About half a million patients have been notified so far, but the number of affected individuals is likely far higher. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch…
Category: Security News | TechCrunch
US drug maker Cencora says Americans’ health information stolen in data breach
About half a million patients have been notified so far, but the number of affected individuals is likely far higher. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch…
Bugcrowd, the crowdsourced white-hat hacker platform, acquires Informer to ramp up its security chops
On the heels of raising $102 million earlier this year, Bugcrowd is making good on its promise to use some of that funding to make acquisitions to strengthen its security chops. The company — which crowdsources skills from more than…
Spyware found on US hotel check-in computers
Several hotel check-in computers are running a remote access app, which is leaking screenshots of guest information to the interne © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch…
Bolster, creator of the CheckPhish phishing tracker, raises $14M led by Microsoft’s M12
A dodgy email containing a link that looks “legit” but is actually malicious remains one of the most dangerous, yet successful, tricks in a cyber criminal’s handbook. Now, an AI startup called Bolster that has built a novel approach to…
Conservative cell carrier Patriot Mobile hit by data breach
U.S. cell carrier Patriot Mobile experienced a data breach that included subscribers’ personal information, including full names, email addresses, home zip codes, and account PINs, TechCrunch has learned. Patriot Mobile, which reportedly has fewer than 100,000 subscribers, bills itself as…
CyberArk snaps up Venafi for $1.54B to ramp up in machine-to-machine security
More cybersecurity consolidation coming your way, with bigger players picking up startups that will help them bolt on tech to meet the ever-expanding attack surface for enterprises as they move more activity into the cloud. In the latest development, CyberArk…
Two Santa Cruz students uncover security bug that could let millions do their laundry for free
CSC ServiceWorks provides laundry machines to thousands of residential homes and universities, but the company ignored requests to fix a security bug. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News…
Two students uncover security bug that could let millions do their laundry for free
CSC ServiceWorks provides laundry machines to thousands of residential homes and universities, but the company ignored requests to fix a security bug. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News…
Healthcare company WebTPA discloses breach affecting 2.5 million people
A Texas-based company that provides health insurances and benefit plans disclosed a data breach affecting almost 2.5 million people, some of whom had their Social Security number stolen. WebTPA said in a data breach notice published earlier this month that…
Flock Safety’s solar-powered cameras could make surveillance more widespread
Flock Safety is a multibillion-dollar startup that’s got eyes everywhere. As of Wednesday, with the company’s new Solar Condor cameras, those eyes are solar-powered and using wireless 5G networks to make them all that much easier to install. Adding solar…
Ireland privacy watchdog confirms Dell data breach investigation
A top European privacy watchdog is investigating following the recent breaches of Dell customers’ personal information, TechCrunch has learned. Ireland’s Data Protection Commission (DPC) deputy commissioner Graham Doyle confirmed to TechCrunch that the DPC has received “a breach notification on…
Hacker claims theft of India’s Samco account data
A hacker listed the data allegedly breached from Samco on a known cybercrime forum. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch Read the original article: Hacker claims…
Flock Safety’s solar-powered cameras could make surveilliance more widespread
Flock Safety is a multi-billion dollar startup that’s got eyes everywhere. As of Wednesday, with the company’s new Solar Condor cameras, those eyes are solar-powered and using wireless 5G networks to make them all that much easier to install. Adding…
Thoma Bravo’s LogRhythm merges with Exabeam in more cybersecurity consolidation
Private equity giant Thoma Bravo has announced that its security information and event management (SIEM) company LogRhythm will be merging with Exabeam, a rival cybersecurity company backed by the likes of Cisco and Lightspeed Venture Partners. SIEM is the business…
FBI seizes hacking forum BreachForums — again
The FBI along with a coalition of international law enforcement agencies seized the notorious cybercrime forum BreachForums on Wednesday. For years, BreachForums has been a popular English-language forum for hackers and cybercriminals who wanted to advertise, sell and trade stolen…
Google adds live threat detection and screen-sharing protection to Android
The company said it is increasing the on-device capability of its Google Play Protect system to detect fraudulent apps trying to breach sensitive permissions. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from…
Google’s call-scanning AI could dial up censorship by default, privacy experts warn
A feature Google demoed at its I/O confab yesterday, using its generative AI technology to scan voice calls in real-time for conversational patterns associated with financial scams, has sent a collective shiver down the spines of privacy and security experts…
