Transcript
Claire Aird (0:04)
Email accounts compromised at the Washington Post Shady email provider Cochley gets hacked, hackers steal data from a French university and the EU invests 145 million euros in hospital cyber security. This is the risky bulletin prepared by Catlin Kimpanu and read by me, Claire Aird. Today is the 16th of June and this podcast episode is brought to you by island, the Enterprise browser, a company that keeps data inside organisations boundaries across the browser and beyond. Hackers have gained access to some reporters email accounts at the Washington Post. The targeted journalists include those on national security and economic policy teams. According to the Wall Street Journal, the attack appears to be the work of a foreign government. The breach was discovered on Thursday and the Washington Post notified its staff on Sunday. A cyber attack has disrupted IT systems at France's Sorbonne University. The intrusion took place earlier this month. Officials say the hackers stole the banking details and Social Security numbers of some staff members. Last October, the university suffered a separate breach when hackers stole personal information of more than 73,000 staff and students. Indian car sharing platform Zoomcar says hackers have stolen 8.4 million users data. The data includes customers, names, contact details, addresses and car registration numbers. The hackers are threatening to release the data if a ransom is not paid. The company suffered a similar breach in 2018, which impacted 3.5 million users. Canadian airline WestJet is investigating a security breach. The incident affected the company's website and mobile app for several hours on Friday. The company says there were no disruptions to scheduled flights. A threat actor claims to have hacked email provider Cochley and is selling its data on an underground hacking forum. Cochley denied the breach in a post mortem published on its website. The service said its systems were too old to be impacted by a recent zero day in the roundcube webmail software. Several Threat intel researchers told Risky Business the leaked data appears authentic. Cochley is an email service that's popular with cybercriminals and ransomware groups. It's often been used to send bomb and death threats. Ukraine's military intelligence agency has reportedly hacked Russian telco Orion. Telecom sources told the Kyiv Post that the hack wiped backups and disabled 370 servers and the 500 network switches. The intrusion occurred on Russia's Independence Day, June 12. It caused widespread Internet and TV outages across four major cities. Hacktivist group BO Team was also involved in the breach. A US law enforcement agency helped a Vietnamese state company decrypt its data following a ransomware attack. The attackers demanded $2.5 million after encrypting more than 1,000 of the company's servers. Local media reported that officials worked with the US because there's no legal framework for state enterprises to pay ransoms. The firm was not named but was described as a multi billion dollar energy company. The European Union is investing 145.5 million euros to improve the cyber security of hospitals and healthcare providers. The funding will support the Horizon Europe program, which supports the use of generative AI for cybersecurity. It will also fund the Digital Europe program, which defends against ransomware attacks. Indonesian Police have arrested 38 suspects accused of running a cyber scam compound on the island of Bali. The group operated from five locations in Denpas, Sar and allegedly received orders from a handler in Cambodia. They are accused of targeting foreigners and collecting their personal data for use in future investment scams. Suspects were allegedly paid $1 for each data point. CISA has advised organisations to install firmware updates or restrict access to security cameras from four vendors. The devices from PTZ, Optics, ValueHD, MultiCam and Smtav are affected by vulnerabilities. Attackers can use hard coded admin credentials, execute malicious code and leak user credentials and configuration files. Ptzoptics has provided firmware updates. The other vendors have not replied to the researchers. Malicious Firefox add ons have been discovered in the browser's official store socket. Security says one of the add ons used pop ups to redirect users to tech support scams. Others artificially inflated likes and views on social media to manipulate user engagement metrics. And finally, Apple is adding a feature to screen calls in iOS. It will answer calls from unknown numbers and request the caller's name and reason for ringing. Users will then be asked if they want to talk. Apple estimates the new feature will help block up to 1 billion scam calls a year. The feature will ship with iOS 26 later this year. And that is all for this podcast edition. Today's show was brought to you by our sponsor enterprise browser maker Island. Find them at Island I. Thanks to your company.