T-Mobile’s recent disclosure of another data breach has prompted harsh criticism from cybersecurity experts, along with warnings about the importance of protecting application programming interfaces.

A Russian hacking outfit called Cold River set up phony login pages for three U.S. nuclear research laboratories and emailed scientists in an effort to find out their passwords, according to internet records. So reports Reuters.

North Korean state-sponsored hacking group Lazarus has used fake cryptocurrency apps under the brand name Bloxholder to distribute a strain of malware known as Applejeus. So reports Bleeping Computer.

The quantity of password attacks has increased 74% since last year to an estimated 921 attacks every second, according to a study by Microsoft. So reports CNBC.