Daily News - Novembro (03/11 - 09/11) - 45 Semana de 2024

Cyber Security, Hacking, Privacy and Information Security News --- Daily Updates !! Weekly Resume...

09/11

10% dos hackers éticos já checam segurança de I.A.

50 countries warn UN of ransomware attacks on hospitals

AI-powered phishing campaign mimics OpenAI in large-scale attack: How to stay safe

Alerta de de usuários do ELO7: hackers estão no site

Beware of Fake Copyright Claims that Deliver Rhadamanthys Stealer Malware

Bitcoin Fog Founder Sentenced to 12 Years for Cryptocurrency Money Laundering

Botnet Androxgh0st ameaça a segurança digital

Call of Duty hacker says "I had my fun" after reportedly getting thousands of Warzone and Modern Warfare 3 players falsely banned

Call Of Duty MW3: hacker bloqueia milhares de usuários

Cybercriminals Launch Large-Scale Phishing Attack by Impersonating OpenAI: Barracuda

D-Link não consertará falha crítica de NAS

Data breach alert: Over 100,000 fake accounts linked to SA grant-fraud claim

Hackers chineses teriam espionado autoridades dos EUA

Malwarebytes comprou a AzireVPN

Over 50 Nations Urge UN Action on Ransomware Attacks Targeting Hospitals

Palo Alto Advises Securing PAN-OS Interface Amid Potential RCE Threat Concerns

Palo Alto dá alerta urgente de vulnerabilidade

Ransomware attacks on hospitals are 'issues of life and death,' warns WHO chief

Ransomware Threats Endanger Global Health Security

Ransomware Threats to Indian Banks: Expert Insights on Cybersecurity Strategies Against Financial Scams

This new phishing strategy utilizes GitHub comments to distribute malware

World Health Organization (WHO) Chief warns ransomware attacks on hospitals pose ‘Life and Death’ threats

08/11

3 Real-World Examples of Why Companies Need Better Email Authentication

A closer look at the 2023-2030 Australian Cyber Security Strategy

Administrator Access to Malaysia’s DOSH Portal Allegedly for Sale, Raising Security Concerns

AI can drive business growth in Southeast Asia. But some big challenges remain

AI Cuts Data Breach Time by 98 Days, Costs Surge to $4.88M

Alleged Data Breach at Aviva Spain Exposes 2.7 Million Customer Records

Alleged Database and Source Code Leak of Falo Dating App Raises Security Concerns

Alleged Sale of International Lookup API Raises Privacy and Security Concerns

Am I Isolated: Open-source container security benchmark

AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services

Apple’s 45-day certificate proposal: A call to action

Building a Resilient Future: CISA Kicks Off Critical Infrastructure Security Month

Carla Diaz é alvo de ataque hacker nas redes sociais: 'Não acreditem em nada

Casio Warns Users Of Data Breach—What The Hackers Stole

CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability

Coreia do Sul diz que hackers russos tem atacado sites e infraestrutura do país

Critical Palo Alto Networks Expedition bug exploited (CVE-2024-5910)

Critical Veeam RCE bug now used in Frag ransomware attacks

D-Link won’t fix critical flaw affecting 60,000 older NAS devices

Dark Web Profile: CosmicBeetle (NoName) Ransomware

Data Breaches Cost Companies US$677 Million On Average, New Report Reveals

Google's mysterious 'search.app' links leave Android users concerned

Hacker claims to have banned thousands of CoD players through anti-cheat exploit

Hackers e golpistas têm acesso ao Córtex, ferramenta do governo que permite acesso de dados pessoais em tempo real

How data breaches erode trust and what companies can do

IcePeony and Transparent Tribe Target Indian Entities with Cloud-Based Tools

If You Fall for a Phishing Email, Here’s What Happens Next

In the midst of restructuring, Guardian Healthcare hit by ransomware attack

Interlock ransomware gang targets big organisations across sectors

Large-Scale Phishing Campaign Exposed Using New Version of Rhadamanthys Malware

Major Oilfield Supplier Hit by Ransomware Attack

Malicious actors are exploiting DocuSign to send fake invoices

Malicious NPM Packages Target Roblox Users with Data-Stealing Malware

Motorcyle parts seller Dennis Kirk suffers data breach exposing millions of records

