DAILY NEWS: Maio (12/05 - 18/05) - 20 Semana de 2024

Cyber Security, Privacy and Information Security News --- Daily Updates !! Weekly Resume...

18/05

Android malware Grandoreiro returns after police disruption

BreachForums 3.0 reboot rumors already brewing on socials

Central Contra Costa Transit Authority experiences cyber security data breach

Como é que um mágico se tornou no primeiro hacker do mundo?

Gen Z and Millenials are more concerned about cyber attacks – 5 tips to keep you safe

Kinsing: hacker group “hijacks” money into cryptocurrencies

Large-scale ransomware data breach at Australian prescription company MediSecure

Massive Dell data breach hits 49 million users; what this means for your privacy and security

Pendle Token Theft Surges as $5.62 Million Lost in Phishing

Pendle Token Theft Surges, $5.62M Lost From Recent Permit Phishing

Ransomware gang targets Windows admins via PuTTy, WinSCP malvertising

The fallout from the massive data breach at Ascension continues as patients are unable to fill their prescriptions

Threat Actor Allegedly Offers Access to Asian Telecom Giant with $5 Billion Annual Revenue

17/05

$25M in 12 seconds: MIT hacker brothers arrested in the US

$85 Million Stolen: Pink Drainer’s Impact on the Cryptocurrency Community

Advice for Santander bank customers after the cyber attack

Anonymous Arabia Allegedly Targets Queen Alia International Airport in DDoS Attack

Ascension Faces Multiple Lawsuits Following Ransomware Attack

Australian government warns of 'large-scale ransomware data breach'

Black Basta Ransomware Struck More Than 500 Organizations Worldwide

Breach Forums Admin ShinyHunters Claims Domain Reclaimed from FBI

Bucks healthcare supplier suffers cyber-attack

Business as Usual: Leicester council’s ‘streetlight’ cyber-attack

Chicago Fire FC Data Breach: Exposed Fan Info? Here’s What’s at Risk!

China-Linked Hackers Adopt Two-Stage Infection Tactic to Deploy Deuterbear RAT

Chinese nationals launder $73M crypto in pig butchering scam

CISA adds D-Link DIR router flaws to its Known Exploited Vulnerabilities catalog

CISA announces secure by design pledges from leading tech providers

CISA Warns of Actively Exploited D-Link Router Vulnerabilities - Patch Now

City of Wichita disclosed a data breach after the recent ransomware attack

City of Wichita says ransomware attack compromised residents' sensitive personal information

Company that assists health care insurers discloses 2023 data breach

Cyber security chief says MediSecure data breach is an 'isolated' attack but warns health data a prime target for cybercrime

Darkgate Malware Weaponizing XLSX, HTML, & PDF To Attack Windows Machines

Dispel Appoints Dean Macris as Chief Information Security Officer

E-scripts platform MediSecure hit by 'large-scale' ransomware

Electronic prescription provider MediSecure grapples with major data breach

FBI seizes infamous cybercrime site BreachForums

Feds Bust N. Korean Identity Theft Ring Targeting US Firms

Feds nab alleged money launderers for pig butchering scheme

FEI Systems reports a data breach affecting sensitive consumer information

Formosa Plastics Reportedly Impacted by Hunters International Ransomware

GE HealthCare issues guidance for mitigating 11 security bugs in ultrasound devices

Hackers are targeting Windows Quick Assist remote desktop features to deploy ransomware

Hackers exploit Chrome vulnerabilities, US cyber agency urging users to update

Healthcare company WebTPA discloses breach affecting 2.5 million people

How Financial Institutions Can Protect Against Phishing Attacks

Iress denies statements made by ‘threat actor’ following data breach

KillSec Allegedly Breaches Agrani Bank, Demands €5000 Ransom

KillSec Allegedly Breaches Laxmi Capital, Demands €10,000 Ransom

Kimsuky APT Deploying Linux Backdoor Gomir in South Korean Cyber Attacks

Kinsing Hacker Group Exploits More Flaws to Expand Botnet for Cryptojacking

LockBit leader revealed: What it means for ransomware

Major prescription vendor down over ransomware

MediSecure Data Breach an ‘Isolated’ Attack; No Impact on Current e-Prescriptions

