Latest USA news

National Student Clearinghouse data breach impacts 890 schools

U.S. educational nonprofit National Student Clearinghouse has disclosed a data breach affecting 890 schools using its services across the United States.
- Sergiu Gatlan
- September 23, 2023
- 10:04 AM
- 0
Google pays $93M to settle Android tracking lawsuit in California

California's Attorney General announced today that Google will pay $93 million to settle a privacy lawsuit alleging it violated the U.S. state's consumer protection laws.
- Sergiu Gatlan
- September 15, 2023
- 09:57 AM
- 0
Iranian hackers breach US aviation org via ManageEngine, Fortinet bugs

State-backed hacking groups have breached a U.S. aeronautical organization using exploits targeting critical Zoho ManageEngine and Fortinet vulnerabilities, a joint advisory published by CISA, the FBI, and the United States Cyber Command (USCYBERCOM) revealed on Thursday.
- Sergiu Gatlan
- September 07, 2023
- 05:32 PM
- 0
US and UK sanction 11 TrickBot and Conti cybercrime gang members

The USA and the United Kingdom have sanctioned eleven Russian nationals associated with the TrickBot and Conti ransomware cybercrime operations.
- Lawrence Abrams
- September 07, 2023
- 10:27 AM
- 0
New HiatusRAT malware attacks target US Defense Department

In a new HiatusRAT malware campaign, threat actors have targeted a server belonging to the U.S. Department of Defense in what researchers described as a reconnaissance attack.
- Sergiu Gatlan
- August 22, 2023
- 12:47 PM
- 0
US govt contractor Serco discloses data breach after MoveIT attacks

Serco Inc, the Americas division of multinational outsourcing company Serco Group, has disclosed a data breach after attackers stole the personal information of over 10,000 individuals from a third-party vendor's MoveIT managed file transfer (MFT) server.
- Sergiu Gatlan
- August 03, 2023
- 12:39 PM
- 0
Amazon agrees to $25 million fine for Alexa children privacy violations

The U.S. Justice Department and the Federal Trade Commission (FTC) announced that Amazon has agreed to pay a $25 million fine to settle alleged children's privacy laws violations related to the company's Alexa voice assistant service.
- Sergiu Gatlan
- July 21, 2023
- 08:02 AM
- 1
U.S. preparing Cyber Trust Mark for more secure smart devices

A new cybersecurity certification and labeling program called U.S. Cyber Trust Mark is being shaped to help U.S. consumers choose connected devices that are more secure and resilient to hacker attacks.
- Ionut Ilascu
- July 18, 2023
- 09:12 PM
- 3
Microsoft still unsure how hackers stole Azure AD signing key

Microsoft says it still doesn't know how Chinese hackers stole an inactive Microsoft account (MSA) consumer signing key used to breach the Exchange Online and Azure AD accounts of two dozen organizations, including government agencies.
- Sergiu Gatlan
- July 14, 2023
- 04:18 PM
- 4
Microsoft: Chinese hackers breached US govt Exchange email accounts

A Chinese hacking group has breached the email accounts of more than two dozen organizations worldwide, including U.S. and Western European government agencies, according to Microsoft.
- Sergiu Gatlan
- July 12, 2023
- 08:51 AM
- 2
CISA issues DDoS warning after attacks hit multiple US orgs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned today of ongoing distributed denial-of-service (DDoS) attacks after U.S. organizations across multiple industry sectors were hit.
- Sergiu Gatlan
- June 30, 2023
- 12:24 PM
- 0
Hundreds of devices found violating new CISA federal agency directive

Censys researchers have discovered hundreds of Internet-exposed devices on the networks of U.S. federal agencies that have to be secured according to a recently issued CISA Binding Operational Directive.
- Sergiu Gatlan
- June 27, 2023
- 02:06 PM
- 0
FTC: Amazon trapped millions into hard-to-cancel Prime memberships

The Federal Trade Commission (FTC) says Amazon allegedly used dark patterns to trick millions of users into enrolling in its Prime program and trapping them by making it as difficult as possible to cancel the automatically-renewing subscriptions.
- Sergiu Gatlan
- June 21, 2023
- 11:35 AM
- 6
CISA orders federal agencies to secure Internet-exposed network devices

CISA issued this year's first binding operational directive (BOD) ordering federal civilian agencies to secure misconfigured or Internet-exposed networking equipment within 14 days of discovery.
- Sergiu Gatlan
- June 13, 2023
- 01:33 PM
- 0
Russians charged with hacking Mt. Gox crypto exchange, running BTC-e

Russian nationals Alexey Bilyuchenko and Aleksandr Verner have been charged with the 2011 hacking of the leading (at the time) cryptocurrency exchange Mt. Gox and the laundering of around 647,000 bitcoins they stole.
- Sergiu Gatlan
- June 09, 2023
- 11:57 AM
- 2
Amazon faces $30 million fine over Ring, Alexa privacy violations

Amazon will pay $30 million in fines to settle allegations of privacy violations related to the operation of its Ring video doorbell and Alexa virtual assistant services.
- Sergiu Gatlan
- May 31, 2023
- 04:44 PM
- 2
Chinese hackers breach US critical infrastructure in stealthy attacks

Microsoft says a Chinese cyberespionage group it tracks as Volt Typhoon has been targeting critical infrastructure organizations across the United States, including Guam, an island hosting multiple military bases, since at least mid-2021.
- Sergiu Gatlan
- May 24, 2023
- 04:43 PM
- 2
US sanctions orgs behind North Korea’s ‘illicit’ IT worker army

The Treasury Department's Office of Foreign Assets Control (OFAC) announced sanctions today against four entities and one individual for their involvement in illicit IT worker schemes and cyberattacks generating revenue to finance North Korea's weapons development programs.
- Sergiu Gatlan
- May 23, 2023
- 12:38 PM
- 1
Pentagon explosion hoax goes viral after verified Twitter accounts push

Highly realistic AI-generated images depicting an explosion near the Pentagon that went viral on Twitter caused the stock market to dip briefly earlier today.
- Sergiu Gatlan
- May 22, 2023
- 02:14 PM
- 3
FBI nukes Russian Snake data theft malware with self-destruct command

Cybersecurity and intelligence agencies from all Five Eyes member nations took down the infrastructure used by the Snake cyber-espionage malware operated by Russia's Federal Security Service (FSB).
- Sergiu Gatlan
- May 09, 2023
- 12:29 PM
- 7