Daily News - Maio (19/05 - 25/05) - 21 Semana de 2024

Cyber Security, Privacy and Information Security News --- Daily Updates !! Weekly Resume...

25/05

10 Cybersecurity Tips for Safe Online Shopping

15 Cybersecurity Books You Must Read in 2024

Building Resilience Against Cyber-Attacks: 7 Essential Cybersecurity Measures

Experts Find Flaw in Replicate AI Service Exposing Customers' Models and Data

New ATM Malware Threatens European Banking Security

Unlocking Tomorrow’s Data: Exploring the Future of Database Management

24/05

Affiliated Dermatologists struck by ransomware attack, 370K impacted

Alphv and LockBit lose top spot to a smaller ransomware group

An ‘Unwelcome Development’ in MediSecure Data Breach Incident

Apache Flink flaw is back, and being actively exploited

Apple and Starlink users’ locations can be tracked through WiFi: here's how

Apple explains why iOS 17.5 restored your deleted photos - and what you can do now

Association of California School Administrators Reports Ransomware Attack

Backdoor installer gives hackers full control over courtroom devices

Beware: These Fake Antivirus Sites Spreading Android and Windows Malware

Black Basta Ascension Attack Redux — can Patients Die of Ransomware?

BlackMaskers Team Issues Warning to Jordan, Israel, and the Emirates

British tech founder Mike Lynch denies defrauding HP at US criminal trial

California school leaders' association says ransomware attack impacted over 50,000 members

Cencora data breach exposes US patient info from 8 drug companies

Cencora notifies individuals about data stolen earlier this year

Change Healthcare discloses $22M ransomware payment

Chinese Hackers Using ORB Proxy Networks For Stealthy Cyber Attacks

Chrome Fixes Fourth Zero-Day in Two Weeks, Eighth in 2024

CISA adds Apache Flink flaw to its Known Exploited Vulnerabilities catalog

CISA Says 4-Year-Old Apache Flink Vulnerability Still Under Active Exploitation

CISOs in Australia Urged to Take a Closer Look at Data Breach Risks

Customized Vulnerability Management Dashboard for CISOs

Customs and Border Protection (CBP), Immigration and Customs Enforcement (ICE) sued for information about sharing of noncitizens' biometrics

Cyberespionage schemes leveraged in escalating Moroccan gift card theft campaign

Dangerous New Browser Malware Detected on Forums: GhostHook v1.0

Data Breach at Merrill Exposes Personal Information of Walmart 401(k) Participants

Despite increased budgets, organizations struggle with compliance

DevOps Dilemma: How Can CISOs Regain Control in the Age of Speed?

Effective GRC programs rely on team collaboration

Eight drug companies information stolen due to Cencora data breach

Emerging ransomware groups on the rise: Who they are, how they operate

EU wants universities to work with intelligence agencies to protect their research

Exclusive-Samsung's HBM chips failing Nvidia tests due to heat and power consumption woes, sources say

Fail2Ban: Ban hosts that cause multiple authentication errors

Fake Pegasus Spyware Strains Populate Clear and Dark Web

FIRST Heritage Co-operative Credit Union Issues Alert Following Cyberattack

GenAI Bots Can Be Tricked by Anyone To Leak Company Secrets

GitLab issues patch for high severity account takeover vulnerability

GLORIAMIST Group Targeted Science Po Paris, Claims to Breached Several of Their Database

Google fixes eighth actively exploited Chrome zero-day this year

Google fixes eighth actively exploited Chrome zero-day this year, the third in a month

Google fixes yet another Chrome zero-day exploited in the wild (CVE-2024-5274)

Google password manager now lets families share details across one account

Google patches fourth zero-day in May, eighth so far of 2024

Hackers Backdoored Courtroom Video Recording Software With System Hijacking Malware

Hackers Created Rogue VMs to Evade Detection in Recent MITRE Cyber Attack

HackNeT and People’s Cyber ​​Army Allegedly Launch DDoS Attacks on Canadian Airport Systems

Health Information Published Online After MediSecure Ransomware Attack

Hong Kong regulator directs Worldcoin to cease operations citing privacy concerns

How Banks Can Safeguard Customers From Romance Fraud

How Can Small Businesses Alleviate Cyber Risks?

