Big-box retailer Kmart Corp. has been allegedly been struck by a ransomware attack that has impacted back-end services. Exclusively reported today by Bleeping Computer, the ransomware attack is believed to have involved the Egregor ransomware gang. First detected in September, Egregor uses a so-called double-tap attack in that data is both encrypted and stolen. Those behind the ...

The personal information of 243 million people in Brazil has been exposed online after a password to access the information was left by the developers in the source code of an official Brazilian government website. First reported Wednesday by Brazilian publication Estadao, the data was gathered by Sistema Único de Saúde, Brazil’s national health system. The exposed ...

S&P Dow Jones Indices LLC, the company behind various stock market indices today announced that it plans to launch a global cryptocurrency indexing service in 2021. The service, provided in partnership with crypto data provider Lukka Inc. will provide S&P DJI-branded and customized indexing and benchmarking solutions supported by Lukka’s crypto-asset pricing data. According to Reuters, ...

Researchers at International Business Machines Corp. have uncovered a global phishing campaign targeting the distribution of COVID-19 vaccines. The campaign consists of “spear phishing” emails seeking to gain credentials of employees at companies currently in the process of shipping coronavirus vaccines. IBM Security Intelligence explained in a blog post today that the operation targeted the COVID-19 ...

Dell Technologies Inc. today announced a range of new intrinsic security solutions and services designed to protect customer data across the supply chain, infrastructure, devices and services. Focusing on helping customers lower security risk and become more cyber-resilient, the announcement includes a new secure supply chain offering designed to make secure commercial personal computers more secure. There’s also ...

Stolen credentials forum OGUsers has been hacked again, with user data stolen — a case of hackers being hacked. First reported today by Krebs on Security, the hack is said to have taken place about a week ago with the front page of OGUsers defaced with a message stating that the forum’s user database had been ...

The U.S. Federal Bureau of Investigation has issued a warning in relation to cybercriminals exploiting email rule vulnerability to increase the likelihood of successful business email compromise. The warning, published Nov. 25 as a Private Industry Notification but only now made public, warns that the bureau has seen an increase in cybercriminals implementing auto-forwarding rules ...

Shares in CrowdStrike Holdings Inc. and Zscaler Inc. surged in after-hours trading today after both security companies beat analyst predictions on revenue, earnings and guidance in their quarterly earnings reports. For the quarter ended Oct. 1, CrowdStrike reported revenue jumped 86% year over year, to $232.5 million. The growth was driven by an 87% increased ...

Thousands of patient records stored by nTreatment, a company that provides electronic health and patient records to doctors and psychiatrists, has been exposed online in the latest case of a company failing to secure its cloud storage. The data, discovered and publicized today by TechCrunch on a Microsoft Azure server, included 109,000 files, a large portion said to ...

Shares in Box Inc. dropped in after-hours trading today after the company delivered weaker-than-expected fourth-quarter guidance. For the quarter ended Oct. 31, Box reported a profit before costs such as stock compensation of 20 cents a share on revenue that rose 11% from a year ago, to $196 million. Analysts had been predicting an adjusted profit of ...