Apple touts stopping $1.8B in App Store fraud last year in latest pitch to developers
Apple released new data about anti-fraud measures related to its operation of the iOS App Store on Tuesday morning, trumpeting a claim that it stopped over $7 billion in “potentially fraudulent transactions” across the four years between 2020 and 2023.…
Threat actor scraped Dell support tickets, including customer phone numbers
The person who claimed to have stolen the physical addresses of 49 million Dell customers appears to have taken more data from a different Dell portal, TechCrunch has learned. The newly compromised data includes names, phone numbers and email addresses…
Apple touts stopping $1.8BN in App Store fraud last year in latest pitch to developers
Apple released new data about anti-fraud measures related to its operation of the iOS App Store on Tuesday morning, trumpeting a claim that it stopped over $7 billion in “potentially fraudulent transactions” across the four years between 2020 and 2023.…
‘Got that boomer!’: How cybercriminals steal one-time passcodes for SIM swap attacks and raiding bank accounts
Estate is an invite-only website that has helped hundreds of attackers make thousands of phone calls aimed at stealing account passcodes, according to its leaked database. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been…
‘Got that boomer!’: How cyber-criminals steal one-time passcodes for SIM swap attacks and raiding bank accounts
Estate is an invite-only website that has helped hundreds of attackers make thousands of phone calls aimed at stealing account passcodes, according to its leaked database. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been…
Scammers found planting online betting ads on Indian government websites
Some Indian government websites have allowed scammers to plant advertisements capable of redirecting visitors to online betting platforms. TechCrunch discovered around four dozen “gov.in” website links associated with Indian states, including Bihar, Goa, Karnataka, Kerala, Mizoram and Telangana that were…
Threat actor says he scraped 49M Dell customer addresses before the company found out
The person who claims to have 49 million Dell customer records told TechCrunch that he brute-forced an online company portal and scraped customer data, including physical addresses, directly from Dell’s servers. TechCrunch verified that some of the scraped data matches…
Dell discloses data breach of customers’ physical addresses
Technology giant Dell notified customers on Thursday that it experienced a data breach involving customers’ names and physical addresses. In an email seen by TechCrunch and shared by several people on social media, the computer maker wrote that it was…
Encrypted services Apple, Proton and Wire helped Spanish police identify activist
As part of an investigation into people involved in the pro-independence movement in Catalonia, the Spanish police obtained information from the encrypted services Wire and Proton, which helped the authorities identify a pseudonymous activist, according to court documents obtained by…
US Patent and Trademark Office confirms another leak of filers’ address data
The federal government agency responsible for granting patents and trademarks is alerting thousands of filers whose private addresses were exposed following a second data spill in as many years. The U.S. Patent and Trademark Office (USPTO) said in an email…
Brandywine Realty Trust says data stolen in ransomware attack
U.S. realty trust giant Brandywine Realty Trust has confirmed a cyberattack that resulted in the theft of data from its network. In a filing with regulators on Tuesday, the Philadelphia-based Brandywine described the cybersecurity incident as unauthorized access and the…
What we learned from the indictment of LockBit’s mastermind
On Tuesday, U.S. and U.K. authorities revealed that the mastermind behind LockBit, one of the most prolific and damaging ransomware groups in history, is a 31-year-old Russian named Dmitry Yuryevich Khoroshev, aka “LockbitSupp.” As it’s customary in these types of…
US, UK police identify and charge Russian leader of LockBit ransomware gang
The identity of the leader of one of the most infamous ransomware groups in history has finally been revealed. On Tuesday, a coalition of law enforcement led by the U.K.’s National Crime Agency announced that Russian national, Dmitry Yuryevich Khoroshev,…
Wiz raises $1B at a $12B valuation to expand its cloud security platform through acquisitions
Wiz, the buzzy startup building an all-in-one cloud security platform, is on an acquisition march to expand its business quickly en route to an IPO. Now, it has closed a major round of funding of $1 billion to help on…
Akamai confirms acquisition of Noname for $450M
A couple of weeks ago, TechCrunch broke the news that Akamai was in discussions to acquire Noname Security, a specialist in API security, for around $500 million. Today the deal is official, albeit at a lower price. Akamai has confirmed…
Police resurrect LockBit’s site and troll the ransomware gang
An international coalition of police agencies have resurrected the dark web site of the notorious LockBit ransomware gang, which they had seized earlier this year, teasing new revelations about the group. On Sunday, what was once LockBit’s official dark net…
Police resurrect Lockbit’s site and troll the ransomware gang