How FHE Technology Is Making End-to-End Encryption a Reality

How Hoteliers Can Navigate Data Breach Insurance Claims

ICQ messenger shuts down after almost 28 years

Information Commissioner’s Office (ICO) Issues Reduced Fine to PSNI Over Data Breach

Inside Team R70: An Interview with a Notorious Hacker Collective

Japan To Launch Active Cyber Defense System To Prevent Cyber Attacks

Japanese Experts Warn of BLOODALCHEMY Malware Targeting Government Agencies

JAVS Courtroom Recording Software Backdoored - Deploys RustDoor Malware

Justice department suffers another cyber attack

Kroll cyber threat landscape report: AI assists attackers

Legal action looming for Optus following data breach

Lewisham residents' contact details published in data breach

London Drugs Data Breach: Ransom Refusal Leads to Release of Employee Files

Malicious actors are cat-phishing targets in order to spread malware

Massive data leak hits Singapore’s Mustafa Group; investigations underway

Merrill employee exposes Walmart pension plan members

Microsoft: Gift Card Fraud Rising, Costing Businesses up to $100,000 a Day

MITRE shares lessons on VMware rogue VMs used in its own cyberattack

New DoS Attack ‘DNSBomb’ Exploiting DNS Queries & Responses

New KnowBe4 phishing report reveals top choices for phishing scams

New ShrinkLocker ransomware uses BitLocker to encrypt your files

Novartis Patient Information Leaked in Third-Party Data Breach at Lash Group

Novel ShrinkLocker ransomware exploits Microsoft BitLocker

OpenAI walks back restrictions in employee exit contracts

Optus Faces Legal Action Over 2022 Data Breach: ACMA Alleges Failure to Protect Customer Data

Optus to defend itself against claims it failed its customers in 2022 cyber attack

Philippine National Police (PNP) suspends online services amid data breach probe

Phishing kit trends and the top 10 spoofed brands of 2023

Police Service of Northern Ireland (PSNI) faces £750,000 fine for data breach impacting entire workforce

Popular VPN never logs your data, independent auditors reveal

Product showcase: Alert – Data breach detector for your email, credit card, and ID

Ransomhub Attacking Industrial Control Systems To Encrypt And Exfiltrate Data

Ransomware attack on Victoria Eye Centre impacted over 80,000 patients

Ransomware Attacks Targeting VMware ESXi Infrastructure Adopt New Pattern

Ransomware & Extortion Trends Create Massive Shift in Cyber Threat Landscape; Suggests Crimeware Report by Arete

Recall feature in Microsoft Copilot+ PCs raises privacy and security concerns

Russian Hackers Shift Tactics, Target More Victims with Paid Malware

Russian rights group says YouTube threatens to block its anti-war channel

Self-managed VPNs targeted in 58% of ransomware attacks

Sharp Dragon Hackers Attacking Government Entities Using Cobalt Strike & Custom Backdoors

Shein customers issued urgent 'do not open' warning over new phishing scam

ShrinkLocker Ransomware Exploits Microsoft's BitLocker

Stealthy BLOODALCHEMY Malware Targeting ASEAN Government Networks

Stolen London Drugs data posted online in ransomware attack

The criminal records of millions of Americans were just leaked online

The Police Service of Northern Ireland (PSNI) faces £750,000 fine for data breach impacting entire workforce

The Rise and Risks of Shadow AI

There are no bad machines – only ones that behave badly because of human error

Thousands of rugby fans' data leaked in breach

Top cybersecurity M&A deals for 2024

Update Chrome Browser Now: 4th Zero-Day Exploit Discovered in May 2024

US Drug Distributor Cencora Reports Massive Cyberattack, Highly Sensitive Medical Data Compromised

US safety probe into Waymo self-driving vehicles finds more incidents

US retailers under attack by gift card-thieving cyber gang

Usage of TLS in DDNS Services leads to Information Disclosure in Multiple Vendors

Vulnerable to ransomware? It’s not your servers – it’s your people

Walmart 401(k) data breach leaks names, Social Security numbers of plan participants

What is Black Basta, thought to be behind the Ascension ransomware attack?

What is Cloud Penetration Testing?

What the FA Cup can teach businesses about ransomware

Worried about job security, cyber teams hide security incidents

23/05

2024 sees continued increase in ransomware activity

A consumer-grade spyware app found in check-in systems of 3 US hotels

Analog Launches Testnet, Allocates 2% Token Supply for Participants

Apple wasn’t storing deleted iOS photos in iCloud after all

APT41: The threat of KeyPlug against Italian industries

Are Your SaaS Backups as Secure as Your Production Data?

Ataque hacker prejudica alunos de universidade: 'Perdi vagas de emprego'

Australia takes Singtel-owned Optus to court over 2022 cyber attack

Bank of Italy warns against AI-powered fake videos

Canadian pharmacy London Drugs responding to a LockBit ransomware attack

CentroMed suffers data security incident, 400K patients exposed

CFO Deepfake Redux — Arup Lost $26M via Video

Chinese actor ‘Unfading Sea Haze’ remained undetected for five years

Chinese tech giants slash prices of language models used to power AI chatbots

Chinese Threat Actors Employ Operational Relay Box (ORB) Networks to Evade IOCs

CISA Warns of Actively Exploited Apache Flink Security Vulnerability

CISOs pursuing AI readiness should start by updating the org’s email security policy

City of Clarksville announces major breach of residents' personal data

Compromised recording software was served from vendor’s official site, threat researchers say

Critical flaw found in Fluent Bit cloud services monitoring component

Critical SQL Injection flaws impact Ivanti Endpoint Manager (EPM)

