cybersecurity

The vulnerabilities allowed one security researcher to peek inside the leak sites without having to log in.

Security bugs in ransomware leak sites helped save six companies from paying hefty ransoms

The home security company says attackers accessed databases containing customer home addresses, email addresses, and phone numbers.

Home security giant ADT says it was hacked

Security researchers found a dozen vulnerabilities in 5G baseband chips found in phones made by Google, OPPO, OnePlus, Motorola, and Samsung.

Hackers could spy on cell phone users by abusing 5G baseband flaws, researchers say

The ICO issued the provisional fine in “failing to implement appropriate security measures prior to the attack.”

UK data watchdog to fine NHS vendor Advanced for security failures prior to LockBit ransomware attack

Students that use school devices managed by Mobile Guardian have been unable to access their files for days following a cyberattack.

Cyberattack knocks Mobile Guardian MDM offline and wipes thousands of student devices

Featured Article

How the theft of 40M UK voter register records was entirely preventable

A scathing rebuke by the U.K. data protection watchdog reveals what led to the compromise of tens of millions of U.K. voters’ information.

How the theft of 40M UK voter register records was entirely preventable

The pharma giant won’t say how many patients were affected by its February data breach. A count by TechCrunch confirms that over a million people are affected.

Pharma giant Cencora is alerting millions about its data breach

Badoo, Bumble, Grindr, happn, Hinge and Hily all had the same flaw that could have helped a malicious user identify the near-exact location of another user.

Bumble and Hinge allowed stalkers to pinpoint users’ locations down to 2 meters, researchers say

The software supply chain faces threats from all sides. A 2024 report by the Ponemon Institute found that over half of organizations have experienced a software supply chain attack, with…

Lineaje raises $20M to help organizations combat software supply chain threats

HealthEquity said the March data breach included personal information and protected health data on millions of people.

HealthEquity data breach affects 4.3M people

Critics have long argued that wararantless device searches at the U.S. border are unconstitutional and violate the Fourth Amendment.

US border agents must get warrant before cell phone searches, federal court rules

Featured Article

Hacked, leaked, exposed: Why you should never use stalkerware apps

Using stalkerware is creepy, unethical, potentially illegal, and puts your data and that of your loved ones in danger.

Hacked, leaked, exposed: Why you should never use stalkerware apps

Featured Article

Data breach exposes US spyware maker behind Windows, Mac, Android and Chromebook malware

Exclusive: The Minnesota-based spyware maker Spytech snooped on thousands of devices before it was hacked earlier this year.

Data breach exposes US spyware maker behind Windows, Mac, Android and Chromebook malware

Several people who received the CrowdStrike offer found that the gift card didn’t work, while others got an error saying the voucher had been canceled.

CrowdStrike offers a $10 apology gift card to say sorry for outage

McGowan said she founded the company due to the rapid rise in cyber attacks these past years and the increased fears people have about cybersecurity.

After a 30-year career in IT, Protexxa founder raises $7.2M for cybersecurity employee hygiene

Cybersecurity firm Dragos and Ukrainian authorities found a cyberattack targeting critical infrastructure in Lviv.

Hackers shut down heating in Ukrainian city with malware, researchers say

CISA confirmed the CrowdStrike outage was not caused by a cyberattack, but urged caution as malicious hackers exploit the situation.

US cyber agency CISA says malicious hackers are ‘taking advantage’ of CrowdStrike outage

The global outage is a perfect reminder how much of the world relies on technological infrastructure.

These startups are trying to prevent another CrowdStrike-like outage, according to VCs

Here’s everything you need to know so far about the global outages caused by CrowdStrike’s buggy software update.

What we know about CrowdStrike’s update fail that’s causing global outages and travel chaos

Venture capital giant a16z fixed a security vulnerability in one of the firm’s websites after being warned by a security researcher.

Researcher finds flaw in a16z website that exposed some company data

Featured Article

USPS shared customer postal addresses with Meta, LinkedIn and Snap

The U.S. Postal Service confirmed it took action to “remediate” the data sharing following a TechCrunch investigation.

USPS shared customer postal addresses with Meta, LinkedIn and Snap

A security researcher found that some traffic lights controllers are exposed on the internet and could be manipulated.

Hackers could create traffic jams thanks to flaw in traffic light controller, researcher says

Featured Article

The biggest data breaches in 2024: 1 billion stolen records and rising

Some of the largest, most damaging breaches of 2024 already account for over a billion stolen records.

The biggest data breaches in 2024: 1 billion stolen records and rising

The Russia-based security software maker said its U.S. business is “no longer viable” following a U.S. Commerce Department sales ban.

Kaspersky to shut down US operations, lay off employees after US government ban

Featured Article

What the AT&T phone records data breach means for you

The giant U.S. telco lost the information of around 110 million customers. Here’s what you need to know.

What the AT&T phone records data breach means for you

Featured Article

AT&T says criminals stole phone records of ‘nearly all’ customers in new data breach

The stolen data includes 110 million AT&T customer phone numbers, calling and text records, and some location-related data.

AT&T says criminals stole phone records of ‘nearly all’ customers in new data breach

Featured Article

Data breach exposes millions of mSpy spyware customers

A huge batch of mSpy customer service emails dating back to 2014 were stolen in a May data breach.

Data breach exposes millions of mSpy spyware customers

The capital will be used to expand in Europe, the U.S. and Asia.

Exein raised $15M Series B to stop robotic arms going haywire

Evolve has confirmed that the personal data of at least 7.6 million people was accessed during LockBit’s ransomware attack.

Evolve Bank says ransomware gang stole personal data on millions of customers

Roll20 said that on June 29 it had detected that a “bad actor” gained access to an account on the company’s administrative website for one hour.

Roll20, an online tabletop role-playing game platform, discloses data breach