Author: Cybersecure California

Jan 20, 2024NewsroomZero Day / Cyber Espionage An advanced China-nexus cyber espionage group previously linked to the exploitation of security flaws in VMware and Fortinet appliances has been linked to the abuse of a critical vulnerability in VMware vCenter Server as a zero-day since late 2021. “UNC3886 has a track record of utilizing zero-day vulnerabilities…

The top U.S. cyber watchdog agency issued an emergency directive Friday, mandating that all federal agencies protect themselves against a dangerous vulnerability in a popular software program. The watchdog said it is conducting investigations into whether China had used the program to spy on the agencies.The program used by the agencies is called Ivanti Connect…

Personal data belonging to 35.5 million customers of popular apparel brands was exposed in a December data breach, though the exact nature of the stolen data remains unclear.The befelled company, VF Corporation, is a 125-year-old, $6 billion dollar clothing conglomerate based out of Denver. Popular brands under its umbrella include Dickies, JanSport, North Face, Supreme,…

Carnegie Mellon University was hit by a cyber attack in August 2023.According to the university, 7.343 people may have had their personal information exposed.The university said there is no evidence of the information being misused.CMU sent notices to those impacted last week.Channel 11 was given the following statement:“On August 25, 2023, the Information Security Office…

In recent years, the skilled nursing sector has faced an escalating threat from cybercriminals, posing significant risks to the operations of nursing homes. Due to the rapid rise in use of technology since the COVID-19 pandemic, experts in the sector have noticed an uptick in cybercrime and insurance underwriters are demanding nursing homes protect themselves…

PITTSBURGH — Carnegie Mellon University was hit by a cyber attack in August 2023.According to the university, 7.343 people may have had their personal information exposed.The university said there is no evidence of the information being misused.CMU sent notices to those impacted last week.Channel 11 was given the following statement: “On August 25, 2023, the…

Microsoft revealed Friday that some of its corporate email accounts were hacked by a Russian-backed group.The tech company said in a blog post that its security team detected the attack on Jan. 12 and quickly identified the group responsible: Midnight Blizzard, “the Russian state-sponsored actor also known as Nobelium.”In this April 27, 2021, file photo,…

Hackers Working for Lucrative Cyber Attack Industry See Law Firms as Rich Targets 1.19.2024 By Paula L. Green With their vast trove of intellectual property and business intelligence, law firms are rich targets for hackers working for the lucrative cyber attack industry. “Law firms are not seen as the most tech-savvy industry and there may…

The tech giant says that emails were stolen from ‘members of our senior leadership team and employees in our cybersecurity, legal, and other functions.’ Microsoft disclosed Friday that a Russia-aligned threat actor was able to steal emails from members of its senior leadership team as well as from employees on its cybersecurity and legal teams.…

VF Corp, the parent company of popular sneaker brand Vans, has disclosed a significant data breach impacting approximately 35.5 million consumers, according to a recent Reuters report. The breach, which stemmed from a cyber attack detected on Dec. 13, led to disruptions in the company’s e-commerce operations and affected global customer orders. In a recent…