Mailchimp Suffers Another Security Breach Compromising Some Customers' Information

The Hacker News Daily Updates [Newsletter]( [cover]( [Data Classification for Cloud Security]( How to Classify and Protect Cloud Data at Scale [Download Now]( Sponsored LATEST NEWS Jan 19, 2023 [6 Types of Risk Assessment Methodologies + How to Choose]( An organization’s sensitive information is under constant threat. Identifying those security risks is critical to protecting that information. But some risks are bigger than others. Some mitigation options are more expensive than others. How do you make the right decision? Adopting a formal risk assessment process gives you the information you need to set priorities. There are many ways ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Bitzlato Crypto Exchange Founder Arrested for Aiding Cybercriminals]( The U.S. Department of Justice (DoJ) on Wednesday announced the arrest of Anatoly Legkodymov (aka Gandalf and Tolik), the cofounder of Hong Kong-registered cryptocurrency exchange Bitzlato for allegedly processing $700 million in illicit funds. The 40-year-old Russian national, who was arrested in Miami, was charged in a U.S. federal court with "conducting a money transmitting business ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Reduce your attack surface and automatically mitigate risk]( You can't protect what you don't know. Shine a light on dark data with SmallID: find secrets in dev environments, discover high risk data across the cloud, and lock it down. Get up and running in minutes with SmallID in an exclusive free trial for ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Mailchimp Suffers Another Security Breach Compromising Some Customers' Information]( Popular email marketing and newsletter service Mailchimp has disclosed yet another security breach that enabled threat actors to access an internal support and account admin tool to obtain information about 133 customers. "The unauthorized actor conducted a social engineering attack on Mailchimp employees and contractors, and obtained access to select Mailchimp accounts using ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Earth Bogle Campaign Unleashes NjRAT Trojan on Middle East and North Africa]( An ongoing campaign dubbed Earth Bogle is leveraging geopolitical-themed lures to deliver the NjRAT remote access trojan to victims across the Middle East and North Africa. "The threat actor uses public cloud storage services such as files[.]fm and failiem[.]lv to host malware, while compromised web servers distribute NjRAT," Trend Micro said in a report published Wednesday. Phishing ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Iranian Government Entities Under Attack by New Wave of BackdoorDiplomacy Attacks]( The threat actor known as BackdoorDiplomacy has been linked to a new wave of attacks targeting Iranian government entities between July and late December 2022. Palo Alto Networks Unit 42, which is tracking the activity under its constellation-themed moniker Playful Taurus, said it observed the government domains attempting to connect to malware infrastructure previously identified as ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Guide: How MSSPs and vCISOs can extend their services into compliance readiness without increasing cost]( Compliance services are emerging as one of the hottest areas of cybersecurity. While compliance used to be mainly the province of large enterprises, times have changed, and it is now a day-to-day concern for a growing number of small and medium businesses. Even when these organizations are not regulated, SMEs often aim to follow compliance and/or security frameworks either for their own ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [Critical Security Vulnerabilities Discovered in Netcomm and TP-Link Routers]( Security vulnerabilities have been disclosed in Netcomm and TP-Link routers, some of which could be weaponized to achieve remote code execution. The flaws, tracked as CVE-2022-4873 and CVE-2022-4874, concern a case of stack-based buffer overflow and authentication bypass and impact Netcomm router models NF20MESH, NF20, and NL1902 running firmware versions earlier than R6B035. "The ... [Read More]( [Twitter]( [Facebook]( [LinkedIn]( [cover]( [Data Classification for Cloud Security]( How to Classify and Protect Cloud Data at Scale [Download Now]( Sponsored This email was sent to {EMAIL}. You are receiving this newsletter because you opted-in to receive relevant communications from The Hacker News. To manage your email newsletter preferences, please [click here](. Contact The Hacker News: info@thehackernews.com [Unsubscribe]( The Hacker News | Pearls Omaxe, Netaji Subash Place, Pitampura, Delhi 110034 India