T-Mobile reports bad actor accessed 37M customer records
In a new 8-K report submitted to the SEC, T-Mobile acknowledged a bad actor accessed 37 million T-Mobile customer records via an API flaw without authorization checks.
Data Privacy
LastPass provides an update on security breach
LastPass has provided an update on a security breach of internal source code and sensitive documents previously disclosed this past August.
Uber provides updates on cybersecurity incident
Uber provided new details regarding a cybersecurity incident that resulted in a data breach of its network systems.
T-Mobile to pay $350 million over 2021 data breach
T-Mobile has agreed to pay $350 million and invest another $150 million in data security improvements to settle litigation over the 2021 data breach that impacted over 76 million T-Mobile customers.
Okta investigating reports of data breach by Lapsus$ ransomware cybercriminal group (updated)
Identity and authentication services firm Okta is investigating reports that the firm has been breached by the Lapsus$ ransomware cybercriminal group.
Panasonic confirms breach of file server
Panasonic confirms breach of a file server by an unauthorized third party.
Mozilla releases Firefox 90 with new version of SmartBlock and 9 security fixes
The Mozilla Foundation has released Firefox 90 that includes a new version of SmartBlock and security fixes for nine vulnerabilities, five rated High severity.
Alibaba leaks billions of data points via Chinese web crawler
Alibaba’s Chinese online shopping platform Taobao has suffered a data breach of over a billion data points that include usernames and mobile phone numbers.
Mozilla releases Firefox 88 with new protection against privacy leaks on the web
The Mozilla Foundation has released Firefox 88 that includes security fixes for five High risk vulnerabilities and new protection against privacy leaks on the web.
Personal data on 533 million Facebook users posted online
A hacker has leaked personal data on an estimated 533 million Facebook users, to include phone numbers and Facebook account details. The data was leaked on a publicly accessible hacking forum.