Millions of people outside the IT industry are learning what CrowdStrike is today, and that's a real bad thing. Meanwhile, Microsoft is also catching blame for global network outages, and between the two, it's unclear as of Friday morning just who caused what. After cybersecurity firm CrowdStrike shipped an update to its Falcon Sensor software that protects mission critical systems, Blue Screens of Death (BSODs) started taking down Windows-based systems. READ MORE...
Australian digital prescription services provider MediSecure has confirmed that the personal and health information of 12.9 million individuals was stolen in an April 2024 ransomware attack. The incident, which came to light in May, involved a database server containing the sensitive information of individuals who received services from MediSecure between March 2019 and November 2023. READ MORE...
At the end of the second quarter of 2024, the number of US data breach victims has increased by more than 1,000% over the entire previous year, according to new analysis of publicly reported data breaches in the country. The analysis, conducted by Identity Theft Resource Center (ITRC), determined that the increase in the number of victims in the second quarter of the year was due to the impact of a small number of very large breaches. READ MORE...
Indian crypto exchange WazirX has revealed it lost virtual assets valued at over $230 million after a cyber attack that has since been linked to North Korea. According to a late Thursday WazirX Xeet, the attack targeted one of its multi-signature wallets - digi-cash lockers that are designed to offer superior security by requiring multiple private keys to authorize a transaction. WazirX's transaction verification process requires approval by multiple parties. READ MORE...
When ransomware targeted the city of Dallas, Texas last year, it took down city services, the municipal water utility's ability to bill and read meters, and emergency services. The city required more than a month to bring all its systems back online. Dallas is not alone. In 2023, two-thirds of critical infrastructure operators (67%) in the oil, energy, and utility sectors suffered a ransomware attack, compared to 59% of all industries, according to a survey by Sophos. READ MORE...
SolarWinds this week announced security updates for Access Rights Manager to address 13 vulnerabilities, including eight critical-severity bugs. Six of the critical flaws - CVE-2024-23466, CVE-2024-23467, CVE-2024-23469, CVE-2024-23470, CVE-2024-23471, CVE-2024-28074 - could be exploited for remote code execution, the company warns. The remaining two critical-severity issues are path traversal bugs that could allow attackers to read and delete arbitrary files. READ MORE...