Daily News - Janeiro (01/01 - 04/01) - 01 Semana de 2025

Information Security, Cyber Security, Privacy and Hacking News --- Daily Updates !! Weekly Resume...

04/01

1 Million Italian Mobile Numbers Exposed in Alleged Data Breach

Ascension ransomware attack exposes data of 5.6Mn patients, employees

Atos denies Space Bears' ransomware claims – with a 'but'

'Coldplay', Shaws Mendes' unreleased music stolen

Crypto Phishing Losses Soar to Near $500 Million in 2024, Affecting 330,000 Users

Gammal Tech Database Reportedly Exposed

Hacker Who Stole Unreleased Songs From Coldplay and Shawn Mendes Sentenced to Prison

India Sees a 55% Rise in Ransomware Attacks: CyberPeace Report

Kyndryl Employee Data Breach Sparks Privacy Concerns in Mexico

Lelivrescolaire.fr Data Breach Sparks Concerns in the Education Sector

New FireScam Android malware poses as RuStore app to steal data

New FireScam Infostealer Spyware Hits Android via Fake Telegram Premium

Nikki-Universal Cyber Attack – Hackers Claim 761.8 GB of Data Stolen

Phishing Scams Dominate Crypto in 2024: What We Learned About Security

PLAYFULGHOST Delivered via Phishing and SEO Poisoning in Trojanized VPN Apps

Ransomware attacks increased by 55% in India, hackers' first eye was on America

Researchers Uncover Nuclei Vulnerability Enabling Signature Bypass and Code Execution

Scottish university posts £14.4m deficit after cyber attack and fall in student numbers

Sensitive Information from PSAI Database Reportedly Exposed

Sensitive Information from VIP Database Reportedly Exposed

Site do Coritiba sofre ataque hacker e “anuncia” contratação de Neymar

SSA.gov Database Reportedly Compromised

The rise of AI-driven attacks, quantum threats, and social media exploitation: a new era of emerging technologies and landscape for cybercriminals in 2025

US Sanctions Chinese Company for Supporting Flax Typhoon Hacker Group

U.S. Sanctions Chinese Cybersecurity Firm for State-Backed Hacking Campaigns

03/01

2.5 Million URL Login Credentials Leak Sparks Privacy Concerns

$6.8M Tampa General Hospital data breach class action settlement

A New Dawn for Storytelling: The Intersection of AI and Cinema

Apple Agrees $95M Settlement Over Siri Privacy Violations

Apple offers $95 million in Siri privacy violation settlement

Apple to Pay Siri Users $20 Per Device in Settlement Over Accidental Siri Privacy Violations

Apple will pay $95 Million to settle lawsuit over Siri’s alleged eavesdropping

Around 3.3 million POP3 and IMAP mail servers lack TLS encryption

ASUS Routers Vulnerabilities Allows Arbitrary Code Execution

Atos confirms not being compromised by the ransomware group Space Bears

Atos Group Denies Space Bears' Ransomware Attack Claims

Bad Likert Judge attack bypasses AI safety measures with at least 60% success rate

Best practices for ensuring a secure browsing environment

Brooklyn Art Library Data Breach Raises Concerns Over User Privacy

Chinese drones next on the chopping block, US Commerce Dept says

Chinese state hackers blamed for a major cyber attack on U.S. Treasury

CIRCA Jewelry and Watch Platform Data Breach Raises Privacy Concerns

Critical Deadline: Update Old .NET Domains Before January 7, 2025 to Avoid Service Disruption

Crypto Boss Extradited to Face $40bn Fraud Charges

Cyber Hacker Pleads Guilty After Selling Unreleased Coldplay, Shawn Mendes Songs

Cybersecurity deserves a place in the political spotlight

Dark web hacker who made £42k selling unreleased Coldplay tracks is spared jail

DDoS Disrupts Japanese Mobile Giant Docomo

Deepfakes question our ability to discern reality

Double clicking danger - experts warn just two clicks can let attackers steal your accounts

Every minute, 4,080 records are compromised in data breaches

French govt contractor Atos denies Space Bears ransomware attack claims

Geisinger Data Breach Exposes 1.28M Patients’ Records

Hacker admite roubo de faixas inéditas do Coldplay e é presa

Hacker group claims major customer data theft from Harley-Davidson

Hackers exploit Google Calendar to execute a phishing campaign

Hackers leak data from Rhode Island’s RIBridges social services system after cyberattack

Hackers of RI Data Breach Also Targeted Paris Olympics

Hackers strike again: 800,000 Hungarians’ data leaked in massive cyber attack

Hellcat group publishes 40GB of data stolen from Schneider Electric

Identity-security predictions for 2025

IHIO Database Breach Raises Privacy Concerns in the New Year

INC ransomware group stole patient data from mental health counselling centre

India Releases Draft Data Protection Rules for Public Consultation

India sees 55% surge in ransomware attacks, reveals CyberPeace report

Indiana Dental Practice pays a $350,000 fine over ransomware attacks and HIPAA violations

