Here are this week’s highlights in cybersecurity:

  • Hackers stole code-signing certificates for GitHub’s Desktop and Atom applications after gaining access to some of its repositories. Github will revoke the certificates on February 2. More
  • Hackers breached JD Sports and stole information such as name, billing address, delivery address, email address, phone number, order details and the final four digits of payment cards of 10 million customers. More
  • Latest version of the Prilex Point-of-Sale malware is able to block secure, contactless credit card transactions, forcing consumers to insert credit cards that are then stolen by the malware. More
  • ION Cleared Derivatives (part of ION Markets), was breached by the LockBit ransomware group which lead to manual processing of trades and inducing delays. More
  • Former Ubiquiti engineer pleads guilty to trying to extort his employer for 2 million dollars while posing as an anonymous hacker. As retaliation for not being payed, he caused false news stories to be published about the company, which resulted in his company’s market capitalization plummeting by over $4 billion in 1 day. More

Don’t have time to check this page? You can get the news summary every week in your email inbox by subscribing to my newsletter.