Daily News - Fevereiro (16/02 - 22/02) - 08 Semana de 2025

Information & Cyber Security, Privacy and Hacking News --- Daily Updates !! Weekly Resume...

22/02

1 Million Stolen Credit Cards Given Away Free On Dark Web Forum

Anne Arundel County Government Hit by Cyber Attack

Anne Arundel County Government Hit by Suspected Cyber Attack, Some Systems Down

Beware: PayPal "New Address" feature abused to send phishing emails

Bybit Confirms Record-Breaking $1.46 Billion Crypto Heist in Sophisticated Cold Wallet Attack

Fake CS2 tournament streams used to steal crypto, Steam accounts

INC Ransomware Leaks Videos of Sleeping Patients Allegedly from Persante Health Care

Lazarus Group consolidates Bybit funds into Phemex hacker wallet

North Korea’s Lazarus Group Hacks Bybit, Steals $1.5 Billion in Crypto

Salt Typhoon Hackers Exploit Cisco Vulnerability To Gain Access To U.S. Telecom Networks

21/02

AI-Powered Deception is a Menace to Our Societies

A huge trove of leaked Black Basta chat logs expose the ransomware gang’s key members and victims

AI cracks superbug mystery in 2 days

Alleged Data Breach Hits Ciba Cobertura Medica

Alleged Data Breach Targets Indian Company Interjet

American Airlines now lets you track your luggage with AirTags - here's how

Apple Drops iCloud's Advanced Data Protection in the U.K. Amid Encryption Backdoor Demands

Atlassian fixed critical flaws in Confluence and Crowd

Auto-Generated Password Vulnerability In Sitevision Leaks Signing Key

BlackBasta Ransomware Chatlogs Leaked Online

Black Basta ransomware dissected: 1M leaked internal messages fed to chatbot

Bybit crypto exchange suffers largest ever hack of more than $1 billion

CISA flags Craft CMS code injection flaw as exploited in attacks

CISA Flags Craft CMS Vulnerability CVE-2025-23209 Amid Active Attacks

Cisco Confirms Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks

CL0P Ransomware Attacking Telecommunications & Healthcare Sectors In Large Scale

Combatting voice cloning and deepfake fraud

Cyber-attack disrupts Paratus Namibia

Cybercriminals Can Now Clone Any Brand's Site in Minutes Using Darcula PhaaS v3

Darcula 3.0 Tool Automatically Generates Phishing Kit For Any Brand

DoD Contractor Pays $11.2M over False Cyber Certifications Claims

European Healthcare Orgs Targeted With NailaoLocker Ransomware

Experts warn of risks as Darcula DIY kit simplifies phishing

Extortionist behind massive Instagram scheme busted via OnlyFans

FBI Says Backup Now—Advisory Warns Of Dangerous Ransomware Attacks

Feds fine Warby Parker $1.5 million for failing to protect customer health data

Fifth consecutive day of DDoS attacks on Italian sites

Ghost in the Shell: Null-AMSI Bypasses Security to Deploy AsyncRAT

Global shipper Hipshipper exposes 14 million records in major data breach

GP staff (HCRG Care Group) and healthcare records compromised in ransomware attack

Hacker steals record $1.46 billion from Bybit ETH cold wallet

HCRG breach probed after Medusa ransomware claims

Healthcare tops data breach incidents in 2024, surpassing finance

How to secure Notes on iOS and macOS

Improper Certificate Validation in RadiAnt DICOM Viewer Puts Healthcare Systems at Risk

Incident Management: How to Ensure Your Organization Can Handle a Crisis

Leaked Black Basta Chat Logs Show Banality of Ransomware

Massive Data Breach Allegedly Hits Investing.com, Threat Actor Claims 6.5 Million User Records Exposed

Mastering the cybersecurity tightrope of protection, detection, and response

Microsoft’s Quantum Chip Breakthrough Accelerates Threat to Encryption Protocols

Mobile Phishing Attacks On The Rise

Musk's X gets German judge removed in battle over election data

NHS private service provider investigating cyber attack

Niva Bupa says hacker claims to have stolen sensitive user data

Over a million clinical records exposed in data breach

Polish police crackdown on fake document syndicate: social media was key

Salt Typhoon Exploited Cisco Devices With Custom Tool to Spy on US Telcos

Trump, China, Russia: How Geopolitical Tensions Increase Cyber Risk

U.S. CISA adds Craft CMS and Palo Alto Networks PAN-OS flaws to its Known Exploited Vulnerabilities catalog

