Telegram data targeted by Fastlane-impersonating RubyGems packages BleepingComputer reports that threat actors have launched a supply chain attack involving a pair of RubyGems packages impersonating widely used Fastlane CI/CD plugins to compromise Telegram data.
BleepingComputer reports that leading U.S. outdoor apparel and equipment brand The North Face has confirmed that its customers' data had been pilfered following a credential stuffing intrusion against its website in April.
Virginia-based community bank MainStreet Bancshares had information from almost 5% of its customers compromised following an attack against a third-party vendor in March, according to The Record, a news site by cybersecurity firm Recorded Future.
TechCrunch reports that leading trust management platform Vanta had private information from less than 4% of its over 10,000 clients inadvertently exposed to other customers due to a product code change issue, which will be completely remediated by Wednesday.
Major U.S. cryptocurrency exchange Coinbase has reportedly been long aware of a customer data leak involving outsourcing firm TaskUs' Indian employees, which has resulted in a major breach that may cost up to $400 million, according to Reuters.
Detailed in the roadmap are the preparation, baseline understanding, planning and execution, and monitoring and evaluation stages of the process, according to the PQCC.
Information exfiltrated during the Thanksgiving intrusion had been leveraged by attackers to facilitate threatening extortion techniques against cancer patients, according to the class action.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.