Uber provides updates on cybersecurity incident
Uber provided new details regarding a cybersecurity incident that resulted in a data breach of its network systems.
Data Breach
T-Mobile to pay $350 million over 2021 data breach
T-Mobile has agreed to pay $350 million and invest another $150 million in data security improvements to settle litigation over the 2021 data breach that impacted over 76 million T-Mobile customers.
Okta investigating reports of data breach by Lapsus$ ransomware cybercriminal group (updated)
Identity and authentication services firm Okta is investigating reports that the firm has been breached by the Lapsus$ ransomware cybercriminal group.
Panasonic confirms breach of file server
Panasonic confirms breach of a file server by an unauthorized third party.
Morgan Stanley confirms breach of customer SSNs via an exploit of vendor’s Accellion FTA vulnerability
Morgan Stanley has confirmed a data breach of some customer SSNs and other personal data via one if its vendor’s vulnerable Accellion FTA systems.
Threat actors breach South Korean atomic research institute via VPN vulnerability
Threat actors from suspected North Korea APT group Kimsuky breached a South Korean atomic research institute via a VPN vulnerability.
Alibaba leaks billions of data points via Chinese web crawler
Alibaba’s Chinese online shopping platform Taobao has suffered a data breach of over a billion data points that include usernames and mobile phone numbers.
Personal data on 533 million Facebook users posted online
A hacker has leaked personal data on an estimated 533 million Facebook users, to include phone numbers and Facebook account details. The data was leaked on a publicly accessible hacking forum.
Energy giant Shell latest victim in Accellion FTA cyberattacks
Energy giant Shell was the latest victim in a series of cyberattacks on customers of Accellion’s legacy File Transfer Appliance (FTA) product used to transfer large files.
Microsoft open sources CodeQL queries to scan for Solarwinds-like Solorigate activity
Microsoft has open sourced CodeQL queries used to scan for Solorigate malware activity that matches the SolarWinds supply-chain attack.