Daily News - Janeiro (26/01 - 01/02) - 05 Semana de 2025

Information Security, Cyber Security, Privacy and Hacking News --- Daily Updates !! Weekly Resume...

01/02

A ransomware attack forced New York Blood Center to reschedule appointments

A Threat Actor Claims to be Selling Data of Spanish Hospital in Mexico

A Threat Actor Claims to have Leaked Data of Telkomsel

A Threat Actor Claims to have Leaked the Data of Colis Express S.A.

An Amazon Prime Spoofing Campaign is Using Malicious PDF to Steal Credit Card Information

Apple's iOS vulnerability exposes iPhones to stealthy hacker attacks

BeyondTrust Zero-Day Breach Exposed 17 SaaS Customers via Compromised API Key

Billion-Dollar Bank Says Account Numbers, Names and Other Sensitive Info Exposed As Insider Triggers New Data Breach

Casio and 16 Other Websites Hit by Double-Entry Web Skimming Attack

Cheap Yet Secure: Top VPNs for Privacy-Conscious Users on a Budget

Contec CMS8000 patient monitors contain a hidden backdoor

Dental practice on east side of Indianapolis suffers data breach

Gmail alerts 2.5 billion users about AI-driven phishing scams: How to protect yourself

Gmail Security Warning For 2.5 Billion Users—AI Hack Confirmed

Google says hackers abuse Gemini AI to empower their attacks

Hacker Breaches Lewisburg School District Student Information System

Israeli Firm Paragon Attack WhatsApp With New Zero-Click Spyware

Israeli Spyware Firm Paragon Linked to WhatsApp Zero-Click Attack

Malvertising Scam Uses Fake Google Ads to Hijack Microsoft Advertising Accounts

Meta Confirms Zero-Click WhatsApp Spyware Attack Targeting 90 Journalists, Activists

0mid16B Claims to have Leaked the Data of Cardinal Health

r57 Claims to be Selling Data of an Unidentified French E-commerce Platform

Two PSNI officers arrested following internal fraud probe related to data breach security payment

U.S. and Dutch Authorities Dismantle 39 Domains Linked to BEC Fraud Network

WantToCry Ransomware Exploits SMB Vulnerabilities to Remotely Encrypts NAS Drives

WhatsApp New Privacy Let Users Control who Can See The Profile Photo

31/01

A brief history of mass hacks

‘A poignant reminder of the devastating impact’: The steps to take to safeguard your business against ransomware attack

Another banner year for ransomware gangs despite takedowns by the cops

ARDEX Australia cyber attack claimed by Medusa ransomware

Authorities Take Down Cracked & Nulled Hacking Forums Used by 10 Million Users

Backdoor in Contec CMS8000 monitors may allow faulty patient readings

Blood donation giant warns of issues following ransomware attack

Broadcom fixed information disclosure flaws in VMware Aria Operations

Broadcom Patches VMware Aria Flaws – Exploits May Lead to Credential Theft

ChatGPT-4o Jailbreak Vulnerability “Time Bandit” Let Attackers Create Malware

CISA and FDA Warn of Critical Backdoor in Contec CMS8000 Patient Monitors

CISO to discuss how cyber professionals can stay ahead of the curve at Australian Cyber Summit 2025

Cisco’s Webex Chat Vulnerabilities Let Attackers Access Organizations Chat Histories

Como proteger suas criptomoedas de hackers

Contec vital signs monitors contain backdoors and send data to murky IP

Coyote Banking Malware Weaponizing Windows LNK Files To Execute Malicious Scripts

Critical Flaws in Contec CMS8000 Allow Remote Code Execution and Patient Data Theft

Cyberattack Cripples South African Weather Service, Disrupting Critical Forecasting

Cybersecurity in 2025: Shadow AI, Deepfakes, and the Next Wave of Threats

Cybersecurity M&A Roundup: 2025 Off to a Fast Start

D-Link Routers Vulnerability Let Attackers Gain Full Router Control Remotely

Data Privacy Week: How Privacy Pros Are Navigating the Gordian Knot of Digital Law

