An in-depth report by threat intelligence researchers reveals that most combolists and URL-login-password files sold or circulated on dark web markets are outdated, misleadingly marketed, and often repackaged from older breaches, reports GBHackers News.
Handala hacktivists claim attack against independent Iranian news outlet Cybernews reports that independent Iranian news provider Iran International had all of its systems and communications purportedly breached by the pro-Iranian hacktivist operation Handala Hack, which also claimed to exfiltrate the firm's entire internal data dump.
Hackread reports that the nascent SatanLock ransomware gang, which has immediately gained prominence after compromising 67 organizations weeks after its emergence in early April, has decided to expose data pilfered from all its victims as it announced the imminent cessation of its operations.
Reuters reports that leading South Korean telecommunications provider SK Telecom has been ordered by the country's Ministry of Science and ICT to pay an almost $22,000 fine and implement security measures every quarter following a cyberattack disclosed in April that compromised 26.96 million universal subscriber identity module cards.
Online applicant tracking platform TalentHook had almost 26 million files, most of which are CVs belonging to U.S. job seekers, accidentally leaked by an unsecured Azure Blob storage container, according to Cybernews.
Security Affairs reports that major Brazilian recruitment and selection service platform CIEE One was discovered by Resecurity to have had 248,725 records belonging to businesses and trainees exfiltrated and later exposed by the financially motivated underground data broker "888".
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
