NAIC Confirms Data Breach as Hackers Claim 3.1TB Stolen
The National Association of Insurance Commissioners has confirmed it was hit by a cyberattack. The notorious ShinyHunters group claims to…
Security
Cybersecurity, vulnerabilities, threats, and defense
ATF Kills Contract for Ad-Tech Surveillance Tool After Congressional Scrutiny
The Bureau of Alcohol, Tobacco, Firearms and Explosives has pulled the plug on a contract with Penlink that used ad-surveillance…
Linux Foundation Launches Akrites — A Coordinated Vulnerability Response Team for Open Source
The Linux Foundation announced Akrites, a new initiative to coordinate how the open source world handles security vulnerabilities before they…
Nebulock Secures $25M to Build AI-Powered Threat Hunting Platform
Cybersecurity startup Nebulock has raised $25 million in Series A funding, bringing total investment in the Boston-based company to over…
This Week in Security: Russia Hacks Activist Phone With Cellebrite, Five Eyes Warns on AI, macOS Backdoor Targets Analysts
A rundown of this week’s security stories that deserve more attention than they got. Russia used Cellebrite to hack an…
Klue Breach Fallout Widens as Two Dozen Companies Confirm Impact — and the Hackers Get Hacked Themselves
The Klue supply chain attack keeps rippling outward. Roughly two dozen companies have now confirmed their Salesforce instances were compromised…
FBI Warns Russian Hackers Now Steal Signal Backup Recovery Keys
Russian intelligence-linked hackers have escalated their campaign against Signal users. Instead of just trying to hijack accounts, they’re now going…
SharkLoader: new malware deploys Cobalt Strike in StrikeShark campaign hitting governments
Kaspersky has uncovered a new attack campaign they’re calling StrikeShark, built around a previously unknown malware family dubbed SharkLoader. Its…
Fake OpenAI workspaces target cybersecurity employees in ‘Poisoned Tenant’ campaign
Someone is creating OpenAI organizations that impersonate real companies and inviting their employees to join. It’s a clever social engineering…
Polymarket hit by supply-chain attack, customers lose $3 million
Prediction market platform Polymarket will fully reimburse customers who lost an estimated $3 million in a supply-chain attack that compromised…