Daily News - Agosto (11/08 - 17/08) - 33 Semana de 2024

Cyber Security, Hacking, Privacy and Information Security News --- Daily Updates !! Weekly Resume...

17/08

5 ways to spot a phishing email: A guide to cyber awareness

6 essential tips for more secure online transactions

7 simple steps to protect yourself after a data breach

As much as $5.1bn in illicit crypto transactions linked to UK annually, NCA says

Billions of Personal Records Stolen in Florida Data Breach.. Are You One of the Victims? Find Out Now!

Chile Faces Major Data Breach Exposing Millions

Crypto-Stealing Malware 'Styx Stealer' Exposed by Hacker's Critical Mistake

Flint officials, residents still dealing with effects of ransomware attack

Florida company faces multiple lawsuits after massive data breach

Hong Kong Monetary Authority (HKMA) Warns Public About Phishing Emails Impersonating Dah Sing Bank

How the ransomware attack at Change Healthcare went down: A timeline

Massive Data Breach Exposes Billions Of Social Security Numbers

National Public Data Confirms Massive Data Breach.. Millions of Social Security Numbers Exposed in Shocking Leak

Ransomware strikes Australian mining giant

They steal 14 million dollars in cryptocurrency with hacker attacks on Cayman Islands exchanges: 4 arrests in a luxury villa on the Amalfi coast

What small businesses should know about phishing attacks

16/08

11 top bug bounty programs launched in 2024

49% of DDoS attacks targeted gaming organizations

A flaw in Proofpoint’s anti-phishing platform allowed a hacker to send millions of spam emails

A 'very large percentage' of Pixel phones have a hidden security vulnerability

Airbnb guest mines $100K in crypto, leaves host with $1,500 power bill

Ambulnz Experiences Data Breach Affecting Patients of Jefferson Health, Main Line Health, Mount Sinai Health System, and UCHealth

ArtiPACKED Flaw Exposed GitHub Actions to Token Leaks

Attackers Exploit Public .env Files to Breach Cloud and Social Media Accounts

Authentik: Open-source identity provider

Banco Central comunica vazamento de dados do BTG Pactual

Banco Central confirma vazamento de dados de chaves Pix do banco BTG

Business and tech consolidation opens doors for cybercriminals

Central Bank of Iran Under Siege: Massive Cyberattack Disrupts Banking

Chainalysis Reports Decline in Illicit Transactions On-Chain Despite Rise in Stolen Funds and Ransomware

CISA warns critical SolarWinds RCE bug is exploited in attacks

Competenz Confirms Cyber Attack On IT Systems

Council probe ‘serious data breach’ after personal details revealed on Facebook group

Critical Android Vulnerability Impacting Millions of Pixel Devices Worldwide

Crypto-linked cybercrime saw another record year as ransomware risk rises

CVE-2024-38063: An In-Depth Look at the Critical Remote Code Execution Vulnerability

Cybercrime consolidation: the big fish are getting bigger

Data breach exposed details of Ukrainian refugees in Scotland

Data Breach Strikes AutoCanada as Company Recovers from CDK Outage

Data of more than half of Chile’s population exposed in massive leak

Dispossessor ransomware group shut down by US, European authorities

Dragos reports resurgence of ransomware attacks on industrial sectors, raising likelihood of targeting OT networks

Enzo Biochem to pay $4.5 million over cyberattack, NY attorney general says

FBI and CISA Reassure Public on Election Day Cybersecurity Amid Ransomware Concerns

File-sharing phishing attacks on the rise, report reveals

Flint, Michigan ransomware attack knocks city offline

Florida-Based National Public Data Confirms Data Breach

Geopolitical Tensions Drive Explosion in DDoS Attacks

Google Pixel Devices Shipped with Vulnerable App, Leaving Millions at Risk

Greater Manchester Cyberattack Exposes Thousands to Phishing Scam

Hackers demanded crypto ransom amid cyber attack at Paris 2024 Olympics

Home Security Company ADT Confirms Data Breach after a Hacker Lists Stolen Database for Sale

How NoCode and LowCode free up resources for cybersecurity

How to Modernize Your Cryptography Ahead of the Quantum Threat

How to use the Passwords app on your iPhone with iOS 18

IBM to set up 'full stack' AI facility at university

Illicit Blockchain Activity Down 20% But Stolen Funds, Ransomware Inflows Rise: Chainalysis

Industrial firms face ransomware spike in second quarter

International authorities dismantle Dispossessor ransomware group targeting global companies