Microsoft Quick Assist Tool Abused for Ransomware Delivery

Microsoft to start enforcing Azure multi-factor authentication in July

New Android Banking Trojan Mimics Google Play Update App

New XM Cyber Research: 80% of Exposures from Misconfigurations, Less Than 1% from CVEs

Nissan Confirms 53,0000 Social Security Details Leaked in November Data Breach

No need to change Medicare cards after MediSecure data breach, government says

NoName057(16) and Cyber Army of Russia Allegedly Launch DDoS Attacks on Slovak Websites

North Korea-linked Kimsuky APT attack targets victims via Messenger

Norwegian National Cyber Security Centre Recommends Moving Away from SSLVPN and WebVPN

Organizations struggle to defend against ransomware

Patch Now! CISA Adds Critical Flaws to Exploited Vulnerabilities Catalog

Patient Data at Risk in MediSecure Ransomware Attack

Pink Drainer Hacker Group Shuts Down After $75 Million Theft Spree

Ransomware: Italy is among the top three countries most affected by attacks

Ransomware attack leaves Jackson County with missing property records

Rockford Public Schools Restores Systems After Ransomware Attack

SEC beefs up rules to protect consumers whose data is breached

Securities and Exchange Commission (SEC): Financial orgs have 30 days to send data breach notifications

Securities and Exchange Commission (SEC) Updates 24-Year-Old Rule to Scale Customers’ Financial Data Protection

Significant rise in mobile banking malware, cryptocurrency-related phishing

SugarGh0st RAT Campaign Targets U.S. AI Experts

The importance of access controls in incident response

The IT skills shortage situation is not expected to get any better

Threat Actor Offers France Solar Database for Sale: 42,000 Lines of Users’ Data

Three Psychological Theories to Ensure Cybersecurity Training Sticks

To pay or not to pay? Negotiating in the age of ransomware

Too many ICS assets are exposed to the public internet

UK Councils Warn of Data Breach After Attack on Medical Supplier

US arrests suspects behind $73M ‘pig butchering’ laundering scheme

US exposes scheme enabling North Korean IT workers to bypass sanctions

US State Department dangles $5M for information on North Korean scheme

XLink Bitcoin Bridge Resumes After $10M Hack Recovery

WebTPA data breach impacts 2.4 million insurance policyholders

Windows Quick Assist Exploited in Ransomware Attacks

16/05

59% of organizations faced a software supply chain attack

64% of Indian Enterprises Under Fire from Ransomware Assaults

53,000 affected in Nissan North America cyber attack

53,000 Employees' Social Security Numbers Exposed in Nissan Data Breach

A New WiFi Vulnerability in IEEE 802.11 Standard Protocol Leads to SSID Confusion Attack

Administrator of BreachForums arrested, cybercriminals claim

Arcus Media Group Announces Two New Victims: The Egyptian-Sudanese Company and Rio Technology

Attribution Matters!? Eight Names of Ransomware Actors Revealed, So What?

Australia investigates major medical data breach involving country’s largest online prescription service

Beyond Borders: CISA Addresses the Global Influence on US Election Cybersecurity

Black Basta Ransomware Attack: Threat Actors Abuse Windows Quick Assist to Launch Phishing Scheme

BreachForums Hacking Marketplace Taken Down Again

Brick Court Chambers investigating ‘potential cyber incident’

Camden Council cyber attack warning after NRS Healthcare cyber attack

Chinese nationalist groups are launching cyber-attacks – often against the wishes of the government

Chinese retailer Temu accused of breaching EU’s DSA

CISO Confidence in AI Security Grows as GenAI Adoption Rises

Cloud security incidents make organizations turn to AI-powered prevention

Critical Git vulnerability allows RCE when cloning repositories with submodules (CVE-2024-32002)

Cyber Attack-Data Breach is Top Business Risk Facing Financial Institutions, Aon Survey

Cybercriminals Exploiting Microsoft's Quick Assist Feature in Ransomware Attacks

Damaging hacks expose the weak underbelly of America's health care system

Data breach at Sysmex America exposes sensitive consumer information

E-script provider MediSecure is the victim of the 'large-scale' ransomware data breach that has sparked an urgent government probe