Cybercriminals Exploit Cloud Storage For SMS Phishing Scams

Data breach at Western Sydney University (WSU) exposes thousands to cyber threats

End of VBScript! Microsoft Replacing it With Advanced Alternatives

EPA reveals most water systems do not meet compliance requirements

EU resilience regulation DORA has financial CISOs waiting for answers

European Parliament breached, IDs leaked – media

First Nations Health Authority in Crisis: Cyberattack Shakes BC’s Healthcare Sector

GitHub fixes maximum severity Enterprise Server auth bypass bug (CVE-2024-4985)

GitHub Fixes Maximum Severity Flaw in Enterprise Server

Guntech 2.5 to Launch in Upland’s Gaming Ecosystem

Hacker invade o SUS e expõe dados de 2 milhões de usuários na DeepWeb

Hackers Can Abuse Apple’s Wi-Fi Positioning System to Track Users Globally

HHS pledges $50M for autonomous vulnerability management solution for hospitals

High-severity GitLab flaw lets attackers take over accounts

Hijack of monitoring devices highlights cyber threat to solar power infrastructure

HR-related email subjects still tops for phishing attempts: report

Indian Election Faces Cyber-Attacks, Data Leaks on Dark Web

Inside Operation Diplomatic Specter: Chinese APT Group's Stealthy Tactics Exposed

Intercontinental Exchange to pay $10 million over delayed cyber disclosures, SEC says

Irene Corpuz Urges Startups to Prioritize Cybersecurity at World Cybercon 3.0 META Conference

Ivanti Patches Critical Remote Code Execution Flaws in Endpoint Manager

LastPass is Encrypting URLs Used within Password Vaults

LinkedIn was down for thousands of users

LockBit demands $25 million from London Drugs, confirming breach was actually ransomware attack

LockBit says that it’s behind the London Drugs attack

London Drugs waiting on LockBit’s next move after ransomware attack

Machine identities lack essential security controls, pose major threat

Malicious actors leak 70 million records from US Criminal database

Microsoft outage affects Bing, Copilot, DuckDuckGo and ChatGPT internet search

Microsoft’s Copilot and Bing down, users report

National Records of Scotland Data Breached in NHS Cyber-Attack

Nearly 90% of organizations suffer damage after a security incident

New approaches may be needed to regulate AI, says Bank of England policymaker

New Bitcoin Token Protocol “Runes” Carries Potential Phishing Risk

New Frontiers, Old Tactics: Chinese Espionage Group Targets Africa & Caribbean Govts

New rules prompt 93% of organizations to rethink cybersecurity plans

Northern Ireland police faces £750k fine after exposing staff info

NVD Leaves Exploited Vulnerabilities Unchecked

OmniVision says Cactus ransomware attack in 2023 compromised client data

Online video downloader exposes user data, including explicit content

OpenAI secures access to content from WSJ, The Times, and other media giants

Patriot Mobile data breach exposes subscribers’ personal details

Pharmaceuticals firm Cencora says data breach impacted Bristol Myers Squibb customers

Phishing attack spike fueled by generative AI

Political ads made with generative AI must be labelled, says FCC

Proton Mail doesn't guarantee anonymity—unless you do this

PSNI Facing £750,000 Fine After Data Breach Exposes Officers’ Details

Ransomware Attacks Exploit VMware ESXi Vulnerabilities in Alarming Pattern

Ransomware fallout: 94% experience downtime, 40% face work stoppage

Scarlett Johansson's OpenAI feud rekindles Hollywood fear of artificial intelligence

Schumacher family compensated for fake AI interview

SEC imposes $10M fine on NYSE owner for breach reporting failure

South China Sea nations subjected to prolonged China-linked attacks

Stock exchanges fined for failing to report cyber intrusion

Strategies for transitioning to a SASE architecture

Tesla’s Ultra-Wideband Still Vulnerable to Relay Attacks Despite Upgrades

The End of an Era: Microsoft Phases Out VBScript for JavaScript and PowerShell

The Police Service of Northern Ireland (PSNI) Faces £750,000 Data Breach Fine After Spreadsheet Leak

Threat Actor Claiming Access to AWS, Azure, MongoDB & Github API Keys

Threat Actor “Unfading Sea Haze” Targeting South China Sea Nations

Ukraine's Kyivstar allocated $90 million to deal with cyberattack aftermath

US government spending $50m on auto-patcher for hospital IT

Vast covert proxy networks leveraged by Chinese hackers for cyberespionage

Vulnerable Atlassian Confluence instances exceed 200K

WhatsApp Engineers Fear Encryption Flaw Exposes User Data, Memo

Why IT service desks can be open targets for threat actors

WinRAR Flaw Let Attackers Deceive Users with ANSI Escape Sequences

22/05

70% of CISOs Believe Their Company Is at Risk of a Cyber-attack

87% of medical practice data is digital

America's "only conservative cell carrier" hit by data breach

Atlas hack admitted by Black Basta ransomware group

Australia takes Singtel-owned Optus to court over 2022 cyber attack

Authelia: Open-source authentication and authorization server

Authorized Push Payment Fraud Cases Surge 12% Annually

Barings signs up 1,000+ claimants over recent MoD data breach

Blackbaud hit with new federal mandates following 2020 data breach

Breach Forums Plans Dark Web Return This Week Despite FBI Crackdown

Business Email Compromise (BEC) and Healthcare Benefits Scammer Sentenced to 10 Years Over $4.5M Fraud

