A naukri.com initiative
Cyber Crime News
Securityaffairs
1w
272
Image Credit: Securityaffairs
Qantas confirms customer data breach amid Scattered Spider attacks
- Qantas confirmed a cyberattack where hackers accessed customer data through a third-party platform, linked to ongoing Scattered Spider cyber breaches.
- The airline detected and contained the breach, securing core systems but estimating that up to 6 million customer records may have been compromised.
- Qantas is enhancing security measures, notifying authorities, and providing support to affected customers, with ongoing updates through official channels.
- Scattered Spider, known for targeting the aviation industry, uses social engineering and ransomware tactics, prompting collaboration with the FBI and industry partners.
Read Full Article
16 Likes
Guardian
1w
238
Image Credit: Guardian
Qantas confirms cyber-attack exposed records of up to 6 million customers
- Qantas has announced that a cyber-attack has exposed the records of up to 6 million customers.
- The data breach included customer names, email addresses, phone numbers, birth dates, and frequent flyer numbers. It did not compromise credit card details, financial information, or passport details.
- The identity of the attacker is not yet known but is believed to be linked to the Scattered Spider ransomware group, known for targeting airlines and retail stores in the US and UK.
- Qantas has taken steps to secure its systems, informed relevant authorities, and is providing support to affected customers. Cyber-attacks in Australia have been on the rise, with various sectors experiencing data breaches.
Read Full Article
14 Likes
Ars Technica
1w
149
Image Credit: Ars Technica
US critical infrastructure exposed as feds worn of possible attacks from Iran
- Hackers affiliated with the Iranian government are likely to target industrial control systems at critical infrastructure in the US, particularly those manufactured by Israel-based companies, as retaliation for recent military actions.
- The Cybersecurity and Infrastructure Security Agency, FBI, Department of Defense Cyber Crime Center, and the National Security Agency issued a joint advisory warning US companies, especially those in the Defense Industrial Base, of the heightened risk of cyber attacks from Iran.
- Recent incidents showed hackers compromising Israeli-made control systems used in water facilities, affecting at least 75 devices, including 34 in US-based water facilities, exposing vulnerabilities like default passwords or lack of password protection.
- Security firm Censys revealed that devices from Israeli and other manufacturers like Unitronics, Orpak SiteOmat, Red Lion, and Tridium Niagara framework are not properly secured, with exposed devices increasing in number, emphasizing the importance of implementing strong passwords for protection.
Read Full Article
8 Likes
Securityaffairs
1w
422
Image Credit: Securityaffairs
Esse Health data breach impacted 263,000 individuals
- A cyberattack on healthcare provider Esse Health in April 2025 exposed data of 263,000+ patients, including SSNs and medical info.
- The breach, discovered on April 21, affected electronic medical records and phone systems.
- Stolen data included names, Social Security numbers, medical, and insurance info, impacting 263,601 people.
- Esse Health is enhancing security measures to prevent future incidents and offering free identity protection to affected individuals.
Read Full Article
25 Likes
Securityaffairs
1w
93
Image Credit: Securityaffairs
Europol dismantles €460M crypto scam targeting 5,000 victims worldwide
- Europol dismantled a cryptocurrency fraud ring that scammed over 5,000 victims worldwide, laundering €460 million.
- The operation, named Operation Borrelli, was led by Spain's Guardia Civil and involved collaboration with law enforcement in Estonia, France, and the U.S.
- The scammers targeted victims through crypto romance scams on chats or dating apps, stealing money through fake platforms and using complex transfers to hide it.
- Five members of the criminal network were arrested, and authorities performed searches between the Canary Islands and Madrid to curb the cryptocurrency investment fraud.
Read Full Article
5 Likes
Schneier
1w
90
How Cybersecurity Fears Affect Confidence in Voting Systems
- Erosion of trust in voting systems due to cybersecurity fears and misinformation campaigns.
- Technological advancements in voting systems have made them more efficient and accessible.
- Even a single cyberattack, real or fictional, can significantly impact public trust in elections.
- Public education on election processes and trust-building measures are crucial for democratic resilience.
- Promoting public trust in voting systems is as important as ensuring their technical security.
Read Full Article
5 Likes
Securityaffairs
2w
295
Image Credit: Securityaffairs
Ahold Delhaize data breach affected over 2.2 Million individuals
- A ransomware attack on Ahold Delhaize led to a data breach affecting over 2.2 million individuals.
- The breach impacted various US subsidiaries of Ahold Delhaize, exposing personal information such as contact details, financial data, health information, and employment records.
- The company is offering the affected individuals two years of free credit monitoring and identity protection.
- In April 2025, the Inc Ransom group claimed responsibility for the cyberattack, stating that internal data was likely stolen and posted on their leak site.
Read Full Article
17 Likes
Guardian
2w
866
Image Credit: Guardian
More than 25% of UK businesses hit by cyber-attack in last year, report finds
- More than 25% of UK businesses have experienced cyber-attacks in the past year, with the number rising from 16% previously.
- 73% of business leaders believe a cybersecurity incident will disrupt their business in the next 12 to 24 months.
