Daily News - Julho (14/07 - 20/07) - 29 Semana de 2024

Cyber Security, Hacking, Privacy and Information Security News --- Daily Updates !! Weekly Resume...

20/07

2 Foreign Nationals Plead Guilty in Lockbit Ransomware Case

17-Year-Old Linked to Scattered Spider Cybercrime Syndicate Arrested in U.K.

Arrest made in MGM Resorts $100 Million Hacking Attack

Após apagão, CrowdStrike alerta para ação de hackers na América Latina

Be alert for phishing and malware, warns MyCERT after IT outage

Beware: Cybercriminals Cash in on BSOD Outage with Phony Crowdstrike Fixes

California officials say largest trial court in US victim of ransomware attack

Chinese-Linked Threat Actor ‘Ghost Emperor’ Returns With Demodex Rootkit

Could Blockchain Have Prevented AT&T Data Breach? Expert Insights

CrowdStrike IT outage: Scam warning after phishing increases as ‘malicious cyber actors’ take advantage

Cyber Security Agency of Singapore (CSA) warns CrowdStrike users of phishing scams after global tech outage

Cybercriminals Exploit CrowdStrike Update Mishap to Distribute Remcos RAT Malware

Cybercriminals target Hamster Kombat gamers with phishing scams

Data Breach - Meta Set To Appeal $220m Fine By Federal Competition and Consumer Protection Commission (FCCPC)

Disney probes data breach by Russian hacktivist group Nullbulge

Fake Websites, Phishing Surface in Wake CrowdStrike Outage

Fractal ID data breach traced to 2022 hack of employee who reused password

Gemini chega a acordo com IRA Financial Trust sobre ataque hacker de US$ 36 milhões

Hackers exploit CrowdStrike outage as passengers and patients urged to be wary

Increased ransomware threat for hospitals and healthcare providers prompt promises of EU action

India's biggest crypto exchange WazirX loses nearly half its reserves: How, what and other details about the 'hacking' attack

Los Angeles County Superior Court hit by ransomware attack

Los Angeles County Superior Court System Reveals Ransomware Attack

MyCert Issues Alert On Increased Phishing Attacks Exploiting CrowdStrike Incident

Nigeria Imposes US$220 Million Fine on Meta for Data Breach

Ongoing Phishing Campaign Targeting CrowdStrike Users

Ongoing phishing scam reportedly targeting affected CrowdStrike users, SingCert urges vigilance

Pennsylvania Turnpike Officials Warn Of Another Phishing Scam

Phishing Attacks Take Lead Amid WazirX Hack, CoinDCX CEO Issues Dire Warning

Ransomware assaults are becoming increasingly expensive, with government entities bearing the brunt of this cost

Russian nationals plead guilty to participating in the LockBit ransomware group

Safety Gear Giant Cadre Holdings Reports Cybersecurity Breach

Scam warning as fake emails and websites target users after outage

Singapore Cyber Emergency Response Team (SingCERT) warns of ‘ongoing phishing campaign’ targeting those hit by global IT outage by offering help

Spain arrested three people after the cyber attack on countries supporting Ukraine

Suspicious Domains Emerged After Faulty CrowdStrike Update

Teenager nabbed in the UK in connection with ransomware attacks against US firms

The price of ransomware attacks is skyrocketing and government agencies are paying the most

Threat Actor Claims to Sell Data of Active Duty Personnel from Three US Military Branches

Three 'pro-Russian' hackers arrested in Spain over cyberattacks

Top Entertainment Agency Issues Notice Warning Fans Of Phishing Scammers

UK arrests suspected Scattered Spider hacker linked to MGM attack

US Cyberattacks on the Rise; Businesses in Colorado, California Face Greater Threat: Report

XRP Community on High Alert Following Surge in Phishing Airdrop Scams

Warning!! Fake WazirX Compensation Email Targeting Users

Warnings mount that cybercriminals may be exploiting global tech outage

19/07

Alleged Access for a South American Company Operating in 3 Sectors

Alleged Hirelocker Application Database Published on a Dark Web Forum

Apagão cibernético: Governos descartam suspeitas de ataques hacker e mantêm contatos com Microsoft

APT41 Infiltrates Networks in Italy, Spain, Taiwan, Turkey, and the U.K.

Ataques cibernéticos crescem quase 70% no Brasil em um ano

Bad CrowdStrike Update Linked to Major IT Outages Worldwide

Bassett Furniture Discloses Cyberattack Amidst Financial Slump

Beware of Free VPNs that Install Malicious Botnets

Blue screen of death strikes crowd of CrowdStrike servers

Britain's new government aims to regulate most powerful AI models

CERT-In Advises Critical CrowdStrike Update Causing Windows BSOD Outages

China claims Volt Typhoon cyberattacks were carried out by US agents

Chrome Security Update: Patch for Multiple Flaws that Leads to Remote Code Execution

