DAILY NEWS: Março (24/03 - 30/03) - 13 Semana de 2024

Cyber Security, Privacy and Information Security News --- Daily Updates !! Weekly Resume...

30/03

AT&T confirms data for 73 million customers leaked on hacker forum

Expert found a backdoor in XZ tools used many Linux distributions

German BSI warns of 17,000 unpatched Microsoft Exchange servers

Hacker rouba R$ 55 milhões em criptomoedas e exige que desenvolvedores peçam desculpas ao vivo

Hackers Target macOS Users with Malicious Ads Spreading Stealer Malware

Urgent: Secret Backdoor Found in XZ Utils Library, Impacts Major Linux Distros

Vultur banking malware for Android poses as McAfee Security app

29/03

Activision: Enable 2FA to secure accounts recently stolen by malware

Advanced cybersecurity strategies boost shareholder returns

AI abuse and misinformation campaigns threaten financial institutions

AI bolsters security response times, reveals ReliaQuest report

AI will help NYC cops detect guns on the subway

Almost 2.9M impacted by Harvard Pilgrim Health Care breach

American fast-fashion firm Hot Topic hit by credential stuffing attacks

Beware! Backdoor found in XZ utilities used by many Linux distros (CVE-2024-3094)

Bittersweet: Charlotte honey bun maker hit with ransomware attack

British nuclear site Sellafield to be prosecuted for cybersecurity failures

Canadian school boards sue social media giants for over C$4 billion in damages

Cherry Health Data Breach Affects an Unknown Number of Patients

CISA Launches New Cyber Incident Reporting Rules for US Defense Contractors

Cisco Warns of Password Spraying Attacks Exploiting VPN Services

Cisco warns of password-spraying attacks targeting Secure Firewall devices

Corrections officer guilty of $600K crypto pension scheme

Cyber attack continues to cripple hospitals, doctors, pharmacies in New Hampshire and nationally

Cyberattack strikes Hot Topic retail chain again

Cybercriminals selling new tool weaponizing Raspberry Pi

Darcula phishing: iPhone users targeted via iMessage

Dormakaba Locks Used in Millions of Hotel Rooms Could Be Cracked in Seconds

Elaborate Phishing Attack Uses a Deluge of Password Reset Prompts to Hijack Apple Accounts

Falha em sistema permite que hackers abram fechaduras de cartões de hotéis em poucos segundos

Finding software flaws early in the development process provides ROI

GitLab Security Flaw Let Attackers Inject Malicious Scripts: Patch Now

Harvard Pilgrim says 2023 data security incident impacted close to 2.9 million individuals

How much does cloud-based identity expand your attack surface?

How Public-Private Collaborations Can Fight Ransomware

INC ransomware group claims attack on NHS Dumfries and Galloway, threatens to leak 3TB worth stolen files

Industrial Enterprise Operational Technology Under Threat From Cyberattacks

Is the Human Factor Overlooked in Cybersecurity?

Kaspersky detects 500k phishing attempts on SEA businesses

Leicester City Council says most of its services back online following cyber attack

Lessons From the LockBit Takedown

Lubbock hospital confirms data breach, here's what was compromised, how to get help

More Than 70 Million Customers’ Names and Social Security Numbers Ended Up Online in Apparent AT&T Data Breach

Multiple Splunk Vulnerabilities Attackers Bypass SPL Safeguards : Patch Now

Navigating the Evolving Cloud Landscape: Strategies for Success in 2024

New Linux Bug Could Lead to User Password Leaks and Clipboard Hijacking

New, sophisticated phishing-as-a-service platform discovered

Nigeria Data Protection Commission (NDPC) Calls For National Identification Number (NIN) Vigilance Amid Data Breach Probe

Polycab, Motilal Oswal, Bira91 among latest companies to be hit by ransomware attacks

Prisma Finance Hacker Claims $11.6 Million ‘Whitehat Rescue’

