Advance Auto Parts has confirmed it suffered a data breach after a threat actor attempted to sell stolen data on a hacking forum earlier this month. Advance operates 4,777 stores and 320 Worldpac branches and serves 1,152 independently owned Carquest stores in the United States, Canada, Puerto Rico, the U.S. Virgin Islands, Mexico, and various…

Read More

Microsoft has acknowledged the criticisms and recently outlined several privacy enhancements: Recall will now be switched off by default, and users are required to first enroll with Microsoft’s Windows Hello authentication system.  In an update to a previous blog post on Thursday, Microsoft outlined plans to delay the full launch, which was due to be made available…

Read More

“We can call it a backdoor, a front door, or ‘upload moderation’.” But whatever we call it, each one of these approaches creates a vulnerability that can be exploited by hackers and hostile nation states.” Amandine Le Pape, co-founder and COO of secure messaging platform Element, expressed similar privacy-focused concerns. “We’re disappointed in signs that…

Read More

The controversial spyware Pegasus and its operator, the Israeli NSO Group, is once again in the news. Last week, in documents filed in a judgment between NSO and WhatsApp, they admitted that any of their clients can target anyone with their spyware, including government or military officials because their jobs are inherently legitimate intelligence targets.…

Read More

Car dealership software-as-a-service provider CDK Global was hit by a massive cyberattack, causing the company to shut down its systems and leaving clients unable to operate their business normally. CDK Global provides clients in the auto industry a SaaS platform that handles all aspects of a car dealership’s operation, including CRM, financing, payroll, support and…

Read More

“Depending on the use case, you buy small, medium, large and extra-large versus the Dell AI factory, which is a bunch of widgets that you have to bring together,” said Neri in an interview with CRN at HPE Discover. “And then we actually build this in our factory right away. So we ship it exactly…

Read More

Jun 19, 2024NewsroomCybercrime / Crypto Security Crypto exchange Kraken revealed that an unnamed security researcher exploited an “extremely critical” zero-day flaw in its platform to steal $3 million in digital assets and refused to return them. Details of the incident were shared by Kraken’s Chief Security Officer, Nick Percoco, on X (formerly Twitter), stating it…

Read More

As solution providers position themselves to capture AI opportunities, here’s how seven channel CEOs think they can make their mark. There’s no hotter topic in the IT channel right now than AI, with solution providers across the market making their choices on how to build out their AI technology stacks and bringing new solutions to…

Read More

Jun 19, 2024NewsroomZero-Day Exploits / Cyber Espionage The China-nexus cyber espionage actor linked to the zero-day exploitation of security flaws in Fortinet, Ivanti, and VMware devices has been observed utilizing multiple persistence mechanisms in order to maintain unfettered access to compromised environments. “Persistence mechanisms encompassed network devices, hypervisors, and virtual machines, ensuring alternative channels remain…

Read More

The Kraken crypto exchange disclosed today that alleged security researchers exploited a zero-day website bug to steal $3 million in cryptocurrency and then refused to return the funds. The hack was disclosed by Kraken Chief Security Officer Nick Percoco on X, explaining that the exchange’s security team received a vague bug report on June 9th about…

Read More