Wait—The FBI Got Hacked Over a Beef With a Guy Named Vinny?

Someone appears to have hacked an FBI server just for lulz. At least, that’s what the supposed target of the email hack believes.

To hack an FBI email system, it takes a lot of motivation, even more technical skill, and, perhaps, a dash of humor. Over the weekend, someone—or a team of someones—compromised an FBI email system and sent out a flurry of bogus messages to state and local law enforcement about a supposed cyberattack.

Read the full story here.

Nearly one billion people in China had their personal data leaked

Nearly one billion people in China had their personal data leaked, and it’s been online for more than a year

A massive online database apparently containing the personal information of up to one billion Chinese citizens was left unsecured and publicly accessible for more than a year — until an anonymous user in a hacker forum offered to sell the data and brought it to wider attention last week.

Vinny Troia, a cybersecurity researcher and founder of dark web intelligence firm Shadowbyte, said he first discovered the database “around January” while searching for open databases online.

Read the story: https://www.cnn.com/2022/07/05/china/china-billion-people-data-leak-intl-hnk/index.html

China Police Database Left Open For Over a Year, Enabling Data Leak

The Shanghai police records—containing the names, government ID numbers, phone numbers and incident reports of nearly 1 billion Chinese citizens—were stored securely, according to the cybersecurity experts.

What is likely one of history’s largest heists of personal data—and the largest known cybersecurity breach in China—occurred because of a common vulnerability that left the data open for the taking on the internet, say cybersecurity experts who discovered the security flaw earlier this year.

Read the full story here: https://www.wsj.com/articles/china-police-database-was-left-open-online-for-over-a-year-enabling-leak-11657119903

FBI email system compromised by hackers who sent fake cyberattack alert

Hackers compromised the Federal Bureau of Investigation’s external email system on Saturday, sending spam emails to potentially thousands of people and companies with a faked warning of a cyberattack.

The FBI said in a statement that the fake emails were sent from the Law Enforcement Enterprise Portal system used to communicate with state and local officials, not part of the FBI’s larger corporate email service.

Read the full story here.