Security News | TechCrunch

Hacker claims to have 30 million customer records from Australian ticket seller giant TEG

Lorenzo Franceschi-Bicchierai — Fri, 21 Jun 2024 20:00:00 +0000

A hacker is advertising customer data allegedly stolen from the Australia-based live events and ticketing company TEG on a well-known hacking forum. On Thursday, a hacker put up for sale the alleged stolen data from TEG, claiming to have information of 30 million users, including the full name, gender, date of birth, username, hashed passwords […]

US government sanctions Kaspersky executives

Lorenzo Franceschi-Bicchierai — Fri, 21 Jun 2024 15:55:04 +0000

The U.S. government announced sanctions against 12 executives and senior leaders of the Russia-based cybersecurity giant Kaspersky. In a press release, the Department of the Treasury’s Office of Foreign Assets Control (OFAC) said it designated the 12 company executives to protect internet users against malicious cyber threats. “Today’s action against the leadership of Kaspersky Lab […]

Change Healthcare confirms ransomware hackers stole medical records on a ‘substantial proportion’ of Americans

Zack Whittaker — Fri, 21 Jun 2024 13:30:10 +0000

The February ransomware attack on UHG-owned Change Healthcare stands as one of the largest-ever known digital thefts of U.S. medical records.

US bans sale of Kaspersky software citing security risk from Russia

Lorenzo Franceschi-Bicchierai — Thu, 20 Jun 2024 20:15:00 +0000

U.S. officials imposed the “first of its kind” ban arguing that Kaspersky threatens U.S. national security because of its links to Russia.

EU member states remain divided on controversial CSAM-scanning plan — but for how long?

Natasha Lomas — Thu, 20 Jun 2024 16:28:53 +0000

Opponents also contend the EU plan will fail at its claimed aim of protecting children, suggesting law enforcement will instead be swamped by millions of false positives.

US car dealerships face ongoing outage after CDK cyberattacks

Zack Whittaker — Thu, 20 Jun 2024 15:29:45 +0000

CDK said it "does not have an estimated time frame" for recovery, as car dealerships and auto shops face continued outages.

Semperis, a specialist in Active Directory security now worth more than $1B, raises $125M

Ingrid Lunden — Thu, 20 Jun 2024 12:33:06 +0000

Active Directory, the Microsoft directory service for connecting users with network resources, is used by more than 90% of all Fortune 1000 companies and many more besides. So it’s no surprise that it’s a giant target for malicious hackers. That also means a lot of attention for the security companies that are building tools to […]

PQShield secures $37M more for ‘quantum resistant’ cryptography

Ingrid Lunden — Thu, 20 Jun 2024 07:22:15 +0000

Malicious hacking is getting increasingly sophisticated, and that’s leading to a very clear trend in security technology. To keep people and organizations safe, security also has to continue improving. Security startup PQShield has gotten an early start on that concept with a focus on “post-quantum” cryptography: Software and hardware solutions that, in theory, are future-proofed, […]

Security bug allows anyone to spoof Microsoft employee emails

Lorenzo Franceschi-Bicchierai — Tue, 18 Jun 2024 17:46:52 +0000

A researcher has found a bug that allows anyone to impersonate Microsoft corporate email accounts, making phishing attempts look credible and more likely to trick their targets. As of this writing, the bug has not been patched. To demonstrate the bug, the researcher sent an email to TechCrunch that looked like it was sent from […]

UK national accused of hacking dozens of US companies arrested in Spain

Zack Whittaker — Tue, 18 Jun 2024 14:10:16 +0000

TechCrunch has learned that the arrested hacker is the alleged leader of the group that masterminded the Twilio hacks in 2022.

Stop playing games with online security, Signal president warns EU lawmakers

Natasha Lomas — Mon, 17 Jun 2024 12:56:23 +0000

A controversial European Union legislative proposal to scan the private messages of citizens in a bid to detect child sexual abuse material (CSAM) is a risk to the future of web security, Meredith Whittaker warned in a public blog post Monday. She’s the president of the not-for-profit foundation behind the end-to-end encrypted (E2EE) messaging app […]

Privacy app maker Proton transitions to nonprofit foundation structure

Paul Sawers — Mon, 17 Jun 2024 11:34:06 +0000

The newly setup Proton Foundation will serve as the main shareholder to the existing corporate entity that is Proton AG, which will continue as a for-profit company under the auspices of the Foundation.

Tern AI wants to reduce reliance on GPS with low-cost navigation alternative

Rebecca Bellan — Wed, 12 Jun 2024 18:27:42 +0000

The most critical systems of our modern world rely on GPS, from aviation and road networks to emergency and disaster response, from precision farming and power grids to weather forecasting and military defense. That dependence is becoming a problem. “We’ve got an increased threat from foreign adversaries who have shown capabilities to jam, to destroy, […]

At last, Apple’s Messages app will support RCS and scheduling texts

Sarah Perez — Tue, 11 Jun 2024 17:57:00 +0000

These messaging features, announced at WWDC 2024, will have a significant impact on how people communicate every day.

The mystery of an alleged data broker’s data breach

Lorenzo Franceschi-Bicchierai — Tue, 11 Jun 2024 14:17:58 +0000

Since April, a hacker with a history of selling stolen data has claimed a data breach of billions of records — impacting at least 300 million people — from a U.S. data broker, which would make it one of the largest alleged data breaches of the year. The data, seen by TechCrunch, on its own appears […]

Mandiant says hackers stole a ‘significant volume of data’ from Snowflake customers

Zack Whittaker — Mon, 10 Jun 2024 16:05:07 +0000

The security firm said the attacks targeting Snowflake customers is "ongoing," suggesting the number of affected companies may rise.

UK and Canada privacy watchdogs investigating 23andMe data breach

Lorenzo Franceschi-Bicchierai — Mon, 10 Jun 2024 15:11:14 +0000

Privacy watchdogs in the U.K. and Canada have launched a joint investigation into the data breach at 23andMe last year. On Monday, the U.K,’s Information Commissioner’s Office (ICO) and the Office of the Privacy Commissioner of Canada (OPC) announced their investigation into the genetic testing company, saying the organizations will leverage “the combined resources and […]

What Snowflake isn’t saying about its customer data breaches

Zack Whittaker — Sat, 08 Jun 2024 01:40:55 +0000

As another Snowflake customer confirms a data breach, the cloud data company says its position "remains unchanged."

Bangladeshi police agents accused of selling citizens’ personal information on Telegram

Lorenzo Franceschi-Bicchierai, Zulkarnain Saer Khan — Fri, 07 Jun 2024 02:00:00 +0000

Two senior police officials in Bangladesh are accused of collecting and selling citizens' personal information to criminals on Telegram.

Hundreds of Snowflake customer passwords found online are linked to info-stealing malware

Zack Whittaker — Wed, 05 Jun 2024 23:00:31 +0000

Snowflake is the latest company in a string of high-profile security incidents and sizable data breaches caused by the lack of MFA.