Randall Case reports: A compromise of an account has led to improper downloads of a large number of crash records, the Texas Department of Transportation announced Friday. On May 12, TxDOT identified unusual activity in its Crash Records Information System (CRIS) and further investigation revealed the activity originated from an account that was compromised and…
NYS Attorney General has been the most active state attorney general in terms of going after entities that don’t secure data properly. The following is from her latest press release: NEW YORK – New York Attorney General Letitia James secured $450,000 from three companies that distribute eufy home security video cameras for failing to secure consumers’…
The government’s Rewards for Justice program has announced a $10 million reward for information on Maxim Alexandrovich Rudometov (Максим Александрович Рудомётов), born in 1999 in the Luhansk region of Ukraine. Rudometov allegedly developed and has sold the infostealer malware known as RedLine. “Rudometov has regularly accessed and managed the technical infrastructure of RedLine , is…
The Hindustan Times reports: The Kerala Police Crime Branch’s move to seize the mobile phone of Aniru Ashokan, a reporter from a Malayalam daily, has triggered a wave of support from local journalists across the state. According to PTI, the Crime Branch’s action came after the journalist reported on the alleged breach of sensitive data…
The nation-state threat actor known as MirrorFace has been observed deploying malware dubbed ROAMINGMOUSE as part of a cyber espionage campaign directed against government agencies and public institutions in Japan and Taiwan. The activity, detected by Trend Micro in March 2025, involved the use of spear-phishing lures to deliver an updated version of a backdoor…
Cybersecurity researchers have disclosed 46 new security flaws in products from three solar inverter vendors, Sungrow, Growatt, and SMA, that could be exploited by a bad actor to seize control of devices or execute code remotely, posing severe risks to electrical grids. The vulnerabilities have been collectively codenamed SUN:DOWN by Forescout Vedere Labs. “The new…
Enterprise-grade Juniper Networks routers have become the target of a custom backdoor as part of a campaign dubbed J-magic. According to the Black Lotus Labs team at Lumen Technologies, the activity is so named for the fact that the backdoor continuously monitors for a “magic packet” sent by the threat actor in TCP traffic. “J-magic…
