Daily News - Agosto (18/08 - 24/08) - 34 Semana de 2024

Cyber Security, Hacking, Privacy and Information Security News --- Daily Updates !! Weekly Resume...

24/08

Check if Your Social Security Number Is Included in the National Public Data Breach

CISA Urges Federal Agencies to Patch Versa Director Vulnerability by September

Cyber Attack in US: Iranian Hackers Targeted WhatsApp Accounts of Staffers in Joe Biden, Donald Trump Administrations, Meta Says

Firm in US accidentally hires North Korean hacker

Hacker Brigades: Why Did Hezbollah Establish Cyber Warfare Units?

Halliburton probes impact of cyber attack with law enforcement

Iranian hackers target WhatsApp accounts of Trump, Biden staff

Massive data breach affected billions | Here’s what to know

Meta blocks Whatsapp accounts in the USA due to hacker attacks

Meta Exposes Iranian Hacker Group Targeting Global Political Figures on WhatsApp

New Copybara Android Malware Remotely Controlling Infected Device

Researchers Discover Several Potential Attack Vectors in Bicycles With Shimano Di2 Wireless Gear-Shifting System

Threat Actor Claims to Sell Data of 107 Million DPR RI Users for $100,000

U.S. Department of Justice Alleges Cybersecurity Failings By Georgia Tech

US Bank Data Breach: 10,953 Customers Sensitive Information Leaked

Vietnamese IT Firm BPOTech Allegedly Breached

Zimbabwe Government Places Priority on Cybersecurity Training for Public Servants

23/08

90% of Americans are concerned about the rise in fraud

10,953 Customers at Two US Banks Receive Data Breach Alerts As Lenders Warn Extremely Sensitive Information at Risk

A new macOS data stealer is going after Apple users

A Threat Actor Alleged Breach of Sri Lankan Farmers Community Database

A Threat Actor Alleged Database Access Sale of US Multinational Corporation

American Radio Relay League confirms $1 million ransom payment

Another critical SolarWinds Web Help Desk bug fixed (CVE-2024-28987)

Attackers draining bank accounts using new Android card cloning malware

Audit Exposes Security Lapses in FBI’s Handling of Sensitive Storage Media

August Markets Face 11 Phishing Attacks, Investors Lose $57M

Beware of Malicious Slack Ads that Deliver Malicious Payloads

Carespring Healthcare says October cyber attack impacted over 75,000 patients

China-linked APT Velvet Ant exploited zero-day to compromise Cisco switches

Chinese Hackers Exploiting Zero-Day Flaw in Cisco Switches to Deploy Malware

Cthulhu Stealer macOS Malware can be Renting for $500/Month to Steal Data

Conheça o hacker brasileiro de 33 anos responsável por roubo de 3 BILHÕES de dados nos EUA

Cyber attack disrupts Microchip's manufacturing operations

Data breach at Dental Specialists of Minnesota exposes sensitive patient information

Dell Power Manager Vulnerability Allow Attackers Gain Unauthorized Access – Patch Now!

FIDO Alliance Releases Authenticate 2024 Agenda

Five million WordPress websites in danger due to critical LiteSpeed Cache vulnerability

Focus on What Matters Most: Exposure Management and Your Attack Surface

Four ways cybersecurity teams can put GenAI to work right now

Fraud tactics and the growing prevalence of AI scams

Georgia Tech Sued Over Cybersecurity Violations

Greasy Opal's CAPTCHA solver still serving cybercrime after 16 years

Hacker brasileiro lidera vazamento de milhões de dados nos EUA

Hacker que roubou mais de 3 bilhões de dados nos EUA foi descoberto por um brasileiro

Hackers Exploiting Amazon Services To Deliver Weaponized MSC Files

Hackers now use AppDomain Injection to drop CobaltStrike beacons

Hacks trigger a cascade of problems for altcoins

Halliburton confirms cyberattack on its systems

Halliburton faces IT disruption following suspected hack

Hotel room key cards everywhere could be at risk from RFID security flaw

Impostor psychics plaguing social media

Latvian Hacker Deniss Zolotarjovs Extradited to U.S. Over Karakurt Ties

Latvian Hacker Extradited to U.S. for Role in Karakurt Cybercrime Group

Liverpool Fans Lose Big in Premier League Ticket Scams

Man charged for treason over DDoS attacks

Main Line Health deploys chaos engineering to bolster healthcare resilience

McDonald’s Instagram Hack: Crypto Scammers Claim to Steal $700,000

McDonald’s Official Instagram Account Hacked to Promote Cryptocurrency Scam

Member of cybercrime group Karakurt charged in the US

Microsoft Edge RCE Vulnerability Let Attackers Take Control of the System Remotely