Iranian hackers target allies of Donald Trump and Kamala Harris, FBI says

KnowBe4 cautions phishing is now a major global curse

Kubernetes Vulnerability Exposes Clusters to Command Injection Attacks

Lawmakers Ask for Probe of Chinese Router Maker TP-Link

Manual techniques are fueling ransomware attacks, CrowdStrike says

Massive Data Breach at Change Healthcare Exposes Billions of Medical Claims.. What It Means for Your Privacy

McLaren confirms disruptions were caused by ransomware attack

McLaren Health confirms ransomware attack, says recovery will last through August

Microsoft Announced Multifactor Authentication is Mandatory for Azure Sign-Ins

Microsoft urges customers to fix zero-click Windows RCE in the TCP/IP stack

Millions of Pixel devices can be hacked due to a pre-installed vulnerable app

Multi-Stage ValleyRAT Targets Chinese Users with Advanced Tactics

Muncie data breach: W2s inadvertently emailed to unintended party

National Community Pharmacists Association (NCPA) Sues UnitedHealth and Subsidiaries for Massive Cyber Attack

National Public Data confirms breach affecting Social Security numbers of nearly all Americans

New Banshee Stealer Targets 100+ Browser Extensions on Apple macOS Systems

New infostealer targets macOS devices, appears to have Russian links

New POS Malware “ShadowPOS” Advertised in DarkWeb Forum

Nuclep: Após ataque Hacker, estatal brasileira tem dados ofertados a R$ 2,7 mi na deep web

Observations from Black Hat USA 2024, BSidesLV, and DEF CON 32

Pre-installed app on millions of Pixel devices is making them vulnerable to attack

Protecting Millions: How CISOs Use Take Down Services to Shield Patient Data

Radiology information systems provider reports data breach

Ransomware gangs escalating tactics, going to ‘chilling’ lengths

Ransomware in the global healthcare industry

Ransomware on the Rise: Steps to Protect Your Practice and Systems from Cyber Disruption

Rödl & Partner Provides Notice of Data Breach Following Early 2024 Data Breach

Russia ups the ante: Kremlin-backed hackers launching more sophisticated phishing attacks

Security Experts Welcome NIST’s New Encryption Standards For Quantum Computers

Striking a Balance Between Business Growth, Risk Management and Cybersecurity

Tech support scammers impersonate Google via malicious search ads

The cyberattack cycle: First comes outage, next comes phishing

The Hidden Security Gaps in Your SaaS Apps: Are You Doing Due Diligence?

Threat Actor Claims to Have Access to a Popular E-commerce Website

Threat Actors Increasingly Target macOS, Report Finds

UConn Health Files Notice of Data Breach with Federal Government

University of Winnipeg Data Breach Worse Than Expected: New Details Emerge

Unmasking Styx Stealer: How a Hacker’s Slip Led to an Intelligence Treasure Trove

US Bipartisan Committee Urges Investigation Into Chinese Wi-Fi Routers

US DOJ Considers Breaking-up Google Following Antitrust Case

US Lawmakers Call for Investigation into TP-Link Amidst Chinese Cyber Attack Fears

ZeroSevenGroup Claims to Have Hacked Toyota Branch, Allegedly Leaking 240 GB of Sensitive Data

Zimbra XSS Flaw Allows Hackers to Execute Malicious JavaScript Code

What to do when you’re involved in a data breach

Why CEOs Must Integrate Take Down Services into Their Cybersecurity Plan

World Agricultural Cycling Competition Targeted in Large-Scale Phishing Scam

15/08

2.9 billion records, including Social Security numbers, stolen in data hack: What to know

74% of IT professionals worry AI tools will replace them

5,000 AI-Controlled Fake X Accounts Linked to China Disinformation Campaign

A banner year for data breaches: Cybersecurity expert shows how to protect your privacy

A massive cyber attack hit Central Bank of Iran and other Iranian banks

Advanced ValleyRAT Campaign Hits Windows Users in China

Akeela faces legal action for alleged negligence in handling patient data

Alaska mental-health provider Akeela sued over delayed data breach warning

Alleged EduSports Breach Leaked 70K Rows

Another Record Year For Ransomware Beckons as Crypto Profits Hit $460m

Australian gold mining giant targeted by a ransomware attack

Average cost of a data breach in the Middle East rises to $8.75 million, IBM study shows

Barracuda exposes advanced phishing attacks with new malware

Benefits plan provider Aviben says third party software breach impacted 40,000 customers

