BreachForums is a site that shares stolen data between threat actors – and it is expanding mainly due to the “billion record Chinese hack” being shared there: Billion-record Chinese data leak’s host booms • The Register Don’t let your organisation’s information end up there!
Sealed evidence at risk
The United States’ federal court system “faced an incredibly significant and sophisticated cyber security breach, one which has since had lingering impacts on the department and other agencies.” Jerrold Lewis Nadler U.S. representative for New York’s 10th congressional district US court system suffered ‘incredibly significant attack’ • The Register
The money involved in ransomware
Research has shown that payments to threat actors, demanded by ransomware, has dropped, but the double action of stealing the data and threatening exposure and encrypting that data at source is increasing: Ransom payments fall as fewer victims choose to pay hackers (bleepingcomputer.com) This next story wasn’t really surprising, that …
Samba releases security updates
The US Cybersecurity and Infrastructure Security Agency has issued a notice for Samba updates: Samba Releases Security Updates | CISA
CISA Log4Shell examination
The US Government Cybersecurity and Infrastructure Security Agency has published a report examining the malware that infected an organisation with unpatched Log4Shell vulnerability in a VMware Horizon server. CISA Releases Log4Shell-Related MAR | CISA