Daily News - Dezembro (01/12 - 07/12) - 49 Semana de 2024

Cyber Security, Hacking, Privacy and Information Security News --- Daily Updates !! Weekly Resume...

07/12

Almost 90% of Belgians targeted by phishing scams; fewer than 1% get money back

Chinese Hackers Allegedly Behind Massive ‘Salt Typhoon’ Cyber-Attack on U.S. Telecom Sector

Deloitte Data Breach: Company Denies The Breach Says, “Only Single Client System Affected”

Deloitte Denies Breach, Claims Only Single System Affected

Hackers Using Fake Video Conferencing Apps to Steal Web3 Professionals' Data

Phishing scam fleeces West Australians out of hundreds of thousands, four men arrested

Romania ’s election systems hit by 85,000 attacks ahead of presidential vote

Russia’s FSB used spyware against a Russian programmer

Ultralytics AI Library Compromised: Cryptocurrency Miner Found in PyPI Versions

Watsonville hospital network outage caused by cyberattack

06/12

8 biggest cybersecurity threats manufacturers face

A Framework for Human-AI Partnership in the SOC

A new report shows QR code phishing is on the rise

AI & cybersecurity lead trends in APJ technology report

Alleged Data Breach at Anex Baby Exposes Customer Information

Alleged Data Breach at Lazz Hotel Exposes Customer Information

Alleged Data Breach at SalonBiz Exposes Customer Information

Alleged Data Breach of Indian Government Volunteer Database Exposes Sensitive Information

Alleged phishing scammers used Apple Pay to spend $350k stolen from bank customers using fake text messages

Apple is taking over this popular password manager plugin

Atrium Health Data Breach Impacts 585,000 People

Atrium Health says cyber attack compromised the data of 585,000 patients

Authorities Dismantled 50+ Servers Used By Criminal Marketplace

Black Basta Ransomware Leverages Microsoft Teams To Attack Windows

Blue Yonder Attack Attributed to New ‘Termite’ Ransomware Group

Blue Yonder SaaS giant breached by Termite ransomware gang

BT Group confirms cyber incident following Black Basta ransomware claims

BT investigating a Black Basta ransomware attack on its conferencing platform

Building a robust security posture with limited resources

Businesses received over 20 billion spam emails this year

Calgary's Fueling Brains Academy targeted by 'possible data breach'

CapibaraZero Firmware Emerges As Affordable Flipper Zero Alternative For Pentesters

Chinese hacking campaign breaches data of over 1 million Americans in a major espionage operation

CISA Releases Multiple ICS Advisories Detailing Exploits & Vulnerabilities

Conquering the Complexities of Modern BCDR

Costa Rica’s RECOPE Seeks US Cybersecurity Help After Ransomware Attack

Critical Windows Zero-Day Vulnerability Lets Attackers Steal Users NTLM Credentials

Crypto-stealing malware posing as a meeting app targets Web3 pros

Cubic & Skylo team up to boost vehicle connectivity

Cyber Attack at White Lake Township Hall Cripples Transactions

Cyber Monday 2024: ANY.RUN Offers Upto 3 Free Licences for Cybersecurity Researchers

Cyberattack response plans should be mandatory for US telecoms, FCC Chair says

Cybersecurity in the European Union 2024: ENISA's Insights and Recommendations for Strengthening Resilience

Data deletion enters the ransomware chat

December 2024 Patch Tuesday forecast: The secure future initiative impact

Deloitte Denies Breach, Claims Cyber-Attack Targeted Single Client

Employee Data Access Behaviors Putting Australian Employers At Risk

Europol Dismantles Major Online Fraud Platform in Major Blow to Fraudsters

FCC chair proposes cybersecurity rules in response to China's Salt Typhoon telecom hack

FCC Proposes Stricter Cybersecurity Rules for US Telecoms

FSB Uses Trojan App to Monitor Russian Programmer Accused of Supporting Ukraine

GenAI makes phishing attacks more believable and cost-effective

German Authorities Dismantle Major Illegal Marketplace Crimenetwork

Hackers Leveraging Cloudflare Tunnels, DNS Fast-Flux to Hide GammaDrop Malware

HDFC Life Insurance Data Breach: 1.6 Crore Customers' Information Leaked On Dark Web

Highland Park ISD Affected by Ransomware

How to choose secure, verifiable technologies?

