The City of Dallas has shifted the onus of the breach onto their victims. After unauthorized parties accessed everything from full names and addresses to SSNs and insurance info, The City of Dallas believes two years of credit monitoring is remediation🤦‍♂️

These criminals stole 120,000 Bitcoin in 2016. They tried to tumble the coins, using mixers to obscure the origins of the funds, exchange some for gold, and employed other laundering tactics. Law enforcement recovered nearly all of the $4.5b stolen.

why does rudy guiliani look like a goomba

An ongoing attack has disrupted hospital operations in five states. Starting Thursday night, facilities operated by Prospect Medical Holdings in CA, TX, CT, RI, and PA have had service disruptions due to the attack. Patients are being routed elsewhere.

A malicious version of the legit vconnector, calling itself VMConnect, is trying to pass itself off as the legitimate version of the VMware vSphere connection module. It contains a base64 encoded string that executes on a separate process every minute.

Embedding malware in exe's that appear trusted and benign has become a popular attack vector. As we saw with the OBS malvertizing campaign, adversaries are using trusted software to compromise users looking to install or update these programs.

Storm-0558 targeted over two dozen organizations and compromised a Federal Civilian Executive Branch agency's Email environments. This China-linked threat actor has focused on notable figures, departments, and think tanks.

Vulnerabilities in Rockwell Automation PLCs' communication modules can result in RCE or DoS. Attackers can then do a variety of things like exfiltrate data, establish persistence, and more.

AI-assisted Business email compromise attacks are on the rise. Using maliciously trained models, these criminals are able to rapidly iterate while launching spearphishing campaigns. AI has greatly reduced the overhead associated with these attacks.

French Law Enforcement is being enabled to use spyware for investigations. They intend to tap microphones, turn on cameras, and collect GPS data. They also can tap into laptops, in-car entertainment systems, and IoT devices.

Microsoft asserted that Anonymous Sudan is lying about their recent customer data acquisition. Microsoft claims they 'have seen no evidence' of customer data being compromised or accessed. Anonymous Sudan has been very active in their few years of activity.

Akira follows the big dogs in developing Linux capabilities, broadening their scope with respect to ransomware attacks. Cl0p, Royal, and Ice Fire previously did the same. Akira is new on the scene but rapidly expanding, having disclosed 46 victims so far.

LetMeSpy is marketed towards employers and parents, enabling them to silently spy on their subordinates. During the breach, criminals exfiltrated emails, phone numbers, and SMS message contents. LetMeSpy logs locations and much more.

A group claiming to be allied with the Wagner mercenaries has performed a cyber attack that has disabled Russian satellite operator Dozor. Dozor provides connections to utilities, oil fields, military units, the FSB and more! Signs point to Ukrainian ops.