January 2025 Stealer Logs Breach Raises Privacy Concerns

Japan’s largest telco NTT Docomo disrupted by DDoS attack

LDAPNightmare, a PoC exploit targets Windows LDAP flaw CVE-2024-49113

LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers

Major business data breach in South Africa

Malicious npm Packages Attacking Developers To Steal Sensitive Data Including Private Keys

Malicious npm packages target Ethereum developers' private keys

Massive Leak of 1 Million Mobile Numbers in Italy Raises Privacy Concerns

Millions of email services still sending passwords unencrypted in plain text

Modern Automotive Network Confirms July 2024 Data Breach

New AI Jailbreak Method 'Bad Likert Judge' Boosts Attack Success Rates by Over 60%

New HIPAA Security Rule Released to Strengthen Electronic Protected Healthcare Data

New York Hospital Says Ransomware Attack Data Breach Impacts 670,000

Niva Bupa Insurance Group Data Breach Sparks Security Concerns in India

NPM Package Disguised as an Ethereum Tool Deploys Quasar RAT

Obltelecom.ru Data Breach Highlights Customer Privacy Concerns

Online gift card store exposed hundreds of thousands of people’s identity documents

Phishing Attack Compromises Cyberhaven's Chrome Extension, Impacts Thousands – What You Need to Know

Phishing attacks rise in 2024 with AI-driven tactics

Ransomware attackers leak stolen Rhode Island private info following hack

Revolution Beauty Data Breach Sparks Privacy Concerns

San Antonio-based Visionworks faces lawsuit after breach impacts 40K patients

Secure by design vs by default – which software development concept is better?

Siri's secret recordings lead to a $95 million settlement. Could you get a share?

Spying Siri settlement: tiny payout for big breach

SysBumps – New Kernel Break Attack Bypassing macOS Systems Security

Telegram rolls out third-party account verification

Terraform Labs Co-Founder Kwon Faces U.S. Court Over $40 Billion Fraud Scheme

The American View: Welcome to 2025 – The Dangers of Chasing the Next Great Idea

The modern CISO is a cornerstone of organizational success

Top Tips for Weather API Integration and Data Utilization

Torturing hackers in prison: surviving as an act of protest

Unique Email and Password Database Leak Targets Middle Eastern Users

US Army Soldier Arrested For Selling Stolen Confidential Phone Records

US Army soldier indicted for selling confidential phone records

US Confirms Russian GenAI Disinformation Op Targeted Election

US sanctions Chinese company linked to Flax Typhoon hackers

US Sanctions Chinese Cybersecurity Firm for Global Botnet Attacks

Web3 Attacks Result in $2.3Bn in Cryptocurrency Losses

02/01

12 best entry-level cybersecurity certifications

AI behind personalised phishing scams to executives, says eBay

AI-driven phishing targeting corporate executives using public data

AI Fuels Reported Rise in ‘Polished’ Phishing Scams

AI is not just a tool, it’s a target, according to new CrowdStrike research

Akumin class action alleges data breach compromised protected health information

Angular Expressions Vulnerability Let Attackers Gain Full System Access

Apple’s stealthy photo scanning feature raises privacy concerns

Arrested development: top hacker busts of 2024

Atos hits back at ransomware attack claims

Beware of AI-Driven Hyper-Personalized Phishing Attacks

CERT-In Alerts WordPress Users to Critical WPForms Plugin Vulnerability

Chinese government hackers reportedly targeted US Treasury’s sanctions office during December cyberattack

CISOs don’t invest enough in code security

Corporate executives are being increasingly targeted by AI phishing scams

Critical PAN-OS Vulnerability Added to CISA’s Exploited List: What You Need to Know

Cross-Domain Attacks: A Growing Threat to Modern Security and How to Combat Them

Crypto hacks down, but hackers getting more sophisticated

Cyber threats in 2024: Key incidents and what to expect in 2025

Cybersecurity for Businesses in 2025: What to Expect

Deepfake AI to quantum ransomware: Top cybersecurity threats of 2025

Double-clickjacking: attackers can steal user accounts unnoticed

Dozens of Chrome Browser Extensions Hijacked by Data Thieves

eBay and Beazley Reportedly Being Targeted by Advanced AI-Generated Phishing Scams

EC2 Grouper Hackers Abusing AWS Tools to Attack With Compromised Credentials

Ex-Times.com Data Breach Sparks Privacy and Security Concerns

Farline.net Data Breach Raises Privacy Concerns in Russian Telecommunications

FBI oferece recompensa de US$ 10 milhões por hacker chinês acusado de infectar 81 mil PCs

Food and Environmental Hygiene Department (FEHD) Reports Theft of Sensitive Documents, Alerts Affected Individuals About Personal Data Breach

