Each week I publish interesting articles and ways to improve your understanding of cybersecurity. How much does a data breach cost? It could cost you 13 million as AT&T found out this week.

Projects

• TryHackMe – Vulnversity – Complete
• TryHackMe – Basic Pentesting – In Progress
• Linux Foundation – Introduction to Kubernetes (LF158) – In Progress

Videos

Articles

• What Giant Data Breaches Mean for You – The security expert who created Have I Been Pwned? shares advice for protecting sensitive data
• Fortinet confirms data breach after hacker claims to steal 440GB of files – Cybersecurity giant Fortinet has confirmed it suffered a data breach after a threat actor claimed to steal 440GB of files from the company’s Microsoft Sharepoint server.
• 23andMe to pay $30 million in genetics data breach settlement – DNA testing giant 23andMe has agreed to pay $30 million to settle a lawsuit over a data breach that exposed the personal information of 6.4 million customers in 2023
• Ex-CIA officer jailed for 10 years as spy for China – A former CIA officer has been sentenced to 10 years in prison for spying for the Chinese government.
• A disgruntled employee at a US industrial firm deleted backups and locked IT admins out of workstations in a failed data extortion attempt – Daniel Rhyne tried to extort his former employee for $750,000 before being tracked down by law enforcement
• What we know about the Hezbollah pager explosions – Thousands of people have been injured in Lebanon, after pagers used by the armed group Hezbollah to communicate dramatically exploded almost simultaneously across the country on Tuesday.
  • The Mystery of Hezbollah’s Deadly Exploding Pagers – At least 11 people have been killed and nearly 2,800 people have been injured in Lebanon by exploding pagers. Experts say the blasts point toward a supply chain compromise, not a cyberattack.
• Ticketmaster boss who repeatedly hacked rival firm sentenced – A former boss of Ticketmaster has been sentenced after pleading guilty to illegally accessing computer servers of a rival company and stealing sensitive business information.
• Chinese Man Charged for Spear-phishing Against Nasa and Us Government – US DoJ charged a Chinese national who used spear-phishing emails to obtain sensitive info from NASA, the U.S. Air Force, Navy, Army, and the FAA.
• AT&T to Pay $13 Million in Settlement Over 2023 Data Breach – AT&T has agreed to pay $13 million in a settlement with the FCC over a 2023 data breach at a third-party vendor’s cloud environment.
• Cops across the world arrest 51 in orchestrated takedown of Ghost crime platform – Italian mafia mobsters and Irish crime families scuppered by international cops
• Ivanti’s Cloud Service Appliance Attacked via Second Vuln – The critical bug, CVE-2024-8963, can be used in conjunction with the prior known flaw to achieve remote code execution (RCE).
• Disney ditching Slack after massive July data breach – The Walt Disney Company is reportedly ditching Slack after a July data breach exposed over 1TB of confidential messages and files posted to the company’s internal communication channels.

Podcasts

• No Such Podcast – How We Found Bin Laden: The Basics of Foreign Signals Intelligence