Business Email Compromise (BEC) Phishing Attacks Are Gaining Momentum

Business VPN: why you should use one for your organization

CEOs accelerate GenAI adoption despite workforce resistance

Chinese hackers hide on military and govt networks for 6 years

Chinese Hackers Rely on Covert Proxy Networks to Evade Detection

Chrome Security Update : Patch for High Severity Flaws

Chucky Allegedly Leaks Gestion Kronos Database Containing 1.6 Million Records

Critical GitHub Enterprise Server Authentication Bypass bug. Fix it now!

Critical Unauthenticated RCE Vulnerability in Fortinet FortiSIEM: PoC Published

Critical Veeam Backup Enterprise Manager Flaw Allows Authentication Bypass

Critical VMware Vulnerabilities Let Attackers Execute Code & Trigger DOS

Cyber attack on healthcare provider CentroMed exposes patient data

Cyberattack against London Drugs claimed by LockBit ransomware group

Cyberattackers using ‘cat-phishing’ techniques, says report

CyberNiggers Group Announces New Web Domain Following BreachForums Downfall

Cybersecurity Incidents and Ransomware Attacks: Cybersecurity and Infrastructure Security Agency (CISA) Proposes Reporting Rule

Data Breach Alert: Allegedly Saudi Shopping Platform Reefi.me Customer Data for Sale

Data breach impacts wireless provider Patriot Mobile

Detecting A Phishing Attack With Help Of Artificial Intelligence

Don’t ignore data protection when developing AI, ICO warns

Embracing collective defence against cyber-threats

EPA Warns Of Cyber Attacks & Vulnerabilities In Drinking Water Systems

Gala Games recovers $22M of stolen crypto

Generative AI services have driven a huge surge in phishing attacks

Geopolitical cyber threats are escalating: Here’s how to stay safe

German police warn of cyberattacks via Office 365

GHOSTENGINE Exploits Vulnerable Drivers to Disable Security in Cryptojacking Campaign

GitHub Enterprise Server Vulnerability Circumvents Authentication Protections

Grindr is the second-most banned social app—how to unblock it

Hacker mineiro é alvo da PF ao vazar dados de 2 milhões de brasileiros

Hacker invade sistema do SUS e expõe dados de 2 milhões de brasileiros

Hacker Returns $22M to Gala Games Post GALA Token Exploit

Hackers Sell Fake Pegasus Spyware on Clearnet and Dark Web

Healthcare’s Trillion-Dollar Data Breach Crisis: Cybersecurity is a Matter of Life and Death

HR and IT Related Emails are the Top Choices for Phishing Scams

In the last year, 70% of organizations were targeted with BEC attacks

Information Commissioner’s Office (ICO) Looks Into Microsoft’s New Recall Feature

Is ChatGPT Driving the Rise in Malicious Emails?

Is Southeast Asia becoming the Silicon Valley of fraud?

IT Leaders Agree: SSO Isn’t Enough

Ivanti Endpoint Manager SQL Injection Flaw Let Attackers Execute Arbitrary Code

Lane Gorman Trubitt Notifies Consumers of January 2024 Data Breach

Latvia could criminalize deepfakes that target politicians

LockBit 3.0 Dethroned and New Players are Emerging

LockBit dethroned as leading ransomware gang for first time post-takedown

London council warns residents’ data may have been compromised by cyber attack on healthcare provider

Los Angeles Department of Mental Health (LACDMH) reports data breach

Mariani (Leonardo): “Delays in investments in cyber security put the future at risk”

Mastercard Deploys AI to Preemptively Thwart Card Fraud

Mastercard Doubles Speed of Fraud Detection with Generative AI

Microsoft to start killing off VBScript in second half of 2024

Microsoft's new Windows 11 Recall is a privacy nightmare

MS Exchange Server Flaws Exploited to Deploy Keylogger in Targeted Attacks

National Records of Scotland data leaked as part of NHS cyber-attack

National Records of Scotland reveals its data stolen in 'distressing' NHS health board cyber attack

Neighbourhood Watch data breach update as police confirm 'individuals are being investigated'

New Cryptojacking Campaign Exploits Vulnerable Drivers to Evade Security and Gain Privileges

