Authorities in California have confirmed that a cybersecurity incident involving the Department of Finance is being investigated after a cybercrime group claimed to have stolen tens of gigabytes of files from its systems.
New Python-Based Backdoor Targeting VMware ESXi Servers
Security researchers with Juniper Networks’ Threat Labs warn of a new Python-based backdoor targeting VMware ESXi virtualization servers.
Twitter Responds to Recent Data Leak Reports
Twitter has responded to recent data leak reports, confirming that the exposed information is the same as the one that was making the rounds earlier this year.
Uber Data Leaked Following Breach at Third-Party Vendor
Information apparently belonging to ride-hailing giant Uber has been leaked online and the source of the data is likely a third-party IT vendor.
Over the weekend, a user with the moniker ‘UberLeak’ made public on a hacker forum a 600 Mb archive file allegedly containing 20 million records of data coming from Uber systems.
Fortinet Ships Emergency Patch for Already-Exploited VPN Flaw
Fortinet on Monday issued an emergency patch to cover a severe vulnerability in its FortiOS SSL-VPN product, warning that hackers have already exploited the flaw in the wild.
Proofpoint Buys Deception Tech Startup Illusive Networks
Enterprise security vendor Proofpoint on Monday announced plans to acquire Illusive Networks, a startup that helped pioneer deception technology to help detect data breaches. Financial terms of the planned acquisition were not disclosed.
US Announces Charges, Arrests Over Multi-Million-Dollar Cybercrime Schemes
The US Department of Justice has announced the arrest of four individuals for their alleged roles in a fraud scheme targeting businesses, banks, and individuals.
The Potential and Pitfalls of a Federal Privacy Law
Congress is considering a US federal privacy law. It’s been brewing for the last ten years and is getting closer. On July 20, 2022, the House Energy and Commerce Committee overwhelmingly voted (53-2) to advance the American Data Privacy and Protection Act (ADPPA), H.R. 8152, to the full House of Representatives. But there are still problems to navigate.
Users Warned of New Aerst, ScareCrow, and Vohuk Ransomware Families
Fortinet’s security researchers have shared information on three new ransomware families named Aerst, ScareCrow, and Vohuk.
Python, JavaScript Developers Targeted With Fake Packages Delivering Ransomware
Phylum security researchers warn of a new software supply chain attack relying on typosquatting to target Python and JavaScript developers.