New CRON#TRAP Malware Infects Windows by Hiding in Linux VM to Evade Antivirus

New SteelFox Malware Posing as Popular Software to Steal Browser Data

Newpark Resources Hit by Ransomware Attack, Disrupting Key Systems

No data lost in cyber attack 'false alarm' but outage sparks hike in backlog of council work

Nokia confirms data breach leaked third-party code, but its data is safe

North Korean Actor Deploys Novel Malware Campaign Against Crypto Firms

Organisations deploy AI and automation to enhance security

Palo Alto Networks warns of potential PAN-OS RCE vulnerability

Phishing your own people in cybersecurity training? How to protect the brands you use as bait

Private key and phishing “most prevalent,” crypto scams security firm says

Pro-Russian Hacktivists Target South Korea as North Korea Joins Ukraine War

Russia’s internet watchdog blocks thousands of websites that use Cloudflare's privacy service

Seoul accuses pro-Kremlin hackers of attacking websites over decision to monitor North Korean troops in Ukraine

South African Social Security Agency (SASSA) refutes hacker group’s claim to use stolen identities for social grants

Steps Organizations Can Take to Improve Cyber Resilience

Strengthening network helps in the ransomware fight

Texas Oilfield Supplier Newpark Hit by Ransomware

The vCISO Academy: Transforming MSPs and MSSPs into Cybersecurity Powerhouses

Thousands of employees could be falling victim to obvious phishing scams every month

Unpatched Mazda Connect bugs let hackers install persistent malware

Who is "kiberphanT0m"? Notorious Hacker Behind Leaking Kamala Harris, Melania Trump and Trump Family's Alleged Phone Numbers in Shocking Cyberattack on AT&T

Why AI-enhanced threats and legal uncertainty are top of mind for risk executives

Why Healthcare Needs More Than AI to Fight Cyber-Attacks

07/11

500,000 people impacted by ransomware attack on Columbus, Ohio

A Hacker's Guide to Password Cracking

AI threats dictate a return to Human Intelligence

Alert For Lawyers: Don't Fall For This Federal Courts Phishing Scam

As Hacker Gives Stolen Data Away, Nokia Issues New Denial Statement

Australia’s Bold Move: Social Media Ban for Kids Under 16 Coming Soon

Canada ordered ByteDance to shut down TikTok operations in the country over security concerns

Canada Orders Shutdown of Local TikTok Branch Over Security Concerns

Canada orders TikTok shutdown, citing national security threats

Canada Orders TikTok to Shut Down Canadian Operations Over Security Concerns

China-Aligned MirrorFace Hackers Target EU Diplomats with World Expo 2025 Bait

Cisco Releases Patch for Critical URWB Vulnerability in Industrial Wireless Systems

Clicker Beware: Understanding and preventing open redirect attacks

Consumer privacy risks of data aggregation: What should organizations do?

Critical vulnerability affects Cisco’s industrial heavy-duty WiFi access points

Critical vulnerability in Cisco industrial wireless access points fixed (CVE-2024-20418)

Cyber Attack Warning As Hackers Use AI And Gmail In New Campaign

Cyber Intrusion Disrupts Washington State Court Systems

Cyberattack on Telematics Firm Disrupts Tracking for British Prison Vans

Defenders Outpace Attackers in AI Adoption

DHL operations impacted by a major cyber attack on tech software provider Microlise

Did Russian Efforts to Influence the U.S. Election Change the Outcome?