An international coalition of police agencies have resurrected the dark web site of the notorious LockBit ransomware gang, which they had seized earlier this year, teasing new revelations about the group. On Sunday, what was once LockBit’s official darknet site…
UnitedHealth data breach should be a wake-up call for the UK and NHS
The ransomware attack that has engulfed U.S. health insurance giant UnitedHealth Group and its tech subsidiary Change Healthcare is a data privacy nightmare for millions of U.S. patients, with CEO Andrew Witty confirming this week that it may impact as…
UnitedHealth data breach should be a wakeup call for the UK and NHS
The ransomware attack that has engulfed U.S. health insurance giant UnitedHealth Group and its tech subsidiary Change Healthcare is a data privacy nightmare for millions of U.S. patients, with CEO Andrew Witty confirming this week that it may impact as…
EU plan to force messaging apps to scan for CSAM risks millions of false positives, experts warn
A controversial push by European Union lawmakers to legally require messaging platforms to scan citizens’ private communications for child sexual abuse material (CSAM) could lead to millions of false positives per day, hundreds of security and privacy experts warned in…
Google expands passkey support to its Advanced Protection Program ahead of the US presidential election
Ahead of the U.S. presidential election, Google is bringing passkey support to its Advanced Protection Program (APP), which is used by people who are at high risk of targeted attacks, such as campaign workers, candidates, journalists, human rights workers, and…
Digital fraud detection startup BioCatch hits $1.3B valuation as Permira buys majority stake
Digital fraud detection company BioCatch has a new majority shareholder in the form of U.K private equity firm Permira. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch Read…
UnitedHealthcare CEO says ‘maybe a third’ of US citizens were affected by recent hack
Two months after hackers broke into Change Healthcare systems stealing and then encrypting company data, it’s still unclear how many Americans were impacted by the cyberattack. Last month, Andrew Witty, the CEO of Change Healthcare’s parent company UnitedHealth Group, said…
United HealthCare CEO says ‘maybe a third’ of US citizens were affected by recent hack
Two months after hackers broke into Change Healthcare systems stealing and then encrypting company data, it’s still unclear how many Americans were impacted by the cyberattack. Last month, Andrew Witty, the CEO of Change Healthcare’s parent company UnitedHealth Group, said…
United HealthCare CEO says ‘maybe a third’ of U.S. citizens were affected by recent hack
Two months after hackers broke into Change Healthcare systems stealing and then encrypting company data, it’s still unclear how many Americans were impacted by the cyberattack. Last month, Andrew Witty, the CEO of Change Healthcare’s parent company UnitedHealth Group, said…
UnitedHealth CEO tells Senate all systems now have multi-factor authentication after hack
UnitedHealth Group chief executive officer Andrew Witty told senators on Wednesday that the company has now enabled multi-factor authentication on all the company’s systems exposed to the internet in response to the recent cyberattack against its subsidiary Change Healthcare. The…
Belgium’s Aikido lands $17M Series A for its ‘no BS’ security platform aimed at developers
Developers have a problem. It used to be the case that only large enterprises needed to worry themselves with security, but today, every startup is capable of holding huge amounts of customer data. That means developers across the board have…
US fines telcos $200M for sharing customer location data without consent
The U.S. Federal Communications Commission said on Monday that it is fining the four U.S. major wireless carriers around $200 million in total for “illegally” sharing and selling customers’ real-time location data without their consent. AT&T’s fine is more than…
SafeBase taps AI to automate software security reviews
Security review automation platform SafeBase has raised new cash from investors including Zoom’s corporate VC arm. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch Read the original article:…
Change Healthcare hackers broke in using stolen credentials — and no MFA, says UHG CEO
UnitedHealth’s CEO said in congressional testimony that the portal used by the hackers to break into Change Healthcare was not protected with a basic security feature. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been…
Despite complaints, Apple hasn’t yet removed an obviously fake app pretending to be RockAuto
Apple’s App Store isn’t always as trustworthy as the company claims. The latest example comes from RockAuto, an auto parts dealer popular with home mechanics and other DIYers, which is upset that a fake app masquerading as its official app…
Thoma Bravo to take UK cybersecurity company Darktrace private in $5B deal
Darktrace is set to go private in a deal that values the U.K.-based cybersecurity giant at around $5 billion. A newly-formed entity called Luke Bidco Ltd, formed by private equity giant Thoma Bravo, has tabled an all-cash bid of £6.20…
Rubrik’s shares end trading up almost 16% on the company’s public debut
This share price gives Rubrik a fully diluted valuation of $6.6 billion, up 88% from its last primary valuation of $3.5 billion in 2019. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from…
Health insurance giant Kaiser will notify millions of a data breach after sharing patients’ data with advertisers