Microsoft shares temp fix for Linux boot issues on dual-boot systems

Millions of Office and Hotel RFID Smart Cards Vulnerable to Instant Cloning Through Hidden Backdoor

Nepal lifts TikTok ban after app addresses cyber crime concerns

New Cheana Stealer Threat Targets VPN Users Across Multiple Operating Systems

New malware Cthulhu Stealer targets Apple macOS users

New macOS Malware "Cthulhu Stealer" Targets Apple Users' Data

New PEAKLIGHT Dropper Deployed in Attacks Targeting Windows with Malicious Movie Downloads

New Qilin Ransomware Attack Uses VPN Credentials, Steals Chrome Data

O carro hacker nas ruas de São Paulo: um perigo distante de ser solucionado!

Phishing attacks target mobile users via progressive web applications (PWA)

Qilin Caught Red-Handed Stealing Credentials in Google Chrome

Qilin Targets Chrome-Stored Credentials in “Troubling” New Attack

Russian Karakurt Ransomware Group Member Charged For Laundered Ransom Payment

Russian laundering millions for Lazarus hackers arrested in Argentina

Slack AI could be tricked into leaking login details and more

SolarWinds fixes critical developer oversight

SolarWinds left some serious security flaws in its Web Desk Help platform, and now it's under attack

The changing dynamics of ransomware as law enforcement strikes

The Silent Cyber War: How Threat Libraries Are Fighting Back

This new Android malware can steal your card details via the NFC chip

Top 5 ransomware groups and malware delivering ransomware in 2024

University “sincerely apologizes for oversight” after fake phishing email warns of Ebola on-campus

US oil giant Halliburton confirms cyberattack behind systems shutdown

Vulnerability prioritization is only the beginning

Watch out — Google Chrome details can be stolen by this clever new ransomware

YouTube Launches AI Tool to Recover Hacked Accounts

22/08

3 key strategies for mitigating non-human identity risks

3 Cybersecurity Trends for 2025

12GB Customer Data From toyyibPay is Allegedly For Sale

45% of tech leaders have experienced a SaaS cybersecurity incident

A survival guide for data privacy in the age of federal inaction

A Threat Actor Alleged Access Sale of Exchange Support Panel

ACSC, CISA, FBI and NSA Unite for New Event Logging and Threat Detection Guide

Android malware uses NFC to steal money at ATMs

Another multimillion-dollar crypto whale falls victim to phishing attack

Backdoor in Mifare Smart Cards Could Open Doors Around the World

Bangladeshi Hackers Deface India’s Zee Media Website for Mocking Floods

BlackMeta Continues Claims of Targeting Saudi Arabia

Bromley GP blood tests cancelled after Synnovis attack

BVI Electricity Corporation (BVIEC) estimating bills after ransomware hack

CannonDesign reports data breach; over 13,000 clients affected

CEO Playbook: Effective Threat Library Management Techniques

Chinese Hackers Exploit Zero-Day Cisco Switch Flaw to Gain System Control

Chrome Zero-day Vulnerability (CVE-2024-7971) Actively Exploited in The Wild

Company Fined $1m for Fake Joe Biden AI Calls

Critical Flaw in WordPress LiteSpeed Cache Plugin Allows Hackers Admin Access

Critical GitHub Enterprise Server auth bypass flaw fixed (CVE-2024-6800)

Cthulhu Stealer Malware Targets macOS With Deceptive Tactics

Cyberthreat report from Critical Start shows significant uptick in ransomware and data leaks

Dad hacks his way into jail by faking his own death to avoid paying child support

Equiniti Trust Company Settles with SEC Over $6.6 Million Cybersecurity Failures

European Parliament aware of flaws that lead to massive data breach, says noyb

European Parliament Faces Data Breach: Noyb Files Complaints with EDPS Over GDPR Violations

European Parliament under scrutiny after data breach complaints

FAA Admits Gaps in Aircraft Cybersecurity Rules: New Regulation Proposed

FAA Proposed New Cybersecurity Rules for Airplanes

Fidelity Bank Data Breach: Nigerian Bank Denies Allegations, Contests ₦555.8 Million Fine

Florida's health department offering credit monitoring after data breach

GenAI models are easily compromised

GitHub Enterprise Server Vulnerability Allow Attackers to Gain Admin Access

GitHub Patches Critical Security Flaw in Enterprise Server Granting Admin Privileges

