Daily News - Maio (26/05 - 01/06) - 22 Semana de 2024

Cyber Security, Hacking, Privacy and Information Security News --- Daily Updates !! Weekly Resume...

01/06

AI Company Hugging Face Detects Unauthorized Access to Its Spaces Platform

Data leak at Ticketmaster, over 560 million customers affected

Entertainment giant Live Nation confirms data breach via Ticketmaster

Hacker group puts data of 560 million Ticketmaster customers up for sale

Live Nation Confirms Data Breach in SEC Filing

Live Nation confirms Ticketmaster data breach that could affect 560M users: What to know

Major cyber attack targets the CDU organization; authorities probe for possible security violations

Massive Data Breach Hits Ticketmaster, Affecting 560 Million Customers

Microsoft warns of gift card fraud, shares tactics of one of the world's most dangerous hacker group Storm-0539

Millions of Aussies are affected by Ticketek data breach as new warning on internet use issued

Patient struggles with delayed tests and uncertainty after cyber attack on Ascension Hospitals

School facing 'critical incident' after cyber attack

Severe cyber attack hits CDU according to the Federal Ministry of the Interior

Snowflake Massive Breach: Ticketmaster User Data Among Those Stolen by Hackers

Threat Actor Claims to Have Leaked Riyadh Airport Employee Database

Ticketek Australia data breach: Names, birthdays and email addresses potentially accessed

Ticketmaster confirm data breach following post from well-known hackers

Ticketmaster hit by data hack that may affect 560m customers

31/05

3 reasons users can’t stop making security mistakes — unless you address them

25,000 individuals affected in BBC Pension Scheme data breach

30,000,000 Customers’ Data Allegedly Exposed and on Sale After Trillion-Dollar Bank Suffers Massive Data Breach: Report

A Major Industrial Cybersecurity Threat: Living off the Land Attacks

A Threat Actor Claims to Have Leaked Database of Banco de Crédito del Perú

AI Must Prove its Trustworthiness

Akira Ransomware Group Has Announced 4 new Victims on its Blog Site

ALERTA: grupo de hackers rouba dados de ’30 milhões’ de clientes do banco Santander

Alleged Data Leak from V12 Software Exposes Millions of Records

AMD launches bug bounty program with some seriously big rewards

Andariel APT Using DoraRAT and Nestdoor Malware to Spy on South Korean Businesses

BBC Data Breach: Hackers Access Cloud-Based Storage Service

BBC disclosed a data breach impacting its Pension Scheme members

BBC Pension Scheme Breached, Exposing Employee Data

Beyond Threat Detection – A Race to Digital Security

Big Cyber Attack Overthrows Hundreds Of Thousands Of Internet Routers In US Central Region

Bug in EmbedAI can allow poisoned data to sneak into your LLMs

Check Point VPN zero-day exploited since beginning of April (CVE-2024-24919)

CL0P Ransomware Targets Financial Cooperative Unicred, Exfiltrating Sensitive Documents

Copilot+ Recall is ‘Dumbest Cybersecurity Move in a Decade’: Researcher

Copilot‘s screen-snapping Recall data stored in plain text

Corretora é hackeada e perde R$ 1.5 bilhão em Bitcoin

Dangerous LightSpy malware is now targeting macOS devices — here's what we know

Data Leak Exposes Business Leaders and Top Celebrity Data

Data of 30M Santander customers for sale, ShinyHunters take the spotlight

ELLIO and ntop partnership to boost high-speed network traffic monitoring with real-time data on opportunistic scans, botnets, and mass attacks

Europol identifies 8 cybercriminals tied to malware loader botnets

Encrypted Notepad: Open-source text editor

FBI prende hacker chinês que teria faturado quase um US$ 1 bilhão com cibercrime

First AI hospital unveiled in China

First American Financial Corporation says December cyber attack impacted 44,000 individuals

Hackers Compromised 600,000 SOHO Routers Within 72 Hours For Botnet

Hackers Impersonating As Fake Toll Payment Processor Across The U.S.