NoName057 Group Launches DDoS Attacks on Major German Websites

OmniVision disclosed a data breach after the 2023 Cactus ransomware attack

Over 200K likely vulnerable Confluence Data Center instances exposed

PoC Exploit Released for Critical Git RCE Vulnerability

Proposals to Ban Ransomware Payments Rumoured

Q1 2024 Cyber Threat Landscape Report: Insider Threat & Phishing Evolve Under AI Auspices

QNAP Patches New Flaws in QTS and QuTS hero Impacting NAS Appliances

Ransomware, BEC, GenAI Raise Security Challenges

Ransomware group says it will release stolen London Drugs data if it doesn't get $25M in 48 hours

Reject all cookies but get them anyway? Websites abusing “legitimate interest”

Report Reveals 341% Rise in Advanced Phishing Attacks

Researchers Detailed How Letmeowin Harvest Credentials From Windows Systems

Researchers Warn of Chinese-Aligned Hackers Targeting South China Sea Countries

Rise of zero-day exploits reshape security recommendations

Rockwell Advises Disconnecting Internet-Facing ICS Devices Amid Cyber Threats

Rockwell Automation Urged Customers to Keep ICS Away from the Internet

Rockwell Automation Warns Admin to Disconnect Devices From Internet

Securities and Exchange Commission (SEC) slaps $10 million penalty on owner of NY Stock Exchange over 2021 cyber intrusion

Sensitive records office data accessed in cyber attack on health board

SlashNext Mid-Year State of Phishing Report Shows 341% Increase in BEC and Advanced Phishing Attacks

Some of the biggest tech companies around are teaming up to fight online scams

Technological complexity drives new wave of identity risks

The last six months shows a 341% increase in malicious emails

The Ultimate SaaS Security Posture Management Checklist, 2025 Edition

This devious malware can turn off your security protection without you even realizing — and then download a load of cryptominers

Thousands at Risk in the U.S. from Critical GitHub Enterprise Server Flaw

Threat Actor Allegedly Offers Screen Connect Access to 3,256 Computers in 10 Companies

Top cloud storage platforms hijacked to host malware — make sure that Google Drive or Dropbox link is safe

UK Bank Fraud Losses Exceed £1 Billion in 2023 Despite Slight Decline

UK Government in £8.5m Bid to Tackle AI Cyber-Threats

U.S. nonprofit BAMSI says data breach impacted over 20,000 individuals

US Unveils $50M Program to Help Hospitals Patch Cybersecurity Gaps

UserPro Plugin Vulnerability Allows Account Takeover

Veeam Addresses Authentication Bypass in Backup Enterprise Manager

Veeam Enterprise Backup Manager Flaw Allows Unauthorized Access

Veeam fixes auth bypass flaw in Backup Enterprise Manager (CVE-2024-29849)

Veeam reveals critical security bug in Backup Enterprise Manager tool

Vishing Meets AI: The Changing Nature of Phishing Threats

Zoom Adopts NIST-Approved Post-Quantum End-to-End Encryption for Meetings

Zoom introduces quantum-safe encryption

WebTPA data breach compromised the data of close to 2.5 million individuals

Welsh Rugby Union member addresses, names exposed

Windows’ new Recall feature: A privacy and security nightmare?

21/05

15 QNAP NAS bugs and one PoC disclosed, update ASAP! (CVE-2024-27130)

49 Million Customers Impacted by API Security Flaw

70% of CISOs Expect Cyber-Attacks in Next Year, Report Finds

AI safety research “seriously lacking,” scientists warn

AI Seoul Summit: 16 AI Companies Sign Frontier AI Safety Commitments

Anonymous Hacker Steals $200M Worth of GALA Tokens – Will Gala Games Recover?

Army personnel fear for their jobs after huge MoD cyber attack

Ascension nurse: Ransomware attack makes caring for hospital patients 'so, so dangerous'

Aston Villa’s gates have security gaps: fans exposed

Australian e-prescription provider MediSecure announces a significant data breach

Authorities Arrest $100m Incognito Drugs Market Suspect

Beware of BlackPlague Malware That Steals Discord Token & Telegram Sessions

Big Tech is not much help when fighting a junta, and FOSS doesn't ride to the rescue

Black Basta Ransomware Group Announced 7 New Victims

Blackbasta group claims to have hacked Atlas, one of the largest US oil distributors

BreachForums Fallout: Secretforums Announces BF Ranks, USDoD Shares Update

CasperSecurity Stealer Attacking Windows Machine to Remote Desktop Credentials

Comwave Networks Faces Alleged Cyberattack from Medusa Ransomware Group

Conservative cell carrier Patriot Mobile hit by data breach

Critical Fluent Bit Bug Impacts All Major Cloud Platforms

Critical Fluent Bit flaw affects major cloud platforms, tech companies’ offerings (CVE-2024-4323)

Critical GitHub Enterprise Server Flaw Allowed Attackers to Bypass Authentication

Cyber Attack Forces Michigan Hospitals to Use Paperwork

CyberArk to Acquire Venafi for $1.54 Billion, Enhancing Machine Identity Security

Cyberattacks Over Work Email Most Used; Ransomware Hits Victims Hard: Arctic Wolf

Darknet druglord busted for operating $100M ‘Incognito Market’

Data protection top motivator for cloud-based backup

Dropbox faces new class action lawsuit over data breach

Emerging trends in ransomware: What to expect in 2024?