Eight people cited data breach as they left PSNI, Policing Board told

Embargo ransomware group claims major data theft at Georgia's Memorial Hospital and Manor

Fake copyright claims used to deploy Rhadamanthys malware

FBI Warns Gmail, Outlook Users Of $100 Government Emergency Data Email Hack

Germany Drafts Law to Shield Ethical Hackers, Tighten Penalties for Cybercrime

Hacker claims to steal source code owned by Nokia

Hacker-Powered Security Report: Firms Turn to Human Intelligence Amid Rising AI Threats

Hacker releases call logs of Trump family, Kamala Harris

Hacker Tries Breaking Into School Computer Network: Ridgewood Superintendent

Hackers demand '$125,000 in baguettes' as ransom from multi-billion dollar French firm

Hackers disable prisoner vans' panic alarms and tracking devices in cyber-attack which 'went unknown to drivers for days'

How AI will shape the next generation of cyber threats

Indian Online Stock Trading Scam Costs Bengaluru Pair US$31,000

Industrial companies in Europe targeted with GuLoader

Intesa Slammed by Watchdog for Downplaying Data Breach

Italy’s privacy authority orders Intesa Sanpaolo to address high-risk data breach

MacOS under attack by crypto thieves: malicious app disguises itself as PDF

Malicious PyPI Package 'Fabrice' Found Stealing AWS Keys from Thousands of Developers

National Cyber Security Centre (NCSC) Publishes Tips to Tackle Malvertising Threat

National Security Agency (NSA) Says Restrict Windows And MacOS, Use Google, To Stop Attacks

Netskope Threat Labs: Over 1,000 UK banking employees could be clicking phishing links every month

Network Penetration Testing in the Age of Automation: A Conversation with an Ethical Hacker

North Korean hackers employ new tactics to compromise crypto-related businesses

North Korean Hackers Target Crypto Firms with Hidden Risk Malware on macOS

North Korean Hackers Use Fake News to Spread ‘Hidden Risk’ Malware

Northeast Professional Caregivers alerts patients to potential data breach after unauthorized email access

Novel hacker group stole 40GB of data from Schneider Electric's Jira platform

OpenText report reveals Australia's top ransomware threats

Operação prende golpistas do falso ‘ataque hacker’ a contas bancárias de amapaenses

Phishing: One of the Most Common Security Threats in Banking

Ransomware attack costs Microchip Technology over $21M

Ransomware attack’s devastating toll on hospital patients’ health

Rhysida hackers send £1.2m ransom letter to Fylde Coast Academy Trust and threaten to release personal data

Scammers Target Starlink Users With Elaborate Phishing Scheme

Schneider Electric hit by another breach, ransomware gang demands $125,000 “in Baguettes”

Scissor-maker Fiskars sliced by hackers

Serco, DHL among firms affected by Microlise cyber attack

South Korea fines Meta $15 million over data breach

South-East Technological University (SETU) Waterford classes resume on campus with warning after cyber attack

Star Health policyholders’ data up for sale on dark net

SteelFox and Rhadamanthys Malware Use Copyright Scams, Driver Exploits to Target Victims

Transport for London resumes Oyster card processing following the September cyber attack

TriHealth alerts patients to vendor data breach

UK Cybersecurity Wages Soar Above Inflation as Stress Levels Rise

UK Regulator Urges Stronger Data Protection in AI Recruitment Tools

WazirX Plans Recovery Token to Address Debts After Cyber Attack

06/11

9 Steps to Get CTEM on Your 2025 Budgetary Radar

All Google Cloud users will have to enable MFA by 2025

Avoiding Social Engineering Attacks: Essential Strategies for Protection

Azure API Management Flaws Let Attackers Take Full Control APIM Service

China state-linked group accused of hacking SingTel, Bloomberg News reports

Cisco bug lets hackers run commands as root on UWRB access points

Columbus ransomware attack exposes personal data of 500,000 residents

CRON#TRAP Campaign Attacking Windows Machine With Weaponized Linux VMs

Cyber-Attack on Microlise Disrupts DHL and Serco Tracking Services

Cyberattack disables tracking systems and panic alarms on British prison vans

FBI Warns Gmail, Outlook Users Of $100 Government Emergency Data Email Hack

Germany drafts law to protect researchers who find security flaws

Global Operation Takes Down 22,000 Malicious IPs

Google Addresses Two Android Zero-Days Used in Targeted Attacks

Google Cloud to Enforce Multi-Factor Authentication by 2025 for All Users

Google Cloud to Mandate Multifactor Authentication by 2025

GoZone ransomware accuses and threatens victims

High-Risk Synology Flaw Identified: CERT-In Urges Users to Patch Immediately

HookBot Malware’s Overlay Attacks To Impersonate As Popular Brands

How to Price MDR Services for Your Business: A Practical Guide

Identity-related data breaches cost more than average incidents

India’s Banking Sector Tightens Cybersecurity as DFS Calls for Stronger Digital Defenses

