Incident Of The Week
IOTW: Attackers exploit Log4j vulnerability
December 24 by Cyber Security Hub Editor
Ransomware groups have begun exploiting the Log4j vulnerability as security teams rush to patch
Incident Of The Week: Defense Electronics Manufacturer CPI Succumbs To Ransomware Demands
March 13 by Jeff Orr
Electronics manufacturer Communications & Power Industries (CPI) was victimized by having its data encrypted and held ransom. Some of its customers include the US Department of Defense and the DoD’s D...
Incident Of The Week: Carnival Cruise Lines Hit By Cyber-Attack
March 06 by Kayla Matthews
A Carnival cruise ship was subject to a cyber-attack in May of 2019. Though several months have passed, the effects are still lingering. This Incident Of The Week looks at how the cruise line responde...
Incident Of The Week: Security Researcher Uncovers 440 Million Records From Estée Lauder
February 17 by Jeff Orr
A security researcher discovered an exposed database containing 440 million records belonging to beauty manufacturer Estée Lauder. The data for an education platform was publicly accessible. In this I...
Incident Of The Week: Quaker Steak & Lube Alerts Customers To Payment Card Incident
February 14 by Jeff Orr
Several independently owned restaurants in the Quaker Steak & Lube chain announced their retail point-of-sale terminals were remotely accessed and infected with malware that captured customer payment...
Incident Of The Week UPDATE: Wawa Customer Payment Card Data Found on Dark Web
February 13 by Jeff Orr
Convenience and fuel retail chain Wawa disclosed a data incident in December 2019. Now, payment card information for 30 million customers has been found for sale online. We discuss how a malware attac...
Incident Of The Week: Leak Discloses UN Data Breach From 2019
February 07 by Kayla Matthews
Hackers broke into dozens of United Nations (UN) servers in July of last year, and UN officials kept quiet about it. The worst part? PII was stolen and employees were kept in the dark. Cyber Security...
Incident Of The Week: Misconfigured Servers Result In 250 Million Microsoft Customer Support Records Exposed
January 24 by Jeff Orr
A misconfiguration applied to five Elasticsearch database servers in December 2019 led to the exposure of 250 million customer support records for software maker Microsoft. How should less sophisticat...
Greek Government, Intelligence Agency And Businesses Knocked Offline By Cyber-Attacks
January 20 by Jeff Orr
Several essential Greek government and communications websites went offline as the result of cyber-attacks. A Turkish hacker group claimed responsibility for the flood of site traffic. Regional discon...
Incident Of The Week: Ransomware Hits Currency Dealer Travelex
January 17 by Jeff Orr
A New Year’s Eve ransomware attack on currency dealer and forex services provider Travelex impacted customers and financial partners. The cyber-attack is the latest along with the City of New Orleans...
Incident Of The Week: Zynga Security Breach Affects 170 Million User Accounts
January 10 by Kayla Matthews
Mobile game developer Zynga disclosed unauthorized access to 170 million user records. With personal data at stake, an openness and level of transparency is needed by businesses when communicating wit...
Retail Point-Of-Sale Malware Hits Landry’s Restaurant Group
January 03 by Jeff Orr
Houston-based Landry's restaurant group recently disclosed unauthorized access to its network that supports the payment processing systems for its restaurants and food and beverage outlets. This Incid...