Hackers invadem Santander e roubam mais de 30 milhões de dados sensíveis

Hackers roubam dados de ’30 milhões’ de clientes do Santander

Hackers steal $305M from DMM Bitcoin crypto exchange

Hawk Eye App Data Breach in India: Personal Data of Thousands Exposed in Telangana State

INDT cria sistema para proteger dispositivos residenciais contra hacker

Infosec2024: Why Cybersecurity is Critical for the 2024 Paris Olympics

Lack of skills and budget slow zero-trust implementation

LilacSquid APT targeted organizations in the U.S., Europe, and Asia since at least 2021

Massacre of WiFi routers leaves 600,000 American families offline

Mercy Health settles data breach lawsuit for $1.8 million

Microsoft Observed Huge-Surge In Attacks Targeting Internet-Exposed OT Devices In WWS

Microsoft Warns of Surge in Cyber Attacks Targeting Internet-Exposed OT Devices

Multiple Vulnerabilities Reported in LenelS2 NetBox Entry Tracking and Event Monitoring Tool

Mysterious Cyber Attack Took Down 600,000+ Routers in the U.S.

New Pegasus spying cases found in Eastern Europe

Newfoundland Broadcasting Company hit by ransomware attack

NoName Ransomware Claims Cyberattacks on Spain and Germany, But Evidence Unclear

OpenAI Exposes AI-Powered State Actors in Global Influence Operations

OpenAI, Meta, and TikTok Crack Down on Covert Influence Campaigns, Some AI-Powered

Okta alerts customers against new credential-stuffing attacks

Over 600,000 SOHO routers were destroyed by Chalubo malware in 72 hours

Pirated Copies of Microsoft Office Used to Distribute Frequent Malware in South Korea

Privacy is the leading concern regarding AI smartphones, study finds

Procon quer saber se ataque hacker que pode ter exposto dados de 560 milhões de clientes da Ticketmaster atingiu brasileiros

Qiulong Ransomware Group Claims Breach of Indigo ENT Group, Exposes Sensitive Data

RedTail Cryptominer Evolves with Palo Alto PAN-OS CVE-2024-3400 Vulnerability

RedTail Cryptominer Exploiting Palo Alto Networks Firewall Zero-day Flaw

Researchers Uncover New Data Theft Campaign of Advanced Threat Actor ‘LilacSquid’

Russian hackers blamed for fake news posted on Polish state media

Russian Hackers Target Europe with HeadLace Malware and Credential Harvesting

Russian Hacktivist Group UserSec Opens Recruitment Drive for Hackers

Seattle Public Library says ransomware attack disrupted online services and access to e-books

Senator Calls for FTC, SEC Probe Into UnitedHealth’s ‘Negligence’ in Breach

ShinyHunters claims Santander breach, selling data for 30M customers

Snowflake compromised? Attackers exploit stolen credentials

Telegram Know For Secure Messaging, Now Became A Tool For Cybercriminals

The Evolution of Security in Containerized Environments

The "largest ever" botnet takedown operation is happening right now — Operation Endgame takes multiple criminal gangs offline

The NSA advises you to turn your phone off and back on once a week - here's why

Threat Actor Claims to Be Selling Windows LPE 0-Day Exploit for $120,000

Threat Actor Claims to Sell Unauthorized VPN Access to a European Country’s Ministry of Rural Development and Food

Ticketmaster sob ataque: Dados de milhares vazados por hackers

Top entrepreneur and networking app leaks personal info on VIP clients

UnitedHealth’s Leadership Criticized by Senator Wyden for Appointment of Underqualified CISO

Voice cloning of political figures is still easy as pie

Windows-based AllaKore Malware Abuses Azure Cloud for C2 Infrastructure

30/05

4 Arrested as Operation Endgame Disrupts Ransomware Botnets

7 New Pegasus Infections Found on Media and Activists’ Devices in the EU

59% of public sector apps carry long-standing security flaws

911 S5 Botnet with 19 Million IP Addresses Dismantled & Admin Arrested

BBC Data Breach: Over 25,000 Employee Records Compromised, Investigation Underway

BBC employees exposed after pension scheme hack

BBC suffers data breach impacting current, former employees

Best Buy was the top most impersonated brand in 2023

Beware of Free Piano Messages that Steal Personal & Financial Data

Check Point VPN Zero-Day Vulnerability Exploited in Wild to Gain Remote Access

CISA adds Check Point Quantum Security Gateways and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog

CISA Alerts Federal Agencies to Patch Actively Exploited Linux Kernel Flaw

Cloud access security brokers (CASBs): What to know before you buy

Colossal Ticketmaster leak appears legit, millions affected

Cooler Master confirms customer info stolen in data breach

Cyber Espionage Alert: LilacSquid Targets IT, Energy, and Pharma Sectors

Data of 560 million Ticketmaster customers for sale after alleged breach

Do you need an anti-spy camera finder and bug detector? How they work

Europol-Led Operation Endgame Hits Botnet, Ransomware Networks

Europol Shuts Down 100+ Servers Linked to IcedID, TrickBot, and Other Malware

Everbridge warns of corporate systems breach exposing business data

Family-Owned Woodworking Company Western Dovetail Hit by Akira Ransomware Attack

FBI urging deletion of MaskVPN, DewVPN, PaladinVPN, ProxyGate, ShieldVPN, and ShineVPN

First American Reveals Data Breach Impacting 44,000 Individuals

FlyingYeti Exploits WinRAR Vulnerability to Deliver COOKBOX Malware in Ukraine

Fortinet FortiSIEM Vulnerabilities Expose Systems to Remote Code Execution

Hardened Ubuntu Container Images are Now Available in the Iron Bank

How to Build Your Autonomous SOC Strategy

Human vulnerability remains top threat: Report

Hunt3r Kill3rs Announced Cyberattacks on Israeli Government and Military Infrastructure

Identity-related incidents becoming severe, costing organizations a fortune

Indian Stock Exchange BSE Starts Encrypting Messages to Traders

Infosec2024: Why Credential-Based Attacks Need Modern Solutions

Infosec2024: Why Open Source May Hold the Key to Tackling NVD Overreliance

Japanese Man Arrested for GenAI Ransomware as AI Jailbreak Concerns Grow

Johnson & Johnson Reports Data Breach Potentially Linked to Massive Cencora Breach

Klein ISD Student Faces Felony Charge for Cyberattack Disrupting State Testing for 24,000 Students

Law enforcement operation dismantled 911 S5 botnet

LockBit Ransomware Group Allegedly Strikes Heras UK in Cyberattack

macOS version of elusive 'LightSpy' spyware tool discovered

Major malware droppers disrupted, four suspects arrested – Europol

Malicious Firmware Update Destroyed Over 600,000 Routers Across ISP

Malware botnet bricked 600,000 routers in mysterious 2023 attack

Mastermind Behind Biden Ai Deepfake Robocall Charged

Meta report: “AI is not a main threat, yet”

Microsoft: Windows 11 preview update causes taskbar crashes

Muslim Tinder exposes secrets, risks user privacy

New Meterpreter Backdoor Hides Malicious Codes Within the Image

New ‘SpiderX’ Ransomware Emerges as Successor to Notorious Diablo

NIST says NVD will be back on track by September 2024

NIST unveils ARIA to evaluate and verify AI capabilities, impacts

Okta Warns of Credential Stuffing Attacks Targeting Customer Identity Cloud

Okta warns of credential stuffing attacks targeting its Cross-Origin Authentication feature

Okta’s shared login access system attacked

One Phish, Two Phish, Red Phish, Blue Phish

OpenAI blocks multiple attempts by US adversaries to misuse its AI

OpenAI Board establishes Safety and Security Committee

Operation Endgame: Authorities Seized IcedID, Pikabot, & Other Droppers

Operation Endgame – Largest Ever Operation Against Multiple Botnets Used to Deliver Ransomware

Operation Endgame, the largest law enforcement operation ever against botnets

Palm Beach Health Network faces class action lawsuit over data privacy breach

Pirated Microsoft Office delivers malware cocktail on systems

PoC Exploit Released for Microsoft Edge Information Disclosure Vulnerability

Police seize over 100 malware loader servers, arrest four cybercriminals

Pop Culture Passwords Most Likely to Get You Hacked, New Study

RedTail Malware Abuses Palo Alto Flaw in Latest Cryptomining Campaign

RedTail Crypto-Mining Malware Exploiting Palo Alto Networks Firewall Vulnerability

Researchers Uncover Active Exploitation of WordPress Plugin Vulnerabilities

Seattle's 27 public libraries knocked out in ransomware attack

Seattle Public Library Recovers Key Services After Ransomware Attack

ShinyHunters Claims Santander Bank Breach: 30M Customers’ Data for Sale

South Korea fines Kakao $11.1 million for data leak

Threat Actor Allegedly Offers Unauthorized Access to Swarovski Admin Portal for 800€