hrtng: A Powerful IDA Pro Plugin for Malware Reverse Engineering

Hundred of CISCO switches impacted by bootloader flaw

Japanese to harness AI to fight trillion-dollar manga and anime piracy problem

'Large number' of Americans' metadata stolen by Chinese hackers, senior official says

Law Enforcement Shuts Down MATRIX Encrypted Messaging Service

More_eggs MaaS Expands Operations with RevC2 Backdoor and Venom Loader

More_eggs malware hatches two new variants for MaaS operation

Movie Theater Data Breach Leads to Settlement and Class Action Lawsuits

New Android Spyware Found On Russian Programmer Phone Who Was Released From Custody

New Malware Campaign Exposes Gaps in Manufacturing Cybersecurity Defenses

New QR Code-Based C2 Attack Lets Hackers Bypass All Type of Browser Isolation Security

New Russian Threat Group Z-Pentest Targets Energy System Controls

New Windows zero-day exposes NTLM credentials, gets unofficial patch

Op-Ed: Building consumer trust and cyber resilience in Australia

Over 650 GB SRP Federal Credit Union data breached by Nitrogen ransomware

Papua New Guinea to follow Australia with age-based social media ban for kids

Phishing attacks rose by more than 600% in the buildup to Black Friday

Pirated corporate software infects Russian businesses with info-stealing malware

ProcessUnity Interivew: Revolutionizing Third-Party Risk Management with Risk Exchanges

Ransomware Gangs’ Merciless Attacks Bleed Small Companies Dry

Researchers Uncover Flaws in Popular Open-Source Machine Learning Frameworks

Researchers Uncover Malicious Use Of Cobalt Strike Servers In Cyber Attacks

Rockwell Automation Vulnerabilities Let Attackers Execute Remote Code

Romania Exposes TikTok Propaganda Campaign Supporting Pro-Russian Candidate

Romania was target of 'aggressive hybrid Russian attacks' during elections, security council says

Russian BlueAlpha APT Abuses Cloudflare Tunnels To Deliver Custom Malware

Russian Hackers Exploit Cloudflare to Spy on Ukraine

Signzy investigating KYC customer data breach

Teenagers leading new wave of cybercrime

TfL cyberattack bites into profits with £30 million spent on recovery

Today’s Cold War: where cybersecurity and geopolitics converge

Top Five Industries Aggressively Targeted By Phishing Attacks

Top tips and tricks to upgrade your OSINT skills

Tripura Gramin Bank Website Reportedly Taken Offline in Suspected Cyberattack

UK SMEs Are Concerned About Preparedness For Cyberattacks as Fraud Rises Finds Mollie

Ultralytics AI model hijacked to infect thousands with cryptominer

US authorities arrest another alleged Scattered Spider hacker

U.S. CISA adds CyberPanel flaw to its Known Exploited Vulnerabilities catalog

US hospital reveals Christmas breach that exposed hundreds of thousands

Users warned against using certain Anker speakers due to fire hazard risk

Vodka maker Stoli files for bankruptcy in the US after a ransomware attack

Windows, macOS users targeted with crypto-and-info-stealing malware

Windows zero-day: attackers can steal NTLM credentials with little user interaction

05/12

4 Defining Characteristics of a Hacker

8 phishing email scams to watch out for this holiday season

8 US telcos compromised, FBI advises Americans to use encrypted communications

100,000 Websites Allegedly Vulnerable to CVE-2023-6553 Exploit

A snake in the net: Defending against Adversary-in-the-Middle (AiTM) phishing threats and Mamba 2FA

“aiocpa” Python Package Exposed as Cryptocurrency Infostealer

Alder Hey NHS foundation says cyber attack compromised the systems of three NHS hospitals

Alleged Compromise of Administrator Access to Sécurité Nationale Systems Raises Security Concerns

Alleged Data Breach at Edizionidottrinari.it Exposes Sensitive User Information

Alleged Data Breach at LIXIL Exposes Sensitive Customer Information

Alleged Data Breach at Tribelsky Exposes Sensitive User Information

Alleged Data Breach at VozoHealth Exposes Sensitive EHR Data

ANEL and NOOPDOOR Backdoors Weaponized in New MirrorFace Campaign Against Japan

Beware Of New HR Payroll Phishing Attack Targeting Numerous Employees

Black Basta attack disrupts BT unit’s servers

Brain Cipher claims to breach Deloitte UK, allegedly steals 1TB of data

Building trust in tokenized economies

Burnout in SOCs: How AI Can Help Analysts Focus on High-Value Tasks

China-linked APT Salt Typhoon has breached telcos in dozens of countries

Chinese Hacker Steals Metadata From US Telecom Firms

Chinese Salt Typhoon Hacked 8+ Telecoms To Stole U.S. Citizens Data

CISA Adds Three Critical Vulnerabilities to KEV Catalog: Immediate Action Urged

CISA Warns of Active Exploitation of Flaws in Zyxel, ProjectSend, and CyberPanel

CISA Warns Of CyberPanel, North Grid, ProjectSend & Zyxel Firewalls Flaws Exploited In Wild

