Dropbox files notice of breach with SEC

https://www.sec.gov/Archives/edgar/data/1467623/000146762324000024/dbx-20240429.htm

At the very least, the actor(s) was able to obtain hashed passwords, OAUTH tokens, some MFA, phone numbers and API keys. They noticed this on April 24, 2024 according to the 8-K filed with the SEC

The investigation is continuing… AKA change passwords and inventory your data so you are prepared to evaluate your risk

100k ChatGPT accounts found for sale on “dark web” since 2022.

https://www.theregister.com/2023/06/20/stolen_chatgpt_accounts/

Norton Password Manager accounts breached by credential-stuffing attacks in 2022

https://www.bleepingcomputer.com/news/security/nortonlifelock-warns-that-hackers-breached-password-manager-accounts/

Bleeping Computer

Watch out for Fake Chrome update error messages

https://news.trendmicro.com/2023/05/01/fake-google-chrome-update-error-message/

Credit: NTT Security via TrendMicro.com

Vulnerability in HP printer firmware code FutureSmart 5.6 will take 90 days to fix. HP recommended downgrading the firmware but later reversed mitigation recommendation saying the risk period is “small”.

https://www.bleepingcomputer.com/news/security/hp-to-patch-critical-bug-in-laserjet-printers-within-90-days/

Lessons learned: One of the factors in the LastPass breach was an Engineer’s failure to update Plex on a home computer

https://thehackernews.com/2023/03/lastpass-hack-engineers-failure-to.html

Accounts for 71k Chick-fil-A customers breached over multiple months in credential stuffing attack

https://www.bleepingcomputer.com/news/security/chick-fil-a-confirms-accounts-hacked-in-months-long-automated-attack//

Binary code on a laptop by Markus Spiske is licensed under CC-CC0 1.0

Reddit employees fall prey to phishing campaign that resulted in a breach. Access granted to source code, internal documents and business systems; recommends MFA and Password Manager

https://www.tomsguide.com/news/reddit-hit-by-data-breach-after-hackers-targeted-its-employees-what-you-need-to-know

https://www.bleepingcomputer.com/news/security/hackers-breach-reddit-to-steal-source-code-and-internal-data/

Gaming and gambling industries under attack

https://thehackernews.com/2023/02/experts-warn-of-ice-breaker.html

JIT for Black Friday shopping: FBI releases tips to help protect your systems, your data and your money safe

https://www.fbi.gov/how-we-can-help-you/safety-resources/scams-and-safety/on-the-internet