20/02

300% increase in endpoint malware detections

Alarming cyber mistake exposes passports, bills, and salary slips

Alleged Data Breach Claims Surface on Dark Web Targeting Stark Door

Alleged Data Breach Target Indian Ministry of Culture

Apiiro unveils free scanner to detect malicious code merges

APT-C-28 Group Launched New Cyber Attack With Fileless RokRat Malware

Black Basta ransomware gang's internal chat logs leak online

China-Linked Attackers Exploit Check Point Flaw to Deploy ShadowPad and Ransomware

Chinese hackers use custom malware to spy on US telecom networks

Citrix Releases Security Fix for NetScaler Console Privilege Escalation Vulnerability

Cybercriminals Use Eclipse Jarsigner to Deploy XLoader Malware via ZIP Archives

Darcula allows tech-illiterate crooks to create, deploy DIY phishing kits targeting any brand

Darcula PhaaS can now auto-generate phishing kits for any brand

Emirates warns against fake first-class membership deals as phishing scams rise

For the AI era, it’s time for BYOE: Bring Your Own Ecosystem

Ghost Ransomware Compromised Organisations Across 70+ Countries – CISA & FBI Warns

Ghost ransomware crew continues to haunt IT depts with scarily bad infosec

Ghost Ransomware Group Exploiting Unpatched Software, FBI and CISA Warn

Hackers Chain Exploits of Three Palo Alto Networks Firewall Flaws

Hackers pose as employers to steal crypto, login credentials

Have Your Users’ Credentials Been Leaked on The Dark Web?

Indonesian Firefighting Services Platform Allegedly Breached

Inside a LockBit Ransomware Attack: A Firsthand Account of Financial and Security Fallout

Inside the Ghost ransomware gang – everything you need to know

Integrating LLMs into security operations using Wazuh

Kaspersky blocks over 893 million phishing attempts in 2024

Malicious Ads Target Freelance Developers via GitHub

Medusa ransomware gang demands $2M from UK private health services provider

Microsoft fixes Power Pages zero-day bug exploited in attacks

Microsoft Patches Actively Exploited Power Pages Privilege Escalation Vulnerability

Microsoft testing fix for Windows 11 bug breaking SSH connections

Mobile Phishing Attacks Surge with 16% of Incidents in US

NailaoLocker ransomware targets EU healthcare-related entities

New NailaoLocker ransomware used against EU healthcare orgs

NioCorp reports cybersecurity breach resulting in $500,000 in misdirected payments

North Korean hackers posing as recruiters to steal crypto with malware

North Korean Hackers Target Freelance Developers in Job Scam to Deploy Malware

NVIDIA’s key toolkit packed with vulnerabilities, research finds

Over 1.6 million records from clinical trial database exposed

Over 330 Million Credentials Compromised by Infostealers

PCI DSS 4.0 Mandates DMARC By 31st March 2025

PRevent: Open-source tool to detect malicious code in pull requests

Privacy concerns raised over balenaEtcher ISO writing tool, Tails recommends Rufus instead

Quantum computing stocks rise as Microsoft's new chip heats up debate over technology

Ransomware losses tumble but threat remains: Chainalysis

Redditors chant “Firefox” as their uBlock Origin adblocker stops working on Chrome

Russian Hackers Use Meeting Invite Phishing to Infiltrate Sensitive Accounts

Salt Typhoon used custom malware JumbledPath to spy U.S. telecom providers

The Expert View: Building Growth Through Cyber-Security

Understanding OWASP's Top 10 list of non-human identity critical risks

Unknown and unsecured: The risks of poor asset visibility

Unknown Chinese ransomware gang raids dozens of companies using old flaws

US cybersecurity agencies warn of global Ghost ransomware threat

US healthcare org pays $11M settlement over alleged cybersecurity lapses

Weaponized Complexity: How AI is Supercharging Cyber Threats

West Coast Cybersecurity Salaries Outshine Rest of Country

What is SIEM? Improving security posture through event log data

19/02

96% of Phishing Attacks in 2024 Exploited Trusted Domains Including SharePoint & Zoom Docs

602K Alleged Yahoo Data Leak Advertised on Dark Web Forum

Accounting Firm Blue & Co. Files Notice of Data Breach with Federal Regulators

AI hallucinations in court papers spell trouble for lawyers

Attackers are chaining flaws to breach Palo Alto Networks firewalls

Australian fertility services giant Genea hit by security breach

Australian IVF Clinic Suffers Data Breach Following Cyber Incident

BlackLock Ransomware On The Rise, Report Finds

Chrome Buffer Overflow Vulnerabilities Allow Arbitrary Code Execution & Gain System Access

