Toronto school district says 40 years of student data stolen in PowerSchool breach

/in

Canada’s largest school board says hackers may have accessed some 40 years’ worth of student data during the recent PowerSchool breach.  In a letter sent to parents this week, the Toronto District School Board (TDSB) said that the data breach affected all students enrolled in the district between September 1985 and December 2024.  The school […]

© 2024 TechCrunch. All rights reserved. For personal use only.

Security News | TechCrunch – ​Read More

Mirai Variant Murdoc_Botnet Exploits AVTECH IP Cameras and Huawei Routers

/in

Cybersecurity researchers have warned of a new large-scale campaign that exploits security flaws in AVTECH IP cameras and Huawei HG532 routers to rope the devices into a Mirai botnet variant dubbed Murdoc_Botnet.
The ongoing activity “demonstrates enhanced capabilities, exploiting vulnerabilities to compromise devices and establish expansive botnet networks,” Qualys security researcher Shilpesh

The Hacker News – ​Read More

Ransomware Groups Abuse Microsoft Services for Initial Access

/in

Sophos warns of two ransomware groups abusing Microsoft 365 services and default configurations to contact internal enterprise users.

The post Ransomware Groups Abuse Microsoft Services for Initial Access appeared first on SecurityWeek.

SecurityWeek – ​Read More

Hackers impersonate Ukraine’s CERT to trick people into allowing computer access

/in

CERT-UA is warning Ukrainians not to accept requests for help via AnyDesk software unless they are sure the source is legitimate.

The Record from Recorded Future News – ​Read More

Students, Educators Impacted by PowerSchool Data Breach

/in

PowerSchool says the personal information of students and educators was stolen in a December 2024 data breach.

The post Students, Educators Impacted by PowerSchool Data Breach appeared first on SecurityWeek.

SecurityWeek – ​Read More

HPE investigating security breach after hacker claims theft of sensitive data

/in

A well-known hacker claims to have stolen source code and user data from the enterprise IT giant

© 2024 TechCrunch. All rights reserved. For personal use only.

Security News | TechCrunch – ​Read More

HackGATE: Setting New Standards for Visibility and Control in Penetration Testing Projects

/in

Imagine receiving a penetration test report that leaves you with more questions than answers. Questions like, “Were all functionalities of the web app tested?” or ” Were there any security issues that could have been identified during testing?” often go unresolved, raising concerns about the thoroughness of the security testing. This frustration is common among many security teams. Pentest

The Hacker News – ​Read More

PNGPlug Loader Delivers ValleyRAT Malware Through Fake Software Installers

/in

Cybersecurity researchers are calling attention to a series of cyber attacks that have targeted Chinese-speaking regions like Hong Kong, Taiwan, and Mainland China with a known malware called ValleyRAT.
The attacks leverage a multi-stage loader dubbed PNGPlug to deliver the ValleyRAT payload, Intezer said in a technical report published last week.
The infection chain commences with a phishing

The Hacker News – ​Read More

CERT-UA Warns of Cyber Scams Using Fake AnyDesk Requests for Fraudulent Security Audits

/in

The Computer Emergency Response Team of Ukraine (CERT-UA) is warning of ongoing attempts by unknown threat actors to impersonate the cybersecurity agency by sending AnyDesk connection requests.
The AnyDesk requests claim to be for conducting an audit to assess the “level of security,” CERT-UA added, cautioning organizations to be on the lookout for such social engineering attempts that seek to

The Hacker News – ​Read More

Ukraine restores state registers after suspected Russian cyberattack

/in

Ukraine has restored the infrastructure of its state registers, which were disrupted last month by a major cyberattack believed to have been carried out by Russian military intelligence hackers.

The Record from Recorded Future News – ​Read More