Interpol Cracks Down on Global Cybercrime, Seizing 22,000 Malicious IPs and Making 41 Arrests

INTERPOL Disrupts Over 22,000 Malicious Servers in Global Crackdown on Cybercrime

IRISSCON: Organizations Still Falling Victim to Predictable Cyber-Attacks

Key cybersecurity predictions for 2025

Kicking dependency: Why cybersecurity needs a better model for handling OSS vulnerabilities

LameDuck’s Skynet Botnet Launched 35,000+ DDoS Attacks

Lojas Marisa: ataque cibernético tira site da empresa do ar

Major Ukrainian university bans Telegram to reduce cyberthreats

Massive Nigerian Cybercrime Bust Sees 130 Arrested

Memorial Hospital and Manor suffered a ransomware attack

New EU Cyber Rules Highlights Gaps in Security and ‘Paper-Compliance’

New SteelFox malware hijacks Windows PCs using vulnerable driver

New Winos4.0 Malware Targeting Windows via Fake Gaming Apps

Nokia investigates potential third-party data breach after hacker claims sale of source code

Osmedeus: Open-source workflow engine for offensive security

Outages impact Washington state courts after ‘unauthorized activity’ detected on network

Portsmouth City Council's website downed by DDoS attack that struck multiple Council websites

Protecting Customer Data with AI Powered CIAM and IGA

Saint Xavier University says 2023 cyber attack impacted over 200,000 individuals

Scammers Target BASE and Ethereum with Political Meme Coins and Rug Pulls

Security associations CISOs should know about

SelectBlinds says 200,000 customers impacted after hackers embed malware on site

Snowflake Hacking Suspect Arrested in Canada

South Korea Fines Meta $15.67M for Illegally Sharing Sensitive User Data with Advertisers

South Korea Fines Meta $15.6 Million for Sharing Sensitive User Data with Advertisers

Synology fixed critical flaw impacting millions of DiskStation and BeePhotos NAS devices

The cybersecurity gender gap: How diverse teams improve threat response

Top US cyber official says 'no evidence of malicious activity' impacting election

Transferred bitcoins? Your identity might have been stolen

UK prisoner e-tracking devices offline after Microlise cyberattack

Ukrainians experience GPS spoofing: phones showing wrong location and time

Using passphrases for better security

VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware

Washington courts' systems offline following weekend cyberattack

Whitehat finds flaw that gave unauthorized access to over 700 million EA accounts

Winos4.0 Malware Found in Game Apps, Targets Windows Users

Winos 4.0 Malware Infects Gamers Through Malicious Game Optimization Apps

05/11

10 ways hackers will use machine learning to launch attacks

24% of CISOs actively looking to leave their jobs

After China’s move, Meta opens up Llama models for US national security applications

AI learning mechanisms may lead to increase in codebase leaks

Android flaw CVE-2024-43093 may be under limited, targeted exploitation

Beware of phishing emails delivering backdoored Linux VMs!

Canadian authorities arrested alleged Snowflake hacker

Canadian authorities arrest suspect linked to Snowflake data breach and cybercrime ring

Canadian Suspect Arrested Over Snowflake Data Breach and Extortion Attacks

Chinese Air Fryers May Be Spying on Consumers, Which? Warns

CISA Flags Critical Security Flaws in PTZOptics Cameras, Urges Swift Action by Federal Agencies