- Cybercriminals are leveraging advanced techniques, targeting critical infrastructure and data breaches, exploiting vulnerabilities in buildings' technology systems.
- Rics warns of outdated operating systems in buildings and identifies operational technology as high-risk areas for cyber-attacks.
Read Full Article
19 Likes
Mensjournal
2w
167
FBI Issues Warning After Hackers Breach Major U.S. Airlines
- The FBI issued a warning after a cybercriminal group known as Scattered Spider breached the computer networks of major airlines in the U.S. and Canada during the peak summer travel season.
- The hacking campaign did not affect flight safety or operations but raised concerns as Scattered Spider is known for utilizing social engineering tactics to gain deep access to internal systems.
- The FBI stated that the group targets airlines, contractors, and vendors to expose vulnerabilities, steal sensitive data for extortion, and deploy ransomware once inside a victim's network.
- While affected airlines such as Hawaiian Airlines and WestJet are assessing recent cyberattacks, experts suggest that the lack of disruption may be due to strong internal safeguards, though the aviation industry remains on high alert.
Read Full Article
10 Likes
Pymnts
2w
25
Image Credit: Pymnts
Scattered Spider Hackers Reportedly Targeting Airline Industry
- The FBI has warned about cyberattacks from the hacking group Scattered Spider targeting the air travel industry.
- Google’s Mandiant and Palo Alto Networks' Unit 42 also reported similar cyberattacks by Scattered Spider on the aviation sector.
- Scattered Spider, known for tactics like social engineering and phishing, has been behind major cyberattacks, including the MGM Casinos data breach and a recent attack on Marks & Spencer.
- The FBI stated that large corporations, their third-party IT providers, and anyone in the airline ecosystem could be at risk of cyberattacks by Scattered Spider.
Read Full Article
1 Like
Securityaffairs
2w
193
Image Credit: Securityaffairs
Security Affairs newsletter Round 530 by Pierluigi Paganini – INTERNATIONAL EDITION
- FBI warns of Scattered Spider targeting the airline sector
- China-nexus hackers hijack SOHO devices for espionage
- Critical ISE flaws in Cisco fixed
- Various cyberattacks and data breaches reported worldwide
Read Full Article
11 Likes
Securityaffairs
2w
189
Image Credit: Securityaffairs
The FBI warns that Scattered Spider is now targeting the airline sector
- The FBI has issued a warning that the cybercrime group Scattered Spider is targeting the airline sector using social engineering techniques to gain access.
- Scattered Spider is focusing on large corporations and their third-party IT providers within the airline ecosystem, putting trusted vendors and contractors at risk.
- The cybercriminals steal data for extortion and deploy ransomware; FBI is collaborating with the aviation industry to combat these attacks and assist victims.
- Additionally, Unit 42 has warned about Muddled Libra targeting the aviation industry with advanced social engineering methods, while Google highlighted Scattered Spider's shift toward targeting U.S. companies after UK retailer attacks.
Read Full Article
11 Likes
Guardian
2w
64
Image Credit: Guardian
Online hacks to offline heists: crypto leaders on edge amid increasing attacks
- Mohammed Arsalan's online success in cryptocurrencies led to a dangerous offline kidnapping incident.
- The surge in physical attacks against digital asset holders highlights the need for increased security.
- Crypto industry faces offline threats, from kidnappings to heists, prompting high security measures.
- As the value of cryptocurrencies soars, the industry grapples with protecting assets in both digital and physical realms.
Read Full Article
3 Likes
Dataprivacyandsecurityinsider
2w
255
New Hires More Likely to Fall for Phishing + Social Engineering Attacks
- A recent study by Keepnet reveals that 71% of new hires click on phishing emails within 3 months of starting their job, making them 44% more susceptible to phishing and social engineering attacks compared to seasoned employees.
- The survey, based on responses from 237 companies, highlights that new employees lack adequate security training during onboarding and are more likely to be targeted due to their inexperience.
- New hires are particularly vulnerable to phishing attacks impersonating top company officials like the CEO or HR, with a 45% higher likelihood of falling for such emails compared to experienced staff.
- Providing adaptive phishing simulations and behavior-based training to new employees can reduce phishing risk by 30% post-onboarding, emphasizing the importance of early and continuous cybersecurity training for all staff.
Read Full Article
15 Likes
Securityaffairs
2w
65
Image Credit: Securityaffairs
Kai West, aka IntelBroker, indicted for cyberattacks causing $25M in damages
- British national Kai West, also known as IntelBroker, has been indicted in the U.S. for operating a global hacking scheme that involved stealing and selling data, resulting in millions of dollars in damages.
- Kai West, aged 25, was arrested in France in February 2025 and is currently held in pre-trial detention as the U.S. seeks extradition for cybercrimes.
- West, who operated under the online alias 'IntelBroker,' is accused of leading CyberN[——] from 2023 to 2025, breaching over 40 organizations, stealing sensitive data, and causing over $25 million in damages by selling the stolen data.
- The charges against Kai West include computer intrusion and wire fraud, carrying potential sentences of up to 20 years. The case is being led by the Complex Frauds and Cybercrime Unit, with international partners assisting in the investigation.
Read Full Article
3 Likes
For uninterrupted reading, download the app