Daily News - Agosto (04/08 - 10/08) - 32 Semana de 2024

Cyber Security, Hacking, Privacy and Information Security News --- Daily Updates !! Weekly Resume...

10/08

CFTC Secures Record $12.7 Billion Judgment Against FTX and Alameda Fraud

Como proteger conta Google contra invasões hackers

Critical OpenVPN Vulnerabilities Expose Millions of Devices to RCE Attack

Crooks took control of a cow milking robot causing the death of a cow

Cybersecurity Breaches Disturb Healthcare Operations And Patient Trust

DEF CON 32: the unfixable bug that allows malware to be deployed via a browser

Expert Warns of Security Threats in Microsoft's Copilot, Exposing AI to Data Breaches and Phishing

How Cybersecurity Alliances Fortify the Insurance Sector

Is the INC ransomware gang behind the attack on McLaren hospitals?

Microsoft Office Spoofing Vulnerability Let Attackers Steal Sensitive Data

Microsoft Warns of Unpatched Office Vulnerability Leading to Data Exposure

Microsoft: Windows 11 22H2 reaches end of support in 60 days

Need Intel's Raptor Lake bug patch? You'll have to download and install it yourself

New Malware Hits 300,000 Users with Rogue Chrome and Edge Extensions

Researchers Uncover 10 Flaws in Google's File Transfer Tool Quick Share

Russian Midnight Blizzard Breached UK Home Office via Microsoft

Sellafield Nuclear Site Issues Apology Over Series of Cybersecurity Failings

Sonos smart speakers flaw allowed to eavesdrop on users

Wipro Shares Gain on Cyble AI Threat Intelligence Deal

WWH-Club credit card market admins arrested after cash spending spree

09/08

“0.0.0.0-Day” vulnerability affects Chrome, Safari and Firefox

5 key takeaways from Black Hat USA 2024

6 IT risk assessment frameworks compared

$10M bounty for information on CyberAv3ngers

A Threat Actor Claims Breach of TV SAT 364/Widzew Database

Addressing the Frustrations and Concerns of Infosecurity Professionals

ADT Data Breach: Customers Personal Information Exposed

AI in Security, Microsoft Vulnerabilities, and More: Key Takeaways From Black Hat USA 2024

Alert: Federal Motor Carrier Safety Administration (FMCSA) registrants targeted in phishing attack

An army of volunteer hackers to help protect American water systems, schools

Apple Intelligence is “a boomer dad” that reportedly prioritizes phishing emails

August 2024 Patch Tuesday forecast: Looking for a calm August release

BHUSA: CISA Encourages Organizations to Adopt a 'Secure by Demand' Strategy

BHUSA: CoSAI, Combating AI Risks Through Industry Collaboration

Blackhat 2024: 6 aprendizados do maior evento de segurança da informação do mundo

Browsers on MacOS and Linux have failed to block malicious instructions sent to 0.0.0.0 – for 18 years

CISA adds Apache OFBiz and Android kernel bugs to its Known Exploited Vulnerabilities catalog

CISA Warns of Hackers Exploiting Cisco Smart Install Feature

CISA Warns of Hackers Exploiting Legacy Cisco Smart Install Feature

Cisco Integrated Talos Threat Intelligence for All Splunk Users

Confusion Attacks in Apache HTTP Server Let Attackers Gain Root Access Remotely

Critical 1Password flaws may allow hackers to snatch your passwords (CVE-2024-42219, CVE-2024-42218)

Critical XSS Vulnerability In Roundcube Let Attackers Execute Arbitrary Code

CSC ServiceWorks discloses data breach after 2023 cyberattack

Delta rejects CrowdStrike criticism, sees $500 million hit from cyber outage

DOJ Charges Nashville Man for Helping North Koreans Get U.S. Tech Jobs

Elon Musk’s X Halts EU Data Processing Amid AI Grok Training Concerns

easySim.global confirms data breach; customer information exposed

Election security takes center stage at Black Hat

Federal Authorities Work to Boost Health-Care Cybersecurity

Five takeaways from Black Hat USA 2024

Five zero-days impacts EoL Cisco Small Business IP Phones. Replace them with newer models asap!