Kaiser, one of the largest healthcare organizations in the United States, said it was notifying 13.4 million members of a data breach earlier in April. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed…
Health insurance giant Kaiser notifies millions of a data breach
Kaiser, one of the largest healthcare organizations in the United States, said it was notifying 13.4 million members of a data breach earlier in April. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed…
Rubrik’s shares climb 20% in its public debut
This share price gives Rubrik a fully diluted valuation of $6.6 billion, up 88% from its last primary valuation of $3.5 billion in 2019. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from…
Ex-NSA hacker and ex-Apple researcher launch startup to protect Apple devices
Two veteran security experts are launching a startup that aims to help other makers of cybersecurity products to up their game in protecting Apple devices. Their startup is called DoubleYou, the name taken from the initials of its co-founder, Patrick…
India’s ICICI Bank exposed thousands of credit cards to ‘wrong’ users
ICICI Bank, one of India’s top private banks, exposed the sensitive data of thousands of new credit cards to customers who were not their intended recipients. The Mumbai-based bank confirmed to TechCrunch Thursday that its digital channels “erroneously mapped” about…
Security bugs in popular phone-tracking app iSharing exposed users’ precise locations
The location-sharing app iSharing, which has 35 million users, fixed vulnerabilities that exposed users’ personal information and precise location data. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch…
Security bugs in a popular phone-tracking app exposed users’ precise locations
The location-sharing app iSharing, which has 35 million users, fixed vulnerabilities that exposed users’ personal information and precise location data. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch…
Tines taps $50M to expand its workflow automation beyond security teams
Automation continues to be a major theme in the enterprise — underscored not least by the rise of AI as a tool to help fix some of the more routine, resource-intensive and fragmented aspects of how security and other IT…
UnitedHealth says Change hackers stole health data on ‘substantial proportion of people in America’
The health tech giant processes 15 billion health transactions a year, and handles health information for about half of all Americans. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News |…
US government says security flaw in Chirp Systems’ app lets anyone remotely control smart home locks
CISA said Chirp Systems ignored the federal agency and the reporting security researcher. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch Read the original article: US government says…
Lawmakers vote to reauthorize US spying law that critics say expands government surveillance
House and Senate lawmakers passed a bill reauthorizing the controversial Section 702 powers under FISA, which allows U.S. spy agencies to conduct warrantless searches of Americans’ communications. © 2024 TechCrunch. All rights reserved. For personal use only. This article has…
Your Android phone could have stalkerware — here’s how to remove it
This simple guide helps you identify and remove common consumer-grade spyware apps from your Android phone. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch Read the original article:…
Lacework, last valued at $8.3B, is in talks to sell for just $150M to $200M, say sources
Consolidation continues apace in the world of security. Sources tell us that Lacework — a cloud security startup that was valued at $8.3 billion post-money in its last funding round — is in talks to be acquired by another security…
Lacework, last valued at $8.3B, is in talks to sell for just $150M to $300M, say sources
Consolidation continues apace in the world of security. Sources tell us that Lacework — a cloud security startup that was valued at $8.3 billion post-money in its last funding round — is in talks to be acquired by another security…
Wiz is in talks to buy Lacework for $150-200M; security firm was last valued at $8.3B
Consolidation continues apace in the world of security. Sources tell us that Lacework — a cloud security startup that was valued at $8.3 billion post-money in its last funding round — is in talks to be acquired by another security…
Hackers are threatening to publish a huge stolen sanctions and financial crimes watchlist
The hackers say they have stolen 5.3 million records from the World-Check database, used by companies and banks for screening potential customers. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News…
Cape dials up $61M from A16Z + more for mobile service that doesn’t use personal data
AT&T’s recent mega customer data breach — 74 million accounts impacted — laid bare how much data carriers have on their users, and also that the data is there for the hacking. Today, a startup called Cape — based out…
Apex Legends hacker says game developers patched exploit used on streamers
Last month, a hacker wreaked havoc during an esports tournament of the popular shooter game Apex Legends, hacking two well-known streamers mid-game to make it look like they were using cheats. A month later, it seems like the hacking saga…
Palo Alto Networks’ firewall bug under attack brings fresh havoc to thousands of companies