Earth Hundun Hacker Group Employs Advanced Tactics to Evade Detection

East Lothian social care service users warned after cyber attack

Ebury botnet compromises 400,000+ Linux servers

Ewing Marion Kauffman School reports ransomware incident in early May

FBI Seized BreachForums’ Web Domains and Telegram Accounts

Federal gov reports 14 ransomware attacks last year

Five charged for cyber schemes to benefit North Korea's weapons program

GhostSec Announces Shift in Operations from Ransomware to Hacktivism

Google fixes third exploited Chrome zero-day in a week (CVE-2024-4947)

Google patches another zero-day exploit in Chrome - and this one affects Edge too

Google Patches Yet Another Actively Exploited Chrome Zero-Day Vulnerability

Hacker claims theft of India’s Samco account data

Harvard construiu uma rede quântica à prova de hackers em Boston usando cabos de fibra óptica existentes

Ind. healthcare network continues to recover from ransomware attack

Information Commissioner’s Office (ICO) Reprimands Birmingham Children’s Trust for Data Breach

IoT Cameras Exposed by Chainable Exploits, Millions Affected

IoT Vulnerabilities and BotNet Infections: A Risk for Executives

iPhone bug making deleted pictures reappear, users claim

Ireland privacy watchdog confirms Dell data breach investigation

Is an open-source AI vulnerability next?

Kimsuky hackers deploy new Linux backdoor in attacks on South Korea

Massachusetts Institute of Technology (MIT) brothers arrested for $25M crypto Ethereum blockchain heist

MediSecure Data Breach Confirms Impact on Personal and Health Information of Individuals

MediSecure e-script firm hit by ‘large-scale’ ransomware data breach

Microsoft’s Quick Assist used in scam to drop Black Basta ransomware

Montreal's College Ahuntsic to reopen on Friday after cyber attack alert

Myersville, Md., Struck by Cyber Attack Via Email Last Year

National Cyber Security Coordinator (NCSC) warns of ‘large-scale ransomware data breach incident’; MediSecure the victim

New UK system will see ISPs benefit from same protections as government networks

New Wi-Fi Vulnerability Enables Network Eavesdropping via Downgrade Attacks

Nine Mistakes Organizations Make With Security Awareness Training

Nissan Data Breach Impacts 53,000 Employees

North Korean Hackers Exploit Facebook Messenger in Targeted Malware Campaign

Norway recommends replacing SSL VPN to prevent breaches

Novel backdoors seen in use against European government agencies

Open redirect vulnerabilities exploited in ‘cat-phishing’ attacks, HP warns

OWASP dep-scan: Open-source security and risk audit tool

Panda Express parent faces class action over data breach

Pantana Accounting and Tax reports data breach exposing sensitive client information

Phishing campaign targets Meta business accounts

Police investigate large-scale healthcare data breach at MediSecure

Possible Europol Data Breach as Hackers Claim They Have Classified Information About Employees & Internal Procedures

Prescriptions provider MediSecure hacked in major data breach: What we know

Product showcase: Block ads, cookie pop-ups, trackers with CleanWeb

Providence Hospital caught in ransomware nightmare

Ransomware attack impacts law enforcement data in Wichita

Ransomware Frequency Up 64% on Remote Access Tools, Says At-Bay

Rape Ransomware Team Seeks Partners for Enterprise Windows Network Access, Offering 80% Profit Share

Reactions to the Ascension Healthcare Ransomware Attack and Suggestions for Healthcare Organizations

Researchers Uncover 11 Security Flaws in GE HealthCare Ultrasound Machines

Russian hackers use new Lunar malware to breach a European govt's agencies

Santander: a data breach at a third-party provider impacted customers and employees

Scammers use Microsoft's Quick Assist to take over your PC and steal your data

Shadow IT: Personal GitHub Repos Expose Employee Cloud Secrets

Singing River Health System says 2023 cyber attack impacted close to 900,000 patients

Snatch Ransomware Group: Data Breach Exposes French Neovia Company

Storm-1811 Abuses Windows Quick Assist in Sophisticated Ransomware Attacks

SugarGh0st RAT Variant Used in Targeted AI Industry Attacks

Tether Cracks Down on Phishing: $5.2 Million in USDT Frozen

The critical role of IT staffing in strengthening cybersecurity

The Hungarian authorities knew about a large-scale Russian cyber attack on the Ministry of Foreign Affairs, but publicly called it a fabrication

