Cybersecurity

JetBrains vulnerability exploitation highlights debate over ‘silent patching’

Czech software giant JetBrains harshly criticized security company Rapid7 this week following a dispute over two recently-discovered vulnerabilities. In a blog post published Monday, JetBrains attributed the compromise of several customers’ servers to Rapid7’s decision to release detailed information on the vulnerabilities. “After the full disclosure was made, we started hearing from some customers who […]

Cybersecurity

UnitedHealth says Change Healthcare hacked by nation-state, as US pharmacy outages drag on | TechCrunch

U.S. health insurance giant UnitedHealth Group (UHG) said Thursday in a filing with government regulators that its subsidiary Change Healthcare was compromised, likely by government-backed hackers. In a filing Thursday, UHG blamed the ongoing cybersecurity incident affecting Change Healthcare on suspected nation-state hackers but said it had no timeframe for when its systems would be […]

Cybersecurity

‘World’s biggest casino’ app exposed customers’ personal data | TechCrunch

The startup that develops the phone app for casino resort giant WinStar has secured an exposed database that was spilling customers’ private information to the open web. Oklahoma-based WinStar bills itself as the “world’s biggest casino” by square footage. The casino and hotel resort also offers an app, My WinStar, in which guests can access […]

Cybersecurity

Data leak at fintech giant Direct Trading Technologies

Data leak at fintech giant Direct Trading Technologies Pierluigi Paganini January 31, 2024 Sensitive data and trading activity of over 300K traders leaked online by international fintech firm Direct Trading Technologies. Direct Trading Technologies, an international fintech company, jeopardized over 300K traders by leaking their sensitive data and trading activity, thereby putting them at risk […]

Cybersecurity

Amazon Appeals Privacy Fine of 746 Million Euros

General Data Protection Regulation (GDPR) , Standards, Regulations & Compliance E-Commerce Giant Accuses Luxembourg Regulators of Attacking the Company Akshaya Asokan (asokan_akshaya) • January 12, 2024     Amazon squared off against the Luxembourg data protection authority in court on Tuesday over a privacy fine. (Image: Shutterstock) Amazon in a Luxembourg court Tuesday contested a […]

Cybersecurity

Merck settles with insurers who denied $700 million NotPetya claim

Pharmaceutical giant Merck has reportedly reached a settlement with insurers over their refusals to cover losses stemming from the NotPetya cyberattack in 2017. The undisclosed settlement, first reported by Bloomberg Law, is the culmination of a years-long court battle that has attracted attention from the cybersecurity and insurance industries because of its implications for defining […]

Cybersecurity

Fidelity National Financial subsidiary says 1.3 million affected by November cyberattack

A subsidiary of title insurance giant Fidelity National Financial reported a data breach to state regulators this week after a cyberattack in November. LoanCare, one of the largest providers of loan subservicing services, told officials in Maine and California that 1,316,938 people had information accessed by hackers who breached Fidelity National Financial — their parent […]

Cybersecurity

CBS, Paramount owner National Amusements says it was hacked | TechCrunch

National Amusements, the cinema chain and corporate parent giant of media giants Paramount and CBS, has confirmed it experienced a data breach in which hackers stole the personal information of tens of thousands of people. The private media conglomerate said in a legally required filing with Maine’s attorney general that hackers stole personal information on […]