Citadel of Northbrook Reports Data Breach Stemming from Incident at PointClickCare

Critical Mitel MiCollab Flaw Exposes Systems to Unauthorized File and Admin Access

Critical Veeam Vulnerabilities Expose Service Provider Console to Cyber Risks

Cyber attack forces U.S. energy sector contractor ENGlobal to shut IT systems

Cyber bandits rely on AI to bypass biometric security measures in financial institutions

Cyber threats surge ahead of Black Friday: Kaspersky reports 25% increase in retail-focused phishing attacks

DDoS Attacks: It’s What You Don’t Know That May Hurt You

Dear CEO: It’s time to rethink security leadership and empower your CISO

Deloitte Allegedly Breached by Hackers

Deloitte UK reportedly hacked, over 1TB of data stolen

Deloitte UK suffers alleged cyber incident, over 1TB stolen

Delta Dental data breach exposes more than 802,000 records

Download: The Ultimate Guide to the CCSP

European police shut down major stolen data marketplace

Europol Official Website Reportedly Targeted in Significant Cyberattack

Europol Shuts Down Manson Market Fraud Marketplace, Seizes 50 Servers

Examples of Phishing Attacks and How to Effectively Analyze Them

Experts warn of AI-driven scams mimicking familiar voices

FBI warning to iPhone and Android users amid major ongoing cyber attack

FBI Warns GenAI is Boosting Financial Fraud

Fourteen million telecom customers' phone numbers and locations exposed

From check-in convenience to check-out chaos: Italy’s Airbnb crackdown

Fuji Electric Indonesia Hit By Ransomware Attack, Business Information Compromised

G20 Leaders Fear Economic Over Cyber Risks

GoodRx agrees to a $25 million settlement over a data privacy class action lawsuit

Hacker atua com polícia e impede estupro de jovem em SP

Hacker claims personal data theft of employees at the world's largest tech companies

Hackers Target Uyghurs and Tibetans with MOONSHINE Exploit and DarkNimbus Backdoor

HCL DevOps Deploy & Launch Vulnerable To HTML Injection Attacks

How laws strain to keep pace with AI advances and data theft

How the NCA Cracked Billion-Dollar Money Laundering Rings Linked to Ransomware Gangs

How the Shadowserver Foundation helps network defenders with free intelligence feeds

Identity Phishing: Using Legitimate Cloud Services to Steal User Access

iPhone users experience massive hacking attack: How to protect your smartphone

Is the tide turning on macOS security?

Isreali NSO Group’s Pegasus Spyware Detected in New Mobile Devices

Kremlin’s assault on anime continues as Russian watchdog blocks popular Naruto fansite

Latrodectus malware and how to defend against it with Wazuh

Law enforcement shuts down Manson Market cybercrime marketplace

Major USAID contractor Chemonics says 263,000 affected by 2023 data breach

‘Massive breach’: Social security numbers, health info and much more stolen in Hoboken cyberattack

Microsoft reaffirms that Windows 11 will not support older hardware

Mid-Ohio Psychological Services Files Notice of Data Breach with HHS-OCR

Mitel MiCollab zero-day and PoC exploit unveiled

Mitel MiCollab zero-day flaw gets proof-of-concept exploit

Mitel MiCollab Zero-Day Vulnerability Let Attackers Bypass Authentication

MOONSHINE Kit Exploiting Android Messaging Apps Flaw To Inject Backdoor

National Public Data Closes Down After Major Data Breach

National Registration Department (JPN) - No Data Breach Occurred On System, Database

NCA Busts Russian Crypto Networks Laundering Funds and Evading Sanctions

New Android spyware found on phone seized by Russian FSB

New DroidBot Malware Attacking 77 Banks And Cryptocurrency Exchange Services

New Zealand's cyber watchdog sounds warning over mass hacking operation

New York Fines Auto Insurance Companies GEICO and Traveler Nearly $12 Million Over Data Breaches