CISA Adds Palo Alto Networks and SonicWall Flaws to Exploited Vulnerabilities List

CISA and FBI: Ghost ransomware breached orgs in 70 countries

CISA Releases Two New ICS Advisories Exploits Following Vulnerabilities

CISA Warns of Palo Alto Firewall Vulnerability Actively Exploited in the Wild

Coast Guard investigates data breach affecting over 1,100 members

Critical Apache Ignite Vulnerability Let Attackers Execute Remote Code

Cyber hygiene habits that many still ignore

Cyber Investor Insight Partners Suffers Security Breach

Cyberattack hits Lee Enterprises harder than expected

Data breach notifications commenced by Finastra

Ecuador’s National Assembly Targeted in Cyberattack

Finastra Notifies Customers of Data Breach

Fraudster reportedly stole $5.6M from FTX creditors using AI

GPT-4o Copilot Trained in Over 30 Popular Programming Languages

Hackers Deploy Sophisticated macOS Malware to Steal Cryptocurrency

Hackers Exploit Signal's Linked Devices Feature to Hijack Accounts via Malicious QR Codes

Health Net, Centene Settle Cybersecurity Fraud Allegations with $11M Payout

Hundreds of US Military and Defense Credentials Compromised

I tried Norton Private Browser to see how it compares to Tor - here's what I found

INC group claims a ransomware attack on the City of McKinney

iOS 18 settings to lock down your privacy and security

Italian websites targeted by alleged pro-Russian hackers

Kaspersky reports nearly 900 million phishing attempts in 2024 as cyber threats increase

Kunai: Open-source threat hunting tool for Linux

Lee Enterprises Experienced Ransomware Attack, Raising the Possibility of a Data Breach

Malware hides on Google docs: passwords and private chats at risk

Medical data discovered on hard drives sold at flea market

New FrigidStealer infostealer infects Macs via fake browser updates

New Snake Keylogger Variant Leverages AutoIt Scripting to Evade Detection

Northern Ireland’s largest housing association, with 10,000 social homes, targeted in cyber attack

OpenSSH vulnerable to man-in-the-middle attacks for ten years: patch now available

Palo Alto Networks tags new firewall bug as exploited in attacks

Pegasus spyware infections found on several private sector phones

Philippines reports foreign cyber intrusions targeting intelligence data, but no breaches

Phishing attack hides JavaScript using invisible Unicode trick

Publishing giant Lee Enterprises reports a major ransomware attack on its network

Russian Government Proposed New Penalties to Combat Cybercrime

Russian phishing campaigns exploit Signal's device-linking feature

Russian State Hackers Target Signal to Spy on Ukrainians

Spies Eye AUKUS Nuclear Submarine Secrets, Australia’s Intelligence Chief Warns

Tech investment firm Insight Partners discloses data breach

Texas-Based Consultants in Pain Medicine Confirms SSNs Leaked in 2024 Data Breach

The Ultimate MSP Guide to Structuring and Selling vCISO Services

Trend Micro predicts increase in AI-driven cyber threats in 2025

Trojanized Game Installers Deploy Cryptocurrency Miner in Large-Scale StaryDobry Attack

University Diagnostic Medical Imaging reports data breach affecting patient information

US AI Safety Institute will be 'gutted,' Axios reports

VC-backed cybersecurity startups and the exit crunch

Zero Trust Must be a Cybersecurity Priority for the Trump Administration

Weaponized Signal, Line, and Gmail Apps Delivers Malware That Changes System Defenses

WordPress Plugin Vulnerability Exposes 90,000 Sites to Attack

Yahoo Data Leak – Hackers Allegedly Advertised 602,000 Email Accounts

Yikes: Jailbroken Grok 3 can be made to say and reveal just about anything

18/02

6 considerations for 2025 cybersecurity investment decisions

2025 ZeroFox Forecast: Dark Web, Ransomware, Gen AI & Beyond

A New Wave of Ransomware Campaigns Targeting Microsoft Teams

Alleged Data Breach Claims Surface Against Thai Telecom Company TOT Mobile

Alleged Data Dump: Threat Actor Claims to Release 4 Million Stolen Credit Cards

As US newspaper outages drag on, Lee Enterprises blames cyberattack for encrypting critical systems

Australian National University investigates alleged ransomware attack by FSociety

