U.S. global apparel and footwear company VF Corporation, which owns Vans, The North Face, and Supreme, emphasized that the December cyberattack that impacted data from 35.5 million customers did not include any bank information or credit card details, The Register reports.
TechCrunch reports that data allegedly stolen from AT&T three years ago that contained information from 73 million subscribers was confirmed to be authentic by Have I Been Pwned? administrator Troy Hunt after matching the exposed details with purportedly impacted AT&T customers.
BleepingComputer reports that threat actors could leverage the novel GoFetch side-channel attack to facilitate the exfiltration of secret cryptographic keys from devices running on Apple M1, M2, and M3 processors.
Information-stealing malware has been deployed by North Korean state-backed hacking group Kimsuky in ongoing attacks against South Korean organizations exploiting Compiled HTML Help files, reports The Hacker News.
More than 100 organizations in the U.S. and Europe have been subjected to a far-reaching StrelaStealer malware attack campaign aimed at exfiltrating email account credentials that peaked from late January to early February, BleepingComputer reports.
Lazarus, which has since tapped the Sinbad.io and Blender.io crypto-mixing services to launder proceeds from the Atomic Wallet, Axie Infinity, and Horizon Bridge attacks, may have been looking to conceal transactions with the recent use of Tornado Cash.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