Data Privacy Week: What Apple’s Wiretap Settlement Means for the Future of Privacy

DeepSeek AI Leaks Over a Million Chat Logs and Sensitive Data Online

DeepSeek allegedly used banned chips, says Scale AI CEO

DeepSeek security breach exposes sensitive data, prompting global scrutiny

DeepSeek's Flagship AI Model Under Fire for Security Vulnerabilities

DeepSeek’s Growing Influence Sparks a Surge in Frauds and Phishing Attacks

DeepSeek’s Popularity Sparks Surge in Crypto Phishing and Malware Campaigns

Deploying AI at the edge: The security trade-offs and how to manage them

Disability monitoring tool leaked personal information online

ENGlobal took almost six weeks to recover from a severe ransomware attack

Enter hacking simulations: games that provide foundation and culture

Frederick Health forced to take systems offline following a ransomware attack

FUNNULL Unmasked: AWS, Azure Abused for Global Cybercrime Operations

GitHub Copilot Jailbreak Vulnerability Let Attackers Train Malicious Models

Global police operation takes down major cybercrime and hacking forums

Globe Life data breach may impact an additional 850,000 clients

Gmail Warns 2.5 Billion Users of AI-Powered Phishing Scams

Google Bans 158,000 Malicious Android App Developer Accounts in 2024

Google Has Blocked 2.28 Million Malicious Apps Entering Into Play Store

Google says Gemini is being misused to launch major cyberattacks

Google’s crackdown on bad developers: 2M apps banned from Play Store

Hackers Abusing GitHub Infrastructure to Deliver Lumma Stealer

Hackers da China e Rússia usam Gemini para atacar o mundo, diz Google

Hackers From China, North Korea, Iran & Russia Are Using Google’s AI For Cyber Ops

HeartSender Cybercrime Network Dismantled in Joint US-Dutch Operation

How law enforcement agents gain access to encrypted devices

How to find out if an AirTag is tracking you - and what to do about it

Indian tech giant Tata Technologies hit by ransomware attack

International law enforcement operation targets group of cybercrime websites

International Operation Dismantles Cracked and Nulled Cybercrime Hubs

Italy Bans Chinese DeepSeek AI Over Data Privacy and Ethical Concerns

Italy’s data protection authority Garante blocked the DeepSeek AI platform

Major security flaw in DeepSeek’s AI database raises privacy concerns

Malware Found in Healthcare Patient Monitors Linked to Chinese IP Address

Microsoft thinks it could stop this dangerous scam forever

Microsoft to Boost M365 Bounty Program With New Products & Rewards Up to $27,000

Mizuno USA says hackers stayed in its network for two months

National Anti-Scam Centre warns more than 5,000 Australians over romance scam operation

New Jailbreak Techniques Expose DeepSeek LLM Vulnerabilities, Enabling Malicious Exploits

New Russian Threat Group Hacks Into U.S. Oil and Gas Facilities

New Threat Hunting Technique to Uncover Malicious Infrastructure Using SSL History

