Security News

Canadian cybercriminal pleads guilty to “NetWalker” attacks in US
2022-07-04 18:09

The choice of Tampa for his trial was because a known victim of one of his "NetWalker" ransomware attacks is based there. The NetWalker Ransomware was a specific type of malicious software that was used to compromise and restrict access to a victim's computer network in an effort to extort a ransom.

Cyberattack shuts down unemployment, labor websites across the US
2022-07-01 20:41

A cyberattack on a software company almost a week ago continues to ripple through labor and workforce agencies in a number of US states, cutting off people from such services as unemployment benefits and job-seeking programs. According to the Louisiana Workforce Commission in a statement this week, Geographic Solutions was forced to shut down state labor exchanges and unemployment claims systems, and as many as 40 states and Washington DC, all of which rely on GSI's services, could be affected.

Carnival Cruises torpedoed by US states, agrees to pay $6m after wave of cyberattacks
2022-06-28 02:58

Carnival Cruise Lines will cough up more than $6 million to end two separate lawsuits filed by 46 states in the US after sensitive personal information on customers and employees was accessed in a string of cyber attacks. Late last week, New York's Department of Financial Services announced Carnival had agreed to pay $5 million to the state as a penalty for falling foul of NY's Cybersecurity Regulation.

US, Brazil seize 272 websites used to illegally download music
2022-06-27 18:00

The domains of six websites that streamed and provided illegal downloads of copyrighted music were seized by U.S. Homeland Security Investigations and the Department of Justice. "According to court documents, law enforcement identified these six domains as being used to distribute copyrighted material without the authorization of the copyright holders," the Justice Department said today in a press release.

US seizes websites used to illegally download and stream music
2022-06-27 18:00

The domains of six websites that streamed and provided illegal downloads of copyrighted music were seized by U.S. Homeland Security Investigations and the Department of Justice. "According to court documents, law enforcement identified these six domains as being used to distribute copyrighted material without the authorization of the copyright holders," the Justice Department said today in a press release.

#US
Don't ditch PowerShell to improve security, say infosec agencies from UK, US, and NZ
2022-06-23 07:58

Windows PowerShell is enormously useful, extremely prevalent, and often targeted by crooks because it offers an express route into the heart of Windows servers and networks. Instead, the agencies recommend securing PowerShell prudently.

Targeted voicemail phishing attacks hits specific US industries’ verticals
2022-06-22 13:49

Email phishing campaigns are regularly hitting organizations in the U.S., but voicemail phishing is less common. Once the user has entered the correct captcha information, they are shown the final content, which is an Office 365 phishing page.

Info on 1.5m people stolen from US bank in cyberattack
2022-06-21 20:53

A US bank has said at least the names and social security numbers of more than 1.5 million of its customers were stolen from its computers in December. In a statement to the office of Maine's Attorney General this month, Flagstar Bank said it was compromised between December and April 2021.

Abortion rights: US senators seek ban on sale of health location data
2022-06-17 20:29

A group of senators wants to make it illegal for data brokers to sell sensitive location and health information of individuals' medical treatment. "When abortion is illegal, researching reproductive health care online, updating a period-tracking app, or bringing a phone to the doctor's office all could be used to track and prosecute women across the US," Sen. Ron Wyden, a co-sponsor of the Health and Location Data Protection Act, said in a statement.

Former US state agency CIO, IT exec plead guilty to bribery and extortion scheme
2022-06-15 00:37

A former Maryland Cabinet-level official and a former IT executive have pleaded guilty to involvement in a bribery and extortion scheme related to technology contracts about a decade ago. According to the US Attorney's Office of the State of Maryland, Isabel FitzGerald, 52, of Annapolis, Maryland, and Kenneth Coffland, 67, of Riva, Maryland, pleaded guilty last week to charges of bribery and extortion, respectively.