Incident Response

Belgian secondary school OLV Pulhof had its students' parents extorted after the school refused to pay the demanded ransom in the wake of a cyberattack following the Christmas break, reports The Record, a news site by cybersecurity firm Recorded Future.

BleepingComputer reports that multiplayer browser-based government simulation game NationStates took down its website following a security incident that infiltrated its servers and compromised player data late last month.

Organizations compromised by the Scattered Lapsus$ Hunters hacking group have been warned by Unit 221B experts against negotiating with the threat operation, which could immediately escalate extortion attempts into victim harassment while not fulfilling promises to return stolen data, according to KrebsOnSecurity.

Here’s three steps for taking data privacy more seriously this year.

Experts point out that Magecart attacks exploit third-party scripts on web browsers, bypassing traditional security controls.

Active since 2004, APT28’s sustained campaign for the past year focused on credential harvesting.

Infosecurity Magazine reports that cybersecurity incidents, including ransomware intrusions and data breaches, have been experienced by 55% of U.S. and UK organizations during the past year, 57% and 19% of which disclosed completing endpoint remediation and recovery efforts within up to six days and up to two weeks, respectively.