New York Blood Center Hit By Ransomware Attack – IT Systems Affected

Nine out of ten emails are spam

NorthBay Healthcare Notifies 569K Individuals About February 2024 Data Breach

Operation Talent: Two Arrested as Authorities Dismantle Cracked and Nulled

Over 2 million risky Android apps were blocked from the Play Store last year

Patient monitors with backdoor are sending info to China, CISA warns

Phorpiex Botnet Distributes LockBit Ransomware Through Compromised Websites

Platformization is key to reduce cybersecurity complexity

Police dismantles HeartSender cybercrime marketplace network

Ransomware victims increased by 26 percent in 2024

Six ways threat actors will weaponize DeepSeek

Skilled criminal hacker exposes 1M Community Health Center patients

TAG-124 Hacked 1000+ WordPress Sites To Embed Payloads

Tata Tech IT services restored after ransomware attack

Tata Technologies Hacked – Ransomware Attack Compromises IT Systems

Tata Technologies Hit by Ransomware Attack

Threat Actors Target Public-Facing Apps for Initial Access

Top 5 AI-Powered Social Engineering Attacks

Tor Project X Account Hacked to Promote Cryptocurrency Scheme

UK firms reluctant to report ransomware incidents, says study

UK's Morrisons says cyber attack at technology provider dented Christmas sales

US healthcare provider data breach impacts 1 million patients

US judge throws out Clearview AI facial recognition evidence in murder case

Valio Data Breach Exposes Personal Information Of Over 70,000 Individuals

VIPRE report reveals 90% of emails in 2024 were spam

VMware Aria Operations Vulnerabilities Let Attackers Perform Admin Operations

Wacom notifies customers of security breach, potential payment data compromise

WhatsApp users, including from the media and CSOs, targeted by Israeli spyware firm

Windows Vulnerability in COM Objects Trigger RCE To Control The Systems Remotely

30/01

89% of AI-powered APIs rely on insecure authentication mechanisms

190M impacted by Change Healthcare breach, security leaders discuss

Amazon created software to secretly track location data of consumers via their phones, lawsuit claims

Arcus Media Ransomware Delete Backup, Clear Logs, Disable Remote After Lock The Files

Attackers Increase Use of HTTP Clients for Account Takeovers

Aussie businesses uniquely unprepared for cyber attacks

Authorities Seize Domains of Popular Hacking Forums in Major Cybercrime Crackdown

Browser syncjacking: new research details worrying hacking technique

Cybercrime forums Cracked and Nulled seized, operators arrested

Cybersecurity Event at Benefits Management Group Results in Data Breach

Cybersecurity in 2025: Geopolitical Tensions, AI, and Cybercrime Shape the Future

Dangerous mistake: Major US broadcaster exposed 1M sensitive files to public

Data Privacy Week: How to Take Control of Your Digital Life

DeepSeek AI Database Exposed: Over 1 Million Log Lines, Secret Keys Leaked

DeepSeek Database Leaked – Full Control Over DB Secret keys, Logs & Chat History Exposed

DeepSeek Exposed Database Leaks Sensitive Data

DeepSeek hit by cyberattack amid soaring demand for AI Assistant

DeepSeek is Now Available With Microsoft Azure AI Foundry & GitHub

DeepSeek leaks one million sensitive records in a major data breach

Doppler announces integration with Datadog to streamline security and monitoring

ExtensionHound: Open-source tool for Chrome extension DNS forensics

FBI seizes Cracked.io and Nulled.to in global cybercrime crackdown

Frederick Health Hit by Ransomware Attack

Google Blocked 2.36 Million Policy-Violating Apps

Google: Over 57 Nation-State Threat Groups Using AI for Cyber Operations

Google’s Subdomain ‘g.co’ Hacked – A Tricky Phone Call Lets Hackers Access Your Google Account Remotely

Hacker forums Cracked, Nulled and others, seized under FBI's 'Operation Talent'

Hackers Exploit RDP Protocol To Gain Windows Access To Control Browser Remotely

How to use Hide My Email to protect your inbox from spam

International AIDS Vaccine Initiative reveals INC ransomware attack on its systems

Lightning AI Studio Vulnerability Allowed RCE via Hidden URL Parameter

Major cybercrime crackdown after 100,000 Dutch residents’ data seized

Matagorda County in Texas declares a state of disaster following a cyber attack

MGM Resorts pays out US$45m following data breaches

Microsoft's latest optional patch is a bug-fix bonanza for Windows 11 24H2

NCSC Calls on Vendors to Eradicate “Unforgivable” Vulnerabilities

New Aquabot Botnet Exploits CVE-2024-41710 in Mitel Phones for DDoS Attacks

New Syncjacking attack hijacks devices using Chrome extensions

OpenAI claims DeepSeek trained R1 using its data

Operation Talent: FBI Seizes Nulled.to, Cracked.to, Sellix.io and more

OPNsense 25.1 Released With Improved Security Zones & FreeBSD 14.2 Plus

PayPal ordered to pay $2M in settlement from 2022 breach

Police seizes Cracked and Nulled hacking forum servers, arrests suspects

Ransomware Attack Disrupts Blood Donation Services in US

Ransomware attack disrupts New York blood donation giant

SimpleHelp RMM vulnerabilities may have been exploited to breach healthcare orgs

SOC Analysts - Reimagining Their Role Using AI

SquareX Discloses “Browser Syncjacking” , a New Attack Technique that Provides Full Browser and Device Control, Putting Millions at Risk