Black Basta ransomware gang linked to a SystemBC malware campaign

Bolton's affected by phishing scam and cyber attack

Brain Cipher Ransomware Analysis & Detection with Cynet’s All-in-One Platform

Centralized Exchanges Reclaimed by Hackers as Ransomware Payments Soar in 2024: Chainalysis

City of Flint online & phone services victimized by ransomware attack

Cloud Extortion Campaign Uses Exposed AWS .Env Files to Target 110,000 Domains

CompTIA: A Launchpad for a Career in Cybersecurity

Court order merges Acadian Ambulance class actions over data breach

Critical RCE bug in SolarWinds Web Help Desk fixed (CVE-2024-28986)

Critical Vulnerabilities in IBM QRadar Lets Attackers Trigger Arbitrary Code Remotely

Crypto Hacks and Ransomware Increase, Illicit Crypto Transactions Decline: Chainalysis

Cyber Alert! Small Businesses Should Enhance Their Cyber Defenses – NCSC Guide (PDF)

Cyber Attack Sparks False Doping Allegations Against Polish Sports Stars, Including Iga Swiatek and Robert Lewandowski

Cyber-criminals Exploited Paris Olympics With Fake Domains

Cybercrime group disables EDR software to launch RansomHub ransomware

Cybercriminals linked to China are going after Russian targets

Data Breach Has Gathered 2.9 Billion Social Security Numbers and Identities

Data stolen in Jefferson County, Kentucky, cyberattack includes election info, employee reviews

DDoS attack volume rises, peak power reaches 1.7 Tbps

EDRKillShifter: New EDR Killer Tool in Ransomware Actors’ Toolkit

EFG Companies breached through third-party VPN

Elmhurst Sports Club Target Of Phishing Scam: Police

Enzo Biochem settles ransomware-related breach for $4.5M

Extreme data breach may affect over 2 billion people

Fake Olympic shops result in significant financial losses for fans – report

Fraser Child and Family Center Notifies 67k of Recent Data Breach

Gadsden School District hit by ransomware, no student data compromised

GitHub Vulnerability 'ArtiPACKED' Exposes Repositories to Potential Takeover

GitHub Vulnerability “ArtiPACKED” Trigger RCE Exploit to Hack Repositories

Google disrupted hacking campaigns carried out by Iran-linked APT42

Google raps Iran's APT42 for raining down spear-phishing attacks

Google Warns of Iranian Cyber-Attacks on Presidential Campaigns

GRIT Ransomware Report: July 2024

Guaranty Trust Bank (GTBank) Assures Customers No Data Breach, Confirms Attempt To Compromise Website

Hackers stole patient data from Alabama Cardiovascular Group's systems

Hackers ordered to return or delete data stolen from two London NHS trusts

Healthcare provider Monte Nido reveals data breach exposing sensitive patient information

Hide yo environment files! Or risk getting your cloud-stored data stolen and held for ransom

Highly-Personalized Phishing Campaign Targets Russian Government Dissidents

Hong Kong privacy watchdog opens probe into Oxfam Hong Kong's data breach

How leading CISOs build business-critical cyber cultures

How passkeys eliminate password management headaches

How to Maximize Network Security With AI and ML

In the wake of the CrowdStrike outage, here’s a workable four-step patching strategy

It's not just X — DDoS attacks really are hitting more victims

Iranian APT42 Group Launches a Massive Phishing Campaign to Attack U.S. Presidential Election

July ransomware attacks slam public sector organizations

Kootenai Health says data security incident impacted over 450,000 individuals

Landmark Admin notifies clients of data breach

LulzSec Muslims Demands Ransom from Argentine Government

Major ransomware attack exposes vulnerabilities in South Africa’s public health sector

Microsoft disables BitLocker security fix, advises manual mitigation

Microsoft shares temp fix for Outlook, Word crashes when typing

MIT delivers database containing 700+ risks associated with AI

More Than 60% of Successful Ransomware Attacks Sourced Through SaaS Applications According to New HYCU® Report

National Public Data data breach reportedly affects everyone in US, UK, Canada

New Cyber Threat Targets Azerbaijan and Israel Diplomats, Stealing Sensitive Data

New email phishing campaign targets Russian dissidents worldwide

New Gafgyt Botnet Variant Targets Weak SSH Passwords for GPU Crypto Mining

New Threat Actors Tools Found to be Bypassed Antivirus & Delete Backups

New ValleyRAT Malware Targets Chinese Windows Users in Multi-Stage Attack

NIST Finalised 3 Encryption Tools To Prevent Future Quantum Computers Cyberattacks