Cisco, Oracle patch warning covers hundreds of critical vulnerabilities

CISOs must shift from tactical defense to strategic leadership

CoSAI: Tech Giants Form Coalition for Secure AI

Court Sentences Cybersecurity Student to 21 Months for Malware and DDoS Attacks

CrowdStrike’s ‘BSOD’ Outage: ‘No evidence that this is a Cybersecurity Incident,’ Says Australian Government

CrowdStrike causes Windows outage chaos for airports, banks, and more. Here's what you can do

CrowdStrike Fault Causes Global IT Outages

CrowdStrike Releases Fix for Updates Causing Windows to Enter BSOD Loop

CrowdStrike update crashes Windows systems, causes outages worldwide

CrowdStrike Update Pushing Windows Machines Into a BSOD Loop

Faulty CrowdStrike Update Crashes Windows Systems, Impacting Businesses Worldwide

Faulty CrowdStrike update takes out Windows machines worldwide

FBI cracks Trump shooter phone in 40 minutes (with some outside help)

Federal Judge Dismisses Major Claims in SEC’s Lawsuit Against SolarWinds

Freaky Friday! # BlueScreenDay Trends on X After Major CrowdStrike-Related Windows Outage

GenAI network acceleration requires prior WAN optimization

Global cyber outage grounds flights, hits banks, telecoms, media

Global cyber outage grounds flights, hits media, financial, telecoms

Google acquisition target Wiz another fruit of Israel's military intelligence

Hajj and Pilgrimage Organization of Iran was Allegedly Breached

How to find out if an AirTag is tracking you

HPE Critical 3PAR Processor Flaw Let Remote Attackers Bypass Authentication

How to Fix the Windows ‘Blue Screen of Death’ Issue Caused by CrowdStrike

How Was $230 Million Stolen in the WazirX Hack?

Indian Crypto Platform Wazirx Hacked: $230 Million Funds Stolen

Inside the world’s largest ‘live-fire’ cyber-defense exercise

Liverpool FC suspends ticket sales following cyber attack

Major Microsoft 365 outage caused by Azure configuration change

Massive Microsoft Outage Disrupts Indian Airports and Top Airlines

MediSecure cyber security incident

MediSecure data breach affects about 12.9 million Australians

MediSecure: Ransomware gang stole data of 12.9 million people

Microsoft and Crowdstrike outage grounds planes and closes offices

Não há indícios de que apagão cibernético global seja ataque hacker

One-third of dev professionals unfamiliar with secure coding practices

Oracle WebLogic Server Vulnerability Allows Complete Server Take Over

Pro-Houthi Group Targets Yemen Aid Organizations with Android Spyware

Reino Unido descarta ataque hacker em crise global de sistemas, diz fonte

R.R. Donnelley Settles $2.1 Million SEC Charges Over 2021 Cyberattack

Russians plead guilty to involvement in LockBit ransomware attacks

Safeguard Personal and Corporate Identities with Identity Intelligence

SAP's AI Core platform has some worrying security flaws, so patch now

Security leaders respond to the AT&T data breach

Shoppers won’t receive furniture orders after ransomware attack

SolarWinds just patched a whole load of critical security flaws

SolarWinds Patches 8 Critical Flaws in Access Rights Manager Software

Summary of "AI Leaders Spill Their Secrets" Webinar

Summer Olympics Threats, Funding Soars, Trump Shooter’s Phone Hacked

Sunburst: US Judge Dismisses Most SEC Charges Against SolarWinds

The Changing Face of Corporate Governance in Cybersecurity

Threat Actor Claims to Have Leaked KYC Data of Embily Crypto and Fractal ID

Two Russian Nationals Plead Guilty in LockBit Ransomware Attacks

Understanding the Crowdstrike crisis

Update: Worldwide IT outage due to buggy Crowdstrike update

Watch out — this fake ad blocker might actually end up infecting your device with malware

WazirX Cryptocurrency Exchange Loses $230 Million in Major Security Breach

WazirX security breach leads to $230 million withdrawals

What is CrowdStrike and how did it crash so many business computers?

Widespread IT outage affects banking, media, airlines and other services

18/07

7.6 Million Reasons: The Evolve Bank Breach and the Rising Ransomware Tide

12.9 Million Australians Impacted in MediSecure Data Breach

23andMe to settle class-action suit around 2023 data breach

95% percent of organizations had at least one high or critical risk

After Advance Auto Parts Data Breach, Claims of Modern Automotive Network Cyberattack Surface

Alert: HotPage Adware Disguised as Ad Blocker Installs Malicious Kernel Driver

Another KYC data breach hits the crypto world, affecting thousands of users

Apple takes aim at the world's most popular browser in creepy new ad - see for yourself

AppSec Webinar: How to Turn Developers into Security Champions

Ataque de hackers em corretora de criptomoedas gera prejuízo de R$ 1 bilhão

Attackers abuse URL protection services to hide phishing links in emails

Automated Threats Pose Increasing Risk to the Travel Industry

BadPack APK Malware Using Wired Trick to Attack Users & Stay Undetected

Bassett Furniture says ransomware attack disrupted manufacturing facilities

Beware Of Weaponized AWS Packages That Deliver Malware Via JPEG Files

Beware the tools that can bring risk to a Windows network

CapraRAT Spyware Masks As Popular Android Apps

CDK Global cyber attack: What businesses can learn & implement

Chainalysis Launches Public-Private Plans to Crack Down on Crypto Scams

CISA Appoints Jeff Greene and Trent Frazier to Key Leadership Roles

Cisco fixes critical flaws in Secure Email Gateway and SSM On-Prem (CVE-2024-20401, CVE-2024-20419)