Syncjacking Attack Enables Full Browser and Device Takeover

TeamViewer Windows App Let Attackers Escalate Privileges to System User

The industry responds to new Chinese AI platform DeepSeek

Threat Actors Exploit Government Website Vulnerabilities For Phishing Attacks

Top 3 Most Popular Malware TTPs of the Past Year

Tria Stealer Trojan Exploits Android Phones To Exfiltrate SMS Messages

UK Organizations Boosting Cybersecurity Budgets

University of Notre Dame Confirms Cyber Incident, Authorities Notified

Unpatched PHP Voyager Flaws Leave Servers Open to One-Click RCE Exploits

Zscaler CISO on balancing security and user convenience in hybrid work environments

What’s next? Phishing and ransomware remain top cyber threats in 2025

29/01

AI in Cybersecurity: What's Effective and What's Not – Insights from 200 Experts

AI is a catalyst for new vulnerabilities: experts point to APIs

AI Surge Drives Record 1205% Increase in API Vulnerabilities

API Supply Chain Attack Exposes Millions of Airline Users Accounts to Hackers

API Vulnerabilities Surge 1,025%, Threatening AI Security (PDF)

Apple Chips Vulnerability Exposes Credit Cards & Location History to Hackers

Apple Fixes Critical Cyber Threats, Including Actively Exploited Zero-Day

Aquabot variant v3 targets Mitel SIP phones

Attackers actively exploit a critical zero-day in Zyxel CPE Series devices

Azure Key Vault Vulnerabilities Could Leak Sensitive Data After Entra ID Breach

Breakout Time Accelerates 22% as Cyber-Attacks Speed Up

Broadcom Warns of High-Severity SQL Injection Flaw in VMware Avi Load Balancer

Chinese GenAI Startup DeepSeek Sparks Global Privacy Debate

CISOs are moving closer to the board — but budget hurdles remain

Cloudflare’s Data Pipeline Powered to Handle 700 Million Events Per Second

Critical Cacti Vulnerability Let Attackers Code Remotely – PoC Released

Critical remote code execution bug found in Cacti framework

Critical vulnerability plagued AI development platform Lightning AI

Crypto con artists cry foul after discovering empty wallets

Cybersecurity crisis in numbers

DeepSeek gives a step-by-step guide on how to drain your credit card

DeepSeek indeed censors sensitive prompts about China, but there’s a workaround

DeepSeek R1 Jailbroken to Generate Ransomware Development Scripts

DeepSeek’s popularity exploited by malware peddlers, scammers

ENGlobal energy corp says hackers accessed personal data in Nov breach

Fake DeepSeek Campaign Attacking macOS Users to Deliver Poseidon Malware

FBI seizes Cracked.io, Nulled.to hacking forums in Operation Talent

FleshStealer, A New Infostealer Attacking Chrome & Mozilla Users

From Vulnerability to Leadership: How DoD Can Leverage the FY25 NDAA to Transform Federal IT Procurement

Google Researchers Breakdowns The Malware Obfuscator Scatterbrain

Hackers Actively Exploiting Zyxel 0-day Vulnerability to Execute Arbitrary Commands

Hackers Allegedly Selling Fortinet Vulnerability Exploit on Dark Web Forums

Hackers can steal your Amazon order – before it even lands

Hackers exploit critical unpatched flaw in Zyxel CPE devices

Hackers fail at turning AI into a powerful weapon, but scammers are happy

Hackers Using SparkRAT In Wild To Attack Windows, macOS, and Linux Systems

Hellcat Ransomware Attacking Organization In Raas Model With Affiliates

How Interlock Ransomware Infects Healthcare Organizations

How Lazarus Group built a cyber espionage empire

How Organizations Can Mitigate Privacy Risks From GenAI

Italian startup Exein to supply cybersecurity for chips to MediaTek

Laravel admin package Voyager vulnerable to one-click RCE flaw

Lazarus Group Uses React-Based Admin Panel to Control Global Cyber Attacks

Lone Russian hacker exposes covert arms delivery to Ukraine

Lynx Ransomware Infrastructure To Attack Windows, Linux, ESXi & Affiliate Panel Uncovered