PyPI Halts Sign-Ups Amid Surge of Malicious Package Uploads Targeting Developers

Ransomware attacks rise by 46% in February 2024, finds NCC Group

Ransomware gang leaks stolen Scottish healthcare patient data in extortion bid

Red Hat warns of backdoor in XZ tools used by most Linux distros

Researchers demonstrate 4.5 million times faster internet on existing fiber

Risas Dental & Braces Notifies Patients of July 2023 Data Breach

State Department offers $10M reward for info on BlackCat

The Golden Age of Automated Penetration Testing is Here

TheMoon Botnet Resurfaces, Exploiting EoL Devices to Power Criminal Proxy

Think tank urges US and EU to cooperate over cybersecurity labeling

Unimed VTRP restabelece totalmente os serviços a clientes e parceiros nesta sexta-feira, após ataque hacker

US may soon unveil list of Chinese chip factories barred from receiving tech

Watch Out for This New iPhone Phishing Attack

28/03

2 Chrome Zero-Days Exploited At Pwn2Own 2024 : Patch Now

17 Billion Personal Records Exposed in Data Breaches in 2023

AI weaponization becomes a hot topic on underground forums

Apple ID “push bombing” Attack Targeting Apple Users to Steal passwords

Are you okay? Understanding the world of a CISO

Behind the Scenes: The Art of Safeguarding Non-Human Identities

C2A Security’s EVSec Risk Management and Automation Platform Gains Automotive Industry Favor as Companies Pursue Regulatory Compliance

Calls to Incident Response Helpline Double in a Year

CISA Unveils Landmark Rule to Enhance National Cybersecurity Resilience

Cisco warns of password-spraying attacks targeting VPN services

Cybercriminals use cheap and simple infostealers to exfiltrate data

Darcula Phishing Network Leveraging RCS and iMessage to Evade Detection

Debunking compliance myths in the digital era

Decade-old Linux ‘wall’ bug helps make fake SUDO prompts, steal passwords

Enterprises increasingly block AI transactions over security concerns

Finland Blames Chinese Hacking Group APT31 for Parliament Cyber Attack

Google addressed 2 Chrome zero-days demonstrated at Pwn2Own 2024

Google: China dominates government exploitation of zero-day vulnerabilities in 2023

GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

Hackers Using Weaponized Virtual Hard Disk Files to Deliver Remcos RAT

Half of British SMEs Have Lost Data in Past Five Years

Harvard Pilgrim health network updates data breach total to nearly 2.9 million

How CISOs tackle business payment fraud

How Pentesting-as-a-Service can Reduce Overall Security Costs

How To Get a Job in Cyber Security? Step By Step Guide

How to Password Protect a Folder Like a Boss?

iPhone Users Beware! Darcula Phishing Service Attacking Via iMessage

Linux Version of DinodasRAT Spotted in Cyber Attacks Across Several Countries

Meta sued for snooping on Snapchat users

Microsoft wants to stop you from using AI chatbots for evil

Millions of WordPress Sites at Risk Due to Essential Addons for Elementor Vulnerability

New iMessage Phishing Campaign Targets Postal Service Users Globally

New ZenHammer Attack Bypasses RowHammer Defenses on AMD CPUs

New Webinar: Avoiding Application Security Blind Spots with OPSWAT and F5

NHS health board confirms ransomware attack

NHS Scotland confirms ransomware attackers leaked patients’ data

NIST Unveils New Consortium to Manage its National Vulnerability Database

NVIDIA ChatRTX For Windows App Vulnerability Let Attackers Escalate Privilege

OSHA cites Alabama manufacturing company for unsafe working conditions

Patch actively exploited Microsoft SharePoint bug, CISA orders federal agencies (CVE-2023-24955)

Pentagon lays out strategy to improve defense industrial base cybersecurity

Popular new-age spirituality platform leaks its followers' data

PyPI suspends new user registration to block malware campaign

Report suggests cybersecurity investment, board involvement linked to better shareholder returns

Retail chain Hot Topic hit by new credential stuffing attacks

Russian researchers say espionage operation using WinRAR bug is linked to Ukraine

Source Code of Italian anti-piracy Platform Privacy Shield Leaked on GitHub

Spyware vendors outpace state-sponsored actors in zero-day exploits

Telegram Offers Premium Subscription in Exchange for Using Your Number to Send OTPs

The Comeback of WarzoneRAT: Analyzing the Latest Multi-Stage Attacks

Trove of UK Student Records Exposed in School Software Server Leak

UnitedHealth Group Disburses $3.3 Billion to Providers Affected by Change Healthcare Cyberattack

US police use robot dog to thwart attack – media

US Treasury Urges Financial Sector to Address AI Cybersecurity Threats

Vietnam’s Third-Largest Broker, VNDirect, Unveils Phased Recovery Plan After Massive Cyberattack

Zero-day exploitation surged in 2023, Google finds

What Is Lateral Movement in Cyber Security, How It Happens, and What to Do In Case of One?