Fortune of FBI’s most wanted “Cryptoqueen” to be frozen

Gang targeting Instagram accounts busted in Ukraine

Healthcare Providers Must Plan for Ransomware Attacks on Third-Party Suppliers

How much damage would a cyber attack cause in the Middle East?

ICO fines software company Advanced over £6m over data security failings

Intel has news - good, bad and ugly - about Raptor Lake bug patch. Here's what to know

IntelBroker Alleged Data Breach of FacilityBills.com Database

IntelBroker Alleged Data Breach of Mykukun/USBank.com Database

Iran’s Fake News Sites Targeting Voters in 2024 US Presidential Election, Says Microsoft

Iranian hackers target U.S. presidential campaign official, Microsoft says

Legislature must respond to ransomware attacks in Michigan hospitals

Malware-as-a-Service and Ransomware-as-a-Service lower barriers for cybercriminals

Malware force-installs Chrome extensions on 300,000 browsers, patches DLLs

Manila Health Department Allegedly Breached, Sensitive Patient and Employee Records Exposed

Michigan Attorney General (AG) reminding people to protect their personal information after McLaren Cyber Attack

Microsoft discloses Office zero-day, still working on a patch

Microsoft report reveals Iran’s role in US election interference

Microsoft researchers report Iran hackers targeting US officials before election

Microsoft Reveals Four OpenVPN Flaws Leading to Potential RCE and LPE

Mobile UK Travel SIM Provider easySim Global Suffers Data Breach

MongoDB Vulnerability Allows Attackers to Gain Complete Control of Windows Systems

Moonly app data breach exposes employee credentials and user GPS locations

Moscow blocks Signal messaging app for 'violating' Russian laws

Netflix 'aggressively taking action' after huge data breach sees full episodes of Arcane season 2, Heartstopper season 3, and more leak online

New AMD SinkClose flaw helps install nearly undetectable malware

New Double-Extortion Ransomware Attacking Linux Machines

New Flaws in Sonos Smart Speakers Allow Hackers to Eavesdrop on Users

NIS2: A catalyst for cybersecurity innovation or just another box-ticking exercise?

Ohio School Boards Association targeted in cyber attack

Open Source Firewall pfsense Vulnerable to Remote Code Execution Attacks

OpenAI Leadership Split Over In-House AI Watermarking Technology

Phishing Scam Targets Google Users with Malware Disguised as Authenticator App

PoC Released for 0-click RCE Flaw Impacting Windows Server – MadLicense

Postura reativa em cybersecurity pode resultar na perda de oportunidades e danos financeiros, diz estudo

Ransomware leak site bugs avert ransom demand payments

Recovering from a data breach requires an effective cyber resilience strategy

Report reveals 10% increase in the exploitation of old CVEs

Researchers Demonstrate How Hackers Can Exploit Microsoft Copilot

Rhysida ransomware hits Sumter County Sheriff, threatens data leak

Rhysida ransomware takes responsibility for Bayhealth Hospital compromise

Rising Threat: Golddigger and Gigabud Banking Trojans Exploit Phishing Tactics

Russia blocks Signal for 'violating' anti-terrorism laws

Russian cyber spies stole data and emails from UK government systems

Security Giant ADT Confirms Data Breach, Customer Info Leaked on Dark Web

Series Of Solar Power System Vulnerabilities Impacts Millions Of Installations

Shorter TLS certificate lifespans expected to complicate management efforts

South Suburban College says cyber attack impacted over 96,000 individuals

The United Nations (UN) Approves First Cybercrime Treaty Amidst Criticism From Human Rights Activists

Thousands Of Internet-Connected ICS Devices Exposes Critical Infrastructure To Cyber Attacks

