This Week in Cybersecurity
Each week at Applied Tech we recap the biggest cybersecurity news headlines from the week to keep you informed and ready to face the latest threats. Here’s your breakdown for the week of May 16th – 22nd.
Fluke Corp Breach
Over 18,000 people have been notified of a data breach at Fluke Corporation that occurred in August of last year.
The breach compromised highly sensitive personal information including SSNs, birth dates, and whether each individual self-identifies as having a disability. The breach reportedly lasted 2 months and was the result of an exploited vulnerability in a third-party application used by the company.
Popular ransomware group Clop has claimed the breach, listing Fluke Corporation on its dark web leak site. It’s unknown if Fluke has paid a ransom or how much Clop demanded, since Fluke Corp has not yet acknowledged the ransomware group’s claim.
Source: Comparitech
Read More
7-Eleven Breached
ShinyHunters strikes yet again, this time hitting the world’s largest convenience store chain 7-Eleven.
The hacking group broke into 7-Eleven’s systems early last month and claims to have stolen over 600,000 Salesforce records. It’s unclear how many people are affected at this time.
Source: SecurityWeek
Read More
Grafana Supply-Chain Attack
A supply-chain attack on the TanStack npm affected a GitHub workflow token, causing a data breach at Grafana last week.
The attack was carried out via TanStack packages infected with credential-stealing code, which was taken into Grafana’s CI/CD workflow and executed, giving GitHub tokens to the attackers. Source code was stolen in this attack as well as operational information and other business details.
The compromised information does not include any customer data.
Source: Bleeping Computer
Read More
Applied Tech is Now Part of Heartland Business Systems (HBS)
Now with even more resources, broader capabilities, deeper technical expertise, and continued investment in modern technology, partnering with us for managed IT services gives you access to top-notch technical support that helps your business scale its IT capabilities, boost resilience, and streamline processes. Discover how we can take your organization’s IT to the next level and protect you from the latest cyberthreats making headlines by getting in contact with our team.
Liberty Mutual Class Action
Insurance company Liberty Mutual is being faced with a class action lawsuit related to a recent data breach that compromised customer data.
The attack, which was carried out by the Everest ransomware group, put customer PII at risk after the group posted the stolen data on its dark web leak site. Plaintiffs in the lawsuit claim that Liberty Mutual failed to properly protect its customers’ data, leaving the insurance company faced with claims of negligence, breach of implied contract, invasion of privacy, and more.
Source: AL
Read More
GitHub Breached
A GitHub employee recently downloaded a poisoned VSCode extension, compromising their device and leading to the exfiltration of GitHub internal repositories.
As soon as the malware was detected, the company made moves to stop it, including removing the malware, isolating the endpoint, and launching investigation into the incident.
A group of threat actors known as TeamPCP has claimed responsibility for the incident and is reportedly selling the stolen data on the dark web.
Source: TechRadar
Read More
About Applied Tech
Applied Tech is a leading IT and cybersecurity services provider dedicated to helping businesses protect their digital assets. Our proactive and strategic services include cloud management, security, productivity, and IT growth strategy. With a team of experienced professionals, we provide unique solutions tailored to your IT needs.
Protect your business with Applied Tech’s fully managed IT services, co-managed support, and security assistance. With IT services focused on your business goals, keep your team productive and your data secure.
