Content by Doug Olenick

As Classes Resume, Schools Face Ransomware Risk

Doug Olenick  •  August 26, 2020

Cybersecurity professionals expect a spike in ransomware attacks against school districts and universities this fall as new hybrid learning environments go online and unpatched equipment that has spent months in the homes of students and faculty is reconnected to school networks.

Massive Freepik Data Breach Tied to SQL Injection Attack

Doug Olenick  •  August 24, 2020

Freepik Co. says an SQL injection attack led to the leak of 8.3 million email addresses and 3.7 million hashed passwords for users of its Freepik graphic resources app and Flaticon icon database platform.

University of Utah Pays Ransom to Avoid Data Disclosure

Doug Olenick  •  August 21, 2020

The University of Utah paid a $457,000 ransom to stop a hacker from disclosing data stolen in a July ransomware attack on the network of its College of Social and Behavioral Science.

Final Report: More 2016 Russian Election Hacking Details

Doug Olenick  •  August 18, 2020

The Senate Intelligence Committee Tuesday released its fifth and final report on Russia's attempts to influence the 2016 election, providing more details on how Russian hackers resided on Democratic National Commitee servers for months and citing shortcomings in the FBI's investigation.

North Korean Hackers Wage Job-Themed Spear-Phishing Attacks

Doug Olenick  •  August 14, 2020

Hackers with suspected ties to North Korea's government are conducting a cyber espionage campaign that's circulating "job opportunity" spear-phishing emails targeting employees of defense contractors, according to the security firm ClearSky.

Maze Reportedly Posts Exfiltrated Canon USA Data

Doug Olenick  •  August 12, 2020

The Maze ransomware group has posted on its darknet website some data it claims it stole during a recent attack against Canon USA, according to the security firm Emsisoft.

BEC Scam Costs Trading Firm Virtu Financial $6.9 Million

Doug Olenick  •  August 11, 2020

High-speed trading firm Virtu Financial says it lost $6.9 million in a business email compromise scam in May. The company is now suing its insurer for failure to cover the loss.

The Debate Over Trump 'Ban' of TikTok, WeChat

Doug Olenick  •  August 7, 2020

President Donald Trump's executive order banning the Chinese-owned TikTok and WeChat apps could prove to be unenforceable, some privacy and security specialists say. But some Republican lawmakers hailed the move, citing the national security risks posed by the apps.

Garmin Reportedly Paid a Ransom

Doug Olenick  •  August 5, 2020

Garmin, a fitness tracker and navigation device firm, apparently paid a ransom to recover from a July 23 security incident that encrypted several of its systems, according to two news reports as well as expert analysis. The company says it's still experiencing 'temporary limitations" on services.

Why Flash Player Removal Should Be a Priority

Doug Olenick  •  August 4, 2020

Adobe Flash Player, which has been patched hundreds of times during its lifetime to address vulnerabilities, will no longer be supported after Dec. 31, leaving an attack vector that can be exploited by malicious actors unless it's removed. That's why eliminating all instances of Flash Player is so urgent.

Twitter Hack: Suspects Left Easy Trail for Investigators

Doug Olenick  •  August 3, 2020

Suspects in the epic attack against Twitter were uncovered, in part, by the use of their real photo identification for cryptocurrency accounts they used to broker the sale of stolen usernames. The mistakes proved crucial to their identification, according to court documents.

3 Charged in Twitter Hack

Doug Olenick  •  July 31, 2020

A Florida teenager and a second unidentified individual were arrested and a third man was charged in connection with hacking 130 high-profile Twitter accounts to pull off a cryptocurrency scam,

Twitter Hackers Targeted Employees With Phone Phishing

Doug Olenick  •  July 31, 2020

The hackers who hijacked 130 high-profile Twitter accounts as part of a cryptocurrency scam earlier this month used a telephone-based spear-phishing attack to obtain employee credentials, the social media company says.

Former Twitter Staffers Face Additional Charges

Doug Olenick  •  July 29, 2020

Federal prosecutors have filed a superseding indictment with additional charges against two former Twitter employees and a Saudi national who were originally charged in November. They're alleged to have gathered data on behalf of the Saudi Arabian government.

Garmin Confirms Hackers Encrypted Several Systems

Doug Olenick  •  July 27, 2020

Garmin has acknowledged that a hack attack that encrypted several of its systems led to outages that affected several of the company's fitness and aviation products along with knocking its homepage and customer service centers offline. As of Monday, several affected services were again operating.