What Is Malware, How Does It Work, and How You Can Protect Yourself?

Wireshark 4.2.4 Released : What’s New!

Your employees are using sensitive corporate devices for personal browsing

27/03

5 simple things you should do to make MacOS more secure

7 Chinese Govt Hackers Charged for 14-year hack campaign

92% of IT leaders report cyberattacks are more frequent than last year

17,000+ Microsoft Exchange servers in Germany 'highly vulnerable'

Agenda Ransomware Attacking VMWare vCenter & ESXi servers WorldWide

Agent Tesla’s Added New Tools & Tactics to Its Arsenal

AI framework vulnerability is being used to compromise enterprise servers (CVE-2023-48022)

Alert: New Phishing Attack Delivers Keylogger Disguised as Bank Payment Notice

Apple users face barrage of MFA bombing attacks

Ataque cibernético impacta serviços da Unimed

Attackers leverage weaponized iMessages, new phishing-as-a-service platform

BlueDucky: A New Tool Exploits Bluetooth Vulnerability With 0-Click Code Execution

Brasil é o país mais vulnerável a ataques hackers na América Latina pelo 3º ano consecutivo, segundo pesquisa

Chinese Hackers Target ASEAN Entities in Espionage Campaign

CISA adds Microsoft SharePoint bug disclosed at Pwn2Own to its Known Exploited Vulnerabilities catalog

CISA tags Microsoft SharePoint RCE bug as actively exploited

CISA Warns: Hackers Actively Attacking Microsoft SharePoint Vulnerability

Classes Resume at University of Winnipeg Following Recovery from Cyberattack

Cloudflare blocked 3.4 billion unwanted emails last year

Critical Unpatched Ray AI Platform Vulnerability Exploited for Cryptocurrency Mining

Cyberattack on Vietnam securities broker disrupts stock markets

Cybersecurity essentials during M&A surge

Cybersecurity jobs available right now: March 27, 2024

Drozer: Open-source Android security assessment framework

Essential elements of a strong data protection strategy

EUA e Reino Unido culpam China por ação hacker que alcançou ‘milhões’ de pessoas

European cyber agency shares top ten threats: skill shortage on the rise

Facebook may have exploited user devices to spy on competitors, documents show

Finland joins nations blaming China for hacks

Finnish police linked APT31 to the 2021 parliament attack

Google Revealed Kernel Address Sanitizer to Harden Android Firmware & Beyond

Google: Spyware vendors behind 50% of zero-days exploited in 2023

Hacker desvia US$ 63 milhões em Ethereum, se arrepende e devolve valor

Hackers Hit Indian Defense, Energy Sectors with Malware Posing as Air Force Invite

Hackers Using Weaponized PDF Files to Deliver Mispadu Banking Malware

How security leaders can ease healthcare workers’ EHR-related burnout

INC Ransom threatens to leak 3TB of NHS Scotland stolen data

Invasion of the infostealers: meet the malware stealing your cookies

KuCoin charged with AML violations that let cybercriminals launder billions

Microsoft Edge Bug Could Have Allowed Attackers to Silently Install Malicious Extensions

Microsoft Edge Flaw Let Hackers Silently Install Malicious Extensions

New password reset attack targets Apple device users - what to do if it happens to you

NHS Scotland allegedly had 3TB of data stolen

NHS Trust Confirms Clinical Data Leaked by “Recognized Ransomware Group”

Only 3% of Businesses Resilient Against Modern Cyber Threats

Plataforma de jogos perde US$ 63 milhões em ataque

Ransomware as a Service and the Strange Economics of the Dark Web

Risky business: 6 steps to assessing cyber risk for the enterprise

SASE Solutions Fall Short Without Enterprise Browser Extensions, New Report Reveals

