May 7, 2022

Heroku Forces User Password Resets but Fails to Explain Why Salesforce-owned Heroku is performing a forced password reset on a subset of user accounts in response to last month’s security incident while providing no information as to why they are doing so other than vaguely mentioning it is to further Read more…

FBI says Business Email Compromise is a $43 billion Scam The Federal Bureau of Investigation (FBI) said today that the amount of money lost to business email compromise (BEC) scams continues to grow each year, with a 65% increase in the identified global exposed losses between July 2019 and December Read more…

Hackers Stole Data Undetected from US, European Orgs Since 2019 The Chinese hacking group known as ‘Winnti’ has been stealthily stealing intellectual property assets like patents, copyrights, trademarks, and other corporate data – all while remaining undetected by researchers and targets since 2019. Winnti, also tracked as APT41, is an Read more…

GitHub to Require 2FA from Active Developers by the End of 2023 GitHub announced today that all users who contribute code on its platform (an estimated 83 million developers in total) will be required to enable two-factor authentication (2FA) on their accounts by the end of 2023. Active contributors who will Read more…

Pro-Ukraine Hackers Use Docker Images to DDoS Russian Sites Docker images with a download count of over 150,000 have been used to run distributed denial-of-service (DDoS) attacks against a dozen Russian and Belarusian websites managed by government, military, and news organizations. Behind the incidents are believed to be pro-Ukrainian actors such as hacktivists, likely Read more…

Mitsubishi Electric Faked Safety and Quality Control Tests for Decades Mitsubishi Electric, one of the world’s leading manufacturers of large-scale electrical and HVAC systems has admitted to fraudulently conducting quality assurance tests on its transformers—for decades. Thousands of such improperly tested transformers were then shipped both within Japan and overseas. And it Read more…

New Ransomware Strains Linked to North Korean Govt Hackers Several ransomware strains have been linked to APT38, a North Korean-sponsored hacking group known for its focus on targeting and stealing funds from financial institutions worldwide. They’re also known for deploying destructive malware on their victims’ networks during the last stage of their Read more…

Conti, REvil, LockBit Ransomware Bugs Exploited to Block Encryption Hackers commonly exploit vulnerabilities in corporate networks to gain access, but a researcher has turned the table by finding exploits in the most common ransomware and malware being distributed today. Malware from notorious ransomware operations like Conti, the revived REvil, the Read more…