GitHub has a major problem with fake rankings, which could put users at risk of attack

Hackers compromise 35 Chrome extensions, exposing 2.6m users

Hackers Leak Rhode Island Citizens' Data on Dark Web

HIPAA Rules Update Proposed to Combat Healthcare Data Breaches

How AI is making phishing scams unstoppable

India Becomes Second Most Targeted Nation for Cyber Attacks in 2024

iOS devices face higher phishing risk than Android: Lookout report

Japan's largest mobile carrier says cyberattack disrupted some services

Kata Containers: Open-source container runtime, building lightweight VMs

Lawsuit accuses San Antonio's Visionworks chain of failure in major data breach

Lessons for Everyone to Learn from My Personal LinkedIn Account Takeover Experience

LLMs: CyberArk Hacker Talks Attack Vectors to Watch in 2025

Lokdal.in Data Breach Raises Concerns Over User Privacy in India

Lumen reports that it has locked out the Salt Typhoon group from its network

Madhya Pradesh's child welfare agency hit by ransomware

Major Indonesian Data Breach Raises Privacy and Security Concerns

Malicious Obfuscated NPM Package Disguised as an Ethereum Tool Deploys Quasar RAT

Massive New Year Database Dump Raises Global Privacy Concerns

MetLife denies hack after ransomware group claims attack

Mossad Database Breach Allegations Spark National Security Concerns

MSI RMA Database Breach Sparks Concerns Over User Privacy

Nitrogen Ransomware Attacks Encrypts Files With .NBA Extension

Over 3 million mail servers without encryption exposed to sniffing attacks

Phishing scams can be hard to spot

PoC Exploit Tool Released for Critical Windows LDAP Zero-click RCE Vulnerability

Rising Threat of AI-Driven Phishing Attacks: eBay and Beazley Case

Severe Security Flaws Patched in Microsoft Dynamics 365 and Power Apps Web API

Telcel Data Breach Raises Concerns Over Telecommunications Security in Mexico

The Dark Web: Where stolen data becomes currency

The real cost of data breaches for businesses

Three Russian-German Nationals Charged with Espionage for Russian Secret Service

Three Russian-German nationals charged with suspicion of secret service agent activity

Three Russian Nationals Charged for Espionage & Sabotage Activities

Top 10 Most Common Cyber Attacks of 2024

Top Sophisticated Cyber Security Threats of 2024

Trump Phone Hacker: 20-Year-Old U.S. Army Soldier Arrested

US Treasury Computers Accessed by China in Supply Chain Attack

Volkswagen massive data leak caused by a failure to secure AWS credentials

When risky cybersecurity behavior becomes a habit among employees

Windows 11 BitLocker Encryption Bypassed To Extract Volume Encryption Keys

01/01

7-Zip Zero-Day Exploit Allegedly Leaked Online

35 Google Chrome Extensions Hacked to Inject Malicious Code

2025: A Critical Year for Cybersecurity Compliance in the EU and UK

Apple’s iOS devices face more phishing attacks than Android, are bigger target for hackers: Lookout report

Blockchain Bandit Strikes Again, Moves $172M Stolen Ethereum

Chinese Hackers Access US Treasury Dept. Documents and Workstations in 'Major' Cyberattack

Cyber Threat Intelligence Review: Preparing for 2025

Cybersecurity 2025: Cloudy with a Chance of Breaches

Data breach surge prompts US feds to propose stricter healthcare security rules

DoubleClickjacking – New “Double-Click” Attack to Hack Websites & Take over Accounts

FortiGuard Labs Links New EC2 Grouper Hackers to AWS Credential Exploits

Hacker Demonstrates BitLocker Vulnerability in Windows 11

Hacker Leaks Alleged Proof-of-Concept for Zero-Day Vulnerability in 7-Zip

Harley-Davidson's Customers Might've Got Hacked

Iranian and Russian Entities Sanctioned for Election Interference Using AI and Cyber Tactics

IT infra hit by cyber attack, says Thomas Cook India

Memory-Based Attacks: How Fileless Malware Operates Without Leaving A Trace

New "DoubleClickjacking" Exploit Bypasses Clickjacking Protections on Major Websites

New Phishing Campaign Exploits Google Calendar To Evade Filters

Phishing attacks doubled in 2024, report says

Proposed updates to HIPAA Security Rule mandate to restore the loss of certain relevant electronic information systems and data within 72 hours

Ransomware Reality Check: Are You Ready To Face Organised Cybercrime?

Takeaways from 2024's Worldwide Industry Targeted Cyberattack Statistics for Cybersecured New Year 2025 by SecureClaw

The biggest cybersecurity and cyberattack stories of 2024

U.S. Treasury sanctions Russian and Iranian entities for interfering in the presidential election

Daily News - Dezembro (29/12 - 31/12) - 53 Semana de 2024