Software supply chain attack impacts repo of large Discord bot community

TeamViewer macOS Client Vulnerability Let Attackers Escalate Privileges

Telesign launches integrated API to combine traditional identity verification channels

The DDR Advantage: Real-Time Data Defense

Thousands of ASUS routers targeted by cybercriminals

Two Chinese APT Groups Ramp Up Cyber Espionage Against ASEAN Countries

UK Law Enforcers Arrest 400 in Major Fraud Crackdown

vBulletin Forums Breached: Dark Web Sale of Millions of Accounts

Zero-Day Vulnerabilities Surged by Over 50% Annually, Says Google

Who owns your data? SaaS contract security, privacy red flags

Your smart TV is snooping on you. Here's how to limit the personal data it gathers

26/03

6 ways to protect yourself from getting scammed online, by phone, or IRL

67% of businesses sync on-premises passwords to cloud environments

87% of UK Businesses Are Unprepared for Cyberattacks

17,000+ Microsoft Exchange servers in Germany are vulnerable to attack, BSI warns

A new phishing kit is targeting Gmail and Microsoft email accounts — and it can even bypass 2FA

Active adversary dwell time: The good (and bad) news

Adobe ColdFusion Flaw Let Attackers Gain Access to Sensitive Files – PoC Released

Agenda Ransomware Propagates to vCenters and ESXi via Custom PowerShell Script

Apps secretly turning devices into proxy network nodes removed from Google Play

Ataque hacker afeta sistemas da Unimed VTRP

Atos CEO says group's current struggles don't affect Olympics IT

BlueVoyant identifies novel threat actor campaign using fake law firm invoices to launch phishing attacks

CDFA hack exposes usernames and passwords

China targeted New Zealand parliament in cyber attack, spy agency says

CISA Alerts on Active Exploitation of Flaws in Fortinet, Ivanti, and Nice Products

CISA & FBI : Hackers Exploiting SQL Injection Flaws To Hack Servers

CISA and FBI Urge Renewed Effort to Eliminate SQL Injection Flaws

Crafting Shields: Defending Minecraft Servers Against DDoS Attacks

Cybercriminals can leverage March Madness as bait for attacks

Data breach at Pembina Memorial Hospital

Dis-Chem avoids potential R10-million fine for data breach

European Commercial Spyware Company Hit With US Sanctions

Everything you need to know about the Microsoft Exchange Server hack

Florida's DeSantis signs law restricting social media for people under 16

Fortinet SSL VPN Exploit Up for Sale on Dark Web

Free VPN apps on Google Play turned Android phones into proxies

Germany warns of 17K vulnerable Microsoft Exchange servers exposed online

Giant Tiger customers exposed via third party

Giant Tiger Data Breach: Customers Data Exposed Via Vendor

Hackers demanded $700,000 after attacking Tarrant County appraisal site

Hackers exploit Ray framework flaw to breach servers, hijack resources

How games companies can protect themselves from cyber attacks

How threat intelligence data maximizes business operations

Illinois' Henry County takes systems offline following a Medusa ransomware attack

Information regulator nails TransUnion for massive data breach in South Africa

‘IntelBroker’ Claims Access to Database Belonging to England and Wales Cricket Board (ECB)

Kaspersky finds surge in financial phishing against businesses in SEA

Lewis & Clark College Provides Notice of March 2023 Data Breach Affecting Students Confidential Information

Linux Admins Beware! Fake PuTTY Client That Rhadamanthys Stealer

Los Angeles Department of Mental Health hacked

macOS Flaw Let Attackers Escalate Privilege & Gain Root Access

Malicious NuGet Package Linked to Industrial Espionage Targets Developers

Malware, scams promoted by Google AI-powered search algorithms

Metasploit Framework 6.4 Released: What’s New!

