Okta investigating reports of data breach by Lapsus$ ransomware cybercriminal group (updated)
Identity and authentication services firm Okta is investigating reports that the firm has been breached by the Lapsus$ ransomware cybercriminal group.
Data Breach
Panasonic confirms breach of file server
Panasonic confirms breach of a file server by an unauthorized third party.
Morgan Stanley confirms breach of customer SSNs via an exploit of vendor’s Accellion FTA vulnerability
Morgan Stanley has confirmed a data breach of some customer SSNs and other personal data via one if its vendor’s vulnerable Accellion FTA systems.
Threat actors breach South Korean atomic research institute via VPN vulnerability
Threat actors from suspected North Korea APT group Kimsuky breached a South Korean atomic research institute via a VPN vulnerability.
Alibaba leaks billions of data points via Chinese web crawler
Alibaba’s Chinese online shopping platform Taobao has suffered a data breach of over a billion data points that include usernames and mobile phone numbers.
Personal data on 533 million Facebook users posted online
A hacker has leaked personal data on an estimated 533 million Facebook users, to include phone numbers and Facebook account details. The data was leaked on a publicly accessible hacking forum.
Energy giant Shell latest victim in Accellion FTA cyberattacks
Energy giant Shell was the latest victim in a series of cyberattacks on customers of Accellion’s legacy File Transfer Appliance (FTA) product used to transfer large files.
Microsoft open sources CodeQL queries to scan for Solarwinds-like Solorigate activity
Microsoft has open sourced CodeQL queries used to scan for Solorigate malware activity that matches the SolarWinds supply-chain attack.
T-Mobile security incident exposed customer phone numbers and call records
T-Mobile has disclosed a security incident that customer phone numbers and certain account information were breached.
DHS issues new emergency guidance on SolarWinds Orion Code compromise
The Department of Homeland Security (DHS) has issued new emergency guidance on the SolarWinds Orion Code compromise and supply chain vulnerability.