Maryland healthcare network forced to shut down IT systems after ransomware attack

Meow-ware gang: the cyber cats who humiliate their prey

MGM Resorts reaches $45 million settlement over data breach lawsuit

Microsoft 365 Down – Widespread Outage Affects Users and Admins

Microsoft investigates Microsoft 365 outage affecting users, admins

Microsoft is bringing scam protection to its Edge browser

Millions of H&M’s online shoppers’ details stolen, hackers claim

Mission Bank data breach compromised customers' personal information

Nation-State Hackers Abuse Gemini AI Tool

New Aquabot Malware Attacking Mitel SIP To Inject Commands

New Hellcat Ransomware Gang Employs Humiliation Tactics

New SLAP & FLOP Attacks Expose Apple M-Series Chips to Speculative Execution Exploits

New York financial regulator fines PayPal $2 million over data security failings

Only 13% of organizations fully recover data after a ransomware attack

OpenAI says that DeepSeek illegally used its data to train the R1 model

PoC Exploit Released for Actively Exploited Windows CLFS Buffer Overflow

PoC Exploit Released for TP-Link Router Web Interface XSS Vulnerability

PowerSchool Starts Notifying Students Following Massive Breach

Preparing financial institutions for the next generation of cyber threats

Put your thumbs where we can see them: German court backs forced phone unlocks

Ransomware Attack Cripples Energy Contractor for Six Weeks

Researchers find huge American National Insurance database stolen by cyber criminals

Scores of Critical UK Government IT Systems Have Major Security Holes

SEC and FCA fines: Issues jump

Smiths Group investigates cyber security breaches following unauthorized access

State-sponsored Actors Abusing Gemini to Fuel Cyber Attacks

Threat Actors Exploit Government Websites for Phishing

UAC-0063 Expands Cyber Attacks to European Embassies Using Stolen Documents

UnitedHealth says ransomware attack on Change Healthcare impacted 190m individuals

Unprotected AI service streams private Slack messages for 30 bucks a month

U.S. CISA adds Apple products’ flaw to its Known Exploited Vulnerabilities catalog

VMware Avi Load Balancer Vulnerability Let Attackers Gain Database Access

Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability

Zyxel CPE devices under attack via critical vulnerability without a patch (CVE-2024-40891)

Want to be an effective cybersecurity leader? Learn to excel at change management

WhatsApp's Image “View Once” Feature Flaw Allowing Unlimited Views

Why we need a unified approach to Kubernetes environments

Windows 11 KB5050094 update fixes bugs causing audio issues

28/01

46M Brits just give away their personal data

58% of Ransomware Victims Forced to Shut Down Operations

74% of CISOs are increasing crisis simulation budgets

A Russian hacker "put down the website" of the manufacturer of the NASAMS air defense system

AI chatbot DeepSeek limits registrations after being hit with ‘large-scale’ cyber-attack

Akira's New Linux Ransomware Attacking VMware ESXi Servers

Aoki Holdings Faces Potential Data Breach Affecting Millions

API Supply Chain Attacks Put Millions of Airline Users at Risk

Apple patches actively exploited zero-day affecting iPhones and other devices

Apple Patches Actively Exploited Zero-Day Affecting iPhones, Macs, and More

Apple zero-day vulnerability exploited to target iPhone users (CVE-2025-24085)

Após ameaçar mercado dos EUA, DeepSeek sofre ataque hacker

Barracuda’s latest findings uncover a disturbing phishing-as-a-service trend

BASHE ransomware gang claims ICICI bank, leaves three days to pay the ransom

British Vishing-as-a-Service Trio Sentenced

Cat’s out of the bag: Lynx Ransomware-as-a-Service

Celebrating Data Privacy Day 2025: Why Protecting Your Information Is More Important Than Ever