Threat Actor Allegedly Offers Unauthorized FTP Access to an American Healthcare Company

Toshiba America Data Breach: Customers and State Authorities Notified

TRAM Barcelona Hit by DDoS Attack: NoName Group, Cyber Army of Russia Claim Responsibility

Unauthorized Access to Crypto Platform Allegedly for Sale for $50,000

Understanding Penetration Testing

U.S. Dismantles World's Largest 911 S5 Botnet, with 19 Million Infected Devices

US-Led Operation Takes Down World’s Largest Botnet

"World largest botnet ever" shut down — US government seizes 911 S5 operation and takes it offline

29/05

90% of organizations experienced an identity incident this past year

A closer look at GenAI impact on businesses

A Quest Gone Awry: Hackers Disrupt Bring Me The Horizon’s Hidden M8 Artificial Reality Game

ABN Amro discloses data breach following an attack on a third-party provider

Advance Fee Fraud Targets Colleges With Free Piano Offers

Anyone can tap into your WiFi location data to track you, researchers find

Avoiding the cybersecurity blame game

Brazilian Banks Targeted by New AllaKore RAT Variant Called AllaSenha

BreachForums resurrected after FBI seizure

BreachForums Returns Just Weeks After FBI Seizure - Honeypot or Blunder?

Check Point released hotfix for actively exploited VPN zero-day

Check Point releases emergency fix for VPN zero-day exploited in attacks

Check Point VPNs exploited to breach enterprise networks

Check Point Warns of Zero-Day Attacks on its VPN Gateway Products

Citrix Workspace app Let Attackers Elevate Privileges From Local User to Root User

Cooler Master allegedly breached, members exposed

Cybercriminals Abuse StackOverflow to Promote Malicious Python Package

Cybersecurity at a crossroads: Time to shift to an architectural approach

Digital trust gap leaves organizations vulnerable

Double Trouble: Following Ticketmaster Cyberattack, Hackers Target Parent Company Live Nation

'Fim de jogo': operação na Europa prende hackers que infectaram 2.000 site

First American Data Breach: 44,000 Affected After December Cyberattack

Foxit PDF Reader and Editor Flaw Let Attackers Escalate Privilege

Free Piano phish targets American university students, staff

Hackers Claim Ticketmaster Data Breach: 560M User Details and Payment Card Exposed

Hackers claim Ticketmaster in attempt to boost revived forum’s popularity

Hackers inventam problemas de segurança em computadores para faturar

Hackers reivindicam ataque contra casa de leilões Christie's

Hackers Weaponizing Microsoft Office Documents to Deploy Malware in Business Environments

Healthcare and finance were prominent cyberattack targets in 2023

How fraudsters stole $37 million from Coinbase Pro users

INE Security Enables CISOs to Secure Board Support for Cybersecurity Training

Infosec2024: Decoding SentinelOne's AI Threat Hunting Assistant

Infosec2024: How Williams Racing Relies on Data Security for Peak Performance

Internet Archive Disrupted by Sustained and “Mean” DDoS Attack

Massive Google Leak Exposes Search Algorithm Secrets

Microsoft Uncovers 'Moonstone Sleet' — New North Korean Hacker Group

Millions download apps with banking malware from Google Play

Moonstone Sleet New North Korean Hacker Group With Unique Tricks

National Records of Scotland data released after NHS Dumfries and Galloway cyber attack

New malware to steal money from European ATMs

New North Korean attacker group fakes tank games

New North Korean Hacking Group Identified by Microsoft

New PyPI Malware “Pytoileur” Steals Crypto and Evades Detection

New Research Warns About Weak Offboarding Management and Insider Risks

North Korean Threat Actor Deploying New FakePenny Ransomware: Microsoft

Okta warns of credential stuffing attacks targeting its CORS feature

PoC Exploit Released for Critical Fortinet FortiSIEM Command Injection Vulnerability

PoC exploits for critical FortiSIEM command execution flaws released (CVE-2024-23108, CVE-2023-34992)

RansomHub Cyberattack Targets Serbian Gas Firm PSG BANATSKI DVOR, Disables SCADA Systems