No one is safe from Pegasus: spyware detected on ordinary people’s phones

Operation Destabilise dismantled Russian money laundering networks

Phishing in style: Microsoft Sway abused to deliver quishing attacks

Phishing scam uses Globe Telecom’s official SMS channel

PointClickCare Data Breach Affects Residents of Multiple Long-Term Care Facilities

Police Dismantle Manson Market, Seize 50 Servers and 200TB Evidence

Police shuts down Manson cybercrime market, arrests key suspects

Preparing for Q-day: The essential role of cloud migration in securing enterprise data

Pro-Russian Hacktivist Group Claims 6600 Attacks Targeting Europe

Pro-Russian videos appear on Ukrainian TV channels due to hacker attack

Ransomware attack against Greek company hurts IKEA stores

Ransomware 'Gang' Took Credit For Hoboken Cyberattack

Ransomware Group Claims to Have Breached One of BT's UK Systems

Researchers achieve 96% accuracy in detecting phishing emails with open-source AI

Researchers Uncover 4-Month Cyberattack on U.S. Firm Linked to Chinese Hackers

Robinhood Data Breach Lawsuit Filed After Customer Information Allegedly Posted to Dark Web

Russia-linked APT Secret Blizzard spotted using infrastructure of other threat actors

Russian FSB-linked hackers rely on other cybercriminals’ infrastructure, report finds

Russian Hackers Exploit Rival Attackers' Infrastructure for Espionage

Salt Typhoon cyber attack escalation sees Americans warned by SMS

Secret Blizzard Hackers Attack Windows Infrastructure Using Multiple Hacking Tools

Single Cyber-Attack Impacted Multiple Liverpool Hospitals

Solana Library Supply Chain Attack Exposes Cryptocurrency Wallets

Sophisticated Celestial Stealer Attacking Browsers to Steal Login Credentials

STJ responsabiliza Enel por vazamento de dados de cliente após ataque hacker

Stoli Group subsidiaries collapse amid ransomware crisis

Teen hacks telecom networks to send millions of phishing texts

Telecom Giant BT Group Hit by Black Basta Ransomware

Texas accuses four companies of sharing sensitive user data without proper notice and consent

The top ransomware stories of 2024

Thinkware Cloud APK Vulnerability Let Attackers Execute Arbitrary Code

This $3,000 Android Trojan Targeting Banks and Cryptocurrency Exchanges

Transport for London (TfL) restores fares services three months after a devastating cyber attack

UK-led operation dismantles huge Russian cybercrime network: 84 arrested, $25 million seized

UK’s NCA Disrupts Multibillion-Dollar Russian Money Launderers

US arrests Scattered Spider suspect linked to telecom hacks

US may plan legislation to contain Chinese cyber espionage

U.S. org suffered four month intrusion by Chinese hackers

U.S. Organization In China Attacked By China-Based Hackers

Veeam Urges Immediate Update to Patch Severe Vulnerabilities

Voice Cloning, Fake Videos & More: AI Is Making Scams Unstoppable

Want to Grow Vulnerability Management into Exposure Management? Start Here!

Warning issued after Chinese hacker group breaches telco firms in "dozens of countries"

Warning issued for 10-year-old vulnerability, security leaders discuss

What is Host-based Intrusion Detection System?

Woman arrested over alleged data breach at Irish utility company

WordPress Gutenberg Editor Vulnerability Let Attackers Inject Malicious Scripts

04/12

65% of office workers bypass cybersecurity to boost productivity

70% of open-source components are poorly or no longer maintained

Alleged Data Breach at CentraCare Exposes Sensitive Patient Information

API Security in Open Banking: Balancing Innovation with Risk Management

Are We on the Brink of Saying Goodbye to Passwords?

Authorities Dismantle MATRIX Secret Chat Service Used by Cybercriminals

Authorities Take Down Criminal Encrypted Messaging Platform MATRIX

British telecoms giant BT confirms attempted cyberattack after ransomware gang claims hack

BT unit took servers offline after Black Basta ransomware breach

Businesses without a secure and modern application server are at risk

CISA Releases Guidance For Network Monitoring to Detect Malicious Cyber Actors

Cisco Urges Immediate Patch for Decade-Old WebVPN Vulnerability

Critical flaw in Zabbix monitoring tool: attackers can take over thousands of systems