Google Cloud leak linked to Shark Tank contestant exposes 83,000

Google Fixes High-Severity Chrome Flaw Actively Exploited in the Wild

Google to help build cyber protection for Australian infrastructure

Hacker leaks upcoming episodes of Netflix shows online following security breach

Hacker que roubou 3 bilhões de dados dos EUA foi descoberto e é brasileiro

Hackers Leaked Upcoming NetFlix Episodes Online

Halliburton Hit by Cyberattack, Operations Disrupted

Hardcoded Credential Vulnerability Found in SolarWinds Web Help Desk

Hardware Backdoor Discovered in RFID Cards Used in Hotels and Offices Worldwide

How MFA gets hacked — and strategies to prevent it

I crashed my iPhone with these four characters so you don't have to

Industrial Sector Prime Target of Ransomware Attacks in Q2

INE Security Launches Initiatives to Invest in the Education of Aspiring Cybersecurity Professionals

Innovative Phishing Campaign Targets Mobile Users with PWAs

Kremlin blames widespread website disruptions on DDoS attack; digital experts disagree

Local experts offer advice in wake of massive National Public Data (NPD) data breach

Man Sentenced for Altering Registry Systems to Fake His Death

Manufacturing is the most targeted sector by cyber criminals

McDonald's hack unveiled as $700M Grimace meme coin crypto stunt

Microsoft: August updates cause Windows Server boot issues, freezes

Microsoft confirms August updates break Linux boot in dual-boot systems

Microsoft Copilot Studio Vulnerability Exploited to Access Sensitive Information

Missouri AG launches probe over widespread data breach

Most ransomware attacks occur between 1 a.m. and 5 a.m.

New 'ALBeast' Vulnerability Exposes Weakness in AWS Application Load Balancer

New Chrome zero-day actively exploited, patch quickly! (CVE-2024-7971)

New iOS Bug Could Crash Your iPhone by Typing Four Characters

New Malware Hidden Within PostgreSQL Process Deploys Cryptocurrency Miners

New Malware PG_MEM Targets PostgreSQL Databases for Crypto Mining

New Ngate Android Malware Lets Hackers Withdraw Money From Payment Cards

New NGate Android malware uses NFC chip to steal credit card data

New York class action claims firm says data breach impacted about 140,000 individuals

North Korean Hackers Unveils New MoonPeak Malware With Updated Attack Methods

Novel Android Malware Steals Card NFC Data For ATM Withdrawals

Oregon Zoo says hackers stole payment card information of approximately 118k visitors

Over 3400 High and Critical Cyber Alerts Recorded in First Half of 2024

Phishing Attacks: Google Drawings And WhatsApp Scam Alert

Phishing Campaign Imitates Banking Apps

Q2’24 marks second highest quarter for ransomware attacks, says Corvus

Ransomware attacks jump 16% in Q2

Ransomware Demands Averaged $1.6 Million in Second Quarter, a New Report Says

Russia Reports DDoS Attack Disrupting Telegram and WhatsApp

Security flaws in Dahua cameras being actively exploited, CISA warns

Security Flaws in UK Political Party Donation Platforms Exposed

SolarWinds fixes hardcoded credentials flaw in Web Help Desk

SolarWinds Web Help Desk RCE Vulnerability Allows Remote Exploitation – Hotfix Released

Stalker who called victim 176 times during cyberstalking spree pleads guilty

Strengthening Cybersecurity in India’s Power Sector: New Regulations Proposed by the Central Electricity Authority

Tech Giants, Google and CSIRO Team Up to Shield Australia’s Critical Infrastructure

Telecom fined $1 million for transmitting Biden deepfake with spoofed Caller ID

The Facts About Continuous Penetration Testing and Why It's Important

The Linux security team issues 60 CVEs a week, but don't stress. Do this instead

Thousands of Oregon Zoo visitors at risk after data breach

Top US oilfield firm Halliburton hit by cyber attack

Toyota Confirms Exposure of Customer and Employee Data in Data Breach

U.S. charges Karakurt extortion gang’s “cold case” negotiator

U.S. CISA adds Dahua IP Camera, Linux Kernel and Microsoft Exchange Server bugs to its Known Exploited Vulnerabilities catalog

Zero-Day Vulnerability In Arcadyan WiFi Devices Allows RCE for Root Access – Exploit Released

