Data Security

The ShinyHunters gang is exploiting a combination of old and zero-day vulnerabilities, referred to as a "gadget chain," to target both cloud and on-premises Oracle PeopleSoft instances.

The breach involves a database managed by a third-party vendor used by SoFi Securities (Hong Kong) Limited.

The FTC's order stems from allegations that Illuminate failed to implement reasonable security controls, contributing to a December 2021 cyberattack.

Pink avoids traditional malware, instead employing voice phishing (vishing) to trick employees into visiting credential-stealing domains.

Spanish hacker José Luis Huertas, known online as Alcasec, has been sentenced to two years and seven months in prison after accepting a plea deal.

The breach, reported by Have I Been Pwned, exposed nearly 64,000 accounts, including email addresses, usernames, scrambled passwords, IP addresses, and support tickets.