Threat Actor Claims to Sell Sensitive Data from Federacion Española de Padel

Threat Actors Favor Rclone, WinSCP and cURL as Data Exfiltration Tools

Threat Actors Hijacking Websites To Deliver .NET-Based Malware

Urgent: CISA Flags Cisco Device Risks, Weak Passwords a Major Threat

X agrees to not use some EU user data to train AI chatbot

Where internal audit teams are spending most of their time

Why Healthcare CISOs Must Prioritize Third-Party Risk Management

08/08

0.0.0.0 Day: 18-Year-Old Browser Vulnerability Impacts MacOS and Linux Devices

18-year-old security flaw in Firefox and Chrome exploited in attacks

A hacker attack on National Public Data has led to one of the largest leaks of personal data ever recorded

Acadian Ambulance faces six class-action lawsuits over stolen customer, employee information

Acronis report reveals 293% surge in email attacks H1 2024

ADT confirms data breach after customer info leaked on hacking forum

AI security 2024: Key insights for staying ahead of threats

Alleged WeChat and UnionPay Data Available for Sale

As use of IoT devices grows, so do the associated security risks

Astrology app exposes locations of 6M users, founders likely linked to Russia

Automated Security Validation: One (Very Important) Part of a Complete CTEM Framework

AWS Patches Vulnerabilities Potentially Allowing Account Takeovers

Beware Of Fake WinRar Websites Delivering Ransomware via GitHub

BHUSA: CISA Director Confident in US Election Security

BHUSA: Ransomware Drill Targets Healthcare in Operation 911

Black Hat: Latest news and insights

Black Hat USA 2024: AWS ‘Bucket Monopoly’ Flaw Led to Account Takeover

Black Hat USA 2024: How cyber insurance is shaping cybersecurity strategies

Black Hat USA 2024: Microsoft’s Copilot is freaking some researchers out

BlackSuit/Royal Ransomware Group Has Demanded $500m

Blue Ridge Rural Water Company reveals major customer data breach

Chrome, Safari, Mozilla Under Siege: ‘0.0.0.0 Day’ Vulnerability Exposes Millions

CISA warns of hackers abusing Cisco Smart Install feature

Computer Crash Reports Are an Untapped Hacker Gold Mine

Consumer Reports study finds data removal services are often ineffective

Cricket Wireless faces class action lawsuit following data breach

Critical 1Password Vulnerability: Hackers Could Exploit Security Flaw to Access Unlock Keys

Critical Security Flaw in WhatsUp Gold Under Active Attack - Patch Now

CrowdStrike, AI dominate conversation at Black Hat USA 2024

Cyber Incident Shuts Down North Miami City Hall: What You Need to Know

Dark Reading News Desk Live From Black Hat USA 2024

“DIANA” Malware Command and Control Framework for Sale

Download: CIS Critical Security Controls v8.1

Ethical Hackers Steal and Return $12m to Ronin Network

Exploit released for Cisco SSM bug allowing admin password changes

FBI and CISA Warn of BlackSuit Ransomware That Demands Up to $500 Million

Hacker dumps 3 billion personal records stolen from the National Public Data

Hacker que já trabalhou no CNJ é preso suspeito de desviar R$ 200 mil

Hackers em ação: Empresa no Brasil está sofrendo 2615 ataques por semana

How network segmentation can strengthen visibility in OT networks

LoanDepot reports nearly $27 million in costs from ransomware attack

Microsoft 365 anti-phishing alert “erased” with one simple trick

New Phishing Scam Uses Google Drawings and WhatsApp Shortened Links

Nomad Bridge hacker moves $35.2M in ETH to Tornado Cash

NoName057(16) Allegedly Targeted Ukraine After Ukrainian Offensive Towards Kursk Oblast

North Korea Kimsuky Launch Phishing Attacks on Universities

Organizations face an average of 8 ransomware incidents per year

Patelco Sued Over Data Breach

“Perfect” Windows downgrade attack turns fixed vulnerabilities into zero-days

Phishing Attack Exploits Google, WhatsApp to Steal Data

“Perfect” Windows downgrade attack turns fixed vulnerabilities into zero-days

Photos: Black Hat USA 2024 Arsenal

Photos: Black Hat USA 2024 Startup City

Ransomware Attack Costs loanDepot Almost $27 Million

Ransomware Attack Targets Grand Palais, Paris

Ransomware groups weaponise stolen data to increase pressure on targets who refuse to pay, Sophos report finds