Chester high school reopens following cyber attack

Chinese AI Giant DeepSeek Hit by Cyber Attack Impacting Registrations

Crypto scammers capitalize on the DeepSeek AI hype

Cyber attack disrupts Chinese tech startup DeepSeek

Daytrip data leak reveals detailed travel data, VIP members

DeepSeek Claims ‘Malicious Attacks’ After AI Breakthrough Upends NVIDIA, Broadcom

DeepSeek closes door to new users following cyberattack

DeepSeek Limits Registrations Following Malicious Cyberattacks

Deterring Data Privacy Violations in Big Tech: Why Fines Are Not Enough

Engineering giant Smiths Group discloses security breach

ENGlobal says hackers accessed ‘sensitive personal’ data during cyberattack

E.U. Sanctions 3 Russian Nationals for Cyber Attacks Targeting Estonia's Key Ministries

EU Sanctions Three Russians For 2020 Cyber-Attack on Estonia

From DDoS to Ransomware – NETSCOUT Uncovers the Nine Most Common Cyberattacks

Google Issues Cloud Security Wake-Up Call as Threats Evolve

Google Tightens Security After Sophisticated Phishing Scam Targets ‘Workspace’ Users

Hacker é preso após invadir 80 vezes sistemas judiciais e alterar processos

Hacker Finds Data Vulnerability in Subaru Starlink, Enabling Remote Control Without Driver Consent

Hackers Claim 2nd Breach at HP Enterprise, Plan to Sell Access

Hackers Use Hidden Text Salting to Bypass Spam Filters and Evade Detection

How Long Does It Take Hackers to Crack Modern Hashing Algorithms?

How SOC/DFIR Teams Prevent Ransomware Threats in Healthcare – A Case Study on Interlock Ransomware

How to Protect and Secure Your Data in 10 Ways

How to protect your privacy from Facebook - and what doesn't work

Identity Theft Resource Center's 2024 Annual Data Breach Report Reveals Near-Record Number of Compromises and Victim Notices

Iranian hacker group targets Israeli kindergartens in broad attack against Israeli security industry

Lumma Stealer Found in Fake Crypto Tools and Game Mods on GitHub

Lynx Ransomware Group Unveiled with Sophisticated Affiliate Program

Major data breaches exposed millions last year

Mega Data Breaches Push US Victim Count to 1.7 Billion

MGM Resorts to Pay $45 Million Settlement Over Major Data Breaches

Microsoft Announces Phishing Attack Protection for Teams Chat Starting February 2025

Microsoft Teams is finally introducing a spam and phishing alert - here’s what you need to know

Microsoft tests ‘scareware blocker’ for Edge that uses computer vision to detect scams

More than 33,000 Mainers affected by PowerSchool data breach, new filing shows

Nevada District approves $45m MGM data breach settlement

New app aims to protect users against deepfake threats

New Apple CPU side-channel attacks steal data from browsers

New Hacker Group Using 7z & UltraVNC Tool to Deploy Malware Evading Detection

New Phishing Campaign Mimic Amazon Prime Membership To Steal Credit Card Data

New report warns of sophisticated techniques being used by ransomware group Arcus Media

New TorNet Backdoor Exploits TOR Network in Advanced Phishing Attack

Novel USPS-Spoofing Phishing Attack Relies On Malicious PDFs

OAuth Redirect Flaw in Airline Travel Integration Exposes Millions to Account Hijacking

Operação prende hacker suspeito de invadir sistemas e processos judiciais

Oppo ordered to investigate alleged data breach in Thailand

Poland's Big Cheese Studio says game development unaffected by cyberattack

PowerSchool starts notifying victims of massive data breach

Prefeitura denuncia 'desaparecimento' de R$ 298 mil de conta bancária, culpa hacker e caso passa a ser investigado pela polícia

