Black Basta Gang Claims the Hack of the UK Water Utility Southern Water

The Black Basta ransomware gang targeted the UK water utility Southern Water, threatening to leak 750 gigabytes of stolen sensitive data, including personal and corporate documents.

Cyware News – Latest Cyber News – ​Read More

LockBit Ransomware Gang Claims Subway as New Victim

By Deeba Ahmed

Unconfirmed Ransomware Incident Reported at Subway: Company Statement Issued.

This is a post from HackRead.com Read the original post: LockBit Ransomware Gang Claims Subway as New Victim

Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – ​Read More

Update: LoanDepot Says 16.6 Million Customers had ‘Sensitive Personal’ Information Stolen in Cyberattack

The company is working to restore normal business operations, but many online services remain inaccessible even after two weeks. It is still uncertain whether the cyber incident will have a significant impact on LoanDepot’s financial condition.

Cyware News – Latest Cyber News – ​Read More

Aircraft Lessor AerCap Confirms Ransomware Attack

AerCap confirms ransomware attack after emerging cybercrime gang lists the company on its leak website.

The post Aircraft Lessor AerCap Confirms Ransomware Attack appeared first on SecurityWeek.

SecurityWeek – ​Read More

Israel, Czech Republic Reinforce Cyber Partnership Amid Hamas War

The agreement will facilitate the sharing of information and experience between the Israel National Cyber Directorate and the Czech National Cyber and Information Security Agency, including the possibility of internships.

Cyware News – Latest Cyber News – ​Read More

SEC Says X Account Hack was Due to SIM Swapping

The Securities and Exchange Commission (SEC) experienced an account takeover on Twitter due to a SIM swap attack, where the unauthorized party gained control of the SEC’s cell phone number.

Cyware News – Latest Cyber News – ​Read More

Info Stealing Packages Hidden in PyPI

Malicious Python packages on PyPI, such as nigpal, figflix, and seGMM, have been identified, with payloads designed to steal sensitive information from victims’ devices, particularly targeting Windows users.

Cyware News – Latest Cyber News – ​Read More

Outlook Vulnerability Discovery and New Ways to Leak NTLM Hashes

Attackers can use stolen NTLM v2 hashes for offline brute-force attacks or authentication relay attacks, potentially compromising user accounts and gaining unauthorized access.

Cyware News – Latest Cyber News – ​Read More

Update: Hackers Start Exploiting Critical Atlassian Confluence RCE Flaw

Organizations with outdated Confluence instances should treat them as potentially compromised, look for signs of exploitation, perform a thorough cleanup, and update to a safe version to mitigate the risk.

Cyware News – Latest Cyber News – ​Read More

Microsoft Falls Victim to Russia-Backed ‘Midnight Blizzard’ Cyberattack

Russian state-sponsored threat actor Nobelium used a basic password-spray attack to breach Microsoft corporate email accounts, including for execs.

darkreading – ​Read More