Mark Emem reports a settlement in litigation stemming from a Consulting Radiologists Ltd. data breach in February 2024. The incident had been added to LockBit’s leak site in April 2024. A US healthcare firm has agreed to pay out millions of dollars to settle a class action lawsuit filed over a data breach that occurred…
New research has uncovered security vulnerabilities in multiple tunneling protocols that could allow attackers to perform a wide range of attacks. “Internet hosts that accept tunneling packets without verifying the sender’s identity can be hijacked to perform anonymous attacks and provide access to their networks,” Top10VPN said in a study, as part of a collaboration…
The 420.in reports: The Supreme Court recently upheld the Tamil Nadu government’s decision to invoke preventive detention laws against cybercriminals. Justices Sandeep Mehta and Joymalya Bagchi termed the move “a very welcome approach,” highlighting the urgent need to address the growing threat of online financial fraud through stronger, faster legal mechanisms. […] Preventive detention allows…
WVNews reports that personal and protected health information of 462,000 Montanans was involved in a significant data breach experienced by Conduent Business Services from October 2024 to January 2025. The state’s Insurance and Securities Commission wants to know why Blue Cross Blue Shield of Montana (BCBSM) didn’t notify the state sooner. The breach came to……
Zack Whittaker reports: A Russian telecom company that develops technology to allow phone and internet companies to conduct web surveillance and censorship was hacked, had its website defaced, and had data stolen from its servers, TechCrunch has learned. Founded in Russia, Protei makes telecommunications systems for phone and internet providers across dozens of countries, including……
Cybersecurity researchers are warning of a spike in suspicious login scanning activity targeting Palo Alto Networks PAN-OS GlobalProtect gateways, with nearly 24,000 unique IP addresses attempting to access these portals. “This pattern suggests a coordinated effort to probe network defenses and identify exposed or vulnerable systems, potentially as a precursor to targeted exploitation,” threat
A new campaign has been observed impersonating Ukrainian government agencies in phishing attacks to deliver CountLoader, which is then used to drop Amatera Stealer and PureMiner. “The phishing emails contain malicious Scalable Vector Graphics (SVG) files designed to trick recipients into opening harmful attachments,” Fortinet FortiGuard Labs researcher Yurren Wan said in a report shared…
