The Morning Dev

Only the news worth knowing

‹
 
  • AAPL 344.17 ▼ 1.53%
  • MSFT 535.93 ▼ 3.58%
  • NVDA 181.60 ▼ 9.26%
  • GOOGL 282.57 ▼ 2.20%
  • AMZN 260.21 ▼ 2.19%
  • META 605.08 ▼ 3.96%
  • TSLA 343.69 ▼ 10.77%
  • AVGO 291.53 ▼ 10.43%
  • TSM 353.10 ▼ 10.78%
  • ORCL 115.16 ▼ 6.93%
  • AMD 404.40 ▼ 17.26%
  • NFLX 65.56 ▼ 1.25%
  • CRM 222.41 ▼ 2.07%
  • ADBE 246.44 ▼ 0.82%
  • INTC 52.25 ▼ 10.33%
  • IBM 247.11 ▼ 2.84%
  • PLTR 154.99 ▼ 9.73%
  • SNOW 269.54 ▼ 7.25%
  • NET 244.51 ▼ 8.28%
  • SAP 243.53 ▲ 1.45%

Security · High impactFan score 45 · Tier B2 sources

More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus

The Record from Recorded Future News ·

Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore Airlines and Malaysia Airlines have all come forward over the last week to report data breaches traced back to Amadeus IT Group — a company that builds and maintains platforms for flight reservation, ticketing…

The Brief

  • Six Asian airlines, including Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore Airlines and Malaysia Airlines, have reported data breaches in the past week.
  • The breaches are traced to an attack on Amadeus IT Group, a Spanish company that builds and maintains flight reservation and ticketing platforms.
  • The sources do not give the attack date, the data taken, or whether a fix is available.

Why it matters

A single compromised supply-chain provider exposed data at several airlines at once, so any developer whose booking or ticketing systems depend on Amadeus should check its exposure.

Who’s affected

  • Airlines and travel companies using Amadeus platforms
  • Passengers of the affected Asian airlines
  • #data-breach
  • #amadeus
  • #airlines
  • #supply-chain
  • #security

Timeline

  1. Biz & IT - Ars Technica

    Binance says hackers who stole billions in crypto spent months planning heist

  2. The Record from Recorded Future News

    More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus

Full coverage · 2 sources

How do you feel about this?

0 Comments

    More in Security

    Security · High impact

    Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root

    A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The attacker's code then runs as root, according to advisories that Debian, Ubuntu, and APT's developers published on November 4…

    The Hacker News · info@thehackernews.com (The Hacker News) · · 2 sources · 💬 78

    Security · High impact

    Zyxel fixes zero-day exploited to hack nearly 1,000 network switches

    Zyxel has patched a zero-day vulnerability in its GS1900 series network switches that hackers exploited to compromise nearly 1,000 devices worldwide and steal configuration files and credentials. [...]

    BleepingComputer · Lawrence Abrams · · 3 sources

    Security · High impact

    APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

    The Russia-linked threat actor known as APT29 is presumed to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker…

    The Hacker News · info@thehackernews.com (The Hacker News) · · 3 sources