Balancing cloud security with performance and availability

BerryDunn reaches $7.5 million settlement in data breach lawsuit

Beware of Fake Timesheet Report Email Leading to the Tycoon 2FA Phishing Kit

BlackLock On Track to Be 2025’s Most Prolific Ransomware Group

BlackLock ransomware onslaught: What to expect and how to fight it

Chinese hackers abuse Microsoft APP-v tool to evade antivirus

Chinese Hackers Exploit MAVInject.exe to Evade Detection in Targeted Cyber Attacks

Comelec: Hacker group’s claim of another ‘Comeleak’ a hoax

Compliance Isn’t Security: Why a Checklist Won’t Stop Cyberattacks

Cracked Garry’s Mod, BeamNG.drive games infect gamers with miners

Critical OpenSSH Vulnerabilities Expose Users to MITM and DoS Attacks

Cybercriminals Exploit Onerror Event in Image Tags to Deploy Payment Skimmers

Cybercriminals shift focus to social media as attacks reach historic highs

Debunking the AI Hype: Inside Real Hacker Tactics

Document management system leak exposed 25M records

Dozens of Italian websites targeted by Russian hackers

Ecuador's legislature says hackers attempted to access confidential information

Evolving Snake Keylogger Variant Targets Windows Users

Fake Timesheet Report Emails Linked to Tycoon 2FA Phishing Kit

Finastra Starts Notifying People Impacted by Recent Data Breach

Got a Microsoft Teams invite? Storm-2372 Gang Exploit Device Codes in Global Phishing Attacks

Hackers planted a Steam game with malware to steal gamers’ passwords

How to turn on Private DNS Mode on Android - and why it matters for privacy

Impact of DeepSeek data breach on database infrastructure

Infostealer malware detected within US military and defense companies

Italian websites targeted by alleged pro-Russian hackers

Juniper patches critical auth bypass in Session Smart routers

Juniper Session Smart Routers Vulnerability Could Let Attackers Bypass Authentication

Lee Enterprises newspaper disruptions caused by ransomware attack

Michigan casino chain remains closed 9 days after ransomware attack

Microsoft reminds admins to prepare for WSUS driver sync deprecation

Mustang Panda Leverages Microsoft Tools to Bypass Anti-Virus Solutions

New FrigidStealer Malware Targets macOS Users via Fake Browser Updates

New hacker attack on Italian sites, pro-Russian group NoName057 claims responsibility

New MacOS malware FrigidStealer targeting users with fake updates

New OpenSSH Flaws Enable Man-in-the-Middle and DoS Attacks — Patch Now

New OpenSSH flaws expose SSH servers to MiTM and DoS attacks

New XCSSET Malware Variant Targeting macOS Notes App and Wallets

New Xerox Printer Flaws Could Let Attackers Capture Windows Active Directory Credentials

Northern Ireland Assembly reports apparent data breach to UK information watchdog

OpenSSH Flaws Expose Systems to Critical Attacks

Phishing scam involving SunPass seeks to collect personal data; fraudulent sites shut down

Proofpoint Uncovers FrigidStealer, A New MacOS Infostealer

Ransomware: The $270 Billion Beast Shaping Cybersecurity—Insights from Cyentia's Latest Report

Ransomware attack disrupts Sault Tribe's casinos in Michigan

Ransomware attacks on food and ag expected to rise, possible ‘cascading impacts’ on the sector

Ransomware Spike Driven By Ransomware-as-a-Service (RaaS) Operations

Russian Railways Portal Allegedly Breached 570K Records Exposed

Singapore Reports S$1.2 Million in Losses from Phishing Scams Targeting Mobile Wallets

Snake Keylogger Variant Hits Windows, Steals Data via Telegram Bots

South African Weather Service expects website restoration within a week following ransomware attack

The risks of autonomous AI in machine-to-machine interactions

There’s a new ransomware player on the scene: the ‘BlackLock’ group has become one of the most prolific operators in the cyber crime industry – and researchers warn it’s only going to get worse for potential victims

These nations are banning DeepSeek AI - here's why

Threat Actor Claims Unprotected TensorFlow Database Exposes Sensitive Files Including Passwords

Toll text scam: Drivers warned of phishing scam claiming unpaid tolls on Pennsylvania Turnpike

US Coast Guard hack leads to paycheck delays, forces personnel systems offline

US newspaper publisher uses linguistic gymnastics to avoid saying its outage was due to ransomware

Venture capital giant Insight Partners hit by cyberattack

Vgod RANSOMWARE Encrypt Your Entire System and Set A Ransom Notes As Wallpaper

Zacks Investment Research Breach Hits 12 Million

Why rebooting your phone daily is your best defense against zero-click attacks

Winnti APT41 Targets Japanese Firms in RevivalStone Cyber Espionage Campaign

WinRAR 7.10 boosts Windows privacy by stripping MoTW data

17/02

$577 Million Cryptocurrency Fraud: Two Estonians Admit Role in Global Ponzi Scheme

