DeFi’s Mango DAO Lets Hacker Keep $50 Million

BEC attacks

The community of the decentralized-finance application Mango DAO received a portion of the approximately $100 million stolen this week on Saturday after allowing the hacker to keep about $50 million of the funds. The agreement brings to a close several days of tense negotiations between the hacker and Mango, which is governed by a community… Continue reading DeFi’s Mango DAO Lets Hacker Keep $50 Million

Lloyd’s of London Investigates Possible Network Breach

cyber extortion on the rise

The commercial insurance market said on Wednesday that Lloyd’s of London is investigating a possible cyber attack, with companies on high alert for intrusions as a result of the conflict between Russia and Ukraine. “Lloyd’s has detected unusual activity on its network and we are investigating the issue,” a Lloyd’s spokesperson said by email, adding… Continue reading Lloyd’s of London Investigates Possible Network Breach

Social Engineering Attack at Marriott Yields 300-400 Customer Credit Card Numbers

BEC attacks

Given Marriott’s general cybersecurity history, current expectations for the chain are low. Thus, a recent data breach that “only” compromised one property and “only” resulted in the theft of 300 to 400 customer credit card numbers appears relatively benign in comparison to its previous incidents: the 2014 mega-breach that impacted approximately 340 million customers worldwide… Continue reading Social Engineering Attack at Marriott Yields 300-400 Customer Credit Card Numbers

Hackers Steal $100 Million by Exploiting Crypto’s Weak Link

SEC fine for cryptocurrency trading company

Hackers stole approximately $100 million from a so-called cryptocurrency bridge, exposing yet another critical vulnerability in the digital-asset ecosystem. The hack of Blockchain Harmony’s Horizon bridge, which allows people to swap coins between different blockchains, occurred Thursday morning, according to a tweet from the company. It has “begun working with national authorities and forensic experts… Continue reading Hackers Steal $100 Million by Exploiting Crypto’s Weak Link

Phishing Victim Can’t Claim $5 Million Loss on Crime Policy for Money It Never ‘Held’

BEC attacks

A federal appeals court ruled that RealPage’s commercial-crime insurance policy did not cover a $5 million phishing loss because the property-management service provider never “held” any of the stolen funds. The 5th U.S. Circuit Court of Appeals upheld a victory for AIG’s National Union Fire Insurance Company of Pittsburgh, which insured RealPage against theft of… Continue reading Phishing Victim Can’t Claim $5 Million Loss on Crime Policy for Money It Never ‘Held’

More than One Million WordPress Users Impacted by GoDaddy Breach

A data breach exposed customer information including email addresses, account numbers, and passwords for more than one million GoDaddy users, the company revealed last Monday in a regulatory filing with the Securities and Exchange Commission (SEC). The breach affected users of WordPress, a web-based content management system used by bloggers and websites, according to the… Continue reading More than One Million WordPress Users Impacted by GoDaddy Breach

FBI Fake Hack Alert A ‘Tipping Point’ in Fight Against Cybercrime

Hackers using laptop computers to penetrate security systems to steal big data from the server room

The sabotage of an FBI server, which resulted in a fake alert purportedly distributed by the Department of Homeland Security, should be considered a “tipping point” in the nation’s fight against cybercrime, according to Rep. Carolyn B. Maloney (D-NY), chair of the House Oversight and Reform Committee. Maloney’s remarks came as the committee began hearings… Continue reading FBI Fake Hack Alert A ‘Tipping Point’ in Fight Against Cybercrime