Cisco Smart Software Manager Flaw Let Attackers Change Any User Passwords

Cisco SSM On-Prem Addresses Critical Vulnerability That Allowed Attackers to Change User Passwords

Cisco Warns of Critical Flaw Affecting On-Prem Smart Software Manager

Combatting cyber-alert fatigue

Costs associated with ransomware attacks are skyrocketing

Critical Apache HTTP Server Vulnerabilities Expose Millions of Websites to Cyber Attack

Critical Cisco bug lets hackers add root users on SEG devices

Critical Splunk flaw can be exploited to grab passwords (CVE-2024-36991)

Cyber attack targets trust that runs schools across Cambridgeshire

Cybercrime group FIN7 advertises new EDR bypass tool on hacking forums

Cybercriminals Heavily Preparing For 2024 Paris Olympic Games Based Attacks

CyberMaxx Q2 2024 Ransomware Research Report Shows 37% Increase in Attacks Compared to Q1

Data breach raises questions about Fractal ID’s decentralized identity architecture

Data Breaches Impact Growing Number of Victims, ITRC Finds

Dental care provider First Choice Dental says ransomware attack compromised over 200k patients

Department of Health and Human Services (HHS) and Federal Bureau of Investigation (FBI) Release Joint Cybersecurity Advisory Statement for Healthcare Providers

Don’t Be Fooled: URL Protection Services Can Be a Phishing Trap

Drugstore chain Rite Aid says data breach impacted over 2.2 million patients

eBook: How CISSP turns career goals into reality

Energy and Water sector ransomware recovery costs hit $3M, Sophos survey

ESET: Chinese Adware Opens Windows Systems to More Threats

Fact vs. Fiction: Dispelling Zero Trust Misconceptions

Fighting AI-powered synthetic ID fraud with AI

FIN7 Cybercrime Gang Evolves with Ransomware and Hacking Tools

FIN7 sells improved EDR killer tool

Fractal ID Confirms Data Breach, Impacting User Security in Web3 Platforms

Fractal ID Data Breach Affects Gnosis Pay, Polygon, Ripple, and NEAR Users

France Says Olympic Ransomware Attacks 'Inevitable'

Grype: Open-source vulnerability scanner for container images, filesystems

Hacker jailed after Jobcentre suffers cyber attacks

Hackers could create traffic jams thanks to flaw in traffic light controller, researcher says

Hackers norte-coreanos são suspeitos de roubo de US$ 235 milhões em criptomoedas

Hackney clashes with regulator over cyber attack

Harry Perkins Institute of Medical Research targeted in major cyberattack

Healthcare is an ‘easy victim’ for ransomware attacks. How hospitals can mitigate the damage

Hijacked YouTube channels pushing crypto scams using Trump assassination narrative

HotPage Malware Hijacks Browsers With Signed Microsoft Driver

How to Protect Financial Data in the Cloud: The US Department of Treasury and FSSCC Have the Answer

How to Protect Privacy and Build Secure AI Products

HS2 investigating possible misconduct tied to ‘serious’ data breach

IBM Secures $26 Million USAID Contract for Europe-Eurasia Cybersecurity

Indian Conglomerate Piramal Group was Allegedly Breached

Information Commissioner’s Office (ICO) reprimands Hackney Council over cyber attack

INTERPOL Taken Down West African Organized Crime Groups

Japanese Real Estate Firm SUUMO Confirms Data Breach Incident

Laurentian University confirms February ‘cyber incident’ was a ransomware attack

Laying the groundwork for zero trust in the military

Leaked Cellebrite Docs Reveal List of Phones That Can Be Unlocked

Leaked data from oil rigs raises terrorism threat

Liverpool suspend ticket sales after CYBER ATTACK... with officials unsure when sale will reopen as this 'sophisticated bot attack' is 'different to anything they have experienced before'

Liverpool hit by cyber attack as ticket sales suspended and investigation launched

Macao’s public broadcaster TDM was hit by a cyber attack

MarineMax Notifying 123,000 of Data Breach Following Ransomware Attack

MarineMax says March ransomware attack impacted over 120,000 customers

MediSecure Data Breach: 12.9 Million Australian Users’ Sensitive Data Hacked

Meta Halts AI Use in Brazil Following Data Protection Authority's Ban

Microsoft fixes bug blocking Windows 11 Photos from starting

Microsoft: Windows 11 23H2 now available for all eligible devices

Minneapolis healthcare provider data breach impacted over 760k patients

NATO to Bolster Cybersecurity Measures to Combat Threats for Alliance Countries

Nearly 13 Million Australians Affected by MediSecure Attack

New Malware Campaign Exploiting RDPWrapper and Tailscale Targets Cryptocurrency Users

