Flights grounded as Russia’s largest airline Aeroflot hacked and systems ‘destroyed’
Russian prosecutor said it opened a criminal investigation into the cyberattack targeting Aeroflot, the largest airline in Russia.
cybersecurity
Allianz Life says ‘majority’ of customers’ personal data stolen in cyberattack
Exclusive: Allianz Life said the “majority” of its customers and employees had data stolen in the July cyberattack. The company said it has notified the FBI.
Google took a month to shut down Catwatchful, a phone spyware operation hosted on its servers
Google has suspended the Firebase account of Catwatchful following a TechCrunch investigation. The spyware operation was caught using Google’s own servers to host and run its surveillance app, which was stealthily monitoring thousands of people’s phones.
Cybercrime forum Leak Zone publicly exposed its users’ IP addresses
Exclusive: The popular “leaking and cracking” forum left one of its databases exposed to the internet without a password, exposing the IP addresses of its users logging in.
AI slop and fake reports are exhausting some security bug bounties
“We’re getting a lot of stuff that looks like gold, but it’s actually just crap,” said the founder of one security testing firm. AI-generated security vulnerability reports are already having an effect on bug hunting, for better and worse.
Hundreds of organizations breached by SharePoint mass-hacks
One of the hacked organizations reportedly includes the U.S. agency responsible for maintaining the country’s stockpile of nuclear weapons. China-backed hackers have been observed carrying out the hacks targeting SharePoint servers.
Apple alerted Iranians to iPhone spyware attacks, say researchers
Researchers say Apple sent out threat notifications to several Iranians in recent months, saying their iPhones had been hacked. Iran is likely behind the attacks.
UK government wants ransomware victims to report cyberattacks so it can disrupt the hackers
Experts applauded the proposed change, which would require ransomware victims to notify authorities when paying a hacker’s ransom, arguing that this information can help catch cybercriminals and stop their activities.
Google, Microsoft say Chinese hackers are exploiting SharePoint zero-day
The tech giants have evidence that Chinese hackers are exploiting the new bug, but warned “multiple actors” are also hacking into affected SharePoint systems.
Serial spyware founder Scott Zuckerman wants the FTC to unban him from the surveillance industry
The spyware maker was banned from the surveillance industry in 2021, but was caught flouting the ban less than a year later. Now the founder wants the ban lifted altogether.