Critical SailPoint IdentityIQ Vulnerability Exposes Files to Unauthorized Access

Critical Veeam Vulnerabilities Allow Remote Code Execution – Update Now

Crypto and Cybersecurity: How to Keep Your Cryptocurrency Safe in 2025

Cyber attack on California law firm compromised the data of 315,000 individuals

Cyber Threats During the Holidays: How to Stay Safe From Seasonal Scams and Data Breaches

Cyberattack targets UK Ministry of Defence (MoD), leaking hundreds of employee credentials

Cybercriminals already using AI for most types of scams, FBI warns

Data brokers sold sensitive location info of Americans' visits to health clinics, protests, and more

ENISA Launches First State of EU Cybersecurity Report

Europol Dismantles Criminal Messaging Service MATRIX in Major Global Takedown

FBI and CISA say to use encrypted messengers as Chinese hackers attack networks

FBI faz alerta sobre “ataque hacker mais sério da história” e manda população usar aplicativos criptografados

FBI shares tips on how to tackle AI-powered fraud schemes

First Linux UEFI Bootkit Discovered as Research Project

FTC Safeguards US Consumers from Location Data Misuse

German Police Shutter Country’s Largest Dark Web Market

Google Chrome Type Confusion Vulnerability Let Attackers Execute Remote Code

Hackers Use Corrupted ZIPs and Office Docs to Evade Antivirus and Email Defenses

How widespread is mercenary spyware? More than you think

Japan warns of IO-Data zero-day router flaws exploited in attacks

Japanese automotive systems giant JTEKT says cyber attack impacted global operations

Joint Advisory Warns of PRC-Backed Cyber Espionage Targeting Telecom Networks

Liverpool Children's Hospital Confirms Cyber-Attack

Massive breach exposes major USAID contractor

Massive data breach exposes nearly 645,000 sensitive records linked to SL Data Services

MobSF Vulnerability Let Attackers Inject Malicious Scripts

New DroidBot Android banking malware spreads across Europe

New TLDs Like .shop, .top And .xyz Attracting Phishers

NHS Ransomware Attack: Russian INC Ransom Gang Steals Patient Data

PoC exploit for critical WhatsUp Gold RCE vulnerability released (CVE-2024-8785)

PoC Exploit Released For Progress WhatsUp Gold Vulnerability

Ransomware Costs Manufacturing Sector $17bn in Downtime

Ransomware gang claims Deloitte UK

Ransomware Hits Alder Hey: Patient Data on Dark Web

Researchers Uncover Backdoor in Solana's Popular Web3.js npm Library

Russia-Linked Turla Exploits Pakistani Hackers' Servers to Target Afghan and Indian Entities

Russian authorities charge notorious hacker Mikhail Matveev in malware case

Russian hackers hijack Pakistani hackers' servers for their own attacks

SafeLine: Open-source web application firewall (WAF)

Securing AI’s new frontier: Visibility, governance, and mitigating compliance risks

Security Risks Persist in Open Source Ecosystem

Signzy launches probe following alleged cybersecurity incident

Six key takeaways from CISOs on AI’s role in security

Six password takeaways from the updated NIST cybersecurity framework

SmokeLoader Exploits Microsoft Office Vulnerabilities to Steal Credentials

Solana Web3.js library backdoored to steal secret, private keys

STJ considera empresa responsável por vazamento de dados de consumidores, mesmo em caso de ataque hacker

The Expert View: Keeping Ahead of the Hackers

The New Cyber Frontier: Managing Risks in Distributed Teams

UK disrupts Russian money laundering networks used by ransomware

Understanding password hashing and security

US agencies to brief senators on Chinese Salt Typhoon telecom hacking

U.S. CISA adds ProjectSend, North Grid Proself, and Zyxel firewalls bugs to its Known Exploited Vulnerabilities catalog

Veeam Issues Patch for Critical RCE Vulnerability in Service Provider Console

Veeam Service Provider RCE Vulnerability Let Attackers Execute Arbitrary Code

Vodka Giant Stoli Files for Bankruptcy After Ransomware Attack

Wirral Hospital Recovery Continues One Week After Cyber Incident

03/12

10 most critical LLM vulnerabilities

30M protected links exposed by ‘safe’ link-sharing provider

Alleged Data Breach at EazyDiner.com Exposes User Information

Alleged Snowflake Hacker ‘Danger’ to the Public, Canada Says

Após monitorar conversas em aplicativo, hacker ajuda polícia a impedir estupro de adolescente e prender suspeito