Ransomware operators continue to innovate

Rhysida Ransomware group claims to have breached Bayhealth Hospital in Delaware

Ronin Network’s Lucky Escape: $12 Million Hack Reversed by ‘White Hat Hackers’

SEC Investigation into Progress MOVEit Hack Ends Without Charges

Securing against GenAI weaponization

Solar eclipsed: 20% of global solar power vulnerable to cyber attack

SSHamble: Open-source security testing of SSH services

STAC6451 Hackers Attacking Microsoft SQL Servers to Compromise Organizations

Swiss cow and calf dead after ransomware attack on milking robot

Thousands of Exposed Industrial Control Systems in US, UK Threaten Water Supplies

Threat Actor Claims to Sell Access to an AI Company for $15,000

Top cybersecurity experts in town for Black Hat USA 2024

Traceeshark: Open-source plugin for Wireshark

University Professors Targeted by North Korean Cyber Espionage Group

Unlock the Future of Cybersecurity: Exclusive, Next Era AI Insights and Cutting-Edge Training at SANS Network Security 2024

Unprecedented National Public Data Breach: Nearly 3 Billion Records Exposed in National Public Data Hack

Windows Downgrade Attack Risks Exposing Patched Systems to Old Vulnerabilities

07/08

1Password Vulnerability Let Attackers Exfiltrate Vault Items

After yet another crypto exploit, Ronin Bridge claims it has recovered lost funds

Apache Cloudstack Vulnerability Exposes API & Secret Keys to Admin Accounts

Apple's New macOS Sequoia Tightens Gatekeeper Controls to Block Unauthorized Software

APT groups increasingly attacking cloud services to gain command and control

Alleged Ingresse Breach Compromised Over 15 Million Users

Better metrics can show how cybersecurity drives business success

BHUSA: DARPA's AI Cyber Challenge Heats Up as Healthcare Sector Watches

BHUSA: The Board Needs to Understand AI Deployment Risks

Black Hat USA 2024, DEF CON 32 attendees treated like children – or criminals – with invasive hotel room checks

Brazil FGTS Allegedly Breached 39M Entries Compromised

Breaking down FCC’s proposal to strengthen BGP security

Chameleon Android Banking Trojan Targets Users Through Fake CRM App

CISA Releases Guide to Enhance Software Security Evaluations

Critical Kibana Vulnerability Let Attackers Execute Arbitrary Code

Critical Progress WhatsUp RCE flaw now under active exploitation

Critical ServiceNow Vulnerability Exposes Organizations to Remote Code Execution Attacks

CrowdStrike backs Microsoft’s demand for reducing kernel-level access

CrowdStrike engages external experts, details causes of massive outage

CrowdStrike Publishes Technical Root Cause Analysis of Faulty Falcon Update

CrowdStrike Reveals Root Cause of Global System Outages

Cyber predator locked up for hacking into Snapchat to steal explicit images

Enhancing Cyber Defense: CEO Perspectives on Attack Surface Management

Firefox Patches Multiple High Severity Vulnerabilities

Hackers breached MDM firm Mobile Guardian and wiped thousands of devices

Hackers Leveraging OneDrive & Google Drive To Hide Malicious Traffic

How MSPs and MSSPs offer vCISO services with skilled CISOs in short supply

How to Buy Secure Software: New Guide from CISA and FBI

ICO Prepares £6m Fine for NHS Supplier Advanced

Japanese Publisher Kadokawa Confirms Massive Data Breach Affecting Over 250,000 People

Largest Data Breach Ever? Lawsuit Against National Public Data for Allegedly Compromising Data of 3 Billion People

