Back to home
Technology

Voice phishers strike again, this time hitting Cisco

Source

Ars Technica

Published

TL;DR

AI Generated

A Cisco representative was targeted in a voice phishing attack, leading to the exposure of profile information from a third-party customer relationship management system. The compromised data included basic account details like names, addresses, email addresses, and phone numbers of Cisco.com users. Fortunately, sensitive information like passwords was not exposed, and there was no evidence of other CRM instances being affected. Cisco reassured that its products and services were not compromised in the breach.

Read Full Article

Similar Articles

How a cavalcade of blunders gave unauthorized users access to Claude Mythos — restricted model accessed by third parties, thanks to knowledge from data breach

How a cavalcade of blunders gave unauthorized users access to Claude Mythos — restricted model accessed by third parties, thanks to knowledge from data breach

Unauthorized users gained access to Anthropic's cybersecurity AI model, Claude Mythos, through a breach that exposed proprietary AI models. Despite Mythos' capabilities in finding vulnerabilities, it couldn't prevent unauthorized access through a third-party contractor. The breach stemmed from a hack at Mercor, which led to a chain of breaches involving third-party tools. This incident underscores the importance of cybersecurity and the vulnerability posed by the human element in digital security. As AI tools like Mythos become more prevalent, the need for robust security measures is increasingly crucial to prevent unauthorized access and data breaches.

Tom's Hardware
Two UK teens charged in connection to Scattered Spider ransomware attacks

Two UK teens charged in connection to Scattered Spider ransomware attacks

UK teenager Thalha Jubair has been charged by federal prosecutors for his involvement in the Scattered Spider ransomware attacks on 47 US companies, resulting in over $115 million in ransom payments. The group demanded hefty ransoms from victims after breaching their networks and threatened to publish or sell confidential data. Another UK teen, Owen Flowers, was also charged in connection with a cyberattack on Transport for London. The recovery effort for the agency's public transit system lasted months due to the breach.

Ars Technica
How weak passwords and other failings led to catastrophic breach of Ascension

How weak passwords and other failings led to catastrophic breach of Ascension

A US senator has urged the Federal Trade Commission to investigate Microsoft for cybersecurity negligence in the Ascension ransomware breach, which affected 140 hospitals and exposed 5.6 million patient records. The breach began with malware on a contractor's laptop, leading attackers to Ascension's Windows Active Directory, a critical network asset. The senator criticized Microsoft for supporting an outdated authentication protocol that allowed attackers to exploit vulnerabilities. The breach highlights the importance of strong security measures to prevent such catastrophic incidents.

Ars Technica
Japan to subsidize undersea cable vessels over 'very serious' national security concerns — will front up to half the cost for $300 million vessels bought by NEC

Japan to subsidize undersea cable vessels over 'very serious' national security concerns — will front up to half the cost for $300 million vessels bought by NEC

Japan plans to subsidize NEC's purchase of cable-laying ships to bolster national security. The government is willing to cover up to half of the $300 million cost per vessel. NEC, a major player in undersea cables, currently leases ships but faces security risks due to reliance on charters. The move comes amid rising concerns over undersea cable attacks globally. NEC sees owning ships as a strategic advantage despite the financial commitment.

Tom's Hardware

We use cookies

We use cookies to ensure you get the best experience on our website. For more information on how we use cookies, please see our cookie policy.