Prefeitura denuncia ter sido alvo de ataque hacker que desviou mais R$ 290 mil das contas públicas

Public should use social media for weather updates amid SA Weather cyber attack

PureCrypter Deploys Agent Tesla and New TorNet Backdoor in Ongoing Cyberattacks

Quishing: How to Avoid QR Code Phishing Attacks

Ransomware attack disrupts Frederick Health operations, some systems taken offline

Ransomware attack kept major energy industry contractor out of some systems for 6 weeks

Ransomware attack on ENGlobal compromised personal information

Ransomware Targets ESXi Systems via Stealthy SSH Tunnels for C2 Operations

Rochester City School District (RCSD) says student, staff records exposed in data breach

Second data breach exposes private details of 132 disgraced surgeon's patients

Sensitive data from American National Insurance Company breach resurfaces online

Smiths Group hit by global cyber attack

South African Weather Service probes cyber attack on its systems

Texas utility firm investigating potential leak of customer data tied to 2023 MOVEit breach

The Ransomware Standoff: Why Almost Half of Businesses Refuse Pay Up

Top-Rated Chinese AI App DeepSeek Limits Registrations Amid Cyberattacks

Two Sanrio Japanese theme parks disrupted by cyberattack

‘Tycoon 2FA’ Phishing-as-a-Service Updated to Evade Security Tools, Barracuda Finds

UnitedHealth data breach impacted up to 190m people

Zimperium Detects Advanced USPS Mobile Phishing Campaign

What Does DeepSeek's Cyber Attack Mean for Data Privacy?

‘Wholly inaccurate and very significantly overstated’: TalkTalk confirms data breach probe – but says it's not as bad as claimed

Why Companies Aren’t Held Accountable For Data Breaches

27/01

5,000+ SonicWall firewalls still open to attack (CVE-2024-53704)

AI security posture management will be needed before agentic AI takes hold

American National Insurance Company breach data found online

Apache Solr For Windows Vulnerability Allows Arbitrary Path write-access

Apple fixes this year’s first actively exploited zero-day bug

Attackers allegedly stole $69 million from cryptocurrency platform Phemex

Bluesky closes in on 30M users, but how many are fake?

British Museum forced to partly close following cyberattack by ex-worker

Burp Suite 2025.1 With New Intruder Options & Bug Fixes

Change Healthcare Breach Almost Doubles in Size to 190 Million Victims

Change Healthcare Breach Nearly Doubles to 190 Million Victims

Chrome Security Update – Memory Corruption & Access Vulnerabilities Patched

CISOs Boost Crisis Simulation Budgets Amid High-Profile Cyber-Attacks

CISOs’ top 12 cybersecurity priorities for 2025

Clone2Leak attacks exploit Git flaws to steal credentials

Could Oracle be about to take over TikTok? Trump reportedly backs plans for shock deal

Critical Fleet Server Vulnerability Exposes Sensitive Information

Critical Intel Trust Domain Extensions Isolation Vulnerability Exposes Sensitive Data

Critical Vulnerability in Meta’s Llama Framework Exposes AI Systems to Remote Attacks

Crunchyroll denies data breach after viral social media post exposes premium logins

Cyber trends set to influence business strategies

Cybersecurity needs women — and it needs to treat them better

Data Privacy Week: Box CPO Highlights the Evolving Role of Privacy Professionals in the Age of AI

Data Privacy Week: EU Commission Data Transfer Case Has Implications for US Businesses

DeepSeek Hit by Large-Scale Cyber Attack, Temporarily Limits Registrations

DeepSeek serves as “cold shower” for the US as it overtakes ChatGPT on App Store

Do We Really Need The OWASP NHI Top 10?