LG patent reveals AI-powered range hood that can capture the cooking process

Microsoft 365 Anti-phishing Feature Bypassed Using CSS Style Tags

Microsoft 365 anti-phishing feature can be bypassed with CSS

Microsoft 365 Phishing Alert Can Be Hidden with CSS

Multiple Chrome Vulnerabilities Let Attackers Execute Malicious Code

National Public Data Allegedly Leaked in Full on Dark Web

New Android spyware LianSpy relies on Yandex Cloud to avoid detection

New Go-based Backdoor GoGra Targets South Asian Media Organization

New Linux Kernel Exploit Technique 'SLUBStick' Discovered by Researchers

Notes from Black Hat USA 2024: “I hate to report it, but the Russian underground is as strong as ever”

Number of incidents affecting GitHub, Bitbucket, GitLab, and Jira continues to rise

OpenWrt dominates, but vulnerabilities persist in OT/IoT router firmware

RHADAMANTHYS Stealer Weaponizing RAR Archive To Steal Login Credentials

Roundcube flaws allow easy email account compromise (CVE-2024-42009, CVE-2024-42008)

Roundcube Webmail Flaws Allow Hackers to Steal Emails and Passwords

Russian Hacker Group APT28 Launches HeadLace Malware via Fake Car Ads to Target Diplomats

RustScan: Open-source port scanner

Sports venues must vet their vendors to maintain security

Threat Actor Claims to Breached Tribunal Superior de Justicia CDMX Database

UK Managers Improve Cyber Knowledge but Staff Lack Training

UK’s Data Regulator Proposed £6M Fine to Advanced Software Over the 2022 NHS Ransomware Attack

UK’s watchdog proposes millions in fines following NHS ransomware attack

Understanding Ransomware: Key Measures For BFSI Sector Companies

X, home of anti-truths, files antitrust suit against advertising groups

You’re not doing enough to educate insiders about data protection

06/08

6 hot cybersecurity trends — and 2 going cold

7 Billion Passwords Allegedly For Sale

30 New Ransomwares are Detected by Malware Researchers in July

48% of healthcare organizations are using AI to manage cyber risk

AI-fueled phishing scams raise alarm ahead of U.S. presidential election

Apache OFBiz Zero-Day Vulnerability Let Attackers Execute Remote Code

Arisa Health data breach affects over 375,000 individuals

Australian furniture retailer Early Settler confirms data breach

BHUSA: 17.8m Phishing Emails Detected in First Half of 2024

BHUSA: 99% of Global 2000 Firms Have Recently Breached Vendors

BHUSA: Ransom Payments Surge, Organizations Pay Average of $2.5m

Breach at Kerman Unified, phishing emails sent to students

‘Calibrated Healthcare’ Suffers Data Breach Exposing Sensitive Patient Information

Calibrated Healthcare Suffers Data Breach, Patient Information Compromised

Chameleon malware is attacking restaurants in Canada and Europe

CISA adds Microsoft COM for Windows bug to its Known Exploited Vulnerabilities catalog

Court action follows cyber attack

Cricket Wireless class action claims data breach affects 10M customers

CVEs Surge 30% in 2024, Only 0.91% Weaponized

Cyberattack knocks Mobile Guardian Mobile Device Management (MDM) offline and wipes thousands of student devices

Cyberattack Wipes 13,000 School Devices in Mobile Guardian Breach

Cyberattacks Hit Henry Schein Hard, Profits Fall

Cyble Appoints Ernest Fung as Chief Financial Officer to Drive Financial Strategy and Global Expansion

Data Breach: 3 Billion National Public Data Records with SSNs Dumped Online

Doubleface Shared a New Ransomware on Telegram

Email attacks skyrocket 293%

France's Grand Palais discloses cyberattack during Olympic games

French Museums Hit By Ransomware Attack

FTC settles for $12M with scammers operating $213M pyramid scheme

Google Patches Actively Exploited Android Kernel Zero-Day Patched

Google Patches New Android Kernel Vulnerability Exploited in the Wild

Google warns of an actively exploited Android kernel flaw

Hacker faz empréstimo de R$ 48 mil em nome de administrador de empresas

Hacker wipes 13,000 devices after breaching classroom management platform

Hackers Hijack Anti-Virus Software Using SbaProxy Hacking Tool

Health-ISAC/AHA Issue Warning Following Ransomware Attacks on Mission-Critical Suppliers

