22 May 2025
By Mary

InfoSec News Nuggets 5/22/2025

Hackers are distributing a cracked password manager that steals data, deploys ransomware Cybercriminals are distributing a tainted version of a popular password manager, through which they’re able to steal data and deploy ransomware. This is according to security researchers WithSecure Threat Intelligence, who recently observed one such attack in the wild. In an in-depth analysis published recently, the researchers said a client of theirs downloaded what they thought was KeePass - a popular password manager. They…
Read More
10 Feb 2025
By Mary

InfoSec News Nuggets 2/10/2025

Coinbase accused of neglecting security, costing users up to $300M annually Cryptocurrency investigators ZachXBT and tanuki42 accused Coinbase of failing to address security vulnerabilities and scam incidents that have cost investors millions of dollars each month. On Feb. 3, independent crypto investigator ZachXBT and tanuki42 from zeroShadow reported that Coinbase users lost more than $65 million in December 2024 and January 2025 alone. Still, the duo claimed the losses were even higher, as their calculations…
Read More
02 May 2023
By Mary

InfoSec News Nuggets 05/02/2023

Hackers leak images to taunt Western Digital's cyberattack response The ALPHV ransomware operation, aka BlackCat, has published screenshots of internal emails and video conferences stolen from Western Digital, indicating they likely had continued access to the company's systems even as the company responded to the breach. The leak comes after the threat actor warned Western Digital on April 17th that they would hurt them until they "cannot stand anymore" if a ransom was not paid.…
Read More
22 Feb 2023
By Mary

InfoSec News Nuggets 02/22/2023

Ransomware Gang Seeks to Exploit Victims' Insurance Coverage  A ransomware group is asking insured victims for details about their policy, claiming it will ultimately lower their risk exposure. Introduced in November 2022, HardBit 2.0 claims to steal data before encrypting the victim organization’s data, but unusually for such a group it has no leak site and does not use “double extortion” as a tactic, according to Varonis. Instead, the group apparently threatens further attacks if its demands aren’t met. “Rather…
Read More
04 Oct 2021
By Mary

InfoSec News Nuggets 10/04/2021

3.1M Neiman Marcus Customer Card Details Breached Dallas-based Neiman Marcus Group is known worldwide as the go-to luxury retailer for the well-heeled. But their reputation for impeccable quality just took a big hit with revelations that the company was breached by an attacker back in May 2020. It took 17 months for the retailer to notice. Just this week, Neiman Marcus acknowledged the compromise, which included personal customer information like names, contact information, payment card information…
Read More
02 Sep 2021
By Mary

InfoSec News Nuggets 09/02/2021

One Simple Step to Securing Your Accounts Does it seem like cyber criminals have a magic wand for getting into your email or bank accounts and there’s nothing you can do to stop them? Wouldn’t it be great if there was one single step you could take that would help protect your from cyber criminals and let you securely make the most of technology? While no sole step will stop all cyber criminals, one of…
Read More