Park Dental Announces Data Breach After Hackers Accessed Employee Email Accounts

Pemiscot Memorial Hospital Provides Notice of Data Breach to Over 33k Patients

Public Deserves Full Accounting of Ransomware Attack

RansomHub Group Deploys New EDR-Killing Tool in Latest Cyber Attacks

Ransomware Attacks on Industrial Firms Surged in Q2 2024

Ransomware gang deploys new malware to kill security software

Ransomware Group Behind Major Indonesian Attack Wears Many Masks

Rhysida claims ransomware attack on The Washington Times

Rivers Of Phish – New Phishing Campaign Attacks Russia Enemies Globally

Russia's FSB Behind Massive Phishing Espionage Campaign

Russian-Linked Hackers Target Eastern European NGOs and Media

Russian National Receives 40-Month Sentence for Selling Stolen Login Credentials

SolarWinds Releases Patch for Critical Flaw in Web Help Desk Software

SolarWinds Urges Upgrade After Revealing Critical RCE Bug

Steps to protect yourself from identity theft after massive social security data breach

SystemBC malware deployed in Black Basta-linked attacks

T-Mobile fined $60 million over data breach, notching top Committee on Foreign Investment in the U.S. (CFIUS) penalty

TD Bank employee ‘improperly’ accessed customer data

The AI balancing act: Unlocking potential, dealing with security issues, complexity

This new phishing attack uses a sneaky infostealer to cause maximum damage

Thousands of NetSuite stores leak sensitive data due to access control misconfiguration

Thousands targeted with phishing emails after cyber attack on Greater Manchester councils

Threat Actor Claims Breach of South Korean Career Site Database

Undocumented Malware Platform “Cyclops” Lets Hackers to Write Arbitrary Commands on Windows

UnionPay International Hit by Alleged Breach Exposing Over 637 Million Records for Sale

Unlearning the RaaS Model: How ransomware attacks are evolving

Vulnerability in Palo Alto Networks Prisma Access Browser Let Attackers Trigger RCE

Was your Social Security number leaked to the dark web? Here's how to know and what to do

Watch Out for Info-Stealers and RATs

Your Social Security number may have been stolen by hackers. How to freeze your credit

14/08

3 Billion Compromised in Massive Data Breach: Should You Be Worried?

75% of security leaders say threat intelligence is most valuable skill

2024 Paris Olympic Venue Hit by a Ransomware Attack

Accounting firm Heier Weisbrot & Bernstein suffers data breach, exposing client information

ADT confirms data breach that compromised customer data

Alleged Data Breach at Universitas PGRI Pontianak Exposes Sensitive Information

AutoCanada discloses cyberattack impacting internal IT systems

Banco Central do Irã e outras unidades bancárias são alvos de ataque hacker

Beware of New Phishing Campaign that Impersonates Google Safety Centre

Black Basta-Linked Attackers Target Users with SystemBC Malware

Bridewell research reveals 71% of government organizations hit by ransomware attack

Business Email Compromise (BEC) scam costs Orion nearly $60M

China-Backed Earth Baku Expands Cyber Attacks to Europe, Middle East, and Africa

Columbus Mayor Confirms Ransomware Attack, Assures No Usable Personal Data Leaked on Dark Web

Columbus ransomware data leak: How you can protect yourself from credit fraud

Critical Flaw in Ivanti Virtual Traffic Manager Could Allow Rogue Admin Access

Critical Vulnerability Found in Microsoft’s AI Healthcare Chatbot

Current attacks, targets, and other threat landscape trends

Cyber-Attack Spreads Phishing Scam Across Greater Manchester Areas

Cybercrime Surge Highlights Phishing Scams Targeting Both Individuals And Businesses

DDoS Attacks Surge 46% in First Half of 2024, Gcore Report Reveals

Deciphering the Brain Cipher Ransomware

Delta vs. CrowdStrike: The duties vendors owe to customers – or do they?