Why C-suite leaders are prime cyber targets

World’s largest Oilfield Services Firm Halliburton Allegedly Hit by Cyberattack

21/08

7 Vital Steps to Defend Backups from Ransomware Vulnerabilities

8 cloud security gotchas most CISOs miss

A backdoor in millions of Shanghai Fudan Microelectronics RFID cards allows cloning

A Threat Actor Claims Breach of Indonesian Ministry of Transportation Database

A Threat Actor Claims Breach of LAPOR Database

‘ALBeast’ load balancer flaw may affect 15,000 Amazon Web Services apps

ALBeast: Misconfiguration Flaw Exposes 15,000 AWS Load Balancers to Risk

Almost a quarter of internet users may experience cyberstalking by 2025 – report

Android and iOS users targeted with novel banking app phishing campaign

Arete Releases H1 2024 Crimeware Report with Ransomware and Extortion Trends and Shifts in the Cyber Threat Landscape

Atlassian Bamboo Data Center & Server Flaw Let Attackers Execute Arbitrary Code

Attackers increasingly using legitimate remote management tools to hack enterprises

Australia Calls Off Clearview AI Investigation Despite Lack of Compliance

Authentication bypass discovered in Microsoft Entra ID

Average DDoS attack costs $6,000 per minute

AvosLocker ransomware attack against CannonDesign confirmed

AWS Configuration Vulnerability Exposes Thousands of Web Apps to Attack

Backdoor in RFID Cards for Offices, Hotels Can Lead to Instant Cloning

Bad news keeps rolling: US court revives Google privacy class action lawsuit

BlackMeta Allegedly Targeted Arab National Bank

Blind Eagle attacks target Latin America with RATs

Building Proactive Cyber Resilience for NIS2 and DORA

CannonDesign Hit by Data Breach: Client and Employee Information Compromised

CERT-UA Warns of New Vermin-Linked Phishing Attacks with PoW Bait

Chipmaker Microchip Hit by Cyber Attack, Operations Impacted

Chipmaker Microchip Technology confirms cyberattack which hit operations

CISA to Get New Headquarters as $524M Contract Awarded

City of Columbus yet to recover from ransomware attack that disrupted IT systems

Critical LiteSpeed Cache Plugin Flaw Exposes WordPress Sites

Critical Slack Vulnerability Let Attackers Steal Data From Private Slack Channels

Critical Vulnerability In OpenBMCs For Servers, Leads To Full Compromise

Crypto phishing attack drains $55M from whale’s wallet

Cyberattack cripples operations of chip manufacturer Microchip Technology

Cybercriminals Unleash Styx Stealer Malware Which Threatens to Steal Data from Millions

DAI whale loses $55 million in a phishing attack

Data Breach - National Data Protection Commission (NDPC) Slams N555.8m Fine on Fidelity Bank

Dell SupportAssist Vulnerability Exposes PCs to Privilege Escalation Attacks

Don't panic! It's only 60 Linux CVE security bulletins a week

Doubleface Allegedly Targeted Telecommunications Infrastructure in Berlin

Education Firm Toaping Database Allegedly Breached

FlightAware says misconfigured server exposed customers' sensitive personal data

Florida Department of Health confirms medical history leaked in breach

Food security: Accelerating national protections around critical infrastructure

Germany, Malaysia, and China crack down on crypto infrastructure and payments

GitHub Enterprise Server vulnerable to critical auth bypass flaw

GiveWP WordPress Plugin Vulnerability Puts 100,000+ Websites at Risk

Google Cloud wants to help unify all your security structures to boost protection

Hackers Exploited AWS ENV Files to Attack 110,000 Domains & Steal Credentials

Hackers Exploit PHP Vulnerability in Windows To Execute Arbitrary Code Remotely

Hackers may have found an entirely new way to backdoor into Windows systems

Healthcare Hit by a Fifth of Ransomware Incidents

HHS alerts health sector to cyberthreat from Everest ransomware group

How censorship is breaking the internet in Pakistan

How Pen Testing is Evolving and Where it’s Headed Next

How to Account for Disinformation Risks in Election Security

Iranian cyberespionage group deploys new BlackSmith malware in sophisticated spear-phishing campaign

It's Time To Untangle the SaaS Ball of Yarn

Litespeed Cache bug exposes millions of WordPress sites to takeover attacks

Man faces 10 yrs prison for online death threats against judges, FBI, elected officials

McAfee unleashes AI deepfake audio detector - but how reliable can it be?