Employee discontent: Insider threat No. 1

Environmental Protection Agency (EPA) Cyber Attack Still Hitting Water Utilities

EPA Steps Up Enforcement to Protect US Drinking Water from Cyber Attacks

Experts released PoC exploit code for RCE in QNAP QTS

Experts warn of a flaw in Fluent Bit utility that is used by major cloud platforms and firms

Family offices become prime targets for cyber hacks and ransomware

Fighting identity fraud? Here’s why we need better tech

Five Core Tenets Of Highly Effective DevSecOps Practices

GitHub warns of SAML auth bypass flaw in Enterprise Server

Google rolls out Chrome fix for empty pages when switching tabs

Hacker could have personal information of every schoolkid in Helsinki, City says

HR and IT related phishing scams still most popular according to KnowBe4’s latest Phishing Report

Ikaruz Red Team | Hacktivist Group Leverages Ransomware for Attention Not Profit

Incognito Dark Web Market Admin Arrested for Selling Illegal Goods

“Incognito Market” Operator Arrested for Running $100M Narcotics Marketplace

Iranian State Hackers Partner Up for Large-Scale Attacks, Report

Kansas City Cyberattack Disrupts KC Scout Cameras, Impacts Crash Investigations and Services

Keylogger in Microsoft Exchange Server Steals Login Credentials From Login Page

Kyivstar Cyberattack: Company Allocates $90 Million for Recovery Efforts

Lewisham admits data breach – but downplays impact of exposing contact details of residents

"Linguistic Lumberjack" Vulnerability Discovered in Popular Logging Utility Fluent Bit

LockBit admits University of Siena cyberattack

Majority of Singaporean firms hit by ransomware sought law enforcement for help: survey

Malware Delivery via Cloud Services Exploits Unicode Trick to Deceive Users

Man arrested for AI-generated child abuse material

Many-faced Iranian hackers stir destruction in Albania and Israel

Massive $200M Theft In Popular Web3 Game Drives Crypto Hack Losses Beyond $1B This Year

MediSecure data breach: Why hackers target health data

Memcyco Report Reveals Only 6% Of Brands Can Protect Their Customers From Digital Impersonation Fraud

Microsoft's latest Windows 11 security features aim to make it 'more secure out of the box'

Monmouth County high school students may have had personal info stolen in data breach

More Than One in Four Ransomware Attacks on Healthcare Providers Impact Patient Care

NEC XON shares lessons learnt from ransomware attacks

NextGen Healthcare Mirth Connect Under Attack - CISA Issues Urgent Warning

New Hijack Loader Attack Windows with Enhanced Anti-Evasion Capabilities

New Jersey school reveals shocking data breach: Kept secret for a year

New KnowBe4 Phishing Report Reveals HR and IT Related Emails Are the Top Choices for Phishing Scams

New Windows AI Feature Records All Your PC Activities

Nikesh Arora on Why Palo Alto Networks Is Buying IBM QRadar

Nissan North America Data Breach Leaked the Personal Information of Over 53,000 Employees

Over 60% of Network Security Appliance Flaws Exploited as Zero Days

Phishing-as-a-Service (PhaaS): An Intriguing Threat On The Rise In 2024 And Beyond

Phishing statistics that will make you think twice before clicking

PoC Released for JavaScript execution Vulnerability in PDF.js

PwC report: jobs growing slower in occupations most exposed to AI

Ransomware and AI-Powered Hacks Drive Cyber Investment

Ransomware: What is it? How to protect yourself?

Reddish Eagle Announces Formation of Black Hat Hackers Colony

Report: Generative AI bots are susceptible to user manipulation

Researchers Detail Microsoft Entra Connect Sync & Cloud Sync from Hackers’ Perspective

Researchers Uncover Flaws in Python Package for AI Models and PDF.js Used by Firefox

Rockwell Automation warns admins to take ICS devices offline

Russia’s DoppelGänger Campaign Manipulates Social Media

Santander bank says data breach compromised European employees and customers

Security Breach at Gala Games: Hacker Mints $214 Million Worth of GALA Tokens

SolarMarker Malware Evolves to Resist Takedown Attempts with Multi-Tiered Infrastructure

Strategies for combating AI-enhanced BEC attacks

Streamlining IT Security Compliance Using the Wazuh FIM Capability

Tesla’s Cybertruck thief chase cut short by Delaware police

The role of a lawyer when a cyber-attack strikes

Threat Actor Allegedly Leaked Database of Vasıtam.com

Threat Actor Allegedly Offers Access to an American Business Service Company

Training LLMs: Questions Rise Over AI Auto Opt-In by Vendors

UK data protection watchdog ends privacy probe of Snap’s GenAI chatbot, but warns industry