New VPN Port Shadow Vulnerability Let Hackers Intercept Encrypted Traffic

Novel Chinese Browser Injector Lets Hackers Intercept Web Traffic

Number of data breach victims up 490% compared to first six months of last year

Over 765K compromised in MNGI Digestive Health breach

Paychex sued for negligence after data breach exposes workers’ names and Social Security numbers

People unwilling to pay a premium for AI-enhanced hardware: for good reason

Phishing-as-a-Service: What IT Teams Need to Know

Q2 Sees More Organisations Listed on Ransomware Leak Sites

Quantum Radiology recovers majority of data encrypted in the 2023 cyber attack

ReliaQuest report notes 20% spike in ransomware Q2 2024

SAP AI Core Flaws Expose Sensitive Customer Data and Keys

SAP AI Core Vulnerabilities Expose Customer Data to Cyber Attacks

SAPwned flaws in SAP AI core could expose customers’ data

SAPwned Vulnerability Attack Let Hackers Gain Control to Users Cloud Environments

SentinelOne and CISA Forge Alliance to Strengthen Government-Wide Cyber Defense

Shiba Inu (SHIB) Price Surges as WarizX Hacker Sells All Tokens

Signatures should become cloud security history

Social Security numbers stolen from Dallas County employees, their dependents in data breach

SolarWinds fixes 8 critical bugs in access rights audit software

Strengthening Security Posture in the World of Outsourced Ransomware-as-a-Service (RaaS)

TAG-100: New Threat Actor Uses Open-Source Tools for Widespread Attacks

Threat Actor Claims to Have Leaked Database of Pick n Pay Group

Threat Actor Claims to Have Leaked Database of Universitas Indonesia

UK Government Set to Introduce New Cyber Security and Resilience Bill

US Data Breach Victim Numbers Surge 1170% Annually

U.S. medical billing provider Designed Receivable Solutions (DRS) says cyber attack impacted over 585,000 patients

VPNs vs. SD-WAN: Which Provides Better Cybersecurity?

Vulnerability for a Phone Stalkerware is for Sale on a Dark Web Forum

WazirX Hacked: $230 Million Lost as Indian Crypto Exchange Suspends Withdrawals

WazirX, uma das maiores exchanges da Índia, perde R$ 1,2 bilhão em ataque hacker

Web3 KYC vendor Fractal ID loses over 50k users’ passport info in data breach

17/07

15 million Trello users have been exposed in a data breach – here’s what you need to know

50 World’s Best Penetration Testing Companies – 2024

Act Now: Critical Apache HugeGraph Vulnerability Under Attack

Anime figurine maker exposes North American customer names, home addresses

API Security: A Priority in Today’s Interconnected Tech World

Apple releases movie-like video for its latest privacy campaign

APT exploits Windows zero-day to launch zombie IE attack

Attacks on Israeli orgs 'more than doubled' since October 7, cyber researcher says

Atlassian Data Center & Server Flaw Let Hackers Execute Arbitrary Code

Atturra Acquires Brisbane Based Advisory Firm Exent in $8 Million Deal to Boost Growth

Auto parts giant exposed: 2.3 million customers at risk in massive data breach

Blockchain identity platform Fractal ID suffers data breach

BMW Hong Kong data breach exposes sensitive information of 14,000 customers

Brazilian Logistics Company Grupo Jal was Allegedly Breached

CDK Global Outage Ended After Reportedly Paying $25 Million Ransom

CERT-In Highlights Critical Vulnerabilities in Adobe, IBM WebSphere, and Joomla

China-linked APT17 Targets Italian Companies with 9002 RAT Malware

CISA: Patch Critical GeoServer GeoTools Bug Now

Cisco SSM On-Prem bug lets hackers change any user's password

Coinbase third-party breach reveals bank account numbers

Costs for Ransomware Attacks on Critical Infrastructure Are Soaring

Critical Apache HugeGraph Vulnerability Under Attack - Patch ASAP

Data Breach at New Jersey Oral & Maxillofacial Surgery Associates Leaks Patient SSNs

Data watchdog reprimands Hackney council over cyber attack

Dual Ransomware Attacks Present a Big Threat to State and Local Governments

Family Location Tracker App Life360 Breach: 443,000 Users’ Data Leaked

FIN7 Cybercriminal Gang Adopts Techniques to Elude EDR and Automate Attacks

FIN7 Group Advertises Security-Bypassing Tool on Dark Web Forums

FIN7 Hackers Employ New Tools to Bypass EDR & Conduct Automated Attacks

FIN7 Reboot | Cybercrime Gang Enhances Ops with New EDR Bypasses and Automated Attacks

Freudenberg Medical Provides Notice of November 2023 Data Breach

Furniture giant shuts down manufacturing facilities after ransomware attack

‘GhostEmperor’ returns: Mysterious Chinese hacking group spotted for first time in two years