Cisco Alerts Customers After Hacker Accesses Non-Public Files

ClickFix Exploits Users with Fake Errors and Malicious Code

Constellation seeks data centers at power plants despite regulatory setback

Critical ICS Vulnerabilities Exposed: CISA Advisories Urge Immediate Action

Database Leak from USDT Trading Platform QNQB Exposes Sensitive User Information

Database of 4 Million Individuals from Cordoba, Argentina, Exposed on Dark Web

FBI Seeks Public Help to Identify Chinese Hackers Behind Global Cyber Intrusions

Germany plans to decriminalize whitehat hacking

Google Cloud to make MFA mandatory by the end of 2025

Google fixes two Android zero-days used in targeted attacks

Google patches actively exploited Android vulnerability (CVE-2024-43093)

Google Warns of Actively Exploited CVE-2024-43093 Vulnerability in Android System

Hackers Exploit DocuSign APIs for Phishing Campaign

How Cybersecurity Training Must Adapt to a New Era of Threats

Interpol disrupts cybercrime activity on 22,000 IP addresses, arrests 41

Major AI company calls for urgent regulation to avert catastrophe

Major blow to cybercriminals: Interpol takes down thousands of IPs and servers

Malware Campaign Uses Ethereum Smart Contracts to Control npm Typosquat Packages

Massive Data Leak Exposes Personal Information of Buenos Aires Students

Mounties reportedly bust Ticketmaster, AT&T hacker

Maximizing security visibility on a budget

Meta found to have exposed info on North Korean defectors to advertisers

MIT Technology Review Database Breach Exposes Personal Data of 290,000 Users

Netflix raided in Europe as part of tax fraud probe

New Android Banking Malware 'ToxicPanda' Targets Users with Fraudulent Money Transfers

Nokia investigates possible security breach after hacker claims to have stolen source code

Oasis Fans Losing Up to £1000 Each to Ticket Scammers

Open-source software: A first attempt at organization after CRA

ORBCOMM Database Leak Exposes Over 70TB of Sensitive Data

Pakistani Hackers Targeted High-Profile Indian Entities using Custom RAT

Recovering From a Breach: 4 Steps Every Organization Should Take

Report: Voice of Practitioners 2024 – The True State of Secrets Security

Schneider Electric Confirms Breach as Hackers Offer 50% Ransom Discount to New CEO

Several families sue TikTok after teen deaths

Software ‘malfunction’ causes voting delay in Pennsylvania

South East Technological University (SETU) Confirms Cyberattack on Waterford Campus, Classes Set to Resume with Limited Services

South Korea fines Meta about $15 million over collection of user data

Suspect behind Snowflake data-theft attacks arrested in Canada

Synology Urges Patch for Critical Zero-Click RCE Flaw Affecting Millions of NAS Devices

The Double-Edged Sword of Strategic Governance: Benefits and Burdens

Thompson Coburn law firm reports data breach involving Presbyterian Healthcare patients

Three ‘Must Solve” Challenges Hindering Cloud-Native Detection and Response

ToxicPanda Android banking trojan targets Europe and LATAM, with a focus on Italy

ToxicPanda Malware Targets Banking Apps on Android Devices

U.S. CISA adds PTZOptics camera bugs to its Known Exploited Vulnerabilities catalog

US Voters Urged to Use Official Sources for Election Information

US warns of last-minute Iranian and Russian election influence ops

Your Android device is vulnerable to attack and Google's fix is imminent

04/11

A Massive Hacking Toolkit From “You Dun” Threat Group Developed To Lauch Massive Cyber Attack

AI Increases Phishing Attacks

Applications for Student Oyster cards reopen as Transport for London (TfL) starts to lift cyber attack restrictions

Barracuda uncovers large-scale AI-driven phishing attack impersonating OpenAI

Belle Tire reveals tens of thousands exposed in cyberattack

Booking.com Customers Targeted by Phishing via Compromised Partners’ Accounts

Businesses Worldwide Targeted in Large-Scale ChatGPT Phishing Campaign

Cactus ransomware gang claims major data theft at Los Angeles' housing authority

Check Point predicts AI will shape cyber threats by 2025

Chinese hackers hijacked thousands of TP-Link WiFi routers for covert cyberattacks

CISA Warns of Ongoing Spear Phishing Campaign Using RDP Attachments

Cisco says DevHub site leak won’t enable future breaches

City of Columbus: Data of 500,000 stolen in July ransomware attack

City of Columbus says ransomware attack compromised the data of about 500,000 residents

