firm Huione Pay linked to Lazarus group and DMM hack crypto laundering, CoinStats hack attributed to Lazarus group, Dough Finance lost $1.8m in attack, Alphabet eyes a $23 billion buy of Wiz, much more

Special Report: AT&T Reportedly Paid Hackers Nearly $400,000 to Delete Data That Could Be a Gold Mine for Malicious Actors

The data stolen from AT&T could be used by malicious actors to construct compelling phishing attacks and other scams by revealing details of customers' lives. John Binns, previously indicted for a T-Mobile breach and currently imprisoned in Turkey, is reportedly connected to the AT&T breach.

Best Infosec-Related Long Reads for the Weeks of 6/29/24 and 7/6/24

Cambodian rulers linked to pig butchering operation, Airbnb ignores hidden cameras, Huge Russian operation spreads pro-Trump disinfo, State Dept. schools diplomats on digital issues, Chatbots can pass certified ethical hacker exams, New tool can spot vulnerabilities in entire open-source code repos

CDK Global Paid Hackers $25 Million, Will Provide Dealers Compensation, Reports

Crims stole "nearly all" AT&T customer account data, 2.4m mSpy customers' data exposed, Signal tightens desktop client security, JabberZeus and IcedID hacker sentenced to nine years, Lawmakers plead for crypto investigator's release, S. African metal mining company hit by cyberattack, much more