The rolling series of breaches targeting customers of cloud platform Snowflake appears to be a supply chain attack wrapped in another supply chain attack. A hacker who claims to have been involved in the attacks tells WIRED that the hackers, known as ShinyHunter, stole victims’ Snowflake credentials by first breaching …
Read More »Hackers Detail How They Allegedly Stole Ticketmaster Data From Snowflake
Hackers who stole terabytes of data from Ticketmaster and other customers of the cloud storage firm Snowflake claim they obtained access to some of the Snowflake accounts by first breaching a Belarusian-founded contractor that works with those customers. About 165 customer accounts were potentially affected in the recent hacking campaign …
Read More »Medical-Targeted Ransomware Is Breaking Records After Change Healthcare’s $22M Payout
When Change Healthcare paid $22 million in March to a ransomware gang that had crippled the company along with hundreds of hospitals, medical practices, and pharmacies across the US, the cybersecurity industry warned that Change's extortion payment would only fuel a vicious cycle: Rewarding hackers who had carried out a …
Read More »Ransomware Is ‘More Brutal’ Than Ever in 2024
Today, people around the world will head to school, doctor’s appointments, and pharmacies, only to be told, “Sorry, our computer systems are down.” The frequent culprit is a cybercrime gang operating on the other side of the world, demanding payment for system access or the safe return of stolen data. …
Read More »Apple Is Coming for Your Password Manager
The largest data breach ever may be unfolding before our very eyes. What started as incidents impacting Ticketmaster and financial services firm Santander has snowballed into a multi-pronged attack potentially impacting hundreds of companies—and hundreds of millions of people. The source of the allegedly stolen data is Snowflake, a cloud …
Read More »Microsoft Will Switch Off Recall by Default After Security Backlash
When Microsoft named its new Windows feature Recall, the company intended the word to refer to a kind of perfect, AI-enabled memory for your device. Today, the other, unintended definition of “recall”—a company's admission that a product is too dangerous or defective to be left on the market in its …
Read More »Microsoft’s Recall Feature Is Even More Hackable Than You Thought
Microsoft's CEO Satya Nadella has hailed the company's new Recall feature, which stores a history of your computer desktop and makes it available to AI for analysis, as “photographic memory” for your PC. Within the cybersecurity community, meanwhile, the notion of a tool that silently takes a screenshot of your …
Read More »The Snowflake Attack May Be Turning Into One of the Largest Data Breaches Ever
A hack against customers of the cloud storage company Snowflake looks like it may turn into one of the biggest-ever data breaches. Last week, Snowflake, which allows companies to store huge datasets on its servers, revealed that criminal hackers had been attempting to access its customers’ accounts using stolen login …
Read More »AI Is Your Coworker Now. Can You Trust It?
Generative AI tools such as OpenAI’s ChatGPT and Microsoft’s Copilot are rapidly evolving, fueling concerns that the technology could open the door to multiple privacy and security issues, particularly in the workplace. In May, privacy campaigners dubbed Microsoft’s new Recall tool a potential “privacy nightmare” due to its ability to …
Read More »This Hacker Tool Extracts All the Data Collected by Windows’ New Recall AI
When Microsoft CEO Satya Nadella revealed the new Windows AI tool that can answer questions about your web browsing and laptop use, he said one of the “magical” things about it was that the data doesn’t leave your laptop; the Windows Recall system takes screenshots of your activity every five …
Read More »