There could be more than immediately meets the eye with this targeted attack group. [...]

The post-SolarWinds EO could be issued as soon as next week, according to a report. [...]

Vast swathes of companies were likely compromised before patches were applied, so the danger remains. [...]

A former IT contractor is facing jailtime after a retaliatory hack into a company’s network and wiping the majority of its employees’ Microsoft Office 365 accounts. [...]

The arts-and-crafts retailer left 138GB of sensitive information open to the public internet. [...]

Attackers accessed personal and business data from the company’s legacy file-transfer service in a recent data-security incident but core IT systems remained untouched. [...]

The ‘young mastermind’ of the Twitter hack will serve three years in juvenile detention. [...]

The multinational brewing company did not say what type of incident caused a ‘systems outage,’ but it's investigating and working to get networks back online. [...]

At least 10 nation-state-backed groups are using the ProxyLogon exploit chain to compromise email servers, as compromises mount. [...]

The financial cyber-gang is running limited attacks ahead of broader offensives on point-of-sale systems. [...]

Despite an explosion in the sheer amount of stolen data available on the Dark Web, the value of personal information is holding steady, according to the 2021 Dark Web price index from Privacy Affairs. That leaves these thriving dirty data dealers in a familiar predicament — they need to lock …

The cyberattack on SITA, a nearly ubiquitous airline service provider, has compromised frequent-flyer data across many carriers. [...]

Elite Russian forums for cybercriminals have been hacked in a string of breaches, leaving hackers edgy and worried about law enforcement. [...]

A third-party IT provider exposed valuable airline data that experts say could be a goldmine for cybercriminals. [...]

A teenaged ethical hacker discovered a flawed endpoint associated with a health-department website in the state of Bengal, which exposed personally identifiable information related to test results. [...]

Quickbooks malware targets tax data for attackers to sell and use in phishing scams. [...]

The threat actors stole data and used Clop's leaks site to demand money in an extortion scheme, though no ransomware was deployed. [...]

Researcher testing of 30 mobile health apps for clinicians found that all of them had vulnerable APIs. [...]

In a security notice, Yandex said an employee had been providing unauthorized access to users’ email accounts “for personal gain.” [...]

Researchers discovered credentials for the Oldsmar water treatment facility in the massive compilation of data from breaches posted just days before the attack. [...]

CD Projekt Red was hit with a cyberattack (possibly the work of the "Hello Kitty" gang), and the attackers are threatening to release source code for Witcher 3, corporate documents and more. [...]

A threat actor remotely accessed the IT system of the water treatment facility of Oldsmar and raised the levels of sodium hydroxide in the water, an action that was quickly noticed and remediated. [...]

About 3.27 billion stolen account logins have been posted to the RaidForums English-language cybercrime community in a 'COMB' collection. [...]

The personal data of 66,000 users was left wide open on a misconfigured Elasticsearch server, joining a growing list of companies with leaky clouds. [...]

The ShinyHunters hacking group offer a raft of information, from location and contact info to dating preferences and bodily descriptions, as a free download. [...]