UK Researchers Find AI Chatbots Highly Vulnerable to Jailbreaks

UK to propose mandatory reporting for ransomware attacks and licensing regime for all payments

UK’s ICO Warns Not to Ignore Data Privacy as ‘My AI’ Bot Investigation Concludes

Zoom adds post-quantum end-to-end encryption to video meetings

Zoom Announces Post-Quantum End-to-End Encryption for Meetings

Void Manticore Attacking Organizations with Destructive Wiper Malwares

Walmart, Amazon-used utility bug permitting RCE attacks

WebTPA data breach compromises information of over 2.4 million individuals

Western Sydney University cyber attack: Emails and files hacked

Western Sydney University Data Breach: Impact on 7,500 Individuals

Western Sydney University discloses data breach, 7,500 ‘impacted individuals’ notified

Windows 11 to Deprecate NTLM, Add AI-Powered App Controls and Security Defenses

With ransomware whales becoming so dominant, would-be challengers ask 'what's the point?'

YouTube has become a significant channel for cybercrime

20/05

10 Best VPN for HIPAA Compliance In 2024

15 companies account for 62% of global attack surface

AI Chatbots Highly Vulnerable to Jailbreaks, UK Researchers Find

AI Python Package Flaw ‘Llama Drama’ Threatens Software Supply Chain

Amateur Radio Group Hit by Cyberattack, Key Database Offline

Antidot Mobile Malware As Google Play Update Hijacks Device Control

April 2024 Healthcare Data Breach Report

APT Hackers Attacking Manufacturers With Keyloggers, Infostealers, And Proxy Tools

Are you being tracked? What new privacy features from Apple and Google can (and can't) tell you

Azure Penetration Testing – Cloud Security Audits | Microsoft

Beware! Android Banking Trojan Mimics As Google Play Updates

Birmingham Council-owned children’s services unit reprimanded over data breach of ‘criminal allegations’

Business email compromise: new guidance to protect your organisation

Cencora Provides Notice of Data Breach Affecting Bristol Myers Squibb Customers’ Information

CentroMed hit by hackers again, an undisclosed number of patients’ personal data is accessed

Chinese Duo Indicted For Laundering $73m in Pig Butchering Case

Christie's cyberattack forces shift to traditional bidding methods

Chrome extensions considerably reduce browsing speeds – unless it’s an adblocker

Consumers continue to overestimate their ability to spot deepfakes

Critical Fluent Bit flaw impacts all major cloud providers

Cyber attack on Ausgrid could lead to costs of $2.9bn per day

Cyber Criminals Exploit GitHub and FileZilla to Deliver Malware Cocktail

CyberArk adquire empresa de identidade de máquina Venafi

Cyberattack disrupts ARRL systems, raising data security concerns

Cybercriminals shift tactics to pressure more victims into paying ransoms

Damage to reputation prevents victims from reporting ransomware attacks

Defending Your Commits From Known CVEs With GitGuardian SCA And Git Hooks

Dell Data Breach: Personal Information of 49 Million Customers Compromised due to latest API Abuse

Employees’ ‘mental wellbeing’ impacted by phishing threats: research

Evolution of AI Technologies Fueling the Social Engineering Attacks

Falta de alinhamento entre CISOs e C-Levels expõe empresas a risco

Farley v Equiniti: an uphill battle for data breach claims

Fluent Bit Tool Vulnerability Threatens Billions of Cloud Deployments

Foxit PDF Reader Flaw Exploited by Hackers to Deliver Diverse Malware Arsenal

FTC, Blackbaud Finalize Settlement Flowing From 2020 Data Breach

GE HealthCare dá instruções para mitigar bugs em ultrassom

GitCaught campaign relies on Github and Filezilla to deliver multiple malware

Global stability issues alter cyber threat landscape, ESET reports

Grafana: Open-source data visualization platform

Grandoreiro Banking Trojan is back and targets banks worldwide

Grandoreiro Banking Trojan is Back With Major Updates

Hacker do Pump.fun teria sido preso em Londres

Hackers Exploited GitHub and FileZilla to Deliver Banking Malware

Hackers podem tomar controle de carros autônomos, alerta especialista

HackNeT and NoName057 Allegedly Continue DDoS Attacks on Slovak Websites

Hacktivist Groups Target Indian Elections, Leak Personal Data, Says Report

Indiana Commercial Bakery Hit With Suit Over March Data Breach

Interactive Brokers Announces Data Breach Due to Compromised Employee Email Account

iOS 17.5.1 patches cringey bug that was resurrecting old, deleted photos

Iran-Linked Void Manticore Intensifies Cyber-Attacks on Israel

Iranian MOIS-Linked Hackers Behind Destructive Attacks on Albania and Israel

Kaiser Permanente announces data breach, patient information compromised

Key CTEM metrics: How to Measure the Effectiveness of Your Continuous Threat Exposure Management Program?

