Hacker News with Generative AI: Security Breaches

FBI Warns Gmail, Outlook, AOL, Yahoo Users–Hackers Gain Access to Accounts (forbes.com)
“Cybercriminals are gaining access to email accounts,” the FBI warned this week, even when accounts are protected by multifactor authentication (MFA).
Critical hardcoded SolarWinds credential now exploited in the wild (theregister.com)
A critical, hardcoded login credential in SolarWinds' Web Help Desk line has been exploited in the wild by criminals, according to the US Cybersecurity and Infrastructure Security Agency, which has added the security blunder to its Known Exploited Vulnerabilities (KEV) Catalog.
Red team hacker on how she breaks into buildings and pretends to be the bad guy (theregister.com)
A hacker walked into a "very big city" building on a Wednesday morning with no keys to any doors or elevators, determined to steal sensitive data by breaking into both the physical space and the corporate Wi-Fi network.
Potential Attacker on the Company Payroll (twitter.com)
CrowdStrike exec will testify to Congress about July's global IT meltdown (theverge.com)
ADT admits security breach after hackers advertise stolen data on the dark web (theverge.com)
CrowdStrike Timeline Mystery (bitsight.com)
The CrowdStrike Failure Was a Warning (theatlantic.com)
2024 CrowdStrike Incident (wikipedia.org)
Google knows nearly every Wi-Fi password in the world (2013) (computerworld.com)
OpenAI was hacked year-old breach wasn't reported to the public (tomshardware.com)
Researchers cracked an 11-year-old password to a $3M crypto wallet (wired.com)
At Microsoft, years of security debt come crashing down (cybersecuritydive.com)