Thousands of Nissan North America workers hit in data breach

Threat Actor Offers Database of Especialistas Contacto Directo for Sale at $5000

UK Lags Europe on Exploited Vulnerability Remediation

'Up and running': Rockford schools technology mostly restored following ransomware attack

US offers $5 million for info on North Korean IT workers involved in job fraud

Windows Quick Assist Anchors Black Basta Ransomware Gambit

Windows Quick Assist Exploited in Ransomware Attacks

15/05

15-Year-Old Ebury Botnet Compromised 400,000 Linux Servers

49 Million Customers Data Affected After Dell Technologies Data Breach

900k Impacted by Data Breach at Mississippi Healthcare Provider

A Third of CISOs Have Been Dismissed “Out of Hand” By the Board

A Tornado Cash developer has been sentenced to 64 months in prison

Adobe fixed multiple critical flaws in Acrobat and Reader

Alleged Meesho data breach under scrutiny amid claims of recycled data

Android 15, Google Play get new anti-malware and anti-fraud features

Android 15 Rolls Out Advanced Features to Protect Users from Scams and Malicious Apps

Android to add new anti-theft and data protection features

Apple blocked $7 billion in fraudulent App Store purchases in 4 years

Apple blocks users and apps to fight fraud, saving billions of dollars

Apple Thwarts $7 Billion in Fraudulent Transactions Over Four Years

Ascension Health Cyber Attack Impact In Michigan

AT&T Data Breach: What Is AT&T Doing for the 73 Million Accounts Breached?

At-Bay Research Reveals Remote Access Behind 58% of Ransomware Attacks in 2023

Australia’s Iress says OneVue platform exposed to data breach

Australian energy and internet provider Sumo confirms customer data breach

Australian lender Firstmac says data breach impacted customers' personal information

Backlogs at National Vulnerability Database prompt action from NIST and CISA

Banco Santander confirms data breach at third-party provider, impacting Spain, Chile, and Uruguay

Banco Santander warns of a data breach exposing customer info

BreachForums seized by the FBI, again

Brothers arrested for $25 million theft in Ethereum blockchain attack

China-Linked Hackers Targeted Commercial Shipping Companies: Report

Christie's £670m art auctions hit by cyber attack

Chrome Vulnerability Alert: Google’s Rapid Response to 6th Zero-Day Exploit

CISA Alert: GitLab Password Exploit – Act Now For Protection

City of Helsinki data breach compromised the data of over 80,000 students and guardians

Cofense warns that sophisticated phishing campaign is targeting Meta business accounts

Core security measures to strengthen privacy and data protection programs

Current Market Forces Disincentivizing Cybersecurity, Says NCSC CTO

Cyber-Attack Disrupts Christie’s $840M Art Auctions

(Cyber) Risk = Probability of Occurrence x Damage

Cyber trust label could be in place by end of the year, White House says

Cybersecurity Alert: Frotcom International Faces Alleged Data Breach

Cybersecurity analysis exposes high-risk assets in power and healthcare sectors

Dell Data Breach Raises Urgency for Improved Security Measures

Dell Data Breach Sells Customer Data On Dark Web

DragonForce Cyberattack Strikes Again: Malone & Co and Watt Carmicheal Added as Victims

Dutch Court Sentences Tornado Cash Co-Founder to 5 Years in Prison for Money Laundering

Ebury Botnet Malware Compromises 400,000 Linux Servers Over Past 14 Years

EMX Reports Potential $2.3 Million Loss Due to Cyber Attack in Turkey Subsidiary

EU failure to rein in spyware reflects lack of political will, parliamentarian says

Experts say cybercriminals made strange move after Wichita ransomware deadline passed

FBI investigating ransomware attack at Rockford Public Schools

FBI Seizes BreachForums Again, Urges Users to Report Criminal Activity

FBI seize BreachForums hacking forum used to leak stolen data

Fiskars confirms cyber security incident, says operations unaffected

“Flawed” Foxit PDF Reader design leaves users vulnerable to exploit

Frequency of ransomware claims jumps 64% YoY, At-Bay

GCHQ to protect UK election candidates’ phones from cyberattacks

Georgia University System Acknowledges Moveit Breach From 1 Year Ago, 800K Impacted

GlorySec Announced to Expose Indonesian Hackers and Collaborate with Indian Hacktivists