Income Tax Returns (ITR) Refund Scam Alert - Beware of Phishing Messages Targeting Taxpayers

Information Security vs Cyber Security: The Difference

INTERPOL Recovers $41 Million in Largest Ever BEC Scam in Singapore

ITSM concerns when integrating new AI services

Japan Considers Measures To Mandate Private Sector Cybersecurity Incident Reporting

Jfrog Artifactory Flaw Let Attackers Poison Artifact Caches

Key Tronic’s ransomware-related losses exceed $17M

Litigation to be brought over Northern Ireland data breach

Mobile Guardian Hack Leads to 13,000 Student Devices Wiped in Singapore

Não pule esta matéria: precisamos falar sobre cibersegurança

National Public Data breach: Lawsuit claims nearly three billion people had personal data exposed

Network Admins Beware! SharpRhino Ransomware Attacking Mimic As Angry IP Scanner

New Android Spyware LianSpy Evades Detection Using Yandex Cloud

New Cryptokat Ransomware Released Allegedly Claiming Fast Encryption

New Threat Detection Model Detects Threats in Serverless Cloud With 0.003 False Rate

New Zero-Day Flaw in Apache OFBiz ERP Allows Remote Code Execution

Nomad bridge hackers made around $4 million by buying the Ethereum dip

North Korea-linked hackers target construction and machinery sectors with watering hole and supply chain attacks

North Korean group infiltrated 100-plus companies with imposter IT pros: CrowdStrike report

North Korean Hackers Attacking Windows Users With Weaponized npm Files

North Korean Hackers Moonstone Sleet Push Malicious JS Packages to npm Registry

Novel Proton Ransomware Variant with Kill Switch Emerges

Optimizing IT Infrastructure: CFO Views on Attack Surface Management

Os hackers norte-coreanos que tentam roubar segredos nucleares e militares

PlayNow advises users to update passwords following security incident

Polish quiz website fails cybersecurity test, leaving 60K users exposed

Point of entry: Why hackers target stolen credentials for initial access

Police Recover Over $40m Headed to BEC Scammers

Protect Your Streaming Accounts Now Before It’s Too Late

Proton VPN adds ‘Discreet Icons’ to hide app on Android devices

Ransomware Attack Targets Grand Palais Amidst Olympic Events

Ransomware Crisis Escalating Globally, New Report Shows

Ransomware Hits French Museums Amid Olympic Cyberattacks Surge

Rapid7 Ransomware Radar Report charts ransomware group activity and methodologies for fresh insights

Researchers Demonstrate New Windows Smart App Control and SmartScreen Bypass Techniques

Researchers Jailbreaked Text-To-Image LLM Models Using Atlas Agent

Researchers unearth Mark of the Web (MotW) bypass technique used by threat actors for years

Rhysida group claims ransomware attack on the City of Columbus

Rite Aid class action alleges data breach affects 2.2M customers

Ronin Network exploited for $9.8M in ETH, white hat hacker suspected

Samsung Announces $1 Million Rewards for Arbitrary Code Execution Vulnerabilities

Samsung to pay $1,000,000 for RCEs on Galaxy’s secure vault

Scaling data security solutions: What you need to know

Scammers arrested for stealing millions from grandparents

Scammer boasts about Telegram, Instagram, and TikTok account takeovers on podcast, sparks FBI investigation

Securing from Active Directory Attacks

SharpRhino RAT tied to Hunters International ransomware gang

Should Organizations Pay Ransom Demands?

Sumter County Sheriff’s Office hit by ransomware attack. Here’s what’s impacted

Suspicious Minds: Insider Threats in The SaaS World

Telangana Police in India Recover, Return $10.13 Billion to Cybercrime Victims in 2024

The American View: Essential Reads for Emerging Human Risk Practitioners

‘The Biggest Fraud Are All Those Fees’: Ticketmaster Data Breach Letters Draw Ire from Affected Customers

Threat Actors Alleged Data Breach on Cartier via BORN GROUP

Threat Actors Announced Doubleface Ransomware, Claims Fully Undetectable

VPNs Nord and Surfshark blocked in Turkey amidst Instagram ban

Western Digital’s WD Discovery App Flaw Allows Code Execution

What Is Extortionware and How Does It Differ From Ransomware?

