Critical Infrastructure Security, Privacy

Total DC voter roll potentially compromised in data breach

CyberScoop reports that all voters in Washington may have had their data compromised following a breach at the District of Columbia Board of Elections stemming from a ransomware attack against its third-party hosting provider DataNet, which was confirmed earlier this month. While 600,000 lines of voter records were initially disclosed to have been impacted by the breach, the DCBOE revealed that it was informed by DataNet that a copy of the U.S. capital's entire voter roll was included in the database stolen by hackers. No further information regarding the extent of compromise was provided as DataNet has not been able to determine with complete certainty if and when the database was accessed. Mandiant has already been sought by the DCBOE to look into the incident. "This remains an ongoing and active investigation," said the DCBOE, which urged voters to monitor updates regarding the breach through its social media platforms and its data breach page.

Related

Details on 2021 Chemonics hack remain scant

International development firm Chemonics, which mainly caters to the United States Agency of International Development, has not yet provided more extensive information regarding a cyberattack that compromised more than 6,000 individuals initially reported in July 2021, reports FedScoop.

Media, think tank, service spoofing conducted in APT42 cyberespionage operations

Iranian state-backed hacking operation APT42 — also known as Mint Sandstorm, Mint Phosphorous, Charming Kitten, and TA453 — has spoofed major news organizations, including The Washington Post, think tanks, such as the McCain Institute, and internet services, such as Gmail, YouTube, and Google Drive, as part of cyberespionage campaigns against journalists and human rights activists, reports CyberScoop.

Feds warn of new Kimsuky phishing attack techniques

The U.S. State Department, National Security Agency, and the FBI have issued a joint advisory warning organizations across the country, especially educational entities, non-profits, and think tanks, regarding the increasingly advanced phishing techniques leveraged by North Korean state-backed hacking group Kimsuky, also known as APT43, Emerald Sleet, and Velvet Chollima, Nextgov reports.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.