RansomLord: Open-source anti-ransomware exploit tool

Russian Hackers Charged For Selling Unauthorized Access To Computer Networks

Seattle Public Library Website offline Following Ransomware Attack

Shell Data Breach: Hacker Group 888 Claims Responsibility for Alleged Cyberattack

Shell’s customer data claimed to be leaked

Suspected Cyberattack on DU Emirates: Over 360 GB of Data Allegedly Stolen and Up for Sale

Threat Actor 888 Claims to Have Leaked Data from Shell, Affecting 80,000 Individuals

Threat Actor Allegedly Selling Unauthorized Citrix Access to American Insurance Company with $10 Billion in Revenue

Threat Actor Offers Database of DU.ae for Sale at $3200

Ticketmaster sofre ataque hacker e dados de 560 milhões de usuários à venda

Toshiba email compromise reveals Social Security numbers

US dismantles 911 S5 botnet used for cyberattacks, arrests admin

U.S. Sanctions Cybercrime Network Behind Massive Residential Proxy Bothnet Service

US sanctions cybercrime network operating residential proxy botnet service

U.S. Sentences 31-Year-Old to 10 Years for Laundering $4.5M in Email Scams

Virustotal Shares New Ideas to Track Threat Actors

28/05

2.8m affected in Sav-Rx data breach

4-Step Approach to Mapping and Securing Your Organization's Most Critical Assets

5 Tips To Spot A Phishing Email

25-Year-Old Develops Ransomware With Help From AI – Arrested for Cybercrime

34% of organizations lack cloud cybersecurity skills

70% of CISOs feel vulnerable to a material cyberattack in 2024

A Delegacia Especial de Repressão aos Crimes Cibernéticos da Policia Civil do Distrito Federal (PCDF) prende hacker por usar dark web para vender drogas em MT

A Threat Actor Claims to Have Leaked Database of AC Propulsion Company; Exposes Over 29 Million User Records

ABN Amro on alert as supplier hit by ransomware attack

Affiliated Dermatologists says ransomware attack impacted over 370,000 patients and employees

African country Eritrea thwarts massive cyber attack on Independence Day

AI-driven phishing scams, attacks increase in Australia: research

Alleged Cyberattack Strikes Allied Telesis: LockBit Ransomware Suspected

Analyzing the $80K Bitcoin Exploit on BNB Chain: White Hat Hacker or Malicious Intent?

Anatsa Banking Trojan Found in PDF and QR Code Reader Apps on Google Play Store

Ascension says ransomware attack recovery efforts are in the final stage

Ataque hacker paralisa operação na Federação das Indústrias do Rio de Janeiro

Attackers are probing Check Point Remote Access VPN devices

Auction house Christie’s confirms criminals stole some client data

Australia among top 10 sources of phishing attacks in global report

Australia is the no.10 most targeted country for phishing attacks

Black Basta Ransomware Attack: Microsoft Quick Assist Flaw

BNB Chain faces $80K Bitcoin exploit. White hat hacker or ongoing exploit?

Breach Forums Return to Clearnet and Dark Web Despite FBI Seizure

Câmara abre CEI para apurar suposta invasão de hacker a redes sociais de políticos em Bauru

Celebrity memcoin scam hacker busted! A spectacular investigation by internet detectives

Cencora Data Breach Far More Widespread than Earlier Thought

Check Point Urges VPN Configuration Review Amid Attack Spike

Christie’s confirms breach after RansomHub threatens to leak data

Christie’s hackers say data of 500K clients stolen

CISSP certification: Requirements, training, exam, and cost

Cops Are Just Trolling Cybercriminals Now

Courtroom Recording Software Vulnerable to Backdoor Attacks

Critical Vulnerability In AI-As-A-Service Provider Let Attackers Access Sensitive Data

Cybersecurity teams gear up for tougher challenges in 2024

Decathlon Hit by Major Data Breach: Over 6,600 Employees’ Information Allegedly Leaked

Exploit released for maximum severity Fortinet RCE bug, patch now

Fake Antivirus Sites Spread Malware Disguised as Avast, Malwarebytes, Bitdefender

Fake HR emails are the top choice for phishing scams, research reveals

Federal Trade Commission (FTC) Finalizes Order Against Blackbaud Over Data Breach

