Security News

U.S. Federal Agencies Ordered to Hunt for Signs of Microsoft Breach and Mitigate Risks
2024-04-12 04:32

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday issued an emergency directive (ED 24-02) urging federal agencies to hunt for signs of compromise and enact preventive...

CISA investigates critical infrastructure breach after Sisense hack
2024-04-11 14:55

The U.S. Cybersecurity and Infrastructure Security Agency is investigating the recent breach of data analytics company Sisense, an incident that also impacted critical infrastructure organizations. Today, CISA says the incident also affects critical infrastructure sector organizations in the United States, with the agency now working with partners in the private sector to assess its impact.

CISA warns about Sisense data breach
2024-04-11 14:18

Business intelligence / data analytics software vendor Sisense has apparently suffered a data breach that spurred the company and the US Cybersecurity and Infrastructure Security Agency to push the company's customers to "Reset credentials and secrets potentially exposed to, or used to access, Sisense services." Details about the security incident are still being kept under wraps by Sisense.

AT&T now says data breach impacted 51 million customers
2024-04-10 14:18

AT&T is notifying 51 million former and current customers, warning them of a data breach that exposed their personal information on a hacking forum. These notifications are related to the recent leak of a massive amount of AT&T customer data on the Breach hacking forums that was offered for sale for $1 million in 2021.

Home Depot confirms third-party data breach exposed employee info
2024-04-07 17:40

Home Depot has confirmed that it suffered a data breach after one of its SaaS vendors mistakenly exposed a small sample of limited employee data, which could potentially be used in targeted phishing attacks.On Thursday, a threat actor known as IntelBroker leaked limited data for approximately 10,000 Home Depot employees on a hacking forum.

US cancer center data breach exposes info of 827,000 patients
2024-04-04 16:57

Cancer treatment and research center City of Hope is warning that a data breach exposed the sensitive information of over 820,000 patients. City of Hope is a National Cancer Institute-designated comprehensive cancer center providing treatment for cancer, diabetes, and other life-threatening diseases.

SurveyLama data breach exposes info of 4.4 million users
2024-04-03 22:28

Data breach alerting service Have I Been Pwned warns that SurveyLama suffered a data breach in February 2024, which exposed the sensitive data of 4.4 million users. Hunt told BleepingComputer that he was notified of the exposure by one of the impacted users and independently verified the data.

AT&T faces lawsuits over data breach affecting 73 million customers
2024-04-03 16:28

AT&T is facing multiple class-action lawsuits following the company's admission to a massive data breach that exposed the sensitive data of 73 million current and former customers. The lawsuit alleges that AT&T failed to adequately protect customers' personal data, leading to a cyberattack and subsequent data breach that exposed sensitive information for 73 million people.

U.S. Cyber Safety Board Slams Microsoft Over Breach by China-Based Hackers
2024-04-03 15:32

The U.S. Cyber Safety Review Board (CSRB) has criticized Microsoft for a series of security lapses that led to the breach of nearly two dozen companies across Europe and the U.S. by a China-based...

OWASP discloses data breach caused by wiki misconfiguration
2024-04-01 19:25

The OWASP Foundation has disclosed a data breach after some members' resumes were exposed online due to a misconfiguration of its old Wiki web server. OWASP says it discovered the Media Wiki misconfiguration in late February following several support requests.