The Information Highway

The Information Highway

Acuity confirms hackers stole non-sensitive govt data from GitHub repos

data-theft

Acuity, a federal contractor that works with U.S. government agencies, has confirmed that hackers breached its GitHub repositories and stole documents containing old and non-sensitive data.

Continue reading
  181 Hits

New executive order bans mass sale of personal data to China, Russia

Joe_Biden

U.S. President Joe Biden has signed an executive order that aims to ban the bulk sale and transfer of Americans' private data to "countries of concern" such as China, Russia, Iran, North Korea, Cuba, and Venezuela.

Continue reading
  225 Hits

Microsoft expands free logging capabilities after May breach

microsoft

Microsoft has expanded free logging capabilities for all Purview Audit standard customers, including U.S. federal agencies, six months after disclosing that Chinese hackers stole U.S. government emails undetected in an Exchange Online breach between May and June 2023.


Continue reading
  320 Hits

CISA urges tech manufacturers to stop using default passwords

0_CISA

Today, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged technology manufacturers to stop providing software and devices with default passwords. 

Continue reading
  390 Hits

Hackers breach US water facility via exposed Unitronics PLCs

Water_treatment_US

CISA (Cybersecurity & Infrastructure Security Agency) is warning that threat actors breached a U.S. water facility by hacking into Unitronics programmable logic controllers (PLCs) exposed online. 

Continue reading
  422 Hits

Ransomware gang files SEC complaint over victim’s undisclosed breach

robot-cat-datacenter

The ALPHV/BlackCat ransomware operation has taken extortion to a new level by filing a U.S. Securities and Exchange Commission complaint against one of their alleged victims for not complying with the four-day rule to disclose a cyberattack. 

Continue reading
  465 Hits

CISA shares vulnerabilities, misconfigs used by ransomware gangs

CISA

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has unveiled additional details regarding misconfigurations and security vulnerabilities exploited by ransomware gangs, aiming to help critical infrastructure organizations thwart their attacks. 

Continue reading
  891 Hits

Microsoft breach led to theft of 60,000 US State Dept emails

Hacker_world_map

Chinese hackers stole tens of thousands of emails from U.S. State Department accounts after breaching Microsoft's cloud-based Exchange email platform in May. 

Continue reading
  674 Hits

National Student Clearinghouse data breach impacts 890 schools

Hacker-books

U.S. educational nonprofit National Student Clearinghouse has disclosed a data breach affecting 890 schools using its services across the United States. 

Continue reading
  562 Hits

SEC now requires companies to disclose cyberattacks in 4 days

USA_SEC

 The U.S. Securities and Exchange Commission has adopted new rules requiring publicly traded companies to disclose cyberattacks within four business days after determining they're material incidents.

Continue reading
  560 Hits

Microsoft: Chinese hackers breached US govt Exchange email accounts

man-in-hood-typing

A Chinese hacking group has breached the email accounts of more than two dozen organizations worldwide, including U.S. and Western European government agencies, according to Microsoft. 

Continue reading
  725 Hits

CISA: LockBit ransomware extorted $91 million in 1,700 U.S. attacks

LockBi_20230615-213603_1

 U.S. and international cybersecurity authorities said in a joint LockBit ransomware advisory that the gang successfully extorted roughly $91 million following approximately 1,700 attacks against U.S. organizations since 2020.

Continue reading
  669 Hits