Organizations are urged to patch their Palo Alto firewalls after researchers discover evidence of malicious exploitation dating back to late-March. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch…
Vorlon is trying to stop the next big API breach
Application programming interfaces, or APIs as they’re commonly known, are the bedrock of everything we do online. APIs allow two things on the internet to talk with each other, including connected devices or phone apps. But the enormous growth of…
A crypto wallet maker’s warning about an iMessage bug sounds like a false alarm
A crypto wallet maker claimed this week that hackers may be targeting people with an iMessage “zero-day” exploit — but all signs point to an exaggerated threat, if not a downright scam. Trust Wallet’s official X (previously Twitter) account wrote…
Evolution Equity Partners raises $1.1B for new cybersecurity and AI fund
Evolution Equity Partners, a growth capital firm based in NYC, has raised $1.1 billion for a new cyber- and AI-focused fund. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News |…
Omni Hotels says customers’ personal data stolen in ransomware attack
A ransomware gang called Daixin has taken credit for the breach, and claimed to steal millions of customer records dating back to 2017. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security…
Change Healthcare stolen patient data leaked by ransomware gang
This is the second group to demand a ransom payment from Change Healthcare to prevent the release of stolen patient data in as many months. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed…
A ransomware gang is leaking Change Healthcare’s stolen patient data
This is the second group to demand a ransom payment from Change Healthcare to prevent the release of stolen patient data in as many months. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed…
Government spyware is another reason to use an ad blocker
Spyware makers are reportedly working on targeting individuals with stealthy data-stealing malware using online banner ads. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch Read the original article:…
Security engineer jailed for 3 years for $12M crypto hacks
Shakeeb Ahmed, a cybersecurity engineer convicted of stealing around $12 million in crypto, was sentenced on Friday to three years in prison. In a press release, the U.S. Attorney for the Southern District of New York announced the sentence. Ahmed…
Roku says 576,000 user accounts hacked after second security incident
Roku said it discovered malicious hackers compromised more than half a million user accounts while investigating an earlier spate of account hacks. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News…
How Ukraine’s cyber police fights back against Russia’s hackers
On February 24, 2022, Russian forces invaded Ukraine. Since then, life in the country has changed for everyone. For the Ukrainian forces who had to defend their country, for the regular citizens who had to withstand invading forces and constant…
US think tank Heritage Foundation hit by cyberattack
Founded in 1973, the Washington DC-based Heritage Foundation and supports and lobbies on conservative issues. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch Read the original article: US…
US says Russian hackers stole federal government emails during Microsoft cyberattack
CISA said the latest theft of government email — blamed on Russian government hackers — presents “a grave and unacceptable risk” to U.S. federal agencies. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed…
US government urges Sisense customers to reset credentials after hack
The U.S. government’s cybersecurity agency said it was responding to a “recent compromise” of the data analytics giant, which provides business intelligence to critical infrastructure. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed…
Meta will auto-blur nudity in Instagram DMs in latest teen safety step
Meta has announced it’s testing new features on Instagram intended to help safeguard young people from unwanted nudity or sextortion scams. This includes a feature called Nudity Protection in DMs, which automatically blurs images detected as containing nudity. The tech…
Simbian brings AI to existing security tools
Simbian is a cybersecurity platform that effectively controls other cybersecurity platforms as well as security apps and tooling. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch Read the…
Apple alerts users in 92 nations to mercenary spyware attacks
Apple sent threat notifications to iPhone users in 92 countries on Wednesday, warning them that may have been targeted by mercenary spyware attacks. The company sent the alerts to individuals in 92 nations at 12pm Pacific Time Wednesday. It did…
Apple alerts users in 92 nations to mercenary attacks in new warning
Apple sent threat notifications to iPhone users in 92 countries on Wednesday, warning them that may have been targeted by mercenary spyware attacks. The company sent the alerts to individuals in 92 nations at 12pm Pacific Time on Wednesday. The iPhone-maker…
AT&T notifies regulators after customer data breach
The legally required disclosure came a week after AT&T confirmed a cache containing millions of customers’ data that leaked online was genuine. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News…
Proton picks up Standard Notes to deepen its pro-privacy portfolio
By adding Standard Notes to its portfolio of apps, Proton will deepen its reach with an engaged community of pro-privacy users. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News |…