Google Expands Synthetic Content Watermarking Tool to AI-Generated Text

Google Launches AI-Powered Theft and Data Protection Features for Android Devices

Google unveils new Android 15 security updates: What you need to know

Hack ao Santander afeta clientes na Espanha, Chile e Uruguai

Hacker claims another breach into Dell systems

Hacker claims to have stolen Dell customer data - here's how to protect yourself

Hackers used the Phorpiex botnet to spread the LockBit Black ransomware

How attackers deliver malware to Foxit PDF Reader users

I crafted malicious Chrome extension: overhaul doesn’t mean you’re safe

Indian-origin man in Singapore sentenced to jail for phishing intimate images of women

IntelBroker Allegedly Breaches United States Army Aviation and Missile Command, Exposing Maintenance Tasks

IntelBroker Claims to Sell Access to American Aerospace & Defense Company with Revenue of $75 Billion

Internal Revenue Service (IRS) Provides Latest Information on Contractor Data Breach, Highlights Enhanced Taxpayer Safeguards

Iress says GitHub data breach extends to OneVue

It Costs How Much?!? The Financial Pitfalls of Cyberattacks on SMBs

It's Time to Master the Lift & Shift: Migrating from VMware vSphere to Microsoft Azure

Jail for RSAF regular who targeted victims in phishing attacks to access their intimate images

Key questions to ask when tailoring defensive stacks

LockBit ransomware group claims cyber attacks on two Kerala-based companies

Malware was almost 50% of threat detections in Q1 2024

Man-in-the-Middle (MITM) Attacks Can Still Bypass FIDO2 Security, Researchers Warn

Meta is the second most spoofed brand for credential phishing

Microsoft Fixes Three Zero-Days in May Patch Tuesday

Microsoft Patches 61 Flaws, Including Two Actively Exploited Zero-Days

National Cyber Security Centre (NCSC) ramps up support for those at high risk of cyber attacks ahead of election

NCSC Expands Election Cybersecurity to Safeguard Candidates and Officials

New backdoors on a European government's network appear to be Russian

Nissan attack exposes sensitive data of thousands

Nissan North America data breach impacts over 53,000 employees

North Korea launders $148 million of stolen crypto using Tornado Cash

Ohio Lottery Cyberattack Compromised 538K Customers

Optus denies claims of ‘cloaking’ Deloitte cyber attack report findings

Patriot Mobile Database Allegedly Breached and up for Sale by Intelbroker on Behalf of Centre

PDF Exploitation Targets Foxit Reader Users

Poloniex hacker laundered over 60% of stolen funds in just one week

Protect against lateral movement attacks by securing credentials

Ransomware attack on Singing River Health System impacted 895,000 people

Ransomware attacks on US infrastructure: Bridewell's report findings

Ransomware statistics that reveal alarming rate of cyber extortion

Red Cross in Berlin leaks passwords and private messages

Santander Customer Data Compromised Following Third-Party Breach

SideCopy APT Campaign Found Targeting Indian Universities

Singing River ransomware attack now thought to have affected over 895,000

Sonne Finance developers offer bounty to hacker behind $20 million crypto theft

South Tees Hospitals NHS Foundation Trust reprimanded for “serious, harmful” data breach

Southeast Asian scammers steal $62 billion yearly, says US report

Strategic Cyber Defense: Balancing Threat-Centric and Risk-Centric Approaches

Sumo slammed by data breach, as energy and internet customers have details leaked

The Ashley Madison Data Breach List Included A Real Housewives Husband & A President’s Son

The Zero Trust Security Gap No One Talks About and How to Fill It

Tories self-refer to ICO over data breach

Turla Group Deploys LunarWeb and LunarMail Backdoors in Diplomatic Missions

Unveiling common ransomware attack methods to secure your organization

US agencies issue warning about Black Basta ransomware gang

Victims of ransomware attack on Mississippi health system rise to nearly 900K

What steps is AT&T taking to address the recent data breach affecting 73 million accounts?