Disclosure of Data Through Website Cookies May Be a Data Breach – What A Recent Court Ruling Means for Healthcare Businesses

Ensuring Compliance: CFO Perspectives on Third-Party Risk Management

Enzo Biochem to Pay $4.5 Million Settlement Over Cybersecurity Failures Leading to Data Breach

Every American's Social Security number, address may have been stolen in hack

Fake contests and phishing scams surge, warns Cyprus Consumers Association

From Celebrations to Cyber Strikes: The Rise of Hacktivism During Independence Day Events

FSB-Linked Phishing Campaign Targets Russian Activists, Independent Media

Gadsden School District hit by ransomware, no student data compromised

Generative AI phishing: Why cybersecurity training must evolve

Gold Mining Company Struck by Ransomware Attack

Golddigger And Gigabud Android Malware Attacking Airlines Customers

Greater Manchester Residents Receive Phishing Messages Following Attack

Hackers hit Paris Olympics venues & museums with ransomware

High-Risk Cloud Exposures Surge Due to Rapid Service Growth

How to Augment Your Password Security with EASM

How to react during a cyber-crisis

Idaho outpatient imaging center suffers data breach

IntelOwl: Open-source threat intelligence management

Iran's central bank crippled in massive cyberattack

Kootenai Health Ransomware Attack: 464,000 patients Data Exposed

Large-scale cyber attack cripples Iranian banks

Malware Payloads, Tactics Identified in Active AnyDesk and Microsoft Teams Social Engineering Campaign

Manufacturing Firm Loses $60m in BEC Scam

Massive data breach at East Valley Institute of Technology (EVIT) exposes sensitive information of over 200,000 individuals

Media, activists, former US diplomat were on Russia-aligned phishing campaigns' hit lists

Microsoft Fixes Nine Zero-Days on Patch Tuesday

Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero-Days

Microsoft Tackles 9 Zero-Day Exploits in August 2024 Patch Tuesday Update

More hackers want to bite Apple: new malware in high demand

NCSC Calls on UK Firms to Join Mass Cyber-Deception Initiative

New Cybersecurity Concerns Emerge as Kamala Harris Presidential Campaign Targeted by Foreign Hackers

New Phishing Attack Uses Sophisticated Infostealer Malware

New Phishing Campaign Attacking AWS Accounts To Steal Logins

NIST releases finalized post-quantum encryption standards

NIST’s Shield Against Quantum Cyberattacks: New Encryption Standards

Oldham Council housing website down after cyber attack

Over 464K impacted by ransomware attack against Kootenai Health

Probe launched after 470,000 people potentially affected in Oxfam Hong Kong data breach

Prolific RaaS, malvertising scheme leader faces US charges

Ransomware attackers introduce new EDR killer to their arsenal

Ransomware group claims it hacked the Washington Times—hosts data auction on dark web

Ransomware Kingpin Who Called Himself "J P Morgan" Extradited to the United States

Report finds threat actors exploit cybersecurity gaps from M&A and software consolidation to maximise damage and profit

Report reveals lag in disclosure of ransomware attacks in 2023

Research shows 350% surge in file-sharing phishing attacks

Research Uncovers New Microsoft Outlook Vulnerability

Revealing the UTG-Q-010 Campaign: A Deep Dive into Cryptocurrency Lures and Pupy RAT

Russian cyber snoops linked to massive credential-stealing campaign

SAP Update Addresses Critical Vulnerabilities That Enable System Takeover by Hackers

Social engineering attacks continue to evolve – here’s how to keep up

SolarWinds fixes critical RCE bug affecting all Web Help Desk versions

‘Stunning’ data breach at New Jersey healthcare company, Attorney General says

Texas firm says it lost $60M in a bank wire transfer scam

The importance of rapid response

The State of Ransomware in State and Local Government 2024

Threat Actor Offers Blum South East Asia Client and Payment Data for Sale

Threat actors leverage cybersecurity gaps from M&A – new report

Trumpsters suddenly forget 2016 and urge media to not publish leaked documents

Unlocking the Front Door: Phishing Emails Remain a Top Cyber Threat Despite MFA

US Army soldier conspired with Chinese Government agent to deliver top-secret information

Was Your Social Security Number Stolen in the National Public Data Breach? What to Do

What Were the Key Ransomware Trends in July?