Whitepaper: Tools to tackle the multicloud environment

Windows Smart App Control & SmartScreen Flaw Let Hackers Hijack Systems

05/08

4.6 Million Voter Database & Election Documents Exposed Online

5 Amazon Alexa privacy settings you should change right away

5 Reasons why you should have cyber insurance

23andMe Data Breach - Hackers Targeted Jewish and Chinese Users Data

42% of targeted email attacks against larger companies involve lateral phishing: Barracuda Threat Spotlight

86% of Firms Identify Unknown Cyber-Risks as Top Concern

99% of Global 2000 organizations are linked to a supply chain breach

332 Million Email Addresses Scraped from SOCRadar.io Published Online

A flaw in Rockwell Automation ControlLogix 1756 could expose critical control systems to unauthorized access

AI expected to improve IT/OT network management

Alleged Access Sale for a US Based Gambling Company

Almost Three-quarters of Ransomware Victims Hit Multiple Times

Apple Intelligence is falling for phishing emails, and that could cost iPhone users

Apple Unveils Homomorphic Encryption Package for Secure Cloud Computing

APT Group StormBamboo Attacks ISP Customers Via DNS Poisoning

APT41 Hackers Attacking Research Institute with ShadowPad and Cobalt Strike

Arisa Health Confirms Data Breach Affected More Than 375,000 Patients

Australia joins global campaign to disrupt and prevent cryptocurrency scams

Australian federal police to probe 2,000 exploited crypto wallets

Authy Desktop App Discontinued: Here Are Some Alternative Options for Users

Best Practices for Handling a Data Breach

BHUSA: Nation-State Attacks Target Hardware Supply Chains

BianLian contacts Sable International customers following attack

CERT-In issues severe warning on critical Apple vulnerabilities

China-linked APT41 breached Taiwanese research institute

China-Linked Hackers Compromise ISP to Deploy Malicious Software Updates

Chinese hackers compromised an ISP to deliver malicious software updates

Computers at blood center in southeast US hit by ransomware attack

Critical Apache OFBiz pre-auth RCE flaw fixed, update ASAP! (CVE-2024-38856)

Critical Flaw in Rockwell Automation Devices Allows Unauthorized Access

Critical Vulnerability in Apache OFBiz Requires Immediate Patching

Critical Vulnerability in Digital Video Recorders Exposes 400,000 Devices to Hackers

CrowdStrike to Delta Airlines: don’t blame us for your woes

Cyberattack cost more than $17 million, Key Tronic tells regulators

Data breach victims up by more than 1,000%

Design flaw has Microsoft Authenticator overwriting MFA accounts, locking users out

DIY Ransomware: novice cybercriminals – bigger threat due to off-the-shelf code

DNSSEC+ – Secure Model That Addresses Security And Downsides Of DNSSEC

English Premier League fans urged to look out for ticket scams

Enhancing Incident Response Readiness with Wazuh

Escalating data breach disruption pushes costs to new highs

Google warns to turn off 2G on Android phones to protect against phishing

Hacker de criptomoedas comprou quase US$ 40 milhões em ether conforme token desabava

Hacker group FIN7 is selling EDR evasion tools to other cyber criminals

Hackers Can Use HDMI Cables to Capture Your Passwords

Halifax warning over key sign a phone call may be a scam after phishing alert

Home users increasingly targeted by global Magniber ransomware campaign

How early adopters drive security innovation

How life sciences companies use AI to fill the cybersecurity skills gap

How to start your cybersecurity career: Expert tips and guidance

Immediate Action Required: Critical Apache InLong Vulnerability Exploitable

Investigation Launched Into Dept Of Education Data Breach

Is Australia’s Public Sector Ready for a Major Cyber Security Incident?