First American December data breach impacts 44,000 people

Fluminense sofre ataque hacker e “anuncia” contratação de Haaland, do Manchester City

From Phish to Phish Phishing: How Email Scams Got Smart

Greece’s Privacy Agency Issues Fines Over MEP’s Campaign Data Breach

‘Haaland é o novo reforço do Fluminense’: hacker invade site oficial do clube e anuncia goleador do City

Hacker Claims Ticketmaster Data Breach: 560M User Details and Card Info at Risk

'Hacker' de golpes de memecoin em celebridades é identificado, diz o detetive de cripto Roxo

Hacker recupera R$ 15,3 milhões em carteira de Bitcoin travada há 11 anos

Hackers Attacking Check Point Remote Access VPN Devices to Breach Enterprise Networks

Hackers Exploiting Arc Browser Popularity with Malicious Google Search Ads

Hackers russos atacam em Espanha durante visita de Zelensky. Portugal pode ser o próximo alvo

Hacktivist Group GlorySec Targets Venezuelan Websites

High Society Alliance Claims Hacks on Spanish FTP Servers and Senator’s Control Panel

How All-in-One Cybersecurity Platform Cynet Makes MSPs Rich & Their Clients Secure

How to combat alert fatigue in cybersecurity

HP Report Surfaces Shifts in Cyber Attack Tactics

Indian National Pleads Guilty to $37 Million Cryptocurrency Theft Scheme

Infosec2024: Charity Bridges Digital Divide and Fuels New Cyber Talent

Infosec2024: What to Expect at Infosecurity Europe 2024

Infosec2024: Why Human Risk Management is Cybersecurity's Next Step for Awareness

Internet Archive is Under DDoS Attack For Several Hours

Justice Department refutes claims of cyber-attack on payment system

LockBit Black Ransomware Bot Sprays “Millions of Messages”

Major Pharmaceutical Companies Hit by Data Breach Linked to Cencora Cyberattack

Manitoba health worker dismissed for unauthorized access to patient records

Medication benefits provider Sav-Rx says data breach impacted over 2.8 million individuals

Meta uses your data to train AI, and it doesn't want you to opt out

Millions of US customers have social security numbers stolen in major Sav-Rx data breach

National Records of Scotland data stolen in NHS Dumfries and Galloway hack

Notorious Data Leak Site Breachforums is back From the Seizure

Optus fails to keep report into cyber attack out of class action

Optus loses bid to hide Deloitte report on data breach

Over 90 malicious Android apps with 5.5M installs found on Google Play

RansomHub Claims Responsibility for Christie’s Cyberattack

RansomHub posts Christie’s Auction House data sample, claims 500k customers affected

Ransomware Attack Compromises Data at Medical Device Manufacturer LivaNova: Complete Details Inside

Researchers Detailed Modern WAF Bypass Techniques With Burp Suite Plugin

Researchers Warn of CatDDoS Botnet and DNSBomb DDoS Attack Technique

Russia reportedly has means to disrupt Starlink in Ukraine

Sav-Rx Discloses Data Breach: 2.8 Million Users Affected

Security leaders respond to ransomware attack on the city of Wichita

Someone tried to take down the site that remembers the whole internet

Spyware Website Leaking People’s Phones Real-Time Screenshots Online

TeaBot Banking Trojan Activity on the Rise, Zscaler Observes

The evolution of security metrics for NIST CSF 2.0

The Rise of Generative AI is Transforming Threat Intelligence – Five Trends to Watch

The shifting landscape of phishing attacks

Third-party software supply chain threats continue to plague CISOs

Thousands of Klarna customers are currently at risk

Threat Actor Allegedly Offers of BSNL State Owned Indian Telecom Data for $80,000

Threat Actor Claims to Sell BreingAir User Data Including Client, Employee, and Admin Credentials

Threats Claimimg Breach of Decathlon May 2024 Database

Top 10 biggest crypto hacks that recovered millions

TP-Link Archer C5400X gaming router is affected by a critical flaw

TP-Link Archer C5400X Router Flaw Let Attacker Hack Devices Remotely

TP-Link Gaming Router Vulnerability Exposes Users to Remote Code Attacks

UK is preparing for a biometric border with France amid growing fear of travel delays

