Go to listing page

Daily Cybersecurity Roundup, March 24, 2023

From the Pacific Northwest to Seoul, data breaches continue to plague businesses across the globe. In Portland, Kroger is sounding the alarm after thousands of customers had their personal information compromised. Meanwhile, in South Korea, a beauty content platform is facing scrutiny after exposing the sensitive details of a whopping one million users. Moving on, Cl0p ransomware has been benefiting a lot from a zero-day bug; it amassed three new victims. Here’s more!

01

Portland-based Postal Prescription Services warned more than 82,000 Kroger customers of a data breach that exposed their names and email addresses, owing to an internal error.

02

South Korean beauty content platform, PowderRoom, was spotted exposing the names, contact details, email addresses, and Instagram usernames of a million users.

03

In another of its GoAnywhere MFT zero-day flaw exploitation cases, Cl0p ransomware gang claimed the City of Toronto, the Pension Protection Fund, and the U.K’s Virgin Red as its latest victims.

04

Pakistani cyberespionage group, SideCopy APT, was found targeting employees at India’s Defence Research and Development Organization (DRDO), to pilfer confidential military secrets.

05

Oak Ridge, Tennessee, suffered a ransomware attack that disrupted its technical systems and took offline its website. Network issues still persist and investigation is ongoing.

06

Reportedly, a ransomware attack took down the website and campus WiFi of Shoreline Community College, forcing the staff and students to move to remote work.

07

Spanish wholesale pharma supplier Alliance Healthcare suffered a cyberattack that impacted its servers and distribution of medicines to pharmacies.

08

GitHub rotated its private SSH key for GitHub[.]com after it was accidentally published in its public repository. While the RSA key was briefly laid bare, investigation is ongoing.

09

The CISA and the NSA released new guidance—for Identity and Access Management (IAM) admins—delineating the processes, technologies, and policies that ensure user access to data.

10

Authentication and user management service Clerk raised $15 million in Series A funding led by Madrona, with Andreessen Horowitz, Guillermo Rauch, Mango Capital, and others as participants.

Get the Daily Cybersecurity Roundup delivered to your email!