Codecov Supply Chain Hack Worse Than Initially Estimated

Tag Barnakle malware operation breached more than 120 ad servers, Chinese hacking group reportedly breached more than 200 Japanese organizations, Geico breach exposed drivers licenses, more

Code Testing Firm Codecov Suffered Major Data Breach

Fin7 admin sentenced to seven years in prison, Iran media says saboteur and not cyberattack took down Natanz power grid, Large BGP routing leak disrupted network connectivity for thousands, more

Cryptocurrency Platform Celsius Breached, Customers Hit With Phishing Attacks

Google Project Zero adds 30 days to vulnerability disclosure cycle, Facebook users urged to take legal action in Europe over data leak, Reddit goes public with bug bounty programs, more

Special Edition: Summary of Biden Administration's Actions Related to SolarWinds

The wide-ranging executive order and sanctions, combined with multilateral outreach efforts, seek to restrain Russian aggression in cyberspace.

Corrected: Admin Aims Series of Punitive Acts Against Russia for SolarWinds, Officially Attributes Hack to SVR

White House readies broad power grid security order, Another researcher releases PoC for Chrome exploit, Babuk ransomware group targeted Houston rockets, Ireland regulator probes Facebook leak, more

Microsoft, Feds Urge Admins to Implement Patches, Including Four for More Exchange Flaws Discovered by NSA

FBI accessed hundreds of computers to remove Exchange web shells, Firm that unlocked San Bernardino shooter's iPhone for the FBI is now revealed, Sweden accuses Russia of hacking sports org, much more

Former NSA Officials Round Out White House Cybersecurity Leadership Roster

500K+ Huawei users downloaded Joker malware, New TCP/IP library vulnerabilities impact hundreds of millions of devices, UK ministers block NHS COVID-19 app update on privacy grounds, more

Cyberattack Attributed to Israel's Mossad Took Down Power Grid at Iran's Natanz Nuclear Facility

LinkedIn and Clubhouse suffer major leaks, Yet another massive Facebook leak discovered, Threat actors use contact forms to deliver IceID ransomware, Q Link Wireless leaked user data, more

Nation-State Cybersecurity Incidents Doubled Between 2017 and 2020

Despite exposure China's Yanbian Gang has operated undisturbed, Notorious phone unlocking company Cellebrite to go public, hackers exploit Zoom messenger at Pwn2Own, much more

New Ransomware Strain Exploiting Fortinet VPN Flaw Shut Down Two Factories in Europe

Cisco issues security updates including one for severe RCE flaw, India vows to combat Chinese cyberattacks, Microsoft product flaws garner over $400,000 in first day of Pwn2Own, more

Facebook Says Previously Undisclosed Theft of 533 Million Users' Data Was Scraping, Not Breach

Signal will handle cryptocurrency payments, New Android malware distributed by faux Netflix tool, EU orgs targeted with intrusions, $38M worth of stolen gift, payment cards sold on forum, more

Apple Readies Its App Tracking Transparency Pop-Up

New Chinese-speaking spy group targets governments in Vietnam and other Asian countries, Ransomware gangs want customers to pressure victims, New campaign targets LinkedIn users, more