Neiman Marcus data breach impacts 4.6 million customers
American luxury retailer Neiman Marcus Group (NMG) has just disclosed a major data breach impacting approximately 4.6 million customers. The breach occurred sometime in May 2020 after "an unauthorized party" obtained the personal information of some Neiman Marcus customers from their online accounts. Neiman Marcus is working with law enforcement agencies and has selected cybersecurity company Mandiant to assist with the investigation. READ MORE...
JVCKenwood hit by Conti ransomware claiming theft of 1.5TB data
JVCKenwood has suffered a Conti ransomware attack where the threat actors claim to have stolen 1.7 TB of data and are demanding a $7 million ransom. JVCKenwood is a multinational electronics company based out of Japan that employs 16,956 people and has a 2021 revenue of $2.45 billion. The company is known for its brands JVC, Kenwood, and Victor, which manufacture car and home audio equipment, healthcare and radio equipment, professional and in-vehicle cameras, and portable power stations. READ MORE...
GhostEmperor hackers use new Windows 10 rootkit in attacks
Chinese-speaking cyberspies have targeted Southeast Asian governmental entities and telecommunication companies for more than a year, backdooring systems running the latest Windows 10 versions with a newly discovered rootkit. The hacking group, dubbed GhostEmperor by Kaspersky researchers who spotted it, use the Demodex rootkit, which acts as a backdoor to maintain persistence on compromised servers. READ MORE...
New APT ChamelGang Targets Russian Energy, Aviation Orgs
A new APT group has emerged that's specifically targeting the fuel and energy complex and aviation industry in Russia, exploiting known vulnerabilities like Microsoft Exchange Server's ProxyShell and leveraging both new and existing malware to compromise networks. Researchers at security firm Positive Technologies have been tracking the group, dubbed ChamelGang for its chameleon-like capabilities, since March. READ MORE...
Innovative Proxy Phantom ATO Fraud Ring Haunts eCommerce Accounts
A sophisticated fraud ring, dubbed Proxy Phantom, has pushed the boundaries of credential-stuffing attacks with a dynamic account takeover (ATO) technique that was flooding eCommerce merchants in the third quarter. Specifically, Proxy Phantom specializes in using a massive cluster of connected, rotating IP addresses to automatically try more than 1.5 million stolen username and password combinations against various log-in screens. READ MORE...
Scammers Capitalize on Release of New Bond Movie
The long-awaited release of the new James Bond movie is being exploited by cyber-criminals, according to cybersecurity company Kaspersky. No Time to Die is actor Daniel Craig's fifth and final fling with the internationally renowned 007 spy character created by author Ian Fleming. Bond first entered the public consciousness in 1952 with the publication of Fleming's novel Casino Royale. READ MORE...
QNAP fixes bug that let attackers run malicious commands remotely
Taiwan-based network-attached storage (NAS) maker QNAP has released security patches for multiple vulnerabilities that could allow attackers to inject and execute malicious code and commands remotely on vulnerable NAS devices. Three of the security flaws fixed today by QNAP are high severity stored cross-site scripting (XSS) vulnerabilities that affect devices running unpatched Photo Station software. READ MORE...
Telegram-powered bots circumvent 2FA
Two-factor authentication is a great way to protect your online accounts, and we always recommend you turn it on. But where users put up walls, you can be sure there are cybercriminals trying to break them down. Yesterday, security intelligence firm, Intel 147, revealed it had noticed an uptick of activity in threat actors providing access to services in Telegram that circumvent two-factor authentication (2FA) methods. READ MORE...
- ...in 1880, John Philip Sousa becomes leader of the United States Marine Corps Band.
- ...in 1908, Ford introduces the Model T automobile at a price of $825 -- $22,000 in 2018 dollars.
- ...in 1962, Johnny Carson debuts as regular host of NBC's "Tonight" show.
- ...in 1989, actress Brie Larson ("Room", "Captain Marvel") is born in Sacramento, CA.