Kyrgyzstan Unrest Escalates: Hackers Target Nation Amidst Mob Violence

Latrodectus Malware Loader Emerges as IcedID's Successor in Phishing Campaigns

LiteSpeed Cache Bug Exploit For Control Of WordPress Sites

Malware that steals bank data is back despite arrests

MediSecure confirms data breach accessed personal patient and prescription details

MediSecure Data Breach Impacts Patient and Healthcare Provider Information

MediSecure data breach: why is health data so lucrative for hackers?

Mosaic Mental Health notifies patients of breach

Network Outages Hit 59% of Multi-Site Businesses Monthly

New Antidot Android Malware Poses as Google Update to Steal Funds

New BiBi Wiper version also destroys the disk partition table

New Tracker Warning Features on iPhones & Androids, 2024 Verizon Data Breach Investigations Report

Northeast Rehabilitation Hospital Network Announces Data Breach

Novo trojan para Android imita app de atualização do Google Play

OmniVision discloses data breach after 2023 ransomware attack

Owner of Incognito dark web drugs market arrested in New York

Phishing, BEC, and Beyond: Tackling the Top Cyber Threats to UK Banks

PoC exploit for Ivanti EPMM privilege escalation flaw released (CVE 2024-22026)

Proactive prevention lowers data breach, ransomware risk

Pump Fun Implodes: Ex-Employee Turned Hacker Exposes Alleged Shady Practices

QNAP QTS zero-day in Share feature gets public RCE exploit

Ransomware attacks up more than 20% year on year

Samstealer Attacking Windows Systems To Steal Sensitive Data

SEC requires financial institutions to notify customers of breaches within 30 days

Students Uncover Security Bug That Could Let Millions Do Their Laundry For Free

Suas senhas da internet têm poucos números ou escritas apenas em minúsculas? Um hacker irá descobri-las

Swiss law enforcement actions appear linked to seizure of BreachForums

Sydney investment firm suffers alleged data breach affecting more than 400k customers

The challenges of GenAI in fintech

The inside story of Cyber Command’s creation

Threat Actor Chucky, Owner of LeakBase Claims Knowmad Mood Data Breach

Trojan brasileiro Grandoreiro retorna mesmo após ação policial

Turla APT Group Suspected of Utilizing Tiny BackDoor Exploiting MSBuild for Stealthy Attacks

Two students uncovered a flaw that allows to use laundry machines for free

UK NCSC and Insurance Associations Publish Guidance on the Approach to Ransom Payments

UK’s AI Safety Institute Establishes San Francisco Office for Global Expansion

Understanding cyber risks beyond data breaches

University of Siena Cyberattack: LockBit Claims Responsibility, Sets Deadline

Unverified Claims of Cyberattack on Hamburg Airport Surface Amid Cybersecurity Concerns

USDoD Allegedly Leaks USA Criminal Database With 70 Million Rows

Void Manticore: Iranian Threat Actor Targeting Israel and Beyond with Data Wipers

Vultur Malware Mimic As Mobile Antivirus Steals Login Credentials

WebTPA Data Breach Affects 2.4 Million Health Insurance Policyholders

WebTPA healthcare data breach affects 2.4M individuals

Why Culture is the Bedrock of Cybersecurity

Windows 11 Recall AI feature will record everything you do on your PC

19/05

Beware of the Antidot Android Banking Trojan Disguised as Google Play Updates

Chinese Nationals Arrested for Laundering $73 Million in Pig Butchering Crypto Scam

CISA warns of hackers exploiting Chrome, EoL D-Link bugs

Columbus Regional Health (CRH) ‘MyChart’ not affected by cyber attack

Data Breaches at Financial Institutions Must Be Reported in 30 D

Expert reaction: health company victim of big data breach

Fake Download Sites for Putty and WinSCP used to Spread Ransomware

Generative AI’s Game-Changing Impact on InsurTech

Grandoreiro Banking Trojan Resurfaces, Targeting Over 1,500 Banks Worldwide

Hacker attack fears grow ahead of Taiwan presidential inauguration

Healthcare firm WebTPA data breach impacted 2.5 million individuals

How did a Dallas man know AT&T had an apparent data breach 10 days before AT&T said so?

Kaspersky Finds New Phishing Scheme Via Dropbox, Company Financial Staff Target

LATRODECTUS Loader Getting Popular Among Cybercriminals, Is It Replacing ICEDID!

North Korea-linked Kimsuky used a new Linux backdoor in recent attacks

O que fazer se sua conta for hakeada no Instagram?

RATs Control: Combating The Menace of Remote Access Trojans

Secondary school says it may have been hit by data breach

SonicWALL SSL-VPN Exploit for Sale: Claims to Bypass 2FA and Access Sensitive Data

Unify fragmented security: Transforming with platformization

DAILY NEWS: Maio (12/05 - 18/05) - 20 Semana de 2024