
The Cyber Bulletin:
March 2024
Brought to you by DP Solutions
Welcome to DP Solutions' Cyber Bulletin!
This monthly cyber recap, curated by our Cybersecurity Team, lists recent significant cybersecurity events, news, and breaches to keep you in-the-know on current cyber-incidents and provide recommendations.
These articles are meant to be informative, and we encourage everyone to do their own research.
Scroll down to read this month's cyber bulletin! ↓
Subscribe to the Cyber Bulletin
Another provider of cloud services says Russian intelligence hacked it
In an SEC filing, Hewlett-Packard Enterprise said they were notified in January of a cyber incident. A Russian hacking group gained access to the mailboxes of HPE's cybersecurity and marketing departments.
National Security Agency Buys Web Browsing Data Without Warrant, Letter Shows
A letter between the National Security Agency's (NSA) director and Senator Ron Wyden revealed that the NSA bought Americans' personal data, including internet browsing and location information, from commercial brokers.
YouTube stops recommending videos when signed out of Google
In a recent change, YouTube will not display recommended videos if you are not signed in to Google or if you are using Incognito mode. This also occurs if you have cleaned your search and watch history even while signed in.
Over 15,000 hacked Roku accounts sold for 50¢ each to buy hardware
Threat actors hacked Roku accounts and sold account information for as little as $0.50 per account. With this account information, purchasers could use stored credit cards to make fraudulent purchases. Threat actors were also able to collect the exposed credentials and change account information, locking users out of their accounts.
Update on Department of Public Safety data security incident
Stanford's Department of Public Safety experienced a ransomware attack in 2023. The forensic investigation identified the individuals who may have been impacted and Stanford will be sending them notification letters. The personal data accessed could include: date of birth, Social Security number, government ID, passport number, driver’s license number, email/username with password, health/medical information, digital signature, and credit credit information.