Global Police Swoop on Black Axe Cybercrime Syndicate

Gnosis Pay and other crypto projects impacted in Fractal ID data breach

Hacked YouTube Channels Use Trump Assassination News to Push Crypto Scam

Hacker claims Trello, leaks millions of emails

Hacker descoberto em Francisco Alves tentou invadir sistema da polícia em MT

Hacker Group Leaks Disney Data To Protest A.I.-Generated Artwork

Hackney Council blasted over cyber attack that saw 'deeply personal information' stolen by hackers

Hackney Council in London reprimanded for failing to prevent ransomware attack

HardBit Ransomware - What You Need to Know

Information Commissioner’s Office (ICO) Reprimands London Council for Mass Data Breach

Inside Q2 2024’s Ransomware Surge: Strategies and Geopolitical Impact

Interpol operation nabs 300 with links to West African cyber fraud

Investigators force crypto wallet drainer to shut down

Iraq-based cybercriminals deploy malicious Python packages to steal data

Is Your Device Spying on You? 10 Warning Signs of Spyware

Italy targeted by Chinese APT attacks

Ivanti Endpoint Manager SQLi Vulnerability Allows Remote Code Execution

Jersey Financial Services Commission (JFSC) apologizes for data breach impacting 261 individuals

Kaspersky Bids Farewell to US Customer, Offers Six Months Free Security

Killer Ultra Malware Attacking EDR Tools From Symantec, Microsoft, & SentinelOne

Leaks of Pixel 9 phones reveal some design changes and camera improvements

Li Fi Hacked Again: DeFi Protocol Loses $10 Million in Second Exploit

London Borough of Hackney reprimanded over cyberattack

Malaysian Telecom Company U Mobile was Allegedly Breached

Man arrested over 'relentless' cyber attack on health charity

MarineMax Notifies 123,494 Consumers of Recent Data Breach Exposing Their Personal Information

MFA, Backups & More: Build Your Phishing Defense With These 7 Tips

Most GitHub Actions workflows are insecure in some way

Navigating Insider Risks: Are your Employees Enabling External Threats?

Netshoes é alvo de ataque hacker e sofre vazamento de dados de clientes na web

Netshoes é vítima de ataque hacker; dados de 38 mi teriam sido vazados

North Korean Hackers Update BeaverTail Malware to Target MacOS Users

Notorious FIN7 hackers sell EDR killer to other threat actors

Over 400,000 Life360 user phone numbers leaked via unsecured API

Overlooked essentials: API security best practices

Paris 2024 Olympics Face Escalating Cyber-Threats

Pueblo County District 70 reports a data breach and ransomware incident

Pueblo County school district potentially compromised by data breach and ransomware incident

Qilin Ransomware’s Sophisticated Tactics Unveiled By Experts

Rabbit R1 hacked using old vulnerability: avoid second-hand devices

Ransomware attack forces Indiana's Clay County to declare a local disaster emergency

Ransomware attacks are hitting energy, oil and gas sectors especially hard, report finds

Ransomware disrupts Bassett Furniture Industries

Ransomware recovery in energy, water sectors hits $3M, quadrupling in one year

'Relentless' cyber attack on Runcorn charity leads to Carron house raid and arrest of suspected hacker

Resonance Security Launches Harmony to Help Businesses Combat Web2 and Web3 App Threats

Rite Aid Data Breach Impacts 2.2M Customers, Personal Data Exposed

Rite Aid Says Hack Impacts 2.2M People as Ransomware Gang Threatens to Leak Data

Russia-linked FIN7 hackers sell their security evasion tool to other groups on darknet

Russian Petrochemical Company was Allegedly Breached

Safety guidelines provide necessary first layer of data protection in AI gold rush

Scattered Spider Adopts RansomHub and Qilin Ransomware for Cyber Attacks

Scots hacker student who sold malicious software to sabotage Government websites jailed

Securing APIs from cyber-criminals

Sensitive Data Sharing Risks Heightened as GenAI Surges

Sometimes the cybersecurity tech industry is its own worst enemy

Student made nearly £45,000 from cyber-attack software

SubSnipe: Open-source tool for finding subdomains vulnerable to takeover

“The internet has become a massive web of surveillance:” Firefox defends its decision

The Octo Tempest group adds RansomHub and Qilin ransomware to its arsenal

Threat Actor Claims to Sell Confidential Data from Energo, Kyrgyzstan’s Main Energy Producer

Threat Actor Claims to Sell Customer Data of Netshoes

Threat Actor Claims to Sell Database of Celcom Axiata Berhad

Threat group FIN7 adapts with new tactics and tools, researchers say

Tools Used By NullBulge Actor, Who Released Disney’s Internal Slack Communications

Trello Data Breach: Hacker Dumps Personal Info of Millions of Users

Trello leak: Over 15 million email addresses exposed. How did this happen?

