SignalPlus was breached after an engineer downloaded malicious software disguised as a coding assignment from fake recruiters. The attacker then used the engineer’s access privileges to reach the company’s internal network. The platform contained the intrusion, estimated losses at less than $82,000 and began fully reimbursing affected users. It temporarily suspended its services to complete security reviews and apply patches, with operations expected to resume within days. SignalPlus also acknowledged that it had not required IP whitelisting for API access and announced tighter security controls.
Source: Read the original article