Don’t let these open-source cybersecurity tools slip under your radar

Elton John and Paul McCartney want to protect UK artists from AI

ESXi ransomware attacks use SSH tunnels to avoid detection

EU sanctions Russian GRU hackers for cyberattacks against Estonia

FBI Investigation Uncovers $880K Fraud Scheme by New Jersey Man Targeting Elderly Woman

Former BreachForums owner faces resentencing after violating his supervised release

GamaCopy Mimics Gamaredon Tactics in Cyber Espionage Targeting Russian Entities

GamaCopy targets Russia mimicking Russia-linked Gamaredon APT

GitHub Desktop Vulnerability Risks Credential Leaks via Malicious Remote URLs

GitHub Vulnerability Let Malicious Repos To Leaks Users Credentials

GitLab Security Update – Patch for XSS Vulnerability in File Rendering

Hackers evading email spam filters using hidden text, Cisco Talos alerts

Hackers steal $85 million worth of cryptocurrency from Phemex

Hackers Tool 11 Days To Deploy LockBit Ransomware From Initial Compromise

Hackers Using RID Hijacking Technique To Create Secret Windows Admin Account

Hello Kitty theme parks knocked out by hacker attack

Hidden Text Salting Disrupts Brand Name Detection Systems

How to use Apple’s App Privacy Report to monitor data tracking

Humanity Protocol valued at $1.1 billion after latest fundraise

Industry leaders explain how AI will change cybersecurity

Juniper VPN gateways targeted by stealthy "magic" malware

Meta Llama LLM security flaw could let hackers easily breach systems and spread malware

Meta rushes to fix critical Llama Stack AI flaw

Microsoft Teams phishing attack alerts coming to everyone next month

MintsLoader Delivers StealC Malware and BOINC in Targeted Cyber Attacks

Multiple Git flaws led to credentials compromise

New Attack Abusing Multicast Poisoning for PreAuthenticated Kerberos Relay

New crypto mining worm linked to global campaign

New Malware Campaign Using 7z & UltraVNC Tool To Deploy Malware

New Phishing Campaign Targets Mobile Devices with Malicious PDFs

New Phishing Framework Attacking Multiple Brands To Steal Customer Logins

Novel hacker group claims major data theft from India's ICICI Bank

One of the biggest flaws exploited by Salt Typhoon hackers has had a patch available for years

Phemex Crypto Platform Loses Over $69 Million in Sophisticated Cyberattack

PowerSchool Data Breach Exposes Sensitive Information of Over 300,000 Educators

SaaS Breaches Skyrocket 300% as Traditional Defenses Fall Short

SCAVY – Framework to Detect Memory Corruption in Linux Kernel for Privilege Escalation

Subaru Bug Enabled Remote Vehicle Tracking and Hijacking

TalkTalk investigates alleged data breach after hacking forum claims customer data sale

The future of identity security: What we can expect

This ransomware gang is using SSH tunnels to target VMware appliances

Threat Actors Weaponized XWorm RAT Builder To Attack Script Kiddies

Toll in 2024 Change Healthcare breach hits nearly 190 million Americans

Trump’s order on censorship: victory for free speech or assault on reality?

United Health tech hack impacted 190M people, 2x more than first reported

United Healthcare data breach may have affected 190 million Americans

UnitedHealth Ransomware Attack Exposes 190 Million Users’ Personal & Healthcare Data

Vengeful former employee sabotages British Museum’s systems

Xerox Workplace Suite Vulnerability Let Attackers Bypass API Security

Windows Charset Conversion Feature Exploited to Execute Remote Code

26/01

British Museum Exhibitions Closed After Alleged Cyber-Attack By Former Employee

Data Breach Exposed Precise Location Information of Millions Using Popular Smartphone Apps

Emergency Alert: Cyber Attack Strikes Popular Theme Parks! What You Need to Know

Hacker invade perfil da filha de Renato Aragão e anuncia morte do humorista: ‘Golpe’

INE Security Alert: Expediting CMMC 2.0 Compliance

Meta's Llama Framework Flaw Exposes AI Systems to Remote Code Execution Risks

Ransomware gang uses SSH tunnels for stealthy VMware ESXi access

Top 10 Best Open Source Firewall in 2025

UnitedHealth now says 190 million impacted by 2024 data breach

UnitedHealth updates data breach impact to 190 million people, nearly doubling previous estimate

Daily News - Janeiro (19/01 - 25/01) - 04 Semana de 2025