What you need to know about the new NCSC ransomware guidance

Windows Quick Assist abused in Black Basta ransomware attacks

'Your data is stolen': Rockford schools hit by ransomware attack

14/05

6 Mistakes Organizations Make When Deploying Advanced Authentication

44% of Cybersecurity Professionals Struggle with Regulatory Compliance

72% of consumers worry daily about being fooled by a deepfake

400k Linux Servers Hacked to Mine Cryptocurrency

Android Malware Poses as WhatsApp, Instagram, Snapchat to Steal Data

Apple and Google add alerts for unknown Bluetooth trackers to iOS, Android

Apple and Google Launch Cross-Platform Feature to Detect Unwanted Bluetooth Tracking Devices

Apple backports iOS zero-day patch, adds Bluetooth tracker alert

Apple fixes Safari WebKit zero-day flaw exploited at Pwn2Own

Apple is about to surprise non-US users

Apple releases iOS 17.5: what’s new

Apple warns about iOS zero-day exploit

Are you meeting your cyber insurance requirements?

Beware! Threat Actor Selling Outlook RCE 0-Day on Hacking Forums

BLint: Open-source tool to check the security properties of your executables

Brum council-owned company reprimanded for data breach

California Privacy Protection Agency Publishes Enforcement Advisory on Data Minimization

China Presents Defining Challenge to Global Cybersecurity, Says GCHQ

Chrome Zero-day Vulnerability Exploited in the Wild, Patch Now!

CISA and Partners Unveil Cybersecurity Guide For Civil Society Groups

Concurso de hackers chinês vai pagar US$ 2,5 mi por explorações

Could Section 203 be used to regain control of our Facebook feeds?

Credibility in Question: Meesho Data Breach Claims Echo 2020 Leak

Critical Flaws in Cacti Framework Could Let Attackers Execute Malicious Code

Critical Flaws In Cinterion Cellular Modems Let Attackers Execute Remote Code

Dark Web Hacker Claims to Expose 70K National Parent Teacher Association Records

Data Breaches in US Schools Exposed 37.6M Records

Debt collection agency FBCS says data breach impacted close to 2.7 million individuals

DNS Tunneling Used for Stealthy Scans and Email Tracking

Dropbox Sign Breach: Threat Actors Access User Information

Easily Guessed Passwords for New Accounts Include “User”, “Temp”, “Welcome”

Ebury botnet malware infected 400,000 Linux servers since 2009

Ebury Botnet Operators Diversify with Financial and Crypto Theft

FCC issues first-of-its-kind C-CIST classification to Royal Tiger

FCC Names and Shames First Robocall Threat Actor

Google Chrome emergency update fixes 6th zero-day exploited in 2024

Google fixes sixth actively exploited Chrome zero-day this year

Google is planning on a fix to prevent accidental password deletion in Chrome

Hacker do Equalizer DEX drena fundos: Usuários são alertados e investigação está em andamento

Hackers Exploit Unpatched Bug in Helsinki Education Division Data Breach

Hackers expõem dados da Unimed Vales do Taquari e Rio Pardo depois da recusa de pagar resgate

Hackers usam tunelamento DNS para rastrear vítimas

Hackers Use DNS Tunneling to Scan and Track Victims

Hackers Weaponize Word Files To Deliver DanaBot Malware

Hospital pays £47k compensation for data breaches

How a GRC consultant passed the CISSP exam in six weeks

How Cloud Pentesting Could Have Prevented Dropbox Breach

How to de-anonymize scammers

iOS and Android owners will now be alerted if an unknown tracker is moving with them

Iress uncovers software breach, assures client data uncompromised

Kaspersky Reveals Global Rise in APTs, Hacktivism and Targeted Attacks

Linksys EA7500 Routers Flaw Let Attackers Execute Remote Code

Log4Shell shows no sign of fading, spotted in 30% of CVE exploits

Lukfook Holdings investigates potential data breach amid dark web sale

Massive COMB data breach reveals info on over a billion people — here's what we know about "compilation of many breaches"

May 2024 Patch Tuesday: Microsoft fixes exploited zero-days (CVE-2024-30051, CVE-2024-30040)

Meet Hackbat: An open-source, more powerful Flipper Zero alternative

Microsoft fixes Windows Server bug causing crashes, NTLM auth failures

Microsoft fixes Windows zero-day exploited in QakBot malware attacks

Microsoft May 2024 Patch Tuesday fixes 3 zero-days, 61 flaws

Millions of IoT Devices at Risk from Cinterion Modem Vulnerabilities

MITRE released EMB3D Threat Model for embedded devices

New AI Security Bill Introduced to Improve Tracking and Processing of AI Security and Safety Incidents