McDonald’s Instagram Hacked To Promote Solana Meme Coin GRIMACE

Microchip suffers cyberattack, impacting manufacturing operations

Microchip Technology Faces Major Cyberattack, Impacting Production

Microchip Technology manufacturing facilities impacted by cyberattack

Microchip Technology Says IT Incident Impacted Operations

Microsoft Launches Unified Teams App for Personal & Work Environments

Microsoft Patches Critical Copilot Studio Vulnerability Exposing Sensitive Data

Moscow detains scientist suspected of carrying out DDoS attacks on Russia

Most Ransomware Attacks Now Happen at Night

National Public Data cyber attack impacted over 1.3 million individuals

New Banking Phishing Campaign Targets Mobile Users in Czechia, Hungary, and Georgia

New macOS Malware TodoSwift Linked to North Korean Hacking Groups

New MoonPeak RAT Linked to North Korean Threat Group UAT-5394

New PG_MEM Malware Targets PostgreSQL Databases to Mine Cryptocurrency

New research: Malicious actors are imitating tech companies

New UULoader Attacking Users Via Weaponized PDF Documents

Nigeria Leads Africa in IPv6 Transition to Boost Cybersecurity and Internet Services

Nigeria ranks 19th in global cyber-attack index

Nigerian Government Fines Fidelity Bank N555.8m for data breach

North Korea-linked APT used a new RAT called MoonPeakNorth

North Korean Hackers Deploy New MoonPeak Trojan in Cyber Campaign

Not even zoos are safe from data breaches — Oregon Zoo warns visitors their details may have been stolen

NUMOZYLOD Malware Distributed Through Popular Searches

OpenCTI: Open-source cyber threat intelligence platform

Oregon Zoo Warns Over 100,000 Customers of Payment Card Compromise

Outlook Zero-click RCE Vulnerability Technical Details Released

Patch Tuesday not Done ’til LINUX Won’t Run?

Patelco Credit Union admits personal information of customers and employees was exposed in ransomware attack in June

Phrack hacker zine publishes new edition after three years

Pocahontas Medical Clinic announces data breach following cyberattack

PostgreSQL databases under attack

Prefeitura de Ponta Grossa confirma ataque hacker a site oficial

Pro-Russia group Vermin targets Ukraine with a new malware family

Q2 2024 Threat Landscape Report: Threat Actors Do Their Homework, Ransomware and Cloud Risks Accelerate

Ransomware Again on Track to Achieve Record-Breaking Profits

Ransomware Gangs Are in Decline But Still Make Lots of Noise

SEBI’s Cybersecurity Shield: A New Line of Defense for Indian Finance

Shield Your Organization: CEO’s Perspective on Take-Down Services

Shocking Phishing Attack Drains $55M from Web3 User

Steps you need to take during a data breach

Survey Surfaces Growing SaaS Application Security Concerns

Styx Stealer Creator's OPSEC Fail Leaks Client List and Profit Details

TA453 Hackers Using Fake podcast To Deliver New BlackSmith Malware Toolkit

The latest Google smartwatches can’t be fixed

Thousands of WordPress sites potentially at risk from plugin security flaw

Time to finally get serious about stopping the attacks on the healthcare supply chain

Top architectural firm reveals it was hit by major ransomware attack

Toyota confirms data breach as threat actor leaks 240GB of sensitive information

Tycoon 2FA Phishing Kit: What You Need to Know about the Highly Active Threat

UK riots: moderating free speech and the dangers of misinformation

Xeon Sender Abusing Nine SaaS providers For Massive SMS Attacks

Whale Falls Victim to $55M Crypto Phishing Scam: What Went Wrong?

What Is Access Control and Why Do Cyber Essentials and ISO 27001 Require It?

20/08

0-day in Windows driver exploited by North Korean hackers to deliver rootkit (CVE-2024-38193)

2.9 Billion Records Exposed in NPD Breach: How to Stay Safe

36% of global internet traffic originated from bots

47% of US firms suffered data breach resulting in severe financial loss

Abnormal sees 350% uptick in phishing via file-sharing sites

Al-Anon member details and chats exposed in data breach

AI for application security: Balancing automation with human oversight

Alabama Cardiovascular Group suffers healthcare data breach

Alleged Data Breach Exposes Over 5 Million Records from Lookiero

Almost 77K compromised in Carespring breach

Ambulnz Holdings reports data breach impacting patients from major health systems

