The data stolen from AT&T could be used by malicious actors to construct compelling phishing attacks and other scams by revealing details of customers' lives. John Binns, previously indicted for a T-Mobile breach and currently imprisoned in Turkey, is reportedly connected to the AT&T breach.
Cambodian rulers linked to pig butchering operation, Airbnb ignores hidden cameras, Huge Russian operation spreads pro-Trump disinfo, State Dept. schools diplomats on digital issues, Chatbots can pass certified ethical hacker exams, New tool can spot vulnerabilities in entire open-source code repos
Crims stole "nearly all" AT&T customer account data, 2.4m mSpy customers' data exposed, Signal tightens desktop client security, JabberZeus and IcedID hacker sentenced to nine years, Lawmakers plead for crypto investigator's release, S. African metal mining company hit by cyberattack, much more
Dark patterns affect most sites offering subscriptions, Fin7 has roared back to life, NATO summit cyber and espionage risks run high, Microsoft flaw was exploited for 18 months, CSRF flaw affected NSA training platform, Health scams run rampant on Meta sites, Cybercrims looted S. Africa, much more
Gay furry hackers spill Heritage Foundation files, Blast-RADIUS attack enables widespread MITM attacks, Russia plans to up social media propaganda again to favor Trump, Microsoft plugs two actively exploited flaws in Patch Tuesday updates, Evolve Bank & Trust sends out breach notices, much more
Microsoft bans Android devices in China, New CloudSorcerer group abuses public cloud for Russian espionage, Avast releases decryptor for DoNex ransomware, Apple removes 25 VPN apps from Russian app store, Roblox conference attendees exposed in data breach, Scalpers fake Ticketmaster tix, much more
Operation Morpheus took down nearly 600 Cobalt Strike servers, Threat actors released 166K Taylor Swift Eras Tour ticket bar codes, Brain Cipher apologized to Indonesia, Threat actors ID'ed Authy phone numbers, Nearly 10 billion plaintext passwords compiled, Slew of state agencies hacked, much more
Last February, I switched Metacurity from Substack to Beehiiv because of Substack's willingness to give speakers with odious views a platform. Since then, I've heard from subscribers - ranging from tech companies to the US Department of Defense – that their organizations automatically filter out emails from
Data breach of Evolve Bank and Trust hits money transfer service Wise, CocoaPods flaws left macOS and iOS apps vulnerable to supply chain attacks for a decade, Zero day flaw affects popular Cisco devices, Top credit union Patelco suffered serious security incident, much more
New Brain Cipher ransomware was behind Indonesian government attack, Indonesia busted 100 foreign nationals suspected of cybercrime, A dozen-plus Texas state agencies and universities were hit by Midnight Blizzard attack, Skeleton Key bypasses AI guardrails, much more
An indicted hacker ran a major cybercrime operation after becoming a DOJ cooperating witness, Crypto scammers who engaged in a real-world violent crime spree, Detroit reforms its facial recognition system after string of false arrests, more