-
Bay Shore School District
October 3, 2020
•
[ hack, ddos, education ]
The Bay Shore School District is hit with a DDoS attack.
-
Gravatar
October 3, 2020
In October 2020, a security researcher published a technique for scraping large volumes of data from Gravatar, the service for providing globally unique avatars . 167 million names, usernames and MD5 hashes of email addresses used to reference users' avatars were subsequently scraped and distributed within the hacking community. 114 million of the MD5 hashes were cracked and distributed alongside the source hash, thus disclosing the original email address and accompanying data. Following the impacted email addresses being searchable in HIBP, Gravatar release an FAQ detailing the incident.
-
Foxtons
October 2, 2020
•
[ financial, leak, malware ]
Financial details belonging to customers of UK estate agency Foxtons are widely available on the dark web following a malware attack in October last year that affected parent company Foxtons Group.
-
Hospital for Special Surgery
October 2, 2020
•
[ insider, malware, healthcare ]
Richard Liriano was sentenced yesterday to 30 months in prison for engaging in a scheme to use malicious software programs, including a program known as a "keylogger," on dozens of his coworkers' computers at a New York City-area hospital, secretly obtaining user names and passwords to his victims' personal email and other accounts, and using that unauthorized access to steal private and confidential files.
-
City of Odessa
October 2, 2020
•
[ hack, government ]
The city of Odessa has suffered a breach of its Click2Gov portal.
-
Nicole Sifuentes Twitter account
October 2, 2020
•
[ hack, social, government ]
Hackers also appear to have hijacked the Canadian Olympic runner Nicole Sifuentes to promote an additional bitcoin scam impersonating Elon Musk.
-
Jonah Williams Twitter account
October 2, 2020
•
[ hack, social, technology ]
Unknown hackers appear to have hijacked verified the Twitter account of Cincinnati Bengals player to promote a bitcoin scam, this time impersonating Elon Musk.
-
Trickbot botnet
October 2, 2020
Over the past 10 days, someone has been launching a series of coordinated attacks designed to disrupt the Trickbot botnet.
-
GeniusU
October 2, 2020
•
[ leak, education ]
In November 2020, a collection of data breaches were made public including the "Entrepreneur Success Platform", GeniusU. Dating back to the previous month, the data included 1.3M names, email and IP addresses, genders, links to social media profiles and passwords stored as bcrypt hashes. The data was provided to HIBP by dehashed.com.
-
104 Job Bank
October 1, 2020
104 Job Bank, a popular Taiwanese online job site, has allegedly been hacked by Chinese hackers and sold on the dark web.
-
Alejandro Caceres
October 1, 2020
A zero-day hunter has told The Register he realised he'd been targeted by a North Korean campaign aimed at stealing Western researchers' vulns.
-
Pitkin County
October 1, 2020
•
[ leak, misconfiguration, government ]
Pitkin County has disclosed a data sercurity incident where a file was left accessible via the Internet and was subject to unauthorized access.
-
Jersey City Municipal Utilities Authority
September 30, 2020
•
[ ransomware, malware, government ]
The Jersey City Municipal Utilities Authority was hit with a ransomware attack that blocked access to "vital" water and sewer service information.
-
United Jewish Israel Appeal
September 30, 2020
•
[ hack, ddos ]
United Jewish Israel Appeal, a British Jewish charity, was the target of a cyberattack during its virtual centenary. Hundreds of participants were kicked off the video conference or prevented from joining it.
-
International Maritime Organization
September 30, 2020
•
[ hack, government ]
The United Nations' International Maritime Organization (UN IMO) disclosed a security breach over the weekend that the agency categorized as a "sophisticated cyber-attack" against its IT systems.
-
Jersey City Municipal Utilities Authority
September 30, 2020
•
[ ransomware, malware, government ]
New Jersey WWS suffers a Makop ransomware attack which compromised files within its system.
-
28 UN officials, including at least 11 individuals representing six countries of the UN Security Council.
September 30, 2020
•
[ espionage, phishing, government ]
A hacker group previously associated with the North Korean regime has been spotted launching spear-phishing attacks to compromise officials part of the United Nations Security Council. The attacks have taken place this year and have targeted at least 28 UN officials, including at least 11 individuals representing six countries of the UN Security Council.
-
Undisclosed North American hospitality merchant
September 30, 2020
•
[ hack, malware, finance ]
Visa reveals that two North American hospitality merchants were hacked and had their system infected with point-of-sale (POS) malware earlier this year (May and June 2020).
-
CloudBees
September 30, 2020
Users of CloudBees' CodeShip are advised to immediately rotate any keys and other secrets in their pipelines after the DevOps solutions provider discovers a long-lasting data breach.
-
Swatch Group
September 29, 2020
•
[ hack, retail ]
The Swiss watch manufacturer, Swatch, shuts down its IT-systems in response to a cyberattack.
