23andMe user data stolen after credential stuffing attack
6 Oct 2023
Hackers used reused passwords to access 23andMe accounts and scraped ancestry data on about 6.9 million people.
Headline-making news in information security, cyber security, privacy, and AI, from 2010 to today.
Hackers used reused passwords to access 23andMe accounts and scraped ancestry data on about 6.9 million people.
A cyber attack on MGM Resorts shut down systems across its US casinos and hotels, costing the company around $100m.
The UK Electoral Commission disclosed that hostile actors had access to its systems for over a year, including registers with data on around 40 million voters.
A zero-day in Progress Software’s MOVEit Transfer let the Clop gang steal data from thousands of organisations, including BBC, BA, and Boots.
Microsoft and Five Eyes agencies warned that a Chinese state-sponsored group, Volt Typhoon, was hiding in US critical infrastructure networks.
Security firms found a trojanised version of 3CX’s widely used phone software, later traced to an earlier supply chain attack.
OpenAI released GPT-4, a more capable model that accepts image as well as text inputs, and made it available through ChatGPT Plus.
The FBI revealed it had secretly infiltrated the Hive ransomware gang, giving decryption keys to victims before seizing its servers.
A ransomware attack attributed to LockBit stopped Royal Mail sending letters and parcels overseas for weeks.
LastPass revealed that attackers had copied a backup of customer vault data, including encrypted passwords and unencrypted website addresses.
OpenAI released ChatGPT as a free research preview, and it became one of the fastest-growing consumer applications ever.
Australian telecoms firm Optus disclosed a cyber attack exposing personal data of up to 9.8 million current and former customers.