Anatomy of an Attack

Android & iOS Users Targeted with New Phishing Attack Using PWAs & WebAPKs

Apache DolphinScheduler Vulnerability Let Hackers Execute Remote Code

Artificial intelligence, real anxiety: Why we can't stop worrying and love AI

August Windows updates break dual boot on some Linux systems

Be careful what you pwish for – Phishing in PWA applications

Blind Eagle Hackers Exploit Spear-Phishing to Deploy RATs in Latin America

Breaking Free from Ransomware: Securing Your CI/CD Against RaaS

BVI Electricity Corporation (BVIEC) suffers cyber attack

CISA Warns of Critical Jenkins Vulnerability Exploited in Ransomware Attacks

CISOs urged to prepare now for post-quantum cryptography

Consilium Staffing Files Official Notice of Data Breach Affecting an Unknown Number of Consumers

Cost of a data breach: The industrial sector

Court blocks key part of California law on children's online safety

Critical Remote Code Execution Vulnerability Addressed in GiveWP Plugin

Critical WordPress Plugin RCE Vulnerability Impacts 100k+ Sites

Cybercrime analytics company releases update regarding massive PII data breach

Czech Mobile Users Targeted in New Banking Credential Theft Scheme

Cybercriminals exploit file sharing services to advance phishing attacks

Data for sale: 75% of US House members exposed by people search sites

Enroll Confidently Notifies Consumers of February 2024 Data Breach

F5 Patches High-Severity Vulnerabilities in BIG-IP, NGINX Plus

FBI Investigation Confirms that Iran Hackers Behind Trump Campaign Hack

Flight Aware admits to leaking sensitive user data for years

FlightAware data breach exposed sensitive user information, including social security numbers

FOG Ransomware Targets Higher Education

Former Congressman Santos Admits Identity Theft and Fraud

George Santos pleads guilty to fraud and identity theft

Hackers deployed new malware against university in Taiwan

Hackers Exploit PHP Vulnerability to Deploy Stealthy Msupedge Backdoor

Hacker locks Unicoin staff out of Google accounts for 4 days

Hackers use PHP exploit to backdoor Windows systems with new malware

How CISOs can tackle the pernicious problem of poisoned packages

How Exceptional CISOs Are Igniting the Security Fire in Their Development Team

INE Security Alert: The Steep Cost of Neglecting Cybersecurity Training

Iran Behind Trump Campaign Hack, US Government Confirms

Iranian Cyber Group TA453 Targets Jewish Leader with New AnvilEcho Malware

Iranian Group TA453 Launches Phishing Attacks with BlackSmith

Jewish Home Lifecare cyber attack compromised more than 100,000 patients' data

Jewish Home Lifecare Notifies 100,000 Victims of Ransomware Breach

July 2024 Healthcare Data Breach Report

Kursk offensive’s Prisoners of War (POW) images used in cyberattack

Major Flaw in Microsoft Mac Apps Could Let Hackers Spy Through Mic and Camera

Malwarebytes Releases "ThreatDown 2024 State of Ransomware" Report Highlighting Surge in Malicious Activity Across the USA (63% increase) and UK (67% increase)

Massive Unicoin Cyberattack: A Four-Day Lockout and Its Aftermath

McLaren Health Care confirms ransomware attack disrupting services across Michigan

Most Ransomware Attacks Occur When Security Staff Are Asleep, Study Finds

Multiple F5 Flaws Let Attackers Login With User Session & Cause DoS Attack

New APT Group BlindEagle Attacking Multiple Organizations Via Weaponized Emails

New DNS-Based Backdoor Threat Discovered at Taiwanese University

New phishing method targets Android and iPhone users

Novel Phishing Method Used in Android/iOS Financial Fraud Campaigns

Oracle NetSuite misconfiguration could lead to data exposure

Oregon Zoo warns visitors their credit card details were stolen

Organizations turn to biometrics to counter deepfakes

PoC Exploit Released for Windows 0-Day Downgrade Attack

Post-Compromise Security: What to do When the Hackers Get in

Previously unseen Msupedge backdoor targeted a university in Taiwan

Prominent Jewish rabbi targeted by Iranian phishers masquerading as podcasters

RansomHub threat actors observed using EDR-killing tool

Ransomware attacks rise over 60 percent

Ransomware Payments Rake in £353.24M in H1 2024

Ransomware payments rose from $449.1 million to $459.8 million

Ransomware’s Record Year: 2024 Earnings Soar Amid Overall Cybercrime Dip

Researchers Uncover TLS Bootstrap Attack on Azure Kubernetes Clusters

SpaceX and New Jersey Government Allegedly Breached by Moroccan Threat Actors

Strategies for security leaders: Building a positive cybersecurity culture

Supply Chain Attacks Becoming a Near-Daily Occurrence: Cyble Research

Swiss engineering firm Schlatter says IT systems back up after cyberattack

Thales 2024 Critical Infrastructure report reveals a rise in ransomware and a lack of readiness

