Yellow Pages Canada
April 24, 2023
•[ ransomware, malware, technology ]
Yellow Pages Canada, a Canadian directory publisher confirms to have been hit by a cyber attack. The Black Basta ransomware and extortion gang claims responsibility for the attack and posts sensitive documents and data over the weekend.
Emby
May 1, 2023
•[ hack, misconfiguration, technology ]
Emby says it remotely shut down an undisclosed number of user-hosted media server instances that were recently hacked by exploiting a previously known vulnerability and an insecure admin account configuration.
Barracuda
May 1, 2023
•[ hack, malware, technology ]
Barracuda, a company known for its email and network security solutions, warns customers that some of their Email Security Gateway (ESG) appliances were breached last week by targeting CVE-2023-2868, a now-patched zero-day vulnerability.
TIC Hosting
April 30, 2023
•[ hack, technology ]
TIC Hosting, a hosting provider in Romania, suffers a data breach affecting 300 customers.
3CX
April 20, 2023
•[ espionage, malware, technology ]
Researchers from Mandiant reveal that the 3CX supply chain attack was caused by another supply chain compromise where suspected North Korean attackers breached the site of stock trading automation company Trading Technologies to push trojanized software builds.
PaperCut
April 19, 2023
•[ ransomware, malware, technology ]
Print management software developer PaperCut warns customers to update their software immediately, as hackers are actively exploiting two flaws, ZDI-CAN-18987 / PO-1216 and ZDI-CAN-19226 / PO-1219, to gain access to vulnerable servers. Later the attacks are attributed to the Cl0p ransomware gang.
Valid Certificadora
April 16, 2023
•[ ransomware, leak, malware ]
Valid Certificadora, a Brazilian firm that issues digital certificates used by both businesses and public entities is added to the CrossLock ransomware leak site.
Cisco
April 18, 2023
•[ espionage, malware, technology ]
The UK National Cyber Security Centre (NCSC), US Cybersecurity and Infrastructure Security Agency (CISA), NSA, FBI, and Cisco warn of Russian state-sponsored APT28 hackers deploying a custom malware named 'Jaguar Tooth' on Cisco IOS routers, exploiting CVE-2017-6742, allowing unauthenticated access to the device.
GDAC
April 9, 2023
•[ financial, hack, technology ]
South Korean cryptocurrency exchange GDAC is the target of attackers, with the platform losing nearly $13M during the attack.
Killer Instinct
April 6, 2023
•[ leak, technology ]
Killer Instinct, a company that trades high-tech modern adaptations of the archaic long-range weapon, discloses a data breach affecting over 800 users.
Affinity
April 13, 2023
•[ leak, technology ]
UK-based photo editing, graphic design and publishing software developer Affinity informs its forum members of a data breach.
Apple
April 7, 2023
•[ hack, malware, technology ]
Apple releases emergency security updates to address two new zero-day vulnerabilities (CVE-2023-28205 and CVE-2023-28206) exploited in attacks to compromise iPhones, Macs, and iPads.
Check Point
April 4, 2023
•[ hack, ddos, technology ]
The web site of Check Point, one of Israel's largest cybersecurity companies, is taken down by Anonymous Sudan.
Evide
March 30, 2023
•[ ransomware, malware, technology ]
Evide, a data management company in Northern Ireland, is hit with a ransomware attack.
Constellation Software
April 3, 2023
•[ ransomware, malware, technology ]
Canadian diversified software company Constellation Software confirmes that some of its systems were breached by threat actors who also stole personal information and business data. The BlackCat ransomware gangs claims responsibility for the attack.
SONDA
March 31, 2023
•[ ransomware, malware, technology ]
The Chilean IT multinational SONDA, which has a presence in 11 countries, is placed on the leaks page of the ransomware threat actor Medusa Locker.
AudienceView
March 28, 2023
•[ hack, technology ]
AudienceView, an online ticketing platform, discloses to have been hit by a cyber attack impacting students at dozens of the biggest universities and colleges in the U.S. and Canada.
Lumen Technologies
March 27, 2023
•[ ransomware, malware, technology ]
Lumen Technologies tells regulators that it had discovered two cybersecurity incidents, including a ransomware attack that has been degrading services for some enterprise customers.
T-Mobile
March 31, 2023
•[ hack, technology ]
T-Mobile discloses the second data breach of 2023 after discovering that attackers had access to the personal information of 836 customers for more than a month, starting late February 2023.
Pluralsight
March 23, 2023
•[ ransomware, hack, technology ]
Pluralsight appears among Clop ransomware gang's latest victims hit in the ongoing GoAnywhere hacking spree.