Minecraft players beware: 14GB of private data posted for free on illicit forum

Monmouth College says 2022 ransomware attack impacted close to 45,000 individuals

New ShadowRay Campaign Targets Ray AI Framework in Global Attack

New Tycoon 2FA PhaaS kit examined

New Zealand Parliamentary Network Hacked by Chinese Hackers

Novel MuddyWater phishing campaign hits Israel

Only 5% of Boards Have Cybersecurity Expertise, Despite Financial Benefits

Packaging giant Nampak breached by unknown hacker

Palmeiras sofre segunda ameaça hacker em um ano após tentativa de extorsão

Palo Alto Networks Report Reveals Alarming Surge in Ransomware Attacks

Panera Bread faces digital disruption amid unexplained outage

Panera Bread network systems reportedly down since Saturday

Pembina County Memorial Hospital to notify those impacted by data breach

Popular open-source AI framework under siege, critical flaw has no patch

Por que nossos dados pessoais interessam tanto? Entenda interesse de big techs e hackers

Portugal Forces Sam Altman's Worldcoin to Stop Collecting Biometric Data

Privacy consultant convicted of cyberstalking

Rank Math SEO Plugin Flaw Exposes 2M+ Websites to Cyber Attack

Ransomware Attackers Demand $700K From Appraisal District

Ransomware hits Florida city

Reinforcement learning is the path forward for AI integration into cybersecurity

Scammers exploit tax season anxiety with AI tools

Shopify plugins leaked data from nearly 2K stores

Strengthening critical infrastructure cybersecurity is a balancing act

Strengthening Cybersecurity Preparedness for Small Organizations: Lessons from the Change Healthcare Ransomware Attack

TA450 Hackers Uses Embedded Links in PDF Attachments to Attack Windows

Tarrant Appraisal District Targeted by Ransomware Attack, Hackers Demand $700K in Fort Worth

Tech industry’s focus on innovation leaves security behind

The cybersecurity skills shortage: A CISO perspective

The impact of compromised backups on ransomware outcomes

TheMoon malware infects 6,000 ASUS routers in 72 hours for proxy service

The UK should expect retaliation after rebuking China for cyber-attack

The US indicts 7 Chinese nationals for cyber espionage

U.K. attributes 2021 cyberattack to China, raises concerns over electoral data breach

UK, New Zealand against China-linked cyber operations

U.S. and UK Impose Sanctions on APT 31 Chinese Hackers for Cyber Attacks

U.S. Charges 7 Chinese Nationals in Major 14-Year Cyber Espionage Operation

U.S. Sanctions 3 Cryptocurrency Exchanges for Helping Russia Evade Sanctions

US Targets Crypto Firms Aiding Russia Sanctions Evasion

US Treasury Dep announced sanctions against members of China-linked APT31

US, UK officials say China cyberespionage campaign hit millions

What Is a Hacker, Why Do They Hack, and How to Prevent Yourself From One?

What Is Ransomware: Types, Targets, Prevention, Detection, & Why Not to Pay Them!

When the boss doesn’t fit: Cybersecurity workforce more diverse than its managers

WordPress: Critical Flaw Detected in MiniOrange Plugins

Wyatt Detention Facility reports more people affected by data breach

25/03

8 cybersecurity predictions shaping the future of cyber defense

20 essential open-source cybersecurity tools that save you time

A new report discusses emerging global threats

After British Tobacco Data Breach, Could This Industry Suffer More Cybersecurity Threats?

Another Headache for Star Entertainment as Customer Data Leaked in Law Firm Hack

APT29 hit German political parties with bogus invites and malware

Beware of New ‘HelloFire’ Ransomware Actor Mimic as a Pentester

Beware of Ozempic phishing scams: top tips from cybersecurity experts

BlackSuit ransomware group claims major attack on California's Select Education Group

Cash management company hit by cyberattack

China accused of targeting millions of UK voters in cyber attack

China cyber attacks a reminder Beijing poses 'constant and sophisticated' threat to western cybersecurity

CISA urges software devs to weed out SQL injection vulnerabilities

City of Jacksonville Beach says ransomware attack impacted about 50,000 people

City of St. Cloud Responds to Ransomware Cyberattack

Cybercriminals use ChatGPT’s prompts as weapons

Darknet marketplace ‘Nemesis Market’ brought down by authorities

DNA testing startup Veritas Genetics acknowledges data breach, fueling privacy concerns

Education org breach exposes 67K people

Email phishing targets bankrupt crypto firms’ BlockFi, FTX creditors

Emergency Medical Services Authority (EMSA) warns patients of a recent data breach, notifies those who may be impacted