UK to introduce watered-down version of mandatory reporting for ransomware attacks

Ukraine police arrest suspected cybercriminals accused of theft from industrial companies

Understanding NullBulge, the New AI-Fighting 'Hacktivist' Group

Unseen levels of cyberattacks: organizations targeted ten times an hour

Void Banshee Targets Victims Through Use of ‘Zombie’ Internet Explorer Zero-Day

Zero-Day Vulnerability Found in VirtualBox: Host Systems at Risk

Yacht giant MarineMax data breach impacts over 123,000 people

16/07

911 services in parts of California come under cyber attack

AI-Driven Incident Response: Automating Cybersecurity with GenAI

API Transformation Cyber Risks and Survival Tactics

AT&T data breach affects 109 million US customers

AutoNation Says CDK Global Ransomware Attack Impacted Earnings

BMW Hong Kong Data is Allegedly Leaked

BMW Hong Kong Faces Major Data Breach: 14,000 Customer Records Exposed

ChatGPTriage: How can CISOs see and control employees’ AI use?

Check Point Reports Shift in Ransomware Landscape; Introduces BadSpace Windows Backdoor Threat

CISA Warns of Actively Exploited RCE Flaw in GeoServer GeoTools Software

Cloudflare reports almost 7% of internet traffic is malicious

Criminals misuse URL protection to mask phishing attacks

Cyber criminals target Apple users with smishing attacks

Cyber-crime super-crew Scattered Spider falls in love with RansomHub and Qilin

Cyber security fatigue piles on pressure

Cyberattack disrupts 911 emergency services in California

Data Breach Class Action Lawsuit Filed Against Cloud-Based Storage Company Blamed For Ticketmaster Leak

Data breach hits keep on coming this year

Department of Migrant Workers (DMW) suffers cyber attack; online OFW services put on hold

Disney Investigating Hacker Group’s Data Theft Claims

Disney Probing Cyber Assault by Anti-AI Group Who Says It Took ‘Anything We Could Get Our Hands On’

Disney suffers massive internal communications data leak after cyberattack

Firefox’s new data collection feature sparks user backlash: here’s how to disable it

Firmware update hides Bluetooth fingerprints

Four ways to reconcile developer and security teams

Guarding the games: Cybersecurity challenges ahead of 2024 Paris Olympics

Hacker group says it leaked Disney data over the company’s ‘approach to AI’

Hackers found abusing URL protection tools to hide phishing links

Hacktivist Groups Target Romania Amid Geopolitical Tensions

Hacktivists Claim Leak Over 1 Terabyte of Disney Data

Half of SMEs Unprepared for Cyber-Threats

Healthed data breach exposes participant information

How AI is shaping the ransomware threat landscape

How to build an effective DevSecOps team

How U.S. Businesses can Fight the Deepfake Threat

Improved detection evasion added to updated HardBit ransomware

Internal Revenue Service (IRS) Warns Car Dealers of Rising Phishing and Smishing Scams

Iranian Hackers Deploy New BugSleep Backdoor in Middle East Cyber Attacks

Iranian MuddyWater Upgrades Arsenal With New Custom Backdoor

Iran’s MuddyWater APT targets Saudis and Israelis with BugSleep Backdoor

Iraqi Hackers Exploit PyPI to Infiltrate Systems Through Python Packages

Israeli Organizations Allegedly Targeted by Cyber Attack

IT admins are getting increasingly frustrated at non-IT bosses not knowing their stuff

Jersey regulator apologies for data breach on 261 people with trusts, companies

Kaspersky shuts down all US operations following ban

Kaspersky to Quit US Following Commerce Department Ban

'Konfety' Ad Fraud Uses 250+ Google Play Decoy Apps to Hide Malicious Twins

Latest AT&T data breach risks customer defections: Moody’s

Lazarus caught laundering millions from DMM bitcoin hack, some funds frozen

Lawyers are viewing AI as a force for good — but are worried their firms aren't adapting it quickly enough

LiFi Protocol Hack: Over $8 Million Stolen in Targeted Cyber Attack

Major data breaches that have rocked organizations in 2024

Malicious npm Packages Found Using Image Files to Hide Backdoor Code

Managing exam pressure: Tips for certification preparation

Massive data breach hits Ukrainian surveillance software company mSpy

MHTML Exploited By APT Group Void Banshee

Microsoft links Scattered Spider hackers to Qilin ransomware attacks

Millions of Rite Aid customers’ names, IDs exposed

MNGI Digestive Health Notifies 765k Patients of Recent Data Breach

Multiple Cryptocurrency Firms Fall Victim to Squarespace Domain Hijacking

New Jellyfish Loader Threat Discovered: Advanced Techniques for System Infiltration

New laws to protect the NHS and Ministry of Defence (MoD) from cyber attacks to be in King’s Speech

New Snowflake Data Breach Exposes Millions of Customers

Noida bank branch falls victim to cyber attack: How hackers stole Rs 16.50 crore

Paris 2024 Olympics to face complex cyber threats

Perth’s Harry Perkins medical research institute under cyber-attack

Qilin ransomware attack disrupts London NHS Services; 6,000 appointments canceled

Rabbit R1 hacked using old vulnerability: avoid second-hand devices

Ransomware leak site posts jumped 20% in Q2

Ransomware reality: 96% of attacks target backup repositories

Report suggests TVs are more vulnerable to cyber-attack than other smart devices

Rite Aid Announces Data Breach Affecting the Personal Information of 2.2 Million Consumers