A PostgreSQL zero-day was also exploited in US Treasury hack (CVE-2025-1094)

Advanced Ransomware Evasion Techniques in 2025

Akira claims cyber attack on closed Australian media company

Alleged Russian hackers attack worldwide sectors by posing as famous people on Teams, WhatsApp, & Signal

Arthur J. Gallagher & Co. reaches $21 million settlement over 2020 data breach

Barracuda reports fourfold rise in ransomware threats 2024

Beware of Fake Outlook Troubleshooting Calls that Ends Up In Ransomware Deployment

Beyond ransomware payments: A proactive approach to cybersecurity

California’s Included Health Provides Notice of Data Breach to an Unknown Number of Individuals

Charleston Area Medical Center Announces Data Breach Following Email Phishing Attack

Chase will soon block Zelle payments to sellers on social media

CISO's Expert Guide To CTEM And Why It Matters

Cybercriminals are stealing AI power, and you might be the one paying for it

Dark Web Post Alleges Sale of 17B Stolen Credentials

Data breach leaks a whopping 2.7 billion records including smartphone and Wi-Fi info

Data Breach Prompts Coast Guard to Take Personnel and Pay System Offline

Dutch police dismantle bulletproof hosting provider, seize 127 servers

Estonian Duo Plead Guilty to $577m Crypto Ponzi Scheme

Finastra Announces Data Breach Following Discovery of November 2024 Cyberattack

Florida AG shuts down fake SunPass sites targeting toll users with phishing scams

Google Chrome AI-Powered Security Now Available for All Users – Enable Now!

Hacker claims they stole 12m customer accounts from Zacks Investment Research

Hackers Abusing Microsoft Teams Meeting Invites to Trick Victims for Gaining Access

Hackers infect websites of a major Lithuanian food company Vičiūnai Group

Health tech company Datavant Group says data breach impacted over 45,000 patients

How CISOs can balance security and business agility in the cloud

How to evaluate and mitigate risks to the global supply chain

IDOR Vulnerability in ExHub Let Attacker Modify Web Hosting Configuration

Indian Post Office Portal Exposed Thousands of KYC Records With Username & Mobile Number

Linux Kernel 6.14 rc3 Released – What’s New!

Meta Paid Out $2.3 Million to Researchers via Bug Bounty Program

Microsoft rolls out BIOS update that fixes ASUS blue screen issues

Multiple Russian Actors Attacking Orgs To Hack Microsoft 365 Accounts via Device Code Authentication

New Android Security Feature that Blocks Changing Sensitive Setting During Calls

New downloads of DeepSeek suspended in South Korea

New Golang-Based Backdoor Uses Telegram Bot API for Evasive C2 Operations

New XCSSET Malware Attacking macOS Users by Infecting Xcode Projects

Orbit: Open-source Nuclei security scanning and automation platform

Palo Alto Networks and SonicWall Firewalls Under Attack

Pro-Russia collective NoName057(16) launched a new wave of DDoS attacks on Italian sites

PurpleLab – A Free Cybersecurity Lab for Security Teams to Detect, Analyze & Simulate Threats

Ransomware gangs extort victims 17 hours after intrusion on average

South Korea Suspends DeepSeek AI Downloads Over Privacy Violations

Telegram Used as C2 Channel for New Golang Malware

The hidden risks of a broken data provisioning system

Threat Actors Leveraging Modified Version of SharpHide Tool To Create Hidden Registry

Two Estonians plead guilty in $577M cryptocurrency Ponzi scheme

whoAMI attack could allow remote code execution within AWS account

16/02

AI-enabled satellites could help the US evade a crippling cyber attack

All Gmail users placed on red alert and not following advice could be 'devastating'

Australian National University investigating alleged cyber attack

Cyber attack warning to retirement funds in South Africa

Gmail users issued red alert as new AI scam leaves people 'devastated'

Google Chrome's AI-powered security feature rolls out to everyone

Is the international order falling apart at the Munich Security Conference?

Meta Platforms Grapples With Major Data Breach

Phishing and genAI are increasing

SonicWall Firewall Authentication Bypass Vulnerability Exploited in Wild Following PoC Release

Storm-2372 used the device code phishing technique since August 2024

Daily News - Fevereiro (09/02 - 15/02) - 07 Semana de 2025