Hacker News with Generative AI: Security Breaches

DOGE is Hacking America (schneier.com)
In the span of just weeks, the US government has experienced what may be the most consequential security breach in its history—not through a sophisticated cyberattack or an act of foreign espionage, but through official orders by a billionaire with a poorly defined government role. And the implications for national security are profound.

National Security, Government, Security Breaches

19 points by cassidius 9 days ago | 1 comments

8M Requests Later, We Made SolarWinds Supply Chain Attack Look Amateur (watchtowr.com)
Surprise surprise, we've done it again. We've demonstrated an ability to compromise significantly sensitive networks, including governments, militaries, space agencies, cyber security companies, supply chains, software development systems and environments, and more.

Cybersecurity, Security Breaches, Hacking, Government, Military

8 points by rntn 17 days ago | 0 comments

Backdoor infecting VPNs used "magic packets" for stealth and security (arstechnica.com)
When threat actors use backdoor malware to gain access to a network, they want to make sure all their hard work can’t be leveraged by competing groups or detected by defenders.

Cybersecurity, VPNs, Malware, Security Breaches, Networking

7 points by pitwin 27 days ago | 0 comments

The Downfall of a US$78M/Yr Amazon Brand Due to Amazon Security Breach (medium.com)
The Downfall Of A US$78M/yr Amazon Brand Due to Amazon Security Breach — KeaBabies

Amazon, E-Commerce, Security Breaches, Business, Brand Management

14 points by linuxcoder 29 days ago | 2 comments

Biden and Trump put in danger by Secret Service agents, via agents using Strava (lemonde.fr)
Arm in arm on the Champs Elysées, in shorts and a baseball cap, four American Secret Service (USSS) agents take a photo on the world's most beautiful avenue. They are in Paris to provide security for First Lady Jill Biden, who will represent the United States at the opening ceremony of the Olympic Games. But these agents are posting more than just tourist photos online.

Security Breaches, Secret Service, Social Media, Privacy

7 points by vinnyglennon 86 days ago | 1 comments

Python Crypto Library Updated to Steal Private Keys (phylum.io)
Yesterday, Phylum's automated risk detection platform discovered that the PyPI package aiocpa was updated to include malicious code that steals private keys by exfiltrating them through Telegram when users initialize the crypto library.

Cybersecurity, Python, Cryptography, Security Breaches

9 points by batmaniam 91 days ago | 1 comments

FBI Warns Gmail, Outlook, AOL, Yahoo Users–Hackers Gain Access to Accounts (forbes.com)
“Cybercriminals are gaining access to email accounts,” the FBI warned this week, even when accounts are protected by multifactor authentication (MFA).

Cybersecurity, Email, Hacking, Security Breaches

14 points by miles 109 days ago | 1 comments

Critical hardcoded SolarWinds credential now exploited in the wild (theregister.com)
A critical, hardcoded login credential in SolarWinds' Web Help Desk line has been exploited in the wild by criminals, according to the US Cybersecurity and Infrastructure Security Agency, which has added the security blunder to its Known Exploited Vulnerabilities (KEV) Catalog.

Cybersecurity, Software, Exploits, Security Breaches

7 points by romperstomper 128 days ago | 0 comments

Red team hacker on how she breaks into buildings and pretends to be the bad guy (theregister.com)
A hacker walked into a "very big city" building on a Wednesday morning with no keys to any doors or elevators, determined to steal sensitive data by breaking into both the physical space and the corporate Wi-Fi network.

Cybersecurity, Hacking, Security Breaches, Corporate Security

73 points by thunderbong 144 days ago | 59 comments

Potential Attacker on the Company Payroll (twitter.com)

Cybersecurity, Security Breaches, Social Engineering

5 points by tuyguntn 155 days ago | 0 comments

CrowdStrike exec will testify to Congress about July's global IT meltdown (theverge.com)

Cybersecurity, Congress, IT, Security Breaches

7 points by hassanahmad 175 days ago | 0 comments

ADT admits security breach after hackers advertise stolen data on the dark web (theverge.com)

Security Breaches, Cybersecurity, Dark Web

9 points by CKMo 196 days ago | 0 comments

CrowdStrike Timeline Mystery (bitsight.com)