Security News > 2023 > October

Genetics firm 23andMe says user data stolen in credential stuffing attack
2023-10-06 15:48

23andMe has confirmed to BleepingComputer that it is aware of user data from its platform circulating on hacker forums and attributes the leak to a credential-stuffing attack. Recently, a threat actor leaked samples of data that was allegedly stolen from a genetics firm and, a few days later, offered to sell data packs belonging to 23andMe customers.

MGM Resorts attackers hit personal data jackpot, but house lost $100M
2023-10-06 15:30

MGM Resorts has admitted that the cyberattack it suffered in September will likely cost the company at least $100 million. According to an 8K filing with the Securities and Exchange Commission on Thursday, MGM Resorts said less than $10 million has also been spent on "One-time expenses" such as legal and consultancy fees, and the cost of bringing in third-party experts to handle the incident response.

North Korea's Lazarus Group Launders $900 Million in Cryptocurrency
2023-10-06 14:56

As much as $7 billion in cryptocurrency has been illicitly laundered through cross-chain crime, with the North Korea-linked Lazarus Group linked to the theft of roughly $900 million of those...

MGM Resorts ransomware attack led to $100 million loss, data theft
2023-10-06 13:53

MGM Resorts reveals that last month's cyberattack cost the company $100 million and allowed the hackers to steal customers' personal information. In addition to losing $100 million in earnings, MGM also suffered less than $10 million in one-time expenses for risk remediation, legal fees, third-party advisory, and incident response measures.

MGM Resorts says ransomware attack cost $100 million, data stolen
2023-10-06 13:53

MGM Resorts reveals that last month's cyberattack cost the company $100 million and allowed the hackers to steal customers' personal information.In addition to losing $100 million in earnings, MGM also suffered less than $10 million in one-time expenses for risk remediation, legal fees, third-party advisory, and incident response measures.

CDW data to be leaked next week after negotiations with LockBit break down
2023-10-06 13:21

CDW, one of the largest resellers on the planet, will have its data leaked by LockBit after negotiations over the ransom fee broke down, a spokesperson for the cybercrime gang says. LockBit did not respond to questions relating to what its original ransom demand was or what CDW offered in the negotiations.

How to stop ransomware thieves WORMing their way into your data
2023-10-06 12:41

Object First specialises in protecting data from encryption by ransomware crooks. Data backups were a form of business risk to these new, grown-up ransomware gangs.

Google promises Germany to creep on users less after market power probe
2023-10-06 11:56

Google has committed to being a little less creepy with user data in response to proceedings from the German Federal Cartel Office. The commitments are all about how Google processes user data and gives those users more control over what the ad giant is doing with their information.

Chinese Hackers Target Semiconductor Firms in East Asia with Cobalt Strike
2023-10-06 11:49

Threat actors have been observed targeting semiconductor companies in East Asia with lures masquerading as Taiwan Semiconductor Manufacturing Company (TSMC) that are designed to deliver Cobalt...

New OS Tool Tells You Who Has Access to What Data
2023-10-06 10:21

Ensuring sensitive data remains confidential, protected from unauthorized access, and compliant with data privacy regulations is paramount. Data breaches result in financial and reputational...