Apple Employee Suing Company For Monitoring Employee Personal Devices

Apple Faces Privacy Lawsuit: Employee Alleges Invasive Device Monitoring

AWS Launched New Security Incident Response Service to Boost Enterprise Security

Best practices for staying cyber secure during the holidays

Beyond the Apple myth: Addressing rising phishing and deepfake threats

BianLian ransomware transitioned into a data theft-exclusive group

BootKitty Linux UEFI bootkit spotted exploiting LogoFAIL flaws

CERT-In Alerts Multiple Vulnerabilities in Drupal Expose Systems

Chinese LIDAR Dominance a Cybersecurity Threat, Warns Think Tank

CISA’s New TIC 3.0 SCC Version Enhances Cybersecurity Resilience for Federal Agencies

Cisco Confirms Active Exploitation Of Cisco XSS VPN Vulnerability

Cisco Warns of Exploitation of Decade-Old ASA WebVPN Vulnerability

Clipper DEX Seeks Negotiation with Hacker After $450,000 Exploit

CLOUD 2754 Stealer Logs Allegedly Exposed, Highlighting Privacy Risks

Cloudflare’s developer domains increasingly abused by threat actors

Cyber drug empire mogul to spend life behind bars

DMM Bitcoin halts operations six months after a $300 million cyber heist

Empresa responde por dados de clientes vazados após ataque hacker

Energy industry contractor ENGlobal Corporation discloses a ransomware attack

Energy industry contractor says ransomware attack has limited access to IT systems

Exploit released for critical WhatsUp Gold RCE flaw, patch now

Flipper Zero goes retro with this cool limited-edition transparent version

French Mobile Operators Join Forces to Tackle Rising Fraud

FTC bans data brokers from selling Americans’ sensitive location data

Globe Telecom’s official SMS channel used in phishing

Hacker de 24 anos impede abuso sexual e ajuda a prender suspeito

Hackers Allegedly Claims Breach of EazyDiner Reservation Platform

Hackers Can Exploit Windows Driver Use-After-Free Vulnerability (CVE-2024-38193) to Gain Systems Privileges

Hackers claim major breakthrough in Windows and Office license fraud

Horns&Hooves Campaign Delivers RATs via Fake Emails and JavaScript Payloads

How Attackers Use Corrupted Files to Slip Past Security

Hydra Market Leader Sentenced to Life by Moscow Court

India tops global list for mobile malware attacks; banking systems particularly vulnerable

Indian Restaurant Reservation Platform EazyDiner Hit by Cyber Attack: Sensitive Customer Data Leaked!

“It’s inevitable,” says authorities after dismantling criminal-made “Matrix” platform

Ivanti Research Finds Phishing Tops List of Growing Cyber Threats, Fueled by GenAI

Kimsuky Group Adopts New Phishing Tactics to Target Victims

LastPass adds passkey support for free and premium users

Lifetime Jail For Hydra Dark Web Market Developer

Microsoft Ignite 2024 live : Highlights From Threat Intelligence to AI Governance

NachoVPN Tool Exploits Flaws in Popular VPN Clients for System Compromise

Nordic Threat Landscape Report 2024: Ransomware, Phishing, and Dark Web Insights

North Korean Kimsuky Hackers Use Russian Email Addresses for Credential Theft Attacks

Over $9m lost in November phishing scams affecting 9.2k victims, data shows

Phishers send corrupted documents to bypass email security

PoC Exploit Released for Windows Task Scheduler Zero-day Flaw, Exploited in Wild

Poland probes Pegasus spyware abuse under the PiS government

Police seize Matrix encrypted chat service after spying on criminals

Police seizes largest German online crime marketplace, arrests admin

Police Shut Down Matrix Encrypted Criminal Hub

Police takes down Matrix encrypted chat service used by criminals

Ransomware Attack Disrupts Operations at US Contractor ENGlobal

Ransomware Statistics By Industry, Root Cause, Revenue and Economic Impact

Russian hacker arrested...in Russia

Salesforce Applications Vulnerability Let Attackers Takeover The Accounts

Security Pros Positive About GenAI in Cyber, Despite Raising Attack Severity

Site da Prefeitura de Uruguaiana é alvo de hackers que pedem R$ 60 mil em resgate

SmokeLoader Malware Attacking Windows Users Exploiting XLS And DOC Vulnerabilities

South Korean firm caught exporting satellite receivers with DDoS capabilities

Storm-1811 Hackers Exploits RMM Tools to Deliver Black Basta Ransomware

Sweet Security Introduces Evolutionary Leap in Cloud Detection and Response, Releasing First Unified Detection & Response Platform