Fake Ozempic Deals on the Rise as Experts Warn of Phishing Scams

‘Far-reaching’ hack stole information from Python developers

GardaWorld Cash Notifies Consumers of 2023 Data Breach

Google's new AI search results promotes sites pushing malware, scams

Hacker mints 1b CGT tokens worth $40m in Curio ecosystem

Hackers Hijack GitHub Accounts in Supply Chain Attack Affecting Top-gg and Others

Hackers poison source code from largest Discord bot platform

How immersive AI transforms skill development

Infamous Hacker Group Targets India’s 2024 Elections, Warns BJP Govt of Cyberattack

International Sting Takes Down Major Dark Web Marketplace “Nemesis Market”

Iran-Linked MuddyWater Deploys Atera for Surveillance in Phishing Attacks

Key Lesson from Microsoft's Password Spray Hack: Secure Every Account

Kubernetes RCE Vulnerability Allows Remote Code Execution

M&D Capital Premier Billing Notifies Consumers of June 2023 Data Breach

Major Victory Against Cybercrime: Nemesis Market Shut Down by German Authorities

Maryland has issued more than 500 loans due to Change Healthcare cyber attack

Med-Data Settles Data Breach Lawsuit for $7 Million

Nemesis Market disrupted by German police

New GEOBOX Tool Hijacks Raspberry Pi, Lets Hackers Fake Location

New "GoFetch" Vulnerability in Apple M-Series Chips Leaks Secret Encryption Keys

New MFA-bypassing phishing kit targets Microsoft 365, Gmail accounts

New Tycoon 2FA Phishing Kit Raises Cybersecurity Concerns

New ZenHammer memory attack impacts AMD Zen CPUs

Ops! Hacker invade e-mails do Palmeiras e vaza salários de jogadores; diretoria promete tomar medidas cabíveis

Palmeiras apura possível ataque hacker que teria revelado informações confidenciais

ParaSwap Addresses the AugustusV6 Vulnerability; Revoke V6 Permissions Now!

Personal info may have been compromised in Newton data breach

Police Bust Multimillion-Dollar Holiday Fraud Gang

Pomona Valley Hospital Medical Center Notifies Patients of Third-Party Data Breach

Ransomware 2024: The New Battleground is Your Data, Not Just Your Files

Rising ransomware attacks amplify World Backup Day's importance

Russian Cozy Bear Group Targets German Politicians

Russian cyberspies Cozy Bear target German politicians

Scam alert: Beware of phishing emails that impersonate CBUAE

Scammers steal millions from FTX, BlockFi claimants

Scams are becoming more convincing and costly

ScreenConnect, BIG-IP bugs a bonanza for hackers conducting cyberespionage

Separate ransomware attacks reported by Illinois county, college

Seven things every chief exec needs to know in the event of a cyber attack

St. Cloud hit with ransomware attack Monday; officials say residents' info is safe

Suposto ataque hacker vaza salários e informações confidenciais; Palmeiras se manifesta

Tarrant Co. Appraisal District ransomware attackers demanding $700K

The state of ransomware: Faster, smarter, and meaner

Time to examine the anatomy of the British Library ransomware nightmare

UK Blames China for 2021 Hack Targeting Millions of Voters' Data

UK prepares for cybersecurity response amid alleged Chinese cyber attack

UK says China aimed 'malicious cyber targeting' at democratic institutions

US and UK to accuse China of targeting companies, citizens

US sanctions APT31 hackers behind critical infrastructure attacks

24/03

Alert in Westminster: the Chinese regime launched a cyber attack against several UK parliamentarians

German Police Seize 'Nemesis Market' in Major International Darknet Raid

Holi Scams Lurk Online: Secure Your Celebrations with These Cyber Safety Tips

How hackers are using generative AI to attack Indian business

N. Korea-linked Kimsuky Shifts to Compiled HTML Help Files in Ongoing Cyberattacks

Over 100 US and EU orgs targeted in StrelaStealer malware attacks

Ransomware attacks on hospitals highlight need for vigilant cybersecurity

Vans claims cyber crooks didn't run off with its customers' financial info

What is Ethical Hacking – A Complete Guide

DAILY NEWS: Março (17/03 - 23/03) - 12 Semana de 2024