Alleged DDoS attacks cause major X outages.

Summary

By the CyberWire staff

At a glance.

Alleged DDoS attacks cause major X outages.
Veritas discloses critical vulnerability affecting Arctera InfoScale.
New York sues Allstate over data breach.

Alleged DDoS attacks cause major X outages.

The X social media platform sustained major outages yesterday that affected the site's availability globally throughout the day, BleepingComputer reports. X owner Elon Musk attributed the outages to a "massive cyberattack," stating, "[e]ither a large, coordinated group and/or a country is involved." X enlisted Cloudflare's DDoS protections in response to the attacks.

The Dark Storm group claimed responsibility for knocking X offline with DDoS attacks, though it didn't provide hard evidence. Dark Storm is a pro-Palestinian hacktivist group that offers DDoS-for-hire services, according to the Record.

Stop Identity-Based Cybercrime with SpyCloud’s Holistic Identity Threat Protection

Stolen identity data is the hot commodity for cybercriminals. With the full scope of your users’ digital footprints at risk for exposure, traditional account-centric security is no longer enough to protect your business from cyberattacks. SpyCloud helps security teams correlate and automatically remediate individuals' hidden identity exposures from breaches, malware, and phishing across their many online personas. Eliminate identity-based cyber threats and proactively defend against account takeover, fraud, and ransomware with SpyCloud.

Veritas discloses critical vulnerability affecting Arctera InfoScale.

Veritas has disclosed a critical flaw (CVE-2025-27816) affecting its Arctera InfoScale product, GBHackers reports. The flaw was assigned a CVSS score of 9.8. The company states, "A vulnerability was discovered in the Arctera InfoScale product where a .NET remoting endpoint can be exploited due to the insecure deserialization of potentially untrusted messages. The vulnerability is present in the Windows Plugin_Host service, which runs on all the servers where InfoScale is installed. The service is used only when applications are configured for Disaster Recovery (DR) using the DR wizard. Disabling the Plugin_Host service manually will eliminate the vulnerability."

Many Voices. One Community.

Join Us at the RSAC 2025 Conference. Join us at RSAC, April 28 - May 1 in San Francisco and gain access to cybersecurity innovators, expert-led sessions, and hands-on workshops. Leave with new strategies, insights, and connections to elevate your cybersecurity journey.

New York sues Allstate over data breach.

The state of New York has sued Allstate Insurance for alleged security lapses related to a website that leaked consumer data, Reuters reports. The lawsuit says Allstate's National General business unit ran a website that allowed consumers to request quotes for policies, which inadvertently enabled users to view driver's license numbers belonging to anyone living at a given address. The suit adds that bad actors used the tool to scrape driver's license numbers belonging to just under 200,000 people.

Allstate told the Register in a statement, "We resolved this issue years ago, promptly securing our systems after finding vulnerabilities in online quoting tools that could have exposed driver's license numbers. We promptly notified regulators, contacted potentially affected consumers, and offered free credit monitoring as a precaution."

Notes.

Today's issue includes events affecting , and the United States.

Attacks, Threats, and Vulnerabilities

PowerSchool previously hacked in August, months before data breach (BleepingComputer) PowerSchool has published a long-awaited CrowdStrike investigation into its massive December 2024 data breach, which determined that the company was previously hacked over 4 months earlier, in August, and then again in September.

MINJA sneak attack poisons AI models for other chatbot users (The Register) Nothing like an OpenAI-powered agent leaking data or getting confused over what someone else whispered to it

Trends

New KnowBe4 Report Reveals Stolen Credentials Emerge as Top Concern in Global Retail Sector (BusinessWire) Research shows 38% of retail sector compromises now involve credential theft, surpassing payment card data breaches

Products, Services, and Solutions

BlackCloak Launches Enhanced Family Office Cybersecurity Bundle: Tailored Protection Safeguards Families’ Wealth and Legacy From Cyber Attacks (BlackCloak | Protect Your Digital Life™) Exclusive BlackCloak Family Office cybersecurity bundle combines powerful technology with white-glove concierge service to safeguard every facet of a family’s connected world, ensuring each member’s privacy, finances, reputation, and identity are safe.

Legislation, Policy, and Regulation

Trump nominates Plankey to run top US cyber agency (The Record) Sean Plankey, who served in cybersecurity roles in the first Trump administration, has been officially nominated to run the Cybersecurity and Infrastructure Security Agency (CISA), according to a Monday posting of nominations.

Litigation, Investigation, and Law Enforcement

Trump administration ends FTC’s ransomware data breach case against MGM Resorts (The Record) The Federal Trade Commission (FTC) shuttered its case against MGM Resorts International centered on the company’s handling of personal data stolen during a 2023 ransomware attack.

Industry Events

For a complete running list of events, please visit the Event Tracker.

Events

GovMilSpace (Washington, DC, USA, Mar 10 - 13, 2025) Demystify the future of space technology. In alignment with the SATELLITE Conference & Exhibition, GovMilSpace brings together government and military agencies, the intelligence community, and satellite and space industry partners to explore how private industry can enhance critical missions for the U.S. and its global allies.

Satellite 2025 (Washington, DC, USA, Mar 10 - 13, 2025) For 40+ years SATELLITE has gathered the global space and satellite communities for four immersive days of enterprise, insights, and innovation. This year, with the debut of GovMilSpace, SATELLITE expands its reach to address the needs and priorities of the defense sector.

WICYS 2025 (Dallas and Virtual, Texas, USA, Apr 2 - 5, 2025) WiCyS 2025 is the go-to event for cybersecurity professionals, students, and organizations. The conference is the flagship event to recruit, retain and advance women in cybersecurity.

40th Space Symposium (Denver and Virtual, Colorado, USA, Apr 7 - 10, 2025) Bringing together leaders from commercial, government and military space from around the world, the Space Symposium provides a forum to discuss, address and plan for future achievements in space. The Space Symposium program delivers exclusive networking and engagement opportunities with influential participants in one convenient and extraordinary venue. Space Symposium luncheons and dinners provide additional contact with influential participants.

Sponsor & Support

Grow your brand, generate leads, and fill your funnel.

With the industry’s largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, companies trust the CyberWire to get the message out. Learn more.

Daily Briefing for 03.11.25

At a glance.

Alleged DDoS attacks cause major X outages.

Veritas discloses critical vulnerability affecting Arctera InfoScale.

New York sues Allstate over data breach.

Notes.

Attacks, Threats, and Vulnerabilities

Trends

Products, Services, and Solutions

Legislation, Policy, and Regulation

Litigation, Investigation, and Law Enforcement

Events