New Chrome Zero-Day Vulnerability CVE-2024-4761 Under Active Exploitation

NIST Confusion Continues as Cyber Pros Complain CVE Uploads Stalled

Ongoing Campaign Bombards Enterprises with Spam Emails and Phone Calls

OpenAI Releases GPT-4o, Faster Model & Free For All ChatGPT Users

Pipeline Integrity and Security in DevSecOps

Portal da Europol é violado; agência nega o roubo de dados

Ransomware attack on Ohio Lottery compromised the data of 539,000 individuals

Riscos gerados pela GenAI põem ainda mais pressão sobre os CISOs

R00TK1T Group Intensifies Cyberattacks on Egyptian Firms After Clash with Anonymous Egypt

Royal Tiger Group With Spoofed Phone Numbers Stealing Credit Card Data: FCC

Russian Actors Weaponize Legitimate Services in Multi-Malware Attack

Santander Flags Data Breach Hitting Some Clients, All Staff

Santander reports customer, employee data breach in Spain, Chile, Uruguay

SAP corrige falhas críticas no CX Commerce e NetWeaver

Simplify Certificate Lifecycle Management And Build Security Into OpenShift Kubernetes Engine With AppViewX KUBE+

Tailoring responsible AI: Defining ethical guidelines for industry-specific use

Telemarketing: the Privacy Guarantor sanctions Enel Energia. The company had not protected its databases from access by abusive brokers

The Cyber Express Sets the Stage to Host World CyberCon META Edition 2024 in Dubai

The Expert View: Proactive Threat Intelligence

Tory party refers itself to watchdog over alleged data breach

UK Insurance and NCSC Join Forces to Fight Ransomware Payments

UnitedHealth, Ascension Attacks Feed Debate Over Health Care Security

VMware fixed zero-day flaws demonstrated at Pwn2Own Vancouver 2024

VMware fixes three zero-day bugs exploited at Pwn2Own 2024

VMware Patches Severe Security Flaws in Workstation and Fusion Products

Windows 10 KB5037768 update released with new features and 20 fixes

Windows 11 KB5037771 update released with 30 fixes, changes

13/05

AI abused to clone voices, FBI warns

AI’s rapid growth puts pressure on CISOs to adapt to new security risks

Alleged Data Breach Exposes User Records of Patricia AI, a Leading 3D-Commerce Platform

Alleged Hosocongty Data Breach Exposes Vietnamese Job Seekers

Apple iTunes For Windows Flaw Let Attackers Execute Malicious Code

Ascension Healthcare Systems Hacked, Hospitals Diverting Emergency Service

Ascension Ransomware Attack Diverts Ambulances, Delays Appointments

Aussie software firm Iress flags data breach at third-party platform

Australia Faces Unprecedented Cyber Threats Amid Support for Ukraine

Australian Firstmac Limited disclosed a data breach after cyber attack

Australian lender Firstmac hacked by ransomware gang

Black Basta ransomware has become one of the biggest threats worldwide, CISA and FBI say

Black Basta Ransomware Strikes 500+ Entities Across North America, Europe, and Australia

Black Basta Ransomware Victim Count Tops 500

Black Basta target orgs with new social engineering campaign

Boeing Confirms LockBit Hackers Demanded $200 Million Ransom After 2023 Data Breach

Botnet sent millions of emails in LockBit Black ransomware campaign

Central Board of Secondary Education (CBSE) Results 2024 Under Threat: Database Vulnerability Could Compromise Student Scores

Christie’s Auction Website Hacked Just Before Major Sales

Christie’s website breached right before huge sales day

Cinterion Modem Vulnerabilities Leave IoT and Industrial Networks Exposed

CISA Warns Of Black Basta Ransomware Attacking 500+ Industries

Collaboration tools are now at the frontline in the battle against phishing

Conservatives investigated over possible mass email data breach

Critical vulnerabilities take 4.5 months on average to remediate

Data breach at Bridgeway Center exposes sensitive information

Data breach exposes patient information at Dental Group of Amarillo

Dell data breach may affect up to 49 million customers

Dell data breach possibly impacted over 49 million customers globally

Dell hacker claims they had access to systems for nearly three weeks

Download: The Ultimate Guide to the CISSP

DuckyMummy Allegedly Breaches FrotCom, Offers Company Data for Sale

Embattled lender Firstmac releases new statement on cyber attack

Establishing a security baseline for open source projects

EU says Booking must comply with tech rules

Europol confirms web platform breach

Europol Investigating Breach After Hacker Offers to Sell Classified Data

Following Ascension hospitals breach, FBI raises Black Basta alert

From AI scams to phishing emails — how secure is your IT system?