The Steep Cost of Neglecting Cybersecurity Training

Thousands of Oracle NetSuite Sites at Risk of Exposing Customer Information

Threat Actor Allegedly Breaches UK Company Bar2, Offers Data for Sale

Threat Actor Claims Breach of Siam Cement Group Database

Three-Quarters of Companies Retain An Increasing Amount of Sensitive Data, Report Finds

TodoSwift Malware Targets macOS, Disguised as Bitcoin PDF App

Toyota admits 240GB data breach

Toyota confirms data breach as threat actors claim 240GB exfiltrated and published

Toyota disclosed a data breach after ZeroSevenGroup leaked stolen data on a cybercrime forum

U.S. says Iran cyber operations targeted Trump, Harris campaigns

US warns of Iranian hackers escalating influence operations

Vermin Cyber-Attacks Target Ukraine, Exploiting Kursk Battle

Vulnerabilities in Microsoft macOS apps may give attackers access to microphone, camera

19/08

1.3M Client Data From Carehands Allegedly Leaked

3AM ransomware group leaks 22GB of data stolen from Kootenai Health

72% of cybersecurity leaders faced a cyberattack in last 18 months

AI SPERA and Hackers Central Partner to Expand Mexico’s Security Market with ‘Criminal IP ASM’

Akeela Under Investigation for Data Breach of 280,000 Patient Records

Another Data Breach, More Credit Monitoring. There’s A Better Solution

As X shuts down in Brazil, is the Apple App Store silencing removing VPNs?

AT&T wireless’ data breach: A wake-up call for strengthening cloud security and trust

Attackers Use Xeon Sender Tool to Launch SMS Phishing, Spam Campaigns

Australian regulator takes down more than 7,300 phishing and investment scam websites

AutoCanada investigating attempted cyber attack that disrupted some systems

Azure and Google domains hacked to spread disinformation

Beng Kuang Marine reports ‘cybersecurity incident’ after external vendor suffers ransomware attack

Beware! Styx Stealer Malware Stealing Browser & Instant Messenger Data

CISA adds Jenkins Command Line Interface (CLI) bug to its Known Exploited Vulnerabilities catalog

CISA warns of Jenkins RCE bug exploited in ransomware attacks

City of Flint Scrambling to Restore Services Following Ransomware Attack

Clark County CIO Shares Insights on Securing AI Innovation and Broadband Initiatives

Clearwater firm KnowBe4 accidentally hires North Korean hacker

Columbus ransomware attack: What’s still unknown one month after the data breach

Common API security issues: From exposed secrets to unauthorized access

Computer engineer hacks own employer, demands $750K ransom

Copilot Autofix – A GitHub AI Tools Now Analyse Vulnerabilities And Fix It Automatically

CrowdStrike questions could give CISOs pause — with options available

Cyber attack brought down Wichita airport Wi-Fi, and it’s still not back. Here’s why

Cyber-attack on Monobank is still ongoing - Ukrainian intelligence services offered to help

Cybercriminals Exploit Popular Software Searches to Spread FakeBat Malware

Cybercriminals siphon credit card numbers from Oregon Zoo website

Data Breach Exposes Personal Information For Millions

Database misconfiguration exposes over half of Chilean population’s data

Enzo Biochem fined $4.5 million for data breach that affected over 2.4m patients

Extortion Group Exploits Cloud Misconfigurations, Targets 110,000 Domains

FBI and CISA Assure Public on Election Ransomware Security

FlightAware configuration error leaked user data for years

FlightAware Data Leak Exposes Users’ Personal Information

Government Sector Hit Hard By Ransomware Attacks According to New Report

GTBank’s cyber attack: A wake-up call for Nigerian banks amid recapitalisation efforts

Hackers Exploit Email URL Rewriting to Insert Phishing Links

Hackers linked to $14M Holograph crypto heist arrested in Italy

How to Automate the Hardest Parts of Employee Offboarding

If your SSN was leaked online, you should freeze your credit: Here's how to do that

Kaspersky estimates 21% of phishing emails are generated by AI

Linux Kernal Vulnerability Let Attackers Bypass CPU & Write on Memory

Mandatory MFA for Azure sign-ins is coming

Massive Cyber Attack On AWS Targets 230 Million Unique Cloud Environments

Massive infostealer campaign exploits legitimate brands

Microsoft Apps for macOS Exposed to Library Injection Attacks

Microsoft macOS Apps Vulnerability Allows Hackers to Record Audio/Video

Microsoft Patches Zero-Day Flaw Exploited by North Korea's Lazarus Group

Microsoft patches Windows security flaw exploited by North Korean hackers — but is it too late?

