FTX has stated that hackers stole $415M from its exchange. The company claims the funds have been stolen by unknown actors. More: - According to an official statement from the company, $323M in funds were transferred by unauthorized third parties, while a second transfer that amounts to $90M was again sent from an unauthorized and unknown third party.
- FTX has previously alluded to similar breaches and has not informed the public whether those previous breaches are related to this one. The stolen amount that the company alleges hackers have managed to hack away from its exchange is similar to previous claims.
- The company, which filed for bankruptcy months ago, is facing public pressure to become more transparent about its finances and its decision-making process that led to billions of dollars of customer money being lost.
- Its founder, Sam Bankman-Fried, is facing numerous charges of wire fraud, conspiracy to commit commodities fraud, conspiracy to commit securities fraud, conspiracy to commit money laundering, and conspiracy to defraud the Federal Election Commission and commit campaign finance violations.
- He could face up to 100 years in prison if found guilty on all charges.
| |
Hackers have stolen the data of over 37 million of T-Mobile's customers. The telecommunications giant claims it tracked the breach on Jan. 5, 2023. More: - The unknown threat actor managed to access an API that the company uses, resulting in a breach that affected 37 million customers.
- Hackers have likely stolen information such as:
- name,
- billing address,
- email,
- phone number,
- date of birth,
- T-Mobile account number, etc.
- According to the company, the hackers failed to gain access to affected driver's licenses, government ID numbers, Social Security numbers/tax IDs, passwords/PINs, payment card information, financial information, etc.
- Law authorities have been notified and are investigating the case, according to T-Mobile.
Zoom Out: - T-Mobile has been the target of numerous hacking campaigns in recent years. In April 2022, the Lapsus$ extortion gang breached the company using stolen employee credentials.
- In August 2021, hackers breached T-Mobile, claiming that they had access to the data of over 100 million customers.
| |
 A message from LACEWORK Discover cloud insights and harden your security posture In the latest installment of the Cloud Threat Report series, Lacework Labs covers the significant increase in efficiencies used by cybercriminals. Get insights into these trends that cover how: - Attackers are automating key discovery and exploits, taking advantage of momentary mistakes
- Simple mistakes turn into misconfigurations that attackers use to compromise your cloud identity infrastructure
- Vulnerabilities continue to stick around for months (sometimes even years) and attackers quickly exploit any new vulnerabilities
- Cryptojacking continues to be a staple in cybercriminal tool belts
Discover detailed intelligence about ongoing infrastructure compromise activities and best practices for hardening your cloud security posture. Read the Lacework Labs Cloud Threat Report, Vol. 4 today. get the report
| |
Meta has been hit with a new $5.9M fine by the Irish Data Protection Commission only months after being fined a combined $600M for breaching privacy laws. The DPC is fining the company for breaching privacy laws. More: - WhatsApp, the communication app owned by Meta, has reportedly breached EU privacy laws by failing to process personal data transparently.
- The DPC has the right to fine Meta because the company's European headquarters is in Dublin, Ireland.
- Meta stated that it disagrees with the decision and that it plans to appeal it in court.
- Since September 2022, the company has been hit with two fines that will oblige the company to pay over $600M. Both instances were related to privacy breaches.
| |
A new Android malware that lets hackers control infected phones remotely has been tracked by researchers. The malware is tracked as Hook. More: - The malware is being sold online on dark web forums.
- Hook shares a lot of the same code with the Ermac malware, raising suspicions that the two campaigns are created and operated by the same threat actor that created Ermac.
- Hook's standout feature is allowing the threat actor to take control of an infected device, but it has other capabilities such as:
- Start/stop RAT
- Perform a specific swipe gesture
- Take a screenshot
- Unlock the device
- Scroll up/down, etc.
- The malware even allows hackers to send messages on behalf of the victim's WhatsApp account.
- This campaign is mainly targeting users in the U.S., Spain, Australia, Poland, Canada, Turkey, the U.K., France, Italy, and Portugal.
| |
 A message from LINEARB Pull requests are the #1 cause of delays, toil and rework in modern software development. Why? Because they are treated the same no matter if a change is small or if it could affect the entire business. After analyzing the work of 2,000+ dev teams, LinearB found that the average pull request was waiting 4+ days before being picked up by another developer. The good news is that with some easy, automated and free help from the new dev tool gitStream, dev teams have been able to cut code-review times by 40%. Get it for free
| |
Windows has released a new update for Windows 10, patching 14 bugs that rendered devices unresponsive. These updates are considered optional. More: - This update has Microsoft added a new feature where the System setting screen shows storage alerts from Microsoft OneDrive.
- Microsoft says these alerts will be shown when users run out of storage and will offer them easy access to ways to buy extra storage from the company.
- The update, tracked as KB5019275, also fixes 13 other flaws related to Windows service that caused crashes, unresponsive features, etc.
| |
Quick Hits: - Giving dry a try this January? Do it for less. Experience great-tasting non-alcoholic beer without the hangover! Enjoy $10 off your first purchase.*
- A new report claims that over 1/3 of industrial control system security vendors have still not offered patches for security flaws that are already tracked.
- The National Cryptocurrency Enforcement Team has announced that it has arrested key members of a crypto exchange named that was used for money laundering. The operation laundered funds stolen from an illegal casino named Bitzlato.
- The operators behind the Roaming Mantis hacking campaign have added new capabilities to the malware. According to researchers, the malware now has DNS changer functions that can manipulate Wi-Fi routers and can hack DNS connections.
- Customer trust is critical. Here's how to enhance your security without overextending your resources.*
*This is sponsored content.
| |
Upcoming events at Inside: - January 23 - Inside Coffee Break (Register Here)
- January 24 - Inside Coffee Break (Register Here)
- January 25 - Amanda Natividad speaks on zero-click content, how to measure it, and other trends to keep tabs on in 2023. (Register Here) *
- January 26 - Growth Experimentation Workshop: From Strategy to Process by GrowthHackers.com (Register Here)
- January 29 - Inside Interview with Lacework - 4 Common Attack Paths in Cloud Security (Register Here)
- January 31 - AMA with LinearB - Improving workflow for developers w/ Ori Keren (Watch On Demand)
- January 31 - AMA with Gun.io - Building and managing software development teams w/ Deividi Silva (Watch On Demand)
- April 18 - Human Resources Summit'23 (Register Here)
*This is a sponsored listing.
| |
 |  | Arbër is an Inside writer who also has experience in entrepreneurship. He has experience covering Consumer Tech, Venture Capital, NFTs, Crypto, etc. Arbër holds a Bachelor's degree in Business from XAMK University in Finland. When he is not reading(and writing) business news, he chooses to watch sports or anime...and then read news about sports or anime. |   | | Editor | Aaron Crutchfield is based in the high desert of California. Over the last two decades, he has spent time writing and editing at various local newspapers and defense contractors in California. When he's not working, he can often be found looking at the latest memes with his kids or working on his 1962 and 1972 Fords. | |
| |
| |