Shadowroot Ransomware Lures Turkish Victims via Phishing Attacks

Strengthening Australia’s Digital Backbone: Critical Infrastructure Report Filing Begins

Study Proves It: Security Awareness Training Reduces Phishing Attacks

SYS01 info-stealer pushed via Facebook ads, LinkedIn and YouTube posts

Talk Security, Not Tech: Ivanti Study Urges CISOs to Educate Leaders on AI Risks

Threat Prevention & Detection in SaaS Environments - 101

Tipo exportação: hackers brasileiros vendem pragas bancárias para vizinhos

Trello Database is Allegedly Leaked

Two-Fifths of Senior Citizens Suffer Frequent Fraud Attempts

Ukraine's Defence Intelligence and hacker volunteers attack nearly 100 Russian websites

US’ American Radio Relay League (ARRL) admits facing a ransomware attack on its systems

Victoria’s Royal Brighton Yacht Club confirms Medusa ransomware attack

VMware ESXi targeting by SEXi ransomware continues under new name

Void Banshee APT exploited “lingering Windows relic” in zero-day attacks

Vulnerability Management Lifecycle: The Ultimate Guide to Business Security

We must act urgently to protect critical infrastructure

Why deepfakes are set to be one of 2024’s biggest cyber security dangers

Wise addresses potential data breach at partner bank

15/07

2 weeks after ransomware attack, Patelco restores most banking functions

39 hardware vulnerabilities: A guide to the threats

10,000 Victims a Day: Infostealer Garden of Low-Hanging Fruit

A Comissão Federal de Comunicações dos EUA (FCC) investiga se AT&T pagou R$ 2 milhões a hackers no maior vazamento de dados do setor

A Threat Actor Selling OpenSSH Command Injection Exploit for Version 9.6

A Threat Actor Selling PHPBB SQL Injection Exploit for $40 Monero

Advance Auto Parts says Snowflake security incident impacted over 2.3m customers

Akira Ransomware Attacking Airline Industry With Legitimate Tools

Are You Yet to Completely Embrace the Cloud

AT&T Desembolsa R$ 370 Mil a Hacker para Eliminar Registros de Clientes Comprometidos em Ataque Cibernético

AT&T Paid $370,000 to Hacker For Deleting Stolen Records

AT&T Paid Hackers $370k to Delete Stolen Call Records

AT&T pays threat actor $370,000 to delete stolen data – media

AT&T’s massive breach of metadata is a criminal treasure trove — as spy agencies know

Ataque hacker derruba site do Sesc Tocantins e interrompe atendimentos e serviços on-line

“Ataque hacker”, diz Prefeito após denúncia por postagens ilegais

Attackers Exploit URL Protections to Disguise Phishing Links

BianLian Ransomware Leveraging RDP Credentials To Gain Initial Access

CISA's Jack Cable Discusses US Push for More Secure Software

Cisco Talos Report Reveals Critical Insights in Ransomware Trends

Copycat assassin accounts spread across social media after Trump shooting

Critical Exim vulnerability facilitates malware delivery (CVE-2024-39929)

Crypto Scammer Returns $9.27 Million Out of $24M Crypto Theft

CRYSTALRAY Cyber-Attacks Grow Tenfold Using OSS Tools

CRYSTALRAY Hackers Exploiting Popular pentesting Tools To Evade Detections

CRYSTALRAY Hackers Infect Over 1,500 Victims Using Network Mapping Tool

Cyber Insurance for Supply Chains: Is It Worth the Investment?

Cyber pro and FBI vet on militarization of AI: “Let’s face it, it’s an arms race”

Dark Gate malware campaign uses Samba file shares

Discover the growing threats to data security

Disney allegedly hacked by “Nullbulge,” 1.1TB of data compromised

Disney é vítima de ataque hacker e roubo de 1 TB de dados

Disney: grupo hacker afirma ter roubado 1TB de dados da empresa

Disney‘s internal Slack containing unreleased projects leaked – hackers

EE launches Scam Guard against nuisance calls, dark web hackers and phishing scams

Encrypted traffic: A double-edged sword for network defenders

Facebook ads for Windows desktop themes push info-stealing malware

Five security risks from Generative AI

French Telecom Giant SFR’s Data Breached? Hacker Claims 1.4 Million Users Affected

GitHub Token Leak Exposes Python's Core Repositories to Potential Attacks

Google Lines Up $23bn Swoop For Startup Wiz Security

Google Parent Alphabet Eyes $23 Billion Acquisition of Cybersecurity Startup Wiz

Google to Acquire Cybersecurity Firm Wiz for $23 Billion

Guarding Finance: Ransomware Insights and Analysis from 2023

Hacker revela como Jogo do Tigrinho rouba e manipula o seu dinheiro

Hackers and law enforcement: to be or not to be?

