Cyber Security News

Washington Post Hacked – Multiple Journalists’ Email Accounts Compromised

The Washington Post confirmed late last week that its email systems were targeted in a cyberattack, resulting in the compromise of several journalists’ email accounts.

“The Wall Street Journal, which first reported the breach, said it was potentially the work of a foreign government.”

The attack, discovered on Thursday evening, affected Microsoft email accounts belonging to reporters who cover national security and economic policy, including those focused on China.

According to an internal memo from Executive Editor Matt Murray, a “limited number” of accounts were impacted, and those affected have been notified.

Preliminary investigations suggest a foreign government may have carried out the attack.

However, the identity of the perpetrators has not been confirmed. The breach potentially gave attackers access to both sent and received emails from the compromised accounts.

Immediate Response

Upon discovering the intrusion, The Washington Post’s IT and security teams initiated a forced reset of login credentials for all employees.

The organization also launched a forensic investigation to assess the full extent of the breach. So far, there is no evidence that other internal systems or customer data were affected.

This incident follows a series of cyberattacks targeting major news organizations. Similar breaches at The Wall Street Journal and News Corp have been attributed to state-sponsored actors. Journalists, particularly those covering sensitive topics, are frequent targets of cyberattacks.

“We believe the incident affected a limited number of Post journalists’ accounts, and we have contacted those whose accounts have been impacted,” Murray stated in his memo.

The Washington Post continues to collaborate with cybersecurity experts to enhance its defenses and ensure the security of its staff’s digital communications. The investigation into the source and scope of the attack is ongoing.

Find this News Interesting! Follow us on Google News, LinkedIn, & X to Get Instant Updates

Balaji

BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Recent Posts

OpenSSH sshole Flaw Allows Hackers to Log Into Password-Disabled Linux Accounts Using 257-Character Passwords

A decade-old authentication bypass in OpenSSH on musl-based Linux lets attackers log into accounts that…

2 minutes ago

New GhostMap Android Vulnerability Can Crash Phones Permanently Without Opening an App or Granting Permissions

Bitdefender researchers have revealed a vulnerability called GhostMap that affects Android devices. This vulnerability can…

11 minutes ago

Microsoft Paint Vulnerability Allows Hackers to Execute Malicious Code Remotely Without User Interaction

Microsoft has announced a vulnerability in Windows Paint that could let unauthenticated attackers execute malicious…

35 minutes ago

ARTEX AI Framework Linked to Bank Breaches and Cloud Attacks Found Exposed Across Hundreds of Servers

An autonomous penetration-testing framework linked to South Korean banking breaches and cloud supply-chain attacks is…

1 hour ago

Shopify Makes IP Allowlisting Mandatory for All Public Apps to Prevent Stolen API Token Abuse

Shopify is making IP allowlisting mandatory for all public apps to limit abuse of stolen…

1 hour ago

OpenAI’s New GPT-6 Cyber Finds 81 High-Severity Firefox Vulnerabilities and 948 Linux Kernel Exploits

OpenAI has introduced GPT-6 Cyber, a security-focused model built to find and validate exploitable vulnerabilities…

1 hour ago