infosec

In a data breach notification letter filed with regulators this weekend, 23andMe revealed that hackers started breaking into customers’ accounts in April 2023 and continued through most of September. In…

23andMe admits it didn’t detect cyberattacks for months

Wouldn’t you want to know what tech giants know about you? That’s exactly what Russian government hackers want, too. On Friday, Microsoft disclosed that the hacking group it calls Midnight…

Hackers breached Microsoft to find out what Microsoft knows about them

You’re watching a movie. A criminal is trying to evade a crime scene in a sports car on the highway. A helicopter is following the car from above. The car…

Everything you need to know about VPNs

Featured Article

These are the cybersecurity stories we were jealous of in 2023

Back in 2018, my former colleague at VICE Motherboard Joseph Cox and I started publishing a list of the best cybersecurity stories that were published elsewhere. It wasn’t just a way to tip our hats at our friendly competitors; by pointing to other publications’ stories, we were giving our readers…

These are the cybersecurity stories we were jealous of in 2023

U.S. cybersecurity agency CISA has warned that unknown hackers broke into the servers of a federal government agency by taking advantage of a previously known vulnerability in software that no…

CISA says US government agency was hacked thanks to ‘end of life’ software

Fidelity National Financial, or FNF, one of the largest real estate services companies in the United States, said it “contained” a recent cyberattack that engulfed its many subsidiaries and customers…

After a week-long outage, Fidelity National Financial confirms cyberattack is now ‘contained’

Fidelity National Financial, or FNF, a Fortune 500 company that provides title insurance and settlement services for the mortgage and real estate industries, announced on Tuesday that it was the…

Fidelity National Financial shuts down network in wake of cybersecurity incident

On October 7, Hamas launched an unprecedented terrorist attack on Israel, killing more than 1,200 people, with hundreds taken hostage. The attack prompted a deadly response from the Israel Defense…

Thousands of new honeypots deployed across Israel to catch hackers

The same hacker who leaked a trove of user data stolen from the genetic testing company 23andMe two weeks ago has now leaked millions of new user records. On Tuesday,…

Hacker leaks millions more 23andMe user records on cybercrime forum

Days after user personal surfaced online, the genetic testing company 23andMe said it’s requiring all users to reset their passwords “out of caution.” On Friday, 23andMe confirmed that hackers had…

23andMe resets user passwords after genetic data posted online

Thanks to improvements in security mechanisms and mitigations, hacking cell phones — both running iOS and Android — has become an expensive endeavor. That’s why hacking techniques for apps like…

Zero-days for hacking WhatsApp are now worth millions of dollars

Russian hacker Mikhail Matveev, also known on the internet as “Wazawaka” and “Boriselcin,” is wanted by the FBI, which is offering a $10 million reward for information that could lead…

FBI most-wanted Russian hacker reveals why he burned his passport

A company that acquires and sells zero-day exploits — flaws in software that are unknown to the affected developer — is now offering to pay researchers $20 million for hacking…

Russian zero-day seller offers $20M for hacking Android and iPhones

Some customers of the network security company LogicMonitor have been hacked due to the use of default passwords, TechCrunch has learned. A LogicMonitor spokesperson confirmed to TechCrunch that there’s “a…

LogicMonitor customers hit by hackers, because of default passwords

A group of researchers said they have found a way to hack the hardware underpinning Tesla’s infotainment system, allowing them to get what normally would be paid upgrades — such…

Researchers jailbreak a Tesla to get free in-car feature upgrades

For around a month, hackers have been infecting players of Call of Duty: Modern Warfare 2 with a self-spreading malware, also known as a worm. To do that, the hackers…

Call of Duty worm malware used to hack players exploits years-old bug

Hackers are infecting players of an old Call of Duty game with a worm that spreads automatically in online lobbies, according to two analyses of the malware. On June 26,…

Hackers are infecting Call of Duty players with a self-spreading malware

Google fixed a zero-day in Chrome that was found by an Apple employee, according to comments in the official bug report. While the bug itself is not newsworthy, the circumstances…

Google says Apple employee found a zero-day but did not report it

A Bangladeshi government website leaked the personal information of citizens, including full names, phone numbers, email addresses and national ID numbers. Viktor Markopoulos, a researcher who works for Bitcrack Cyber…

Bangladesh government website leaks citizens’ personal data

Security researchers and digital rights organizations believe the government of Azerbaijan used spyware produced by NSO Group to target a government worker, journalists, activists and the human rights ombudsperson in…

Researchers say they found spyware used in war for the first time

The U.S. government announced new sanctions against North Korea related to its army of illicit IT workers that have fraudulently gained employment to finance the regime’s weapons of mass destruction…

US government targets North Korea’s illicit IT workforce with new sanctions

A consulting firm founded and run by two well-known cybersecurity veterans laid off six people last week, TechCrunch has learned. Krebs Stamos Group was founded in 2021 by former Facebook…

Consulting firm Krebs Stamos Group lays off six employees

Cybersecurity firm Bishop Fox laid off around 50 employees — or 13% of its workforce — on Tuesday, the company told TechCrunch. The layoffs come just a few days after…

Bishop Fox lays off employees days after throwing conference party

Featured Article

Hackers claim vast access to Western Digital systems

The hackers who breached data storage giant Western Digital claim to have stolen around 10 terabytes of data from the company, including reams of customer information. The extortionists are pushing the company to negotiate a ransom — of a “minimum 8 figures” — in exchange for not publishing the stolen…

Hackers claim vast access to Western Digital systems

Featured Article

How the FBI caught the BreachForums admin

On Friday, the U.S. Justice Department announced that the now-arrested alleged administrator of the infamous hacking forum BreachForums facilitated the sale and purchase of private information that belonged to “millions of U.S. citizens and hundreds of U.S. and foreign companies, organizations, and government agencies.” In a statement, prosecutors confirmed the…

How the FBI caught the BreachForums admin

Featured Article

Beloved hacking veteran Kelly ‘Aloria’ Lum passes away at 41

Kelly Lum, better known in hacking circles as Aloria, passed away on Sunday. Aloria was a veteran of the cybersecurity community, especially the one in New York, her home for many years. The Twitter account of the New York City security conference SummerCon announced her death on Monday, prompting a…

Beloved hacking veteran Kelly ‘Aloria’ Lum passes away at 41

Hackers breached a website that allows people to buy and sell guns, exposing the identities of its users, TechCrunch has learned. The breach exposed reams of sensitive personal data for…

Hackers steal gun owners’ data from firearm auction website

On December 4, hackers successfully phished an employee at the games giant Activision, gaining access to some internal employee and game data. This data breach was not disclosed until last…

Activision did not notify employees of data breach for months

Unknown hackers stole internal data from the games giant Activision. On Sunday, the cybersecurity and malware research group vx-underground published screenshots of data purportedly stolen from Activision, including the schedule…

Hackers steal Activision games and employee data

Featured Article

Digital rights defenders infiltrate alleged mercenary hacking group

Cooper Quintin has been tracking the activities of a cyber mercenary group called Dark Caracal for years. On July 28, 2022, he said he discovered traces of a new ongoing hacking campaign by the group in the Dominican Republic and Venezuela. While he was analyzing the domains that the hackers…

Digital rights defenders infiltrate alleged mercenary hacking group