Giant U.S. Computer Security Breach Exploited Very Common Software

A hacking campaign has gained access to private information from a number of government and industry organizations, including the U.S. Departments of Treasury, Commerce and Homeland Security. The cyberattacks, which were first reported this past weekend, were carried out by compromising a software platform produced by a vendor called SolarWinds. “We are aware of a […]

Continue reading


US cybersecurity firm FireEye hit by ‘state-sponsored’ attack

US cybersecurity firm FireEye says it has recently been attacked by a “highly sophisticated threat actor”, believing the hacking was state-sponsored. In a blog, FireEye CEO Kevin Mandia said company tools used for testing customers’ security had been stolen. “The attacker primarily sought information related to certain government customers,” he wrote. The blog did not […]

Continue reading


Data breach potentially exposes details of millions of booking.com and Expedia customers

Millions of hotel customers’ details could have potentially been exposed, after a software company was found to have improperly stored sensitive data. The breach was uncovered by Website Planet, which found that Prestige Software, a company responsible for a hotel reservation system used by booking.com and Expedia, had been storing years’ worth of credit card […]

Continue reading


Spotify launches ‘rolling reset’ on customer accounts, passwords linked to data leak

Spotify has issued a rolling password reset of some user accounts following the discovery of an open database containing user credentials. This week, vpnMentor researchers Noam Rotem and Ran Locar made their findings public, in which an open Elasticsearch database was found during the firm’s web mapping project. The 72GB database contained over 380 million […]

Continue reading