White hat hacker shines spotlight on vulnerability of solar panels installed in Europe

13/08

0-Click Outlook Vulnerability Triggered RCE When Email is Opened – Technical Analysis

3AM ransomware stole data of 464,000 Kootenai Health patients

35% of exposed API keys still active, posing major security risks

A PoC exploit code is available for critical Ivanti vTM bug

AI can’t think independently and poses no existential threat, new study says

Aire Dental Arts Notice of Data Breach

Alleged European KYC Data is For Sale

Alleged Magento Admin Access to a US Company is For Sale

AMD Sinkclose Vulnerability Lets Attackers Most Privileged Portions Of a Computer

Americans’ personal data posted online for free: over 2.7 billion records leaked

Architect of Ransomware-as-a-Service Model Extradited to U.S. After More than a Decade on the Run

Australian gold mining company hit with ransomware

Bayou Vermilion District Urged to Enhance Cybersecurity Measures Following Auditor’s Report

Beware Of Malicious Typosquat Package That Steals Your Secret Keys

Bob and Maria most breached male, female names

Browser backdoors: Securing the new frontline of shadow IT

CERT-UA warns of a phishing campaign targeting government entities

CISOs face uncharted territory in preparing for AI security risks

CLFS Vulnerability Let Hackers Trigger BSOD Error On All Versions Of Windows 10 & 11

Collaborating for optimal threat intelligence

Cost of a data breach 2024: Financial industry

Data breach hits Indonesia’s National Civil Service Agency ahead of Independence Day

Data stolen in Columbus, Ohio, ransomware attack likely ‘unusable,’ mayor says

DDoS Attack Behind Glitches in Musk-Trump Interview on X, Claims Tesla CEO

East Valley Institute of Technology Data Breach Exposes Over 200,000 Records

Elon Musk claims that a DDoS attack caused problems with the livestream interview with Donald Trump

Elon Musk Reports Massive DDoS Attack on X Amid Trump Interview

Escalating ransomware and phishing threats demand reinforced cyber defenses for aviation

FBI dismantles Radar/Dispossessor ransomware gang

FBI Leads Effort to Dismantle Radar/Dispossessor Ransomware

FBI Shuts Down Dispossessor Ransomware Operations, Domains Dismantled

Gastrointestinal Medicine Associates Notifies Patients of Recent Data Breach

GhostWrite: New T-Head CPU Bugs Expose Devices to Unrestricted Attacks

Gold Mining Firm in Australia Reports Ransomware Breach

Google: Gemini AI for Android processes sensitive data locally

Hackers Leak 1.4 Billion Tencent User Accounts Online

Hackers Posing as Security Service Compromised 100 Govt Systems

Hidden crisis in cybersecurity: 17 out of 20 professionals suffering from fatigue and burnout

Home security giant ADT confirms data breach

Horror story app Chilling haunted by loose permissions, spilling data

How CIOs, CTOs, and CISOs view cyber risks differently

How to Prevent Your First AI Data Breach

Human-operated ransomware an emerging cyber threat

In search of the foolproof AI watermark

Indian Government Warns Users of Critical Chrome Vulnerabilities

International investigation shuts down Radar/Dispossessor ransomware group

Ivanti warns of critical vTM auth bypass with public exploit

Key metrics for monitoring and improving ZTNA implementations

Law enforcement disrupts Radar/Dispossessor ransomware group

Managing attack surface management

Massive data breach compromises billions of personal records around the world

McLaren continues effort to fully restore services following criminal cyber attack

Mergers and Acquisitions (M&A), vendor reliance help drive up ransomware threat

Microsoft August 2024 Patch Tuesday fixes 9 zero-days, 6 exploited

Microsoft fixes 6 zero-days under active attack

Microsoft fixes issue that sent PCs into BitLocker recovery

Monte Nido Notifies Consumers of September 2023 Data Breach

Most Americans are failing to recognize AI risks when using it at work

Musk, Trump live chat finally underway after 'alleged' cyberattack, tech talk limited

New Banshee MacOS Stealer Attacking Users to Steal Keychain Data

New Jersey City University (NJCU) establishes help line for potential victims of ransomware attack on school

NIST Formalizes World's First Post-Quantum Cryptography Standards

Notorious Alleged 'Scareware' Hacker In US Custody

Off-chain attacks are an increasing threat to DeFi

Operation Uncle Scam – AI-Powered Phishing Attack Steals Microsoft Dynamics 365 Credentials

Orion SA says scammers conned company out of $60 million

Phishing Campaign Compromises 100+ Ukrainian Government Computers

Phishing Evolved: Inside the Surge of High-Stakes Whaling Attacks

Post-Exploitation Tactics Hackers Use After Compromising Ivanti, Fortigate VPN Servers