TP-Link Archer Zero-Day Vulnerability Let Attackers Inject Malicious Commands

Treat AI like a human: Redefining cybersecurity

UK Cyber-Attacks Surge as Threats Hit Harder, Warns NCSC

UK cyber chief warns country is ‘widely underestimating’ risks from cyberattacks

UK Hospital Hit by Cyber Attack: Critical Medical Services Disrupted, IPD and OPD Shift to Manual Operations

US agency proposes new rule blocking data brokers from selling Americans’ sensitive personal data

US government, energy sector contractor hit by ransomware

US shares tips to block hackers behind recent telecom breaches

Veeam plugs serious holes in Service Provider Console (CVE-2024-42448, CVE-2024-42449)

Veeam warns of critical RCE bug in Service Provider Console

Vodka maker Stoli files for bankruptcy in US after ransomware attack

Want to be a cybersecurity pro? Use generative AI to get some simulated training

What happened to the GTA 6 hacker? Sentence explained

02/12

5 reasons to double down on network security

8 Million Android Users Hit by SpyLoan Malware in Loan Apps on Google Play

$400M seized, 5,500 arrested in global operation targeting cyber fraud

600k background checks leaked from publicly accessible database

A Guide to Securing AI App Development: Join This Cybersecurity Webinar

Alto risco em dispositivos Wi-Fi industriais

Amazon GuardDuty Enhanced With AI/ML Threat Detection Capabilities for Cloud Security

Amazon GuardDuty Launches AI/ML Based Threat Detection Capabilities

Antivirus blind spot: corrupted files turn deadly once user attempts to 'recover' them

Apple Safari JavaScriptCore Remote Code Execution Flaw Exploited in the Wild

Apple Safari Remote Code Execution Vulnerability Exploited In The Wild

AWS launches security tool to help businesses recover from cyberattacks

AWS launches tools to tackle evolving cloud security threats

AWS offers incident response service

Beware Of Malicious PyPI Packages That Inject infostealer Malware

Bologna FC Hit By 200GB Data Theft and Ransom Demand

Bonpoint.com Customer Data Breach Exposes Sensitive Information

BootKitty UEFI malware exploits LogoFAIL to infect Linux systems

Clipper DEX Hit by Cyberattack: Exploit Targets Withdrawal Functionality

Corrupted Word Files Fuel Sophisticated Phishing Campaign

Critical MediaTek Bluetooth Chipset Vulnerabilities Impacted 1.5 Billion+ Android Users

Crypto.com Launches Massive $2m Bug Bounty Program

Cyber Incidents Hit 3 NHS Hospitals in U.K.

Cyber Monday Deals: Learn 100+ Premium Cybersecurity Courses With Ethical Hackers Academy

Data breach costs: Geico and Travelers fined $11.3M by New York State

Data scientists create tool to spot fake images

ENGlobal Corporation has Filed Form 8-K Due to a Cybersecurity Incident

Exploit for Pandora FMS Remote Code Execution CVE-2024-11320

Feds Propose AI 'Guard Rails' for Medicare Advantage Plans

France Accuses Azerbaijan of Online Manipulation Campaigns

GitHub Copilot for Azure Simplifies Deployment of ASP.NET Core Web API

Global Police Arrest 5500 in $400m Cyber-Fraud Crackdown

Grupo hacker diz dominar licenciamento do Windows

Hackers Drain $1.48 Billion from Crypto in 2024, Led by DeFi Exploits

Hackers Exploited Windows Event Logging Tool To Steal Data Secretly

Hackers Used Weaponized Resume To Infect User & Moved To Server Environments – Incident Report

Henderson Stamping Production Data Breach Reported

Hospitais do Reino Unido sob ataques

How AI is transforming human risk management

How threat actors can use generative artificial intelligence?

HPE IceWall Products Vulnerability Let Attackers Cause Unauthorized Data Modification

IBM Security Verify Vulnerabilities Let Attackers Execute Arbitrary Commands

Inside the 2024 CWE Top 25: Trends, surprises, and persistent challenges

International operation sees Interpol arrest over 5000 and seize $400 million

INTERPOL Arrests 5,500 in Global Cybercrime Crackdown, Seizes Over $400 Million

Interpol: Operation HAECHI-V led to more than 5,500 suspects arrested

Ivanhoe Club Data Breach Exposes Sensitive Information

Kimsuky's Phishing Attacks Evolve with Sophisticated Strategies

Korea arrests CEO for adding DDoS feature to satellite receivers

LenselS2 USA Company Data Breach Reported

Linux 6.13-rc1 Released: What’s New!

