Duncan Riley
Latest from Duncan Riley
Darkside ransomware group donates part of its extorted proceeds to charities
In a bizarre case that is being compared to the saga of Robin Hood, a ransomware group has started donating some of its extorted proceeds to charities. The Darkside ransomware group and related ransomware first emerged in August and was linked to previous groups GandCrab and Sodinokibi at the time. Although there are similarities in the ...
Mobile browser vulnerabilities allow hackers to spoof website addresses
Vulnerabilities have been found in multiple mobile browsers that allow hackers to spoof the URL of websites in the address bar. Detailed today by researcher Tod Beardsley at Rapid7 Inc., the address bar spoofing vulnerabilities were found in Apple Inc.’s Safari, Opera Touch/Mini, Yandex, Bolt Browser, RITS Browser and UC Browser. Although most of those are not ...
Low-code enterprise app maker startup Retool raises $50M on $925M valuation
Low-code enterprise app maker startup Retool Inc. said today it has raised $50 million in new funding on a valuation of $925 million, just shy of unicorn status. The Series B round was led by Sequoia Capital and included the founders of GitHub, Gusto, PagerDuty, Plaid, Segment, Stripe and Y Combinator. Founded in 2017, Retool offers a ...
Banyan Security adds new access features to its zero-trust platform
Security firm Banyan Security today announced new features in its Zero Trust Remote Access Platform that are designed to assist access to critical engineering resources. The new features help engineers and software developers access the engineering resources and environments they need while providing a uniform security posture across the entire corporate organization without the need for ...
Data stolen in hack of medieval fantasy online game Albion Online
Albion Online, a free medieval fantasy massively multiplayer online role-playing game, has suffered a data breach. The site and game were established in 2017 and has a user base of about 2.36 million players. The data breach allegedly occurred not in the game itself but the game’s forum. Albion Online uses forum software called WoltLab Suite. ...
Cryptocurrency ‘mixer’ fined $60M for running an unregistered money business
The U.S. Financial Crimes Enforcement Network today imposed a $60 million penalty against the founder of two cryptocurrency “mixer” services on the grounds that they breached U.S. law. The accused, Larry Dean Harmon, is alleged to be the operator of Helix and Coin Ninja, sites which provided mixers or “tumbler” services. Cryptocurrency mixer services are ...
Justice Department indicts Russians linked to the ‘Sandworm’ hacking group
The U.S. Department of Justice has indicted six Russians related to the so-called “Sandworm” hacking group that’s allegedly linked to hacking incidents, including those that targeted the Pyeongchang Winter Olympics, the 2017 French elections and the NotPetya ransomware attacks. The six hackers, alleges the indictment unsealed today, are all members of Unit 74455 of the Russian Main ...
VOIP provider Broadvoice exposes 350M customer records on Elasticsearch cluster
A database of more than 350 million customer records belonging to voice over-internet-protocol company Broadvoice has been found exposed online in the latest case of a company failing to secure its cloud storage. Discovered and publicized Oct. 15 by security researcher Bob Diachenko at Comparitech, the data was found on an unprotected Elasticsearch cluster. The data included ...
Credit card details stolen from Dickey’s BBQ customers published on dark web forum
Some 3 million credit card numbers belonging to customers of Dickey’s Barbecue Restaurants Inc., the largest BBQ franchise in the U.S., are being offered for sale on the dark web after the company was hacked. The stolen credit card details were discovered on a dark web carding site called “Jokers Stash” by security researchers at Gemini ...
Customer data stolen in hack that targeted bookseller Barnes & Noble
Bookseller Barnes & Noble Inc. has been hacked and the bookseller warned customers their data has been stolen. Barnes & Noble said it was hacked Oct. 10. The details are somewhat vague and the company only said it was a “victim of a cybersecurity attack.” According to an email sent to customers, Barnes & Noble ...