Microsoft Zero-Day CVE-2024-38193 was exploited by North Korea-linked Lazarus APT

National Public Data Breach Spotlights Need for Stronger Identification Methods

National Public Data finally confirms it was hit by data breach — and that millions of users are at risk

National Public Data says data leak impacted millions of individuals

NCSC Opens Cyber Resilience Audit Scheme to Applicants

New Kubernetes Vulnerability Allows Attackers to Access Clusters Remotely

New ‘Mad Liberator’ Ransomware Gang Targets AnyDesk Users via Fake Windows Updates

New Tool Xeon Sender Enables Large-Scale SMS Spam Attacks

New UULoader Malware Distributes Gh0st RAT and Mimikatz in East Asia

Overall Crypto Crime Declines, but Stolen Funds and Ransomware Surge

Protecting academic assets: How higher education can enhance cybersecurity

QWERTY Info Stealer Employed Anti-Debugging Techniques to Exfiltrate Data from Windows

RansomHub-linked EDR-killing malware spotted in the wild

Ransomware Attacks Drop as Global Law Enforcement Clamps Down

Ransomware rakes in record-breaking $450 million in first half of 2024

Ransomware Resilience Drives Down Cyber Insurance Claims

Researchers Uncover New Infrastructure Tied to FIN7 Cybercrime Group

Rödl Management reports data breach impacting Jamestown, LP, and JT Tax Services clients

Russian hackers under the spotlight: 4000 malicious domains, IPs revealed

Some major firms are being targeted by this dangerous new cybercrime campaign

Stolen, locked payment cards can be used with digital wallet apps

Thales Report Reveals Critical Infrastructure Breaches in Australia

The Cost of a Data Breach in 2024

The Mad Liberator ransomware group uses social-engineering techniques

The Windows BitLocker recovery bug is fixed, according to Microsoft

Threat Actor Allegedly Selling Network Access to an US Transportation and Logistics Company

Threat Actor Claims Ransomware Attack on Glaze Trading India, Allegedly Stealing 12TB of Data

This expert thinks he has found some major security flaws with the MacOS app store

To improve your cybersecurity posture, focus on the data

Toyota confirms breach after stolen data leaks on hacking forum

TOYOTA Data Breach – Hackers Group Leaked 240 GB of Data Online

UConn Health data breach exposes sensitive consumer information

Unicoin Staff Locked Out of G-Suite in Mystery Attack

US E-Commerce Firm Strong Current Enterprises Allegedly Breached

Vulnerabilities in Microsoft’s macOS apps could help hackers access microphones and cameras

x64dbg: Open-source binary debugger for Windows

Xeon Sender Tool Exploits Cloud APIs for Large-Scale SMS Phishing Attacks

WazirX Data Breach Update: Liminal Custody Hits Back at Nischal Shetty-Run Crypto Exchange After It Claimed Cyberattack Originated There

What is QR Code Phishing? (Quishing) – Attack & Prevention Guide in 2024

Who writes the code in your security software? You need to know

Windows Secure Channel RCE Vulnerability Let Attackers Inject Malicious Files Remotely

Your Android phone is getting an anti-theft upgrade, thanks to AI. How it works

18/08

A ransomware attack closed LA courts for two days. The public deserves a full accounting

'Canada's first' cybersecurity escape room opens in Aurora

Chrome will redact credit cards, passwords when you share Android screen

Cyber specialists from the Ukrainian Defense Intelligence have paralyzed a Russian nuclear warhead developer

From 2018: DeepMasterPrints: deceive fingerprint recognition systems with MasterPrints generated with GANs

How Safe Am I Online?—and Other Questions Readers Asked About Cybersecurity

How to freeze your credit - and how it can help protect you after data breaches

North Miami councilman talks about cyber attack: ‘City is being extorted’

Personal data, including Social Security numbers, stolen in massive data breach, lawsuit says

Ransomware attacks surge 58% in July, breaking records

Rising cybersecurity demands reshape ICS procurement strategies across critical infrastructure

The growing menace of cyber warfare

Ukraine’s intelligence reveals details of cyber attack on producer of Russian nukes

Daily News - Agosto (11/08 - 17/08) - 33 Semana de 2024