Data Breaches Archives - Page 2 of 5 - s0x • Austin Managed IT Services

30 Mar, 2021

Whistleblower: Ubiquiti Breach “Catastrophic”

Cybersecurity A Little Sunshine, Data Breaches, Ubiquiti breach, Ubiquiti Inc., Ubiquiti Networks

On Jan. 11, Ubiquiti Inc. [NYSE:UI] — a major vendor of cloud-enabled Internet of Things (IoT) devices such as routers, network video recorders and security cameras — disclosed that a breach involving a third-party cloud provider had exposed customer account credentials. Now a source who participated in the incident response to that breach alleges Ubiquiti massively downplayed a “catastrophic” incident to minimize the hit to its stock price, and that the third-party cloud provider claim was a fabrication. …

23 Mar, 2021

Phish Leads to Breach at Calif. State Controller

Cybersecurity California Department of Technology, California State Controller breach, Data Breaches, KnowBe4, phishing

A phishing attack last week gave attackers access to email and files at the California State Controller’s Office (SCO), an agency responsible for handling more than $100 billion in public funds each year. The phishers had access for more than 24 hours, and sources tell KrebsOnSecurity the intruders used that time to steal Social Security numbers and sensitive files on thousands of state workers, and to send targeted phishing messages to at least 9,000 other workers and their contacts. …

11 Jan, 2021

Ubiquiti: Change Your Password, Enable 2FA

Cybersecurity Data Breaches, Ubiquiti breach

7 Jan, 2021

Sealed U.S. Court Records Exposed in SolarWinds Breach

Cybersecurity Administrative Office of the U.S. Courts, Data Breaches, Nicholas Weaver, Orion, PACER, SolarWinds breach, U.S. Justice Department

18 Dec, 2020

VMware Flaw a Vector in SolarWinds Breach?

Cybersecurity, VMware APT 29, Ars Technica, CISA, Cozy Bear, Cyber Security and Infrastructure Security Agency, Data Breaches, Duo, FSB, Microsoft Outlook Web App, New York Times, nsa, SAML token compromise, Security Assertion Markup Language, The Coming Storm, U.S. National Security Agency, VMware, Volexity, washington post

U.S. government cybersecurity agencies warned this week that the attackers behind the widespread hacking spree stemming from the compromise at network software firm SolarWinds used weaknesses in other, non-SolarWinds products to attack high-value targets. According to sources, among those was a flaw in software virtualization platform VMware, which the U.S. National Security Agency (NSA) warned on Dec. 7 was being used by Russian hackers to impersonate authorized users on victim networks. …