U.S. securities regulators have opened a probe into the MOVEit mass-hack that has exposed the personal data of at least 64 million people, according to the company that made the affected software. In a regulatory filing this week, Progress Software confirmed it had received a subpoena from the U.S. Securities and Exchange Commission (SEC) seeking…
Microsoft says Chinese state-backed hackers are exploiting a “critical”-rated zero-day vulnerability in Atlassian software to break into customer systems. The technology giant’s threat intelligence team said in a post on X, formerly Twitter, that it has observed a nation-state threat actor it calls Storm-0062 exploiting a recently disclosed critical flaw in Atlassian Confluence Data Center…
Genetic testing company 23andMe has been investigating a security incident after hackers advertised a trove of alleged stolen user data on a hacking forum last week. But the alleged stolen data may have been circulating for much longer than first known. TechCrunch has also found that some of the advertised stolen data matches known 23andMe…
Arctic Wolf, a cybersecurity company that’s raised hundreds of millions of dollars in debt and equity, today announced that it plans to acquire Revelstoke, a company developing a security orchestration, automation and response (SOAR) platform, for an undisclosed amount. In a blog post, Arctic Wolf chief product officer Dan Schiappa said that the acquisition would…
Days after user personal surfaced online, the genetic testing company 23andMe said it’s requiring all users to reset their passwords “out of caution.” On Friday, 23andMe confirmed that hackers had obtained some users’ data, but stopped short of calling the incident a data breach. The company said that the hackers had accessed “certain accounts” of…
Twistlock was founded in 2015 with the idea of securing the nascent cloud native computing environment, a notion you could argue was well ahead of its time. When the company was acquired by Palo Alto Networks in 2019 for $410 million, it turned out that wasn’t the end of the story. The founding group got…
Google has announced that passkeys, touted by the tech giant as the “beginning of the end” for passwords, are becoming the default sign-in method for all users. Passkeys are a phishing-resistant alternative to passwords that allow users to sign into accounts using the same biometrics or PINs they use to unlock their devices, or with…
Several groups of hacktivists have targeted Israeli websites with floods of malicious traffic following a surprise land, sea and air attack launched against Israel by militant group Hamas on Saturday, which prompted Israel to declare war and retaliate. Israeli newspaper The Jerusalem Post reported Monday that since Saturday morning its website was down “due to…
U.K.-based Lyca Mobile has confirmed intruders accessed customers’ personal information after breaking into its systems. Lyca Mobile, the London-headquartered mobile virtual network operator (MVNO) that piggybacks off network operator EE’s infrastructure, said earlier this week that it had been the target of a cyberattack which caused widespread disruption for millions of its customers, except those…
MGM Resorts has confirmed hackers stole an unspecified amount of customers’ personal information during a September cyberattack that will cost the hotel and casino giant an estimated $100 million. The hotel and casino giant first disclosed it had been targeted by a large-scale cyberattack on September 11. The cyberattack, which was days later claimed by…