T-Mobile reports bad actor accessed 37M customer records
In a new 8-K report submitted to the SEC, T-Mobile acknowledged a bad actor accessed 37 million T-Mobile customer records via an API flaw without authorization checks.
Data Breach
LastPass provides an update on security breach
LastPass has provided an update on a security breach of internal source code and sensitive documents previously disclosed this past August.
Rackspace suffers from security incident involving Hosted Exchange services
Cloud computing services company Rackspace has reported a security incident involving Hosted Exchange services.
Intel reports leak of Alder Lake BIOS source code
Chipmaker Intel has confirmed a leak of its Alder Lake BIOS source code, as revealed on 4chan and GitHub. However, the hacker’s origin (or root cause) remains unknown.
Uber provides updates on cybersecurity incident
Uber provided new details regarding a cybersecurity incident that resulted in a data breach of its network systems.
T-Mobile to pay $350 million over 2021 data breach
T-Mobile has agreed to pay $350 million and invest another $150 million in data security improvements to settle litigation over the 2021 data breach that impacted over 76 million T-Mobile customers.
Okta investigating reports of data breach by Lapsus$ ransomware cybercriminal group (updated)
Identity and authentication services firm Okta is investigating reports that the firm has been breached by the Lapsus$ ransomware cybercriminal group.
Panasonic confirms breach of file server
Panasonic confirms breach of a file server by an unauthorized third party.
Morgan Stanley confirms breach of customer SSNs via an exploit of vendor’s Accellion FTA vulnerability
Morgan Stanley has confirmed a data breach of some customer SSNs and other personal data via one if its vendor’s vulnerable Accellion FTA systems.
Threat actors breach South Korean atomic research institute via VPN vulnerability
Threat actors from suspected North Korea APT group Kimsuky breached a South Korean atomic research institute via a VPN vulnerability.