Security pros say threat actors could use the leaked data to run phishing attacks that would steal Home Depot corporate credentials and launch ransomware attacks.
Technology firms would be subjected to online data collection restrictions under a new bipartisan and bicameral draft online privacy bill unveiled by Senate Commerce Committee Chair Maria Cantwell, D-Wash., and House Energy and Commerce Committee Chair Cathy McMorris Rodgers, R-Wash., Reuters reports.
Acuity has disclosed that only old and non-sensitive data had been stolen from its breached GitHub repositories amid an ongoing U.S. State Department probe into IntelBroker's claims regarding the theft and exposure of U.S. government and military information exfiltrated from the federal technology consulting firm's systems, BleepingComputer reports.
Hackread reports that the U.S. Environmental Protection Agency had data from almost 8.5 million individuals exposed following a major data breach claimed to have been conducted by threat actor USDoD.
Attacks leveraging an already fixed critical Magento vulnerability, tracked as CVE-2024-20720, have been launched against e-commerce websites to facilitate the distribution of a Stripe payment skimmer for financial data exfiltration, according to The Hacker News.
Russia had its prosecutor general's website claimed to be compromised by Russian-speaking hacktivist operation RGB-TEAM, which admitted stealing a trove of data, including an archive with 100,000 Russian criminal records between 1993 and 2022 that has been leaked on Telegram, reports The Record, a news site by cybersecurity firm Recorded Future.
More than 4.4 million SurveyLama users had their data compromised following a breach impacting the French-owned survey rewards platform in February, SecurityWeek reports.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
