Sources: cyberattack on Iranian port attributed to Israel. Updates on REvil. EasyJet breached. Verizon's DBIR. COVID-19 notes.

Citing an anonymous foreign government source, the Washington Post reports that intelligence services have concluded that a recent cyberattack against the Iranian port of Shahid Rajaee was the work of Israeli operators, possibly in retaliation for earlier attacks against Israeli water treatment facilities.

DarkOwl researchers are tracking the activities of the REvil gang that's claimed responsibility for hacking celebrity law firm Grubman Shire Meiselas & Sacks. The criminals say they've received offers for information they claim to have on President Trump, and that their next offer is of data connected with Madonna. Bidding starts at $1 million.

EasyJet has disclosed a databreach that affected some nine-million customers. The Guardian writes that the airline describes the incident as the work of "highly sophisticated" criminals.

Verizon this morning released its annual Data Breach Report. This year's version is twice the length of its predecessors, covering more regions and more economic sectors. As Reuters reads it, one of the principal conclusions is that financial gain significantly outpaces espionage as a motive for hacking: 86% of the breaches covered were committed for money, not intelligence. Industry Week's takeaway is the biggest problem is people, not systems. Our own pre-briefing call with Verizon led to that same conclusion. Exploits are rarely the way breaches are accomplished. The report concludes that "error," such mistakes as incorrectly configured databases and misdelivered emails, are now about as big a problem as social engineering. There's another trend in attack technique: web app attacks, the researchers conclude, have roughly doubled.