FTC orders Cerebral to restrict how consumer data can be shared

Google Cloud Accidentally Deletes $125 Billion Pension Fund’s Online Account

Hacker Offers Data Allegedly Stolen from the City of New York

Hackers use DNS tunneling for network scanning, tracking victims

Hacktivist Group R00TK1T ISC Claims Breach of Egyptian Ministry’s Systems

Hardware Level Vulnerabilities, Revisited

Healthcare provider Ascension says ransomware attack disrupted access to internal systems

Helsinki suffers data breach after hackers exploit unpatched flaw

How AI affects vulnerability management in open-source software

HPE Aruba Vulnerabilities: Prevent Systems From RCE Attacks

INC ransomware source code selling on hacking forums for $300,000

Info on The Post Millennial data breach added to HaveIBeenPwned

IntelBroker Allegedly Leaks Parent Teacher Association Database

Low-tech tactics still top the IT security risk chart

Luk Fook warns of potential customer data breach

Malicious Python Package Hides Sliver C2 Framework in Fake Requests Library Logo

Mallox Ransomware Deployed Via MS-SQL Honeypot Attack

Murray Community School District deploys gun detection technology

Mysterious actor spills over 1.2B records on Chinese users

New Breed of Romance Scams Employs Fake Cryptocurrency Exchanges

Nmap 7.95 Released – What’s New!

North Korean Hacker Group Targets South Korean Crypto Firms With New 'Durian' Malware

Notorious Hacker IntelBroker Claims that Europol has Suffered a Data Breach

Novel LLMjacking Attacks Target Cloud-Based AI Models

Parity wallet hacker begins laundering 150k in Ethereum after 7 years of inactivity

Phorpiex botnet sent millions of phishing emails to deliver LockBit Black ransomware

Police Accessed Proton Mail User Data in Terrorism Probe

PyPi package backdoors Macs using the Sliver pen-testing suite

Ransomware attacks is a prominent threat for maritime

Red teaming: The key ingredient for responsible AI

Researchers Observe Potential Ties between Trinity and Venus Ransomware Strains

Ridding your network of NTLM

'Russian' hackers deface potentially hundreds of local British news sites

Securing the future through cybersecurity education

Severe Vulnerabilities in Cinterion Cellular Modems Pose Risks to Various Industries

SHQ Response Platform and Risk Centre to Enable Management and Analysts Alike

TCE Cyberwatch: Weekly Wrap on AI, Deepfakes, Cybersecurity Challenges Affecting Nations Worldwide

The 2024 Browser Security Report Uncovers How Every Web Session Could be a Security Minefield

The zero-day market explained

Threat Actor Claims Leak of LocalPlace JP’s Database, Including Sensitive Client Information

Threat Actor Claims Major Europol Data Breach

Top conservative news website hit in data breach — around 26 million Post Millennial users affected

Unimed gaúcha confirma ataque, mas refuta pagar resgate

Vermont passes data privacy law allowing consumers to sue companies

VPN brand brings transparent toilet to the streets of London

What is phishing-as-a-service (PhaaS) and how to defend against it?

12/05

Cyber attack on Ascension Healthcare affecting USA Health Providence Hospital

Hacker invade site da UFPI, publica mensagens de ódio contra alunos e Lula e debocha da ST

Largest non-bank lender in Australia warns of a data breach

Mortgage lender Firstmac falls victim to cyber breach after major ransomware attack involving 500GB-plus data leak

N Korea hackers stole data from S Korea court computers

Over 59% Organisations Hit By Ransomware Receive Help From Law Enforcement — Sophos

Piloto da Marinha dos EUA preso na Austrália trabalhou com hacker chinês, diz advogado

Pro-Russia hackers targeted Kosovo’s government websites

US health system under cyberattack

DAILY NEWS: Maio (05/05 - 11/05) - 19 Semana de 2024