Uma única letra pode te salvar: hacker ético revela o grande segredo para uma senha segura

XSS Vulnerabilities Found in WordPress Plugin Slider Revolution

Zscaler Client Connector Zero-interaction Privilege Escalation Vulnerability

Watchdog fines Greek Interior Ministry, MEP over diaspora email data breach

Websites exposing over a million secrets, leaving visitors at risk

What is a VPN and why do you need one? All your virtual private network questions answered

Widespread data silos slow down security response times

WordPress Plugin abused to install e-skimmers in e-commerce sites

WordPress Plugin Exploited to Steal Credit Card Data from E-commerce Sites

YouTube users with adblockers experiencing deja vu with new disruptions

27/05

11 big pharma firms affected in Cencora cyber attack

A high-severity vulnerability affects Cisco Firepower Management Center

A new ransomware is hijacking Windows BitLocker to encrypt and steal files

Alleged Sale of Live Nation and Ticketmaster Data: 560 Million Users’ Information on the Dark Web

Amazon Secures pcTattletale Spyware AWS Infrastructure After Hack Reveals 17TB of Data

Another top spyware firm has been taken down — pcTattletale website defaced, then taken offline

Applications open for 2024 Elliot A. Boxerbaum Award

Ataques iniciados por bots sobem 35% na América Latina

Banco Santander’s Third-Party Data Breach Exposes Customer and Employee Info Across Countries

Best Buy and Geek Squad were the most impersonated companies in tech scams last year

Beware of Fake Antivirus Websites Delivering Windows & Android Malware

Beware the dangers of data breach fatigue

Bitdefender Launches ‘Scamio’ on WhatsApp: A New AI Tool to Combat Online Scams in Australia

Bitsight, SecurityScorecard, Panorays Lead Risk Ratings Tech

Cencora cyber attack affects 11 major pharmaceutical firms

Chrome patches fourth zero-day flaw this month

Chronon: Open-source data platform for AI/ML applications

City of Helsinki Data Breach: What You Need to Know

Cortina Watch ordered to undergo cyber security audit after major data breach

Court Orders Optus to Release Data Breach Report to Lawyers

Cyber Attacks Hit DeFi Protocols for a Combined $25 Million

Data breach at medical giant Cencora exposes info from multiple drug companies

Decoding the Primary Devils Behind Data Breaches

Digital ID adoption: Implementation and security concerns

Don't Expect Cybersecurity 'Magic' From GPT-4o, Experts Warn

Electronic Prescriptions Provider MediSecure Leaks Sensitive Data After a Ransomware Attack

Essential Features of Cybersecurity Management Software for MSPs

Ethereum (ETH) Exploit Sends NORMIE Down 98%, Hacker to Return Funds?

Federal Court Denies Optus Appeal to Withhold Deloitte Report on 2022 Cyberattack

Game over — hackers are using a spoofed version of Minesweeper to snare victims

Google Shares Details on Accidental File Deletion that Impacts Pension Fund’s Accounts

‘Hacker’ identified in celebrity memecoin scams, says crypto sleuth Roxo

Hackers Advertising Pulse Connect Secure VPN RCE 0-Day

Hackers target Check Point VPNs to breach enterprise networks

Hackers use the Greatness PaaS tool to Steal Microsoft 365 login credentials

Hacktivists strike Africa’s North Korea in “massive” cyber attack

Hajj Pilgrimage Hit by Extensive Phishing and Data Theft Scams

Heard of phishing scams? Now ‘quishing’ is the new scam to watch out for

How to choose the right network security monitoring product

How to Recover Deleted Emails from Exchange Server?

Human error still perceived as the Achilles’ heel of cybersecurity

Indian National Pleads Guilty for $37 Million By Running Fake Coinbase’s Website

Indonesian Anon Black Flag Group Announces Intent to Attack Indian Government and Companies

