Tag: cybercriminal
-
The Register: Cybercriminals pwn 850k+ Americans healthcare data
Source URL: https://www.theregister.com/2025/09/18/850k_americans_affected_by_medical/ Source: The Register Title: Cybercriminals pwn 850k+ Americans healthcare data Feedly Summary: Three US medical centers fess up to serious breaches Cybercriminals broke in and stole nearly a million Americans’ data in the space of a week, after three digital burglaries at healthcare providers.… AI Summary and Description: Yes Summary: The text…
-
The Register: Microsoft blocks bait for ‘fastest-growing’ 365 phish kit, seizes 338 domains
Source URL: https://www.theregister.com/2025/09/16/microsoft_cloudflare_shut_down_raccoono365/ Source: The Register Title: Microsoft blocks bait for ‘fastest-growing’ 365 phish kit, seizes 338 domains Feedly Summary: Redmond names alleged ringleader, claims 5K+ creds stolen and $100k pocketed Microsoft has seized 338 websites associated with RaccoonO365 and identified the leader of the phishing service – Joshua Ogundipe – as part of a…
-
Schneier on Security: A Cyberattack Victim Notification Framework
Source URL: https://www.schneier.com/blog/archives/2025/09/a-cyberattack-victim-notification-framework.html Source: Schneier on Security Title: A Cyberattack Victim Notification Framework Feedly Summary: Interesting analysis: When cyber incidents occur, victims should be notified in a timely manner so they have the opportunity to assess and remediate any harm. However, providing notifications has proven a challenge across industry. When making notifications, companies often do…
-
The Register: Hijacker helper VoidProxy boosts Google, Microsoft accounts on demand
Source URL: https://www.theregister.com/2025/09/11/voidproxy_phishing_service/ Source: The Register Title: Hijacker helper VoidProxy boosts Google, Microsoft accounts on demand Feedly Summary: Okta uncovers new phishing-as-a-service operation with ‘multiple entities’ falling victim Multiple attackers using a new phishing service dubbed VoidProxy to target organizations’ Microsoft and Google accounts have successfully stolen users’ credentials, multi-factor authentication codes, and session tokens…
-
Krebs on Security: Bulletproof Host Stark Industries Evades EU Sanctions
Source URL: https://krebsonsecurity.com/2025/09/bulletproof-host-stark-industries-evades-eu-sanctions/ Source: Krebs on Security Title: Bulletproof Host Stark Industries Evades EU Sanctions Feedly Summary: In May 2025, the European Union levied financial sanctions on the owners of Stark Industries Solutions Ltd., a bulletproof hosting provider that materialized two weeks before Russia invaded Ukraine and quickly became a top source of Kremlin-linked cyberattacks and…
-
The Register: More packages poisoned in npm attack, but would-be crypto thieves left pocket change
Source URL: https://www.theregister.com/2025/09/09/npm_supply_chain_attack/ Source: The Register Title: More packages poisoned in npm attack, but would-be crypto thieves left pocket change Feedly Summary: Miscreants cost victims time rather than money During the two-hour window on Monday in which hijacked npm versions were available for download, malware-laced packages reached one in 10 cloud environments, according to Wiz…