Linux Kernel 6.13 Released – Avoiding Holiday Season Clash

MediaTek Processor Vulnerabilities Let Attackers Escalate Privileges

Microsoft 365 Copilot Reloaded With Enhanced AI Capabilities

Microsoft 365 credentials stolen via adversary-in-the-middle campaign

Microsoft ramps up Windows 11 upgrade efforts

Microsoft Unveils Windows Resiliency Initiative To Prevent Phishing Attacks

New Rockstar 2FA Phishing-as-a-Service Kit Targets Microsoft 365 Accounts

North Korean Hacking Group Launches Undected Malwareless URL Phishing Attacks

Notepad++ v8.7.2 Launched With New Pin Tab Feature Option

Notorious cybercriminal Wazawaka arrested in Russia

OP HAECHI V: Interpol Arrests 5,500 Cybercriminals, Recovers $400 Million

Poison Ivy APT Launches Continuous Cyber Attack on Defense, Gov, Tech & Edu Sectors

Russia Arrests Prominent Ransomware Operator

Russia Indicts Ransomware Hacker Wanted by the FBI

Russia sentences Hydra dark web market leader to life in prison

SmokeLoader Campaign Targets Taiwanese Companies

SmokeLoader Malware Campaign Targets Companies in Taiwan

SmokeLoader Malware Exploits MS Office Flaws to Steal Browser Credentials

SmokeLoader Malware Resurfaces, Targeting Manufacturing and IT in Taiwan

Supply chain technology provider Blue Yonder faces ransomware attack

The shocking speed of AWS key exploitation

This worrying new phishing attack is going after Microsoft 365 accounts

Tis the Season for Scammers: How to Stay Cyber Safe This Holiday

Top 10 Cyber-Attacks of 2024

Tor Project needs 200 WebTunnel bridges more to bypass Russia’ censorship

Trellix Enterprise Security Manager Flaw Allows Access To Internal Snowservice API

UK Government Invites Industry to Get Behind new UK Cyber Team

University of Sydney to allow students to use AI in assessments

Vazamento tem dados de 250 mil brasileiros

Zello requests users reset passwords as cyber incident speculated

Why OT environments are vulnerable – and what to do about it

Windows Server 2012 0-day Vulnerability Exposes Critical Security Flaw

Windows Server 2012 0-day Vulnerability Let Attackers Bypass Security Checks

Working in critical infrastructure? Boost your effectiveness with these cybersecurity certifications

You're Hired! The Truth About Certifications in Cybersecurity Careers

01/12

1 Billion URL User-Pass Combo Leak: Security Risks Escalate

AIT Pune to Host Faculty Development Program on Cyber Security & Ethical Hacking

App financeiro esconde SpyLoan e arruína usuário

Apple user? Phishing, deepfake threats on macOS are not uncommon anymore

Ataque complexo planta o backdoor SmokedHam

Colombian Government Database Breach Exposes Sensitive Data

Cyber Security Market Securing the Digital Frontier Against Evolving Threats

French Database Leak Exposes Sensitive User Information

Hackers roubam US$ 17 milhões do BC de Uganda

Here are 10 key facts regarding the new zero-click cyber attack targeting Windows and Firefox users by Russian Group RomCom

McLeod Russel India responds to ransomware attack; no major impact on operations

Netflix users alert: Phishing scam targets credit card details across 23 countries, avoid fake links

Novel phishing campaign uses corrupted Word documents to evade security

Microsoft to Deprecate Bring Your Own License Defender Feature for Cloud

Nvidia: Bringing AI to Container Security

Phishing atrai com solução para Word corrompido

Ransomware Attacks Erupt Across Industries

Ransomware Developer Mikhail Matveev Arrested in Russia

Ransomware in the Digital Realm

“Rockstar 2FA” Phishing-as-a-Service Steals Microsoft 365 Credentials Via AiTM Attacks

SeaJob Database Leak: Maritime Job Platform Compromised

The Evolution of Phishing Tactics: Unveiling the Duality of Cyber Threats

“Valid Access” Credential Leak Raises Alarms

Zero-day do Windows recebe correção não-oficial

Why Simulating Phishing Attacks Is the Best Way to Train Employees

Daily News - Novembro (24/11 - 30/11) - 48 Semana de 2024