Prolific Belarusian Cybercriminal Arrested in Spain

Radar/Dispossessor ransomware dismantled in global operation

Ransom Cartel, Reveton ransomware owner arrested, charged in US

Ransomware attack hits Swiss manufacturer Schlatter Industries

Researchers Uncover Vulnerabilities in AI-Powered Azure Health Bot Service

Roseland Community Hospital Provides Notice of June 2024 Data Breach

Scammer transformed ads into malware

Scammers dupe chemical company into wiring $60 million

Sensitive Israeli Ministry Data Allegedly Leaked on Dark Web

South Korea Warns Pyongyang Has Stolen Spy Plane Details

Suspected head of Reveton, Ransom Cartel RaaS groups arrested

Suspected 'hostile state' behind hack of Poland’s anti-doping agency and leak of athletes' data

Teste hacker encontra vulnerabilidades em urnas eletrônicas dos EUA

The Crucial Role of Firewall Rule Histories

This new fully encrypted messenger app is serious about privacy

Thousands affected by phishing scam and cyber attack in three Greater Manchester boroughs

Threat Actor Claims to Have Access to Multiple Government Systems and Ministries Worldwide

Trump and Musk fireside chat crashes X, possible DDoS attack

UK tradespeople targeted by sophisticated Screwfix phishing scam offering free tools

Ukraine Warns of New Phishing Campaign Targeting Government Computers

US DoJ dismantled remote IT worker fraud schemes run by North Korea

Zabbix Server Vulnerability Lets Attacker Execute Arbitrary Code Via Ping Script

Why Hardsec Matters: From Protecting Critical Services to Enhancing Resilience

Windows 10 KB5041580 update released with 14 fixes, security updates

Windows Server August updates fix Microsoft 365 Defender issue

12/08

2.9 Billion People May Have Been Compromised in National Public Data Breach. Here’s What You Need to Know

10 Best Advanced Endpoint Security Tools – 2024

74% of ransomware victims were attacked multiple times in a year

15,000 secrets; 66,000 vulnerabilities: How one hacker found them all

Alabama Cardiovascular Group notifies clients of weeks-long data breach

Alleged Access Sale Related to an Israeli Organizations Company

Alleged Access Sale to a US Based Logistics Company

Almost 50 PII categories impacted in data breach at East Valley Institute of Technology

Amazon India Customer Raises Data Breach Concerns After Receiving Duplicate Orders, Fake Products

Answering every question you have about the East Valley Institute of Technology (EVIT) data breach

Attackers Spoof Public Bodies and US Government Departments in Phishing Lure

Australian gold mining company Evolution Mining announces ransomware attack

Australian Mining Giant Evolution Mining Hit by Ransomware Attack

Baxter International Notifies Consumers of June 2024 Data Breach

Britain and France to discuss misuse of commercial cyber intrusion tools

Californians have two weeks left to claim share of $5 million U-Haul data breach settlement

Chrome, Edge users beset by malicious extensions that can’t be easily removed

CISA Issues Advisories on “Royal” Ransomware and Three New Vulnerabilities

Cleveland FBI shuts down ransomware enterprise

Coforge Receives Indemnification Notice for Data Breach Settlement

Cost of a data breach in France soars to £3.8M, finds IBM report

Critical OpenSSH Vulnerability in FreeBSD Allows Remote Root Access

Critical OpenSSH Vulnerability in FreeBSD Let’s Attackers Gain Root Access Remotely

Critical Vulnerabilities in AWS Lets Attackers Gain Full-Service Remotely

CSC ServiceWorks data breach could affect thousands of victims

Cyber attacks against Michigan hospitals prompt calls for legislative remedies

Cyble Named a Sample Vendor for Digital Risk Protection Services in Gartner® Hype Cycle™ for Managed IT Services, 2024

Data breach may have exposed billions of personal information records, lawsuit claims: What to know

Deepfakes, AI-driven phishing pose new challenges in cybersecurity

EastWind Attack Deploys PlugY and GrewApacha Backdoors Using Booby-Trapped LNK Files

EastWind campaign targets Russian organizations with sophisticated backdoors

Energy leaders face escalating ransomware and phishing threats

FBI disrupts the Dispossessor ransomware operation, seizes servers

Florida Mayor Ground Zero for Cyber Attack on City

FreeBSD Releases Urgent Patch for High-Severity OpenSSH Vulnerability

Google Patches Critical Vulnerabilities in Quick Share After Researchers’ Warning

Hacker claims successful hack of Adreno, the ‘world’s largest dive store’

Hackers posing as Ukraine’s Security Service infect 100 govt PCs

Hackers’ Toolkit Exposed, Wide Range of Tools from Initial Access to Full Control

How Phishing Attacks Adapt Quickly to Capitalize on Current Events

How to spot phishing in the age of AI

IBM Aspera Shares Vulnerability Let Attackers Login as Any User

Industrial Remote Access Tool Ewon Cosy+ Vulnerable to Root Access Attacks

International Effort Dismantles ‘Radar/Dispossessor’ Ransomware Group

Japan will launch DARPA-esque research institute for cyberwarfare

Lawmaker calls for increased penalties for ransomware attacks against Michigan hospitals

Leicester City Council cyber attack exposes more data than first reported

Man in Dock Accused of Breaking Hi-Tech Export Controls

Massive Data Breach Exposes 4.7 Million ASN Records Sold for $159 Million.. Uncover the Shocking Details!