It’s curtains after 28 years for veteran messenger ICQ

Job seekers trying AI hacks in their resumes to pass screening – don’t do this

LangChain JS Framework Vulnerability Let Hackers Read Arbitrary File on Servers

Lewisham Residents Caught in 11 Month Data Breach

Major US drug distributor breached, health information stolen

Memecoin Hack: Normie Negotiates with Hacker to Recover Stolen Funds

Millions of Alibaba-owned marketplace users exposed

Moroccan Cybercrime Group Steals Up to $100K Daily Through Gift Card Fraud

New ATM Malware family emerged in the threat landscape

New Ransomware Threat Detected on Forums: SpiderX Ransomware

New Tricks in the Phishing Playbook: Cloudflare Workers, HTML Smuggling, GenAI

Normie Hacker Doubles Down on Refund Conditions Post 99% Crash

Normie Meme Coin Suffers Exploit, Vows to Relaunch After Negotiating Hacker Bounty

Pakistan-linked Hackers Deploy Python, Golang, and Rust Malware on Indian Targets

Pakistani hackers target ‘Make in India’ defence programs

Pakistan’s Islamabad’s Safe City Authority Online System Down After Hack

PF faz operação contra hacker suspeito de invadir sistemas do Ministério da Saúde

Proactive Defense Dominates Discussions at ISMG Fraud Summit

Pulse Connect Secure VPN RCE 0-Day Allegedly for Sale

Ransomware attack hits medical device manufacturer

Ransomware operators shift tactics as law enforcement disruptions increase

Ransomware: the main threat trend of 2023

Report: The Dark Side of Phishing Protection

Russian Cyber Army Claims Alleged Cyberattack on Bulgarian Ports Infrastructure Company

Russian Hackers Use Legit Remote Monitoring Software to Spy on Ukraine and Allies

Sav-Rx Data Breach Affects 2.8 Million Individuals

Sav-Rx Data Breach Potentially Compromised PII and Health Data of 2.8M Individuals

Sav-Rx data incident affects 2.8M people

Sav-Rx discloses data breach impacting 2.8 million Americans

SingCERT Warns Critical Vulnerabilities Found in Multiple WordPress Plugins

Surveillance Risk: Apple's WiFi-Based Positioning System

SYRIZA, PASOK react to Ιnterior Μinistry’s data breach

The art of saying no is a powerful tool for the CISO in the era of AI

The Expert View: Security Operations Design - Staying Adaptable and Agile in the Face of Change

The Impact of Remote Work and Cloud Migrations on Security Perimeters

The Importance of Patching Vulnerabilities in Cybersecurity

Threat Actor Chucky Claims to Leak Astagiudiziaria.com Database

Threats Actors Delivering Remcos RAT Distributed as UUE (Uuencoding) File

TP-Link fixes critical RCE bug in popular C5400X gaming router

Victim who lost $7M in Ethereum re-staking exploit gets funds back

Western Sydney University discloses data breach, 7,500 ‘impacted individuals’ notified

Windows 10 PLUGScheduler Vulnerability Allows Privilege Escalation

World Cybercon 3.0 META Awards Celebrate Champions of Cybersecurity in the Middle East

World CyberCon META Wraps Up, Highlighting Dubai’s Expanding Cybersecurity Prowess

26/05

90% dos CVEs registrados desde fevereiro estão sem análise

400% rise in MoD data breaches fuels fear of cyber threat from Russia and China

Beware! New York State Police Warn Residents of This Latest Scam! Here’s What You Need to Know

CERT-UA warns of malware campaign conducted by threat actor UAC-0006

Chrome tem quarto zero-day corrigido em duas semanas

Following a cyber attack, Normie meme coin crashed 99.99%

Hacker honeypots for the everyday person

Hackers phish finance orgs using trojanized Minesweeper clone

How Iranian hacker groups are combining psychological warfare with data destruction to target Israel and Albania

How to Identify Phishing Emails: 7 Easy Ways to Spot a Scam

Islamabad Safe City’s online system shut down after hacking attempt

Massive cyber attack against Eritrea’s Internet System

Ransomhub’s Latest Attack Raises Alarms for Industrial Control Systems (ICS) Security

Ransomware attack hits Cambio supplier

Ransomware Attacks: Trends, Tactics, and Mitigation Strategies

Regulador europeu lança alerta sobre reconhecimento facial

ShrinkLocker Ransomware Exploits BitLocker to Target Companies

Spyware descoberto em PCs da rede hoteleira Wyndham

The U.S. Moves a Step Closer to a Cyber Force

Threat Actor Claims to Sell WordPress Admin Authentication Bypass Exploit for $50,000

Daily News - Maio (19/05 - 25/05) - 21 Semana de 2024