Jerico Pictures faces class action over massive data breach

Kazakh Organizations Targeted by 'Bloody Wolf' Cyber Attacks

Keytronic incurred approximately $17 million of expenses following ransomware attack

Keytronic reports losses of over $17 million after ransomware attack

Keytronic Reveals $15 Million Financial Loss from Ransomware Attack

Leaked Wallpaper Exploit Let Attackers Escalate Privilege on Windows Systems

Low-Drama ‘Dark Angels’ Reap Record Ransoms

LulzSec Muslims Allegedly Targeting Argentina

Malaysian 'mastermind' behind worldwide phishing scams still active, claims report

Massive Magniber campaign targets home users worldwide

MISP: Open-source threat intelligence and sharing platform

National Public Data Sued for Hack that Exposed Data of 2.9 Billion People

New Android Trojan "BlankBot" Targets Turkish Users' Financial Data

New LianSpy malware hides by blocking Android security feature

Nomad hacker buys the dip, scooping up $40M of ETH two years later

North Korean hackers attack South Korea’s construction, machinery sectors

North Korean hackers exploit VPN update flaw to install malware

Olympic Venue Among 40 Museums Hit By Ransomware Attack: French Police Source

OneBlood software partially restored after ransomware attack

Os hackers norte-coreanos que tentam roubar segredos nucleares e militares

Over two fifths of critical infrastructure organisations have suffered a cyber breach, report finds

Phishing Scam Compromises Thousands of Australian Crypto Wallets

Plataforma digital do governo do Piauí tem 600 mil ataques hackers por mês

PlayNow advises users to update password credentials after cyber attack

Replacement for Action Fraud, UK’s cybercrime reporting service, delayed again until 2025

Researchers Uncover Flaws in Windows Smart App Control and SmartScreen

Rockwell Automation Devices Flaw Let Hackers Gain Unauthorized Access

Schools will remove app from students' Chromebooks and iPads following security breach

Singapore MOE Orders Removal of Mobile Guardian App After Data Breach

South Korean Fitness Platform Allegedly Breached

Switcher’s guide to mesh VPNs: Pros, cons, and how to set up key features

Tech contractor exposes data of 4.6 million US voters

The Loper Bright Decision: How it Impacts Cybersecurity Law

The role of AI in cybersecurity operations

Threat Actor Claims to Sell of 3 Millions US Credit Card Information for $180,000

Threat Actor Claims to Sell Users Data of Brazil’s Largest Casino, Compromised 13 Million Users Data

Threat Actor Groups Launching Attacks Using Leaked Ransomware Variants

Threat Actor Groups Using Leaked Ransomware Variants To Launch Attacks

Two-Thirds Of Healthcare Organisations Were Hit By Ransomware In 2024

UK Data Privacy Watchdog Targets Social Media for Children’s Privacy Violations

US Sues TikTok For Children’s Law Violations

US sues TikTok for collecting mass data on kids 13 and under

Users are getting malware instead of software updates in ISP breach

White House and EC-Council Launch $15m Cybersecurity Scholarship Program

04/08

Chinese hacker group StormBamboo successfully hijacked an ISP's automatic software updates with backdoor malware and bad Chrome extensions to breach a downstream target

Chinese StormBamboo APT compromised ISP to deliver malware

Creepy warning signs you're being targeted in a cyber attack - and what to do

Delta airlines takes legal action against tech giants for massive data breach

Facebook usado para campanhas de publicidade associadas a malware

Google Ads Suffered Major Reporting Glitch, Exposing Competitor Data and Causing Unavailability of Services

Hackers attempt to sell the personal data of 3 billion people resulting from an April data breach

Halifax phishing scam alarm as bank points to telltale sign a phone call is not from them

Is Off-The-Shelf Code Fuelling the Surge in Ransomware?

StormBamboo’s DNS Poisoning Attack Targets Software Updates

Surge in Magniber ransomware attacks impact home users worldwide

The Indian Railway Catering and Tourism Corporation (IRCTC) plugs critical data breach on insurance portal

Threat Actor Claims to Sell “.url” Exploit Source Code for $10k

Unveiling the SLUBStick Cross-Cache Attack on the Linux Kernel

Daily News - Julho - Agosto (28/07 - 03/08) - 31 Semana de 2024