MFA Glitch Leads to 6K+ Coinbase Customers Getting Robbed
Coinbase suspects phishing led to attackers getting personal details needed to access wallets but also blamed a flaw in its SMS-based 2FA.
Hacks
3.1M Neiman Marcus Customer Card Details Breached
Experts say the detection delay of 17 months is a colossal security blunder by the retailer.
New APT ChamelGang Targets Russian Energy, Aviation Orgs
First appearing in March, the group has been leveraging ProxyShell against targets in 10 countries and employs a variety of malware to steal data from compromised networks.
RFID gun tags leave the military exposed to tracking, sniffing and spoofing attacks, experts say.
Access to heart monitors disabled by the attack allegedly kept staff from spotting blood & oxygen deprivation that led to the baby’s death.
Researchers have demonstrated that someone could use a stolen, locked iPhone to pay for thousands of dollars of goods or services, no authentication needed.
The Conti ransomware gang has developed novel tactics to demolish backups, especially the Veeam recovery software.
Newly discovered code resembles the Kazuar backdoor and the Sunshuttle second-stage malware distributed by Nobelium in the SolarWinds supply-chain attacks.
UPDATE: Indicators of compromise are now available. The unredacted RCE exploit released on Monday allows unauthenticated, remote attackers to upload files to the vCenter Server analytics service.
Income level, education and being part of a disadvantaged population all contribute to cybercrime outcomes, a survey suggests.
