Allianz Life says ‘majority’ of customers’ personal data stolen in cyberattack
Exclusive: Allianz Life said the “majority” of its customers and employees had data stolen in the July cyberattack. The company said it has notified the FBI.
Google took a month to shut down Catwatchful, a phone spyware operation hosted on its servers
Google has suspended the Firebase account of Catwatchful following a TechCrunch investigation. The spyware operation was caught using Google’s own servers to host and run its surveillance app, which was stealthily monitoring thousands of people’s phones.
Cybercrime forum Leak Zone publicly exposed its users’ IP addresses
Exclusive: The popular “leaking and cracking” forum left one of its databases exposed to the internet without a password, exposing the IP addresses of its users logging in.
European authorities arrest alleged admin of notorious Russian crime forum XSS
French authorities say they wiretapped a server used by the administrator to access their private messages, which revealed activities relating to cybercrime and ransomware attacks.
Hundreds of organizations breached by SharePoint mass-hacks
One of the hacked organizations reportedly includes the U.S. agency responsible for maintaining the country’s stockpile of nuclear weapons. China-backed hackers have been observed carrying out the hacks targeting SharePoint servers.
Google, Microsoft say Chinese hackers are exploiting SharePoint zero-day
The tech giants have evidence that Chinese hackers are exploiting the new bug, but warned “multiple actors” are also hacking into affected SharePoint systems.
Serial spyware founder Scott Zuckerman wants the FTC to unban him from the surveillance industry
The spyware maker was banned from the surveillance industry in 2021, but was caught flouting the ban less than a year later. Now the founder wants the ban lifted altogether.
New zero-day bug in Microsoft SharePoint under widespread attack
Security researchers say Microsoft customers should take immediate action to defend against the ongoing cyberattacks, and must assume they have already been compromised.
For privacy and security, think twice before granting AI access to your personal data
AI tools are increasingly asking for gross levels of access to your personal data under the guise of needing it to work.
A surveillance vendor was caught exploiting a new SS7 attack to track people’s phone locations
The new SS7 bypass-attack tricks phone operators into disclosing a cell subscriber’s location, in some cases down to a few hundred meters.