Security News | TechCrunch

Security bugs in ransomware leak sites helped save six companies from paying hefty ransoms

Zack Whittaker — Thu, 08 Aug 2024 22:20:00 +0000

The vulnerabilities allowed one security researcher to peek inside the leak sites without having to log in.

Home security giant ADT says it was hacked

Zack Whittaker — Thu, 08 Aug 2024 14:33:42 +0000

The home security company says attackers accessed databases containing customer home addresses, email addresses, and phone numbers.

Hackers could spy on cell phone users by abusing 5G baseband flaws, researchers say

Lorenzo Franceschi-Bicchierai — Wed, 07 Aug 2024 15:30:00 +0000

Security researchers found a dozen vulnerabilities in 5G baseband chips found in phones made by Google, OPPO, OnePlus, Motorola, and Samsung.

EQT takes a majority stake in cybersecurity firm Acronis at $3.5B+ valuation

Ingrid Lunden — Wed, 07 Aug 2024 07:26:48 +0000

Cybersecurity remains a white-hot space for investors. In the latest example of that demand, EQT has bought a majority stake in Acronis, a security company that specializes in data protection, cloud and integrated security solutions for managed service providers (which resell services to consumers) and corporate IT teams. The size and value of the stake, […]

UK data watchdog to fine NHS vendor Advanced for security failures prior to LockBit ransomware attack

Zack Whittaker — Tue, 06 Aug 2024 23:01:00 +0000

The ICO issued the provisional fine in "failing to implement appropriate security measures prior to the attack."

Cyberattack knocks Mobile Guardian MDM offline and wipes thousands of student devices

Zack Whittaker — Tue, 06 Aug 2024 15:05:30 +0000

Students that use school devices managed by Mobile Guardian have been unable to access their files for days following a cyberattack.

AWS unveils Mithra to identify and mitigate malicious domains across its massive system

Ron Miller — Mon, 05 Aug 2024 13:00:00 +0000

When a company is the size of Amazon, a lot of bad actors will come after it and its customers, which makes defending the network a monster job. Over the years Amazon has developed a number of strategies, from machine learning and monitoring tools to good old-fashioned phone calling to identify and reduce risks to […]

How the theft of 40M UK voter register records was entirely preventable

Zack Whittaker, Natasha Lomas — Sat, 03 Aug 2024 05:00:00 +0000

A scathing rebuke by the U.K. data protection watchdog reveals what led to the compromise of tens of millions of U.K. voters' information.

TechCrunch Minute: Why did Wiz walk away from $23 billion?

Anthony Ha — Fri, 02 Aug 2024 16:00:00 +0000

As widely reported, Wiz recently said no to a $23 billion acquisition offer from Google. At that price, it would have been Google’s biggest acquisition ever. It’s possible the Google team got cold feet during due diligence, or there may have been concerns that regulators would have challenged an acquisition of this size. But all […]

Pharma giant Cencora is alerting millions about its data breach

Zack Whittaker — Fri, 02 Aug 2024 14:45:00 +0000

The pharma giant won't say how many patients were affected by its February data breach. A count by TechCrunch confirms that over a million people are affected.

Bumble and Hinge allowed stalkers to pinpoint users’ locations down to 2 meters, researchers say

Lorenzo Franceschi-Bicchierai — Wed, 31 Jul 2024 08:00:00 +0000

Badoo, Bumble, Grindr, happn, Hinge and Hily all had the same flaw that could have helped a malicious user identify the near-exact location of another user.

Lineaje raises $20M to help organizations combat software supply chain threats

Kyle Wiggers — Tue, 30 Jul 2024 23:35:51 +0000

The software supply chain faces threats from all sides. A 2024 report by the Ponemon Institute found that over half of organizations have experienced a software supply chain attack, with 54% having experienced one within the past year. Supply chain attacks typically target services from third-party vendors or open source software that make up a […]

It took some serious nerve for Wiz to walk away from Google’s $23B offer

Ron Miller — Tue, 30 Jul 2024 19:19:28 +0000

For one thing, Wiz could have seen Google’s offer as validation that it's better off staying independent.

HealthEquity data breach affects 4.3M people

Zack Whittaker — Tue, 30 Jul 2024 14:40:15 +0000

HealthEquity said the March data breach included personal information and protected health data on millions of people.

How to opt out of facial recognition at airports (if you’re American)

Zack Whittaker — Mon, 29 Jul 2024 17:30:00 +0000

U.S. airports are rolling out facial recognition to scan travelers' faces before boarding their flights. Americans, at least, can opt out.

US border agents must get warrant before cell phone searches, federal court rules

Zack Whittaker — Mon, 29 Jul 2024 11:00:49 +0000

Critics have long argued that wararantless device searches at the U.S. border are unconstitutional and violate the Fourth Amendment.

Apple reports iCloud Private Relay global outages for some users

Jagmeet Singh — Fri, 26 Jul 2024 19:55:55 +0000

iCloud Private Relay has not been working for some Apple users across major markets, including the U.S., Europe, India and Japan.

ZeroTier raises $13.5M to help avert CrowdStrike-like network problems

Mike Butcher — Fri, 26 Jul 2024 11:26:31 +0000

With the CrowdStrike update continuing to cause havoc across the planet, a startup has raised $13.5 million to at least improve some level of security for the kinds of devices that have been affected. California-based ZeroTier raised the Series A in a funding round led by Battery Ventures. While legacy companies like Cisco or Palo […]

Hacked, leaked, exposed: Why you should never use stalkerware apps

Lorenzo Franceschi-Bicchierai — Thu, 25 Jul 2024 14:46:51 +0000

Using stalkerware is creepy, unethical, potentially illegal, and puts your data and that of your loved ones in danger.

Data breach exposes US spyware maker behind Windows, Mac, Android and Chromebook malware

Zack Whittaker — Thu, 25 Jul 2024 13:00:57 +0000

Exclusive: The Minnesota-based spyware maker Spytech snooped on thousands of devices before it was hacked earlier this year.