01 Jun 2026
By Mary

InfoSec News Nuggets — June 1, 2026

Signal Phishing Campaign Targets Journalists and Activists to Steal Backup Recovery Keys A targeted phishing campaign is sending text messages that impersonate Signal Support, urgently requesting users paste their 64-character backup recovery key into the chat. Unlike standard account takeovers that only expose future messages, stealing the recovery key gives attackers full access to the victim's entire encrypted message archive — making journalists, lawyers, and activists who rely on Signal particularly high-value targets. The attack…
Read More
14 Oct 2020
By Mary

InfoSec News Nuggets 10/14/2020

Largest cruise line operator Carnival confirms ransomware data theft Carnival Corporation, the world's largest cruise line operator, has confirmed that the personal information of customers, employees, and ship crews was stolen during an August ransomware attack. "While the investigation is ongoing, early indications are that the unauthorized third-party gained access to certain personal information relating to some guests, employees, and crew for some of our operations," Carnival said. "There is currently no indication of any misuse…
Read More
05 Mar 2020
By Mary

InfoSec News Nuggets 3/5/2020

1 - Chinese Security Firm Says CIA Hackers Attacked China Since 2008 Chinese security vendor Qihoo 360 says that the US Central Intelligence Agency (CIA) has hacked Chinese organizations for the last 11 years, targeting various industry sectors and government agencies. Qihoo 360 claims in the report that lacks any technical details that "the CIA hacking group (APT-C-39)" has targeted a multitude of Chinese companies between September 2008 and June 2019, with a focus on "aviation organizations, scientific research institutions,…
Read More