Hackers Compromised Multiple Squarespace Customers’ Domain Names

Hackers Exploiting Vulnerabilities Within 22 Minutes Of PoC Release

HardBit: Malware Version 4.0 Evades Detection

HardBit ransomware version 4.0 supports new obfuscation techniques

IntelBroker hackers claim major data theft from Retail giant Lulu Hypermarket

Internal Revenue Service (IRS) Warns Car Dealers of Rising Phishing and Smishing Scams

June Windows Server updates break Microsoft 365 Defender features

Juniper Junos Flaw Let Attackers Gain Full ‘Root’ Access

Kaspersky is shutting down its business in the United States

Lazarus Group está movendo milhões do hack de US$ 305 milhões da DMM Bitcoin, afirma ZachXBT

Loretto makes formal notification of cyberattack data breach

Mais uma grande empresa brasileira é vítima de ataque hacker

Manufacturers Urge Feds to Revise Draft Cyber Attack Reporting Rule

Match Systems’ CEO Andrei Kutin Provides Insight on DMM Bitcoin Breach

Medusa ransomware claims American Golf Corporation hack

Metalfrio (FRIO3) sofre ataque hacker e fica com sistemas indisponíveis

Metalfrio sofre ataque hacker e fica com parte dos sistemas indisponíveis no Brasil e México

My LinkedIn account was hacked: I don't use it but I fixed it fast. Here's why and how

NATO agrees to building of new cyber defense center

New BugSleep malware implant deployed in MuddyWater attacks

New Data-Stealing Poco RAT Campaign Targeting Spanish Speakers

New HardBit Ransomware 4.0 Uses Passphrase Protection to Evade Detection

NHS Trusts cancelled over 6,000 appointments after Qilin cyber attack

"No new data leak has happened": Angel One Says Reported Data Breach Dates Back to April 2023

O WhatsApp pirata que abre as portas do celular para hackers

OilAlpha Hacker Group Attacking Humanitarian & Human Rights Organizations

Olympics face serious risk of malicious cyber activity

Pharmacy Giant Rite Aid Hit By Ransomware

Phishing Scammer Returns $9.3M DAI After 10 Months

Pinterest Data Leak: Hackers Claiming Access to 60 Million Rows of Data

Pressure mounts for C-Suite executives to implement GenAI solutions

Rabbit r1 secretly kept user data that could not be deleted

RansomHub Claims Responsibility for Rite Aid Ransomware Attack

Realm: Open-source adversary emulation framework

Risk related to non-human identities: Believe the hype, reject the FUD

Rite Aid confirms data breach following ransomware attack

Rite Aid hit by major data breach, customer information compromised

Rs 16 Crore Stolen from Nainital Bank’s Noida Branch; CERT-In and Police Investigate Major Cyber Attack on Core Banking Server

SEXi ransomware rebrands to APT INC, continues VMware ESXi attacks

Singapore banks enhance security to fend off phishing threats

Singapore Banks to Phase Out OTPs for Online Logins Within 3 Months

Snowflake-linked attack on Advance Auto Parts exposes 2.3 million people

Stop paying for third-party antivirus software. Here's why

Teiss Talk: Eliminating blind spots within your cyber security environment

Teiss Talk: Protecting your C-Suite's private lives to protect the enterprise

This new ransomware tries to stop victims recovery by using passphrases

Threat Actors Claims Breach of 1.1TB of Disney’s Internal Slack Chats

Threat Actor Claims to Sell Full Access to Internal Network of Major Polish Company

Time for businesses to move past generative AI hype and find real value

Warning signs that your information was stolen in healthcare data breach early this year

WP Time Capsule Plugin Update Urged After Critical Security Flaw

14/07

86 Public Cyber Services Recover After Ransomware Hacked

AT&T Paid a Hacker $370,000 to Delete Stolen Phone Records

Banks in Singapore to phase out one-time passwords in 3 months

CDK $25 million Bitcoin ransom linked to BlackSuit’s attack

Data breach letter after cyber attack leaves Leicester resident 'extremely concerned'

Grupo hacker afirma ter roubado 1 TB de informações da Disney

Hacker afirma que AT&T pagou cerca de US$ 400 mil para que ele apagasse dados confidenciais roubados

Hacker 'subscription service' lets them steal 600,000 people's bank card details

Homoglyphs and IL Weaving Used To Evade Detection in Malicious NuGet Campaign

Indian Authorities Allege Massive Trafficking Scheme in Chinese Controlled Scam Centers

Indonesia Restores 86 Public Services Post Cyberattack on Temporary National Data Center

Israeli Army Faces Unprecedented Cyberattacks During Conflict

Most Wanted Malware: How RansomHub targets Indian organizations ?

Rite Aid Discloses Major Data Breach After Cyberattack by RansomHub

The Evolution of Cybercrime Investigation

The National Cyber Security Centre (NCSC) issues alert on China state-sponsored cyber attackers

The Walt Disney Company Suffers 1.1TB Data Breach

Threat Actor Claims to Leak Database of 1Tx.io

Use any tools offered to monitor credit following Ticketmaster data breach, says expert

Vietnam takes measures to prevent ransomware, AI-powered attacks

Daily News - Julho (07/07 - 13/07) - 28 Semana de 2024