McLaren Health Care experienced a criminal cyber attack

Microsoft found OpenVPN bugs that can be chained to achieve RCE and LPE

Microsoft Reveals Iranian US Election Interference Ops

Microsoft unveils potentially serious Office security flaw — but you probably should be safe

Misconfigurations and IAM weaknesses top cloud security concerns

Mobex Allegedly Breached: 24 GB Data is For Sale

Moscow blocks Signal messaging app for violating Russian laws

North Miami City Hall set to reopen after cyberattack; Mayor's personal Gmail hacked

ONNX Bot Tool Hijacks Microsoft 365 accounts & Even Bypass 2FA

Researchers Hacked Industrial Remote Access Gateway Tool to Gain Root Access

Researchers Uncover Vulnerabilities in Solarman and Deye Solar Systems

Russia subjected to Chinese cyberattacks

Russian Government and IT Firms Receive Spear-Phishing Emails with Trojans and Backdoors

Russian hackers accessed UK Home Office’s emails and data – report

Scammers Exploit Ukraine War & Japan Earthquake Fears to Spread Malware on X

Schlatter Group affected by hacker attack

Scout Suite: Open-source cloud security auditing tool

Sinkclose Vulnerability in AMD Chips: What You Need to Know About Unpatched Models

Six Healthcare Providers Added to Ransomware Data Leak Sites

Some of the most iconic AMD chips have a serious security flaw — which the company says it probably won't patch now

Sophos finds ransomware groups weaponising stolen data to increase pressure on targets

South Korea says DPRK hackers stole spy plane technical data

Steps to improve quality engineering and system robustness

Sumter County Sheriff’s Office Systems Hit by Rhysida Ransomware

Surprising no one, Trump falls for false Harris AI crowd size conspiracy

Swiss-based Schlatter says IT network affected by cyberattack

The AI Hangover is Here – The End of the Beginning

The Belfast Trust Investigates Data Breach

The biggest data breaches in 2024: 1 billion stolen records and rising

The cyber assault on healthcare: What the Change Healthcare breach reveals

The Value in Root Cause Analysis for Vulnerability Management

The world’s greatest cyber threats, according to pros on Reddit

Threat Actor Allegedly Selling Tentree(.)com Customer Database

Threat Actor Claims to Sell Data of Former Israeli Intelligence Members

Top 10 Cybersecurity Threats Facing Businesses Today

Trump campaign said senior staffer hacked by Iran-backed APT

Trump campaign suffers sensitive data breach in alleged Iranian hack

Ukrainian Government Agencies Hit by Stealthy MeshAgent Malware Campaign

Unpatched MS Office flaw may leak NTLM hashes to attackers (CVE-2024-38200)

Vulnerabilities in Qualcomm’s Adreno GPU Chipsets Affect Billions of Android Devices

Vulnerability in Windows Driver Leads to System Crashes

X faces GDPR complaints for unauthorized use of data for AI training

World’s biggest hacker fest spotlights AI’s soaring importance in the high-stakes cybersecurity war—and its vulnerability

Worried about the Windows BitLocker recovery bug? 6 things you need to know

11/08

Book Review: ‘Why Cybersecurity Fails in America’

Chinese hacking groups target Russian government, IT firms

Fake X content warnings on Ukraine war, earthquakes used as clickbait

Hackers leak 2.7 billion data records with Social Security numbers

Malware espião descoberto em apps da Google Play Store

Michigan AG Nessel: Details 'scarce' about what data was leaked in McLaren cyberattack

Morocco Under Threat of Major Cyber Attack

Rogue PyPI Library Solana Users, Steals Blockchain Wallet Keys

Threat Actor Claims to Sell Over 600,000 Indian Credit Card Records

Trump Campaign Accuses Iranian Hackers of Internal Document Theft

Daily News - Agosto (04/08 - 10/08) - 32 Semana de 2024