Crime-related crypto losses drop from previous month but spike year-over-year

Critical Flaws in Ollama AI Framework Could Enable DoS, Model Theft, and Poisoning

Cyber attack on council sparks extra security

Cyber Threats That Could Impact the Retail Industry This Holiday Season (and What to Do About It)

Cyberattack disclosed by Los Angeles (LA) housing authority after Cactus ransomware claims

Cyberattack disrupts classes at Irish technology university

Cybercriminals steal cookies to get into your accounts: how to stay safe

Cyble Warns of Escalating Cyber Risks in IoT and WordPress Plugins Amid Phishing Surge

Data Breach at Free: Hacker Claims to Have Sold Stolen Info

Data breach at Hong Kong hearing centres affects nearly 150,000 individuals

FBI Establishes 24/7 Command Post for Election Day Security Amid Cyber and Safety Concerns

‘Foreign Hackers’ Target UK Council in Second Cyber Attack This Week

FreeBSD servers subjected to novel Interlock ransomware attacks

Gardaí working with South East Technological University following suspected cyber attack affecting their Waterford campus

German pharmacuetical distributor impacted by ransomware

German Police Disrupt DDoS-for-Hire Platform dstat[.]cc; Suspects Arrested

Google Researchers Claim First Vulnerability Found Using AI

Google's AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine

Hackers Claim Access to Nokia Internal Data, Selling for $20,000

How Organisations Are Failing to Process Personal Data Lawfully Under the GDPR

Information Commissioner’s Office (ICO) refuses to give up on DSG Retail data breach case

Inside the mind of a ransomware negotiator: what it’s really like to deal with cybercriminals

Interlock Ransomware Targets FreeBSD, Threatens Infrastructure

International law enforcement operation shut down DDoS-for-hire platform Dstat.cc

Los Angeles housing authority HACLA hit by Cactus ransomware

Major data breach affects over 1.8 million patients at Summit Pathology Laboratories

Massive Midnight Blizzard Phishing Attack Using Weaponized RDP Files

Middlesbrough Council's website targeted by suspected foreign hackers in second cyber attack

Millions of Synology NAS devices vulnerable to zero-click attacks (CVE-2024-10443)

New FakeCall Malware Variant Hijacks Android Devices for Fraudulent Banking Calls

New Vulnerabilities in Fortinet, SonicWall, and Grafana Pose Significant Risks

NFL Super Bowl entertainment partner victim of cyberattack

Nigerian Handed 26-Year Sentence for Real Estate Phishing Scam

No additional Treasury funds for PSNI data breach

Okta allowed passwordless logins for exceptionally long usernames

Over half of Ohio state capital exposed in massive cyberattack

RansomHub dethrones LockBit as top ransomware cartel

Ransomware Attack Disrupts Memorial Hospital’s EHR System, Temporarily Slows Operations

Safeguarding your accounts after a data breach

Scammers Use DocuSign API to Evade Spam Filters with Phishing

South East Technological University (SETU) issues an update on Waterford Campus cyber attack

Strong privacy laws boost confidence in sharing information with AI

Supply Chain Attack Uses Smart Contracts for C2 Ops

Transport for London (TfL) starts to process new Oyster photocards after a cyber attack forced them to halt requests

True World, the church-run seafood empire, suffers data breach

UK Council Sites Recover Following Russian DDoS Blitz

WazirX Hacker Is Converting Stolen Funds Into Bitcoin

Windows infected with backdoored Linux VMs in new phishing attacks

03/11

A Threat Actor has Allegedly Leaked Data of Verificativa

Após ataque de hacker, Ministério da Cultura tira sistema da Lei Rouanet do ar

Ataques hackers em sistemas médicos: doutorando da USP é premiado por criar ferramenta de detecção e prevenção

ChatGPT-4o can be used for autonomous voice-based scams

Chinese threat actors use Quad7 botnet in password-spray attacks

Gmail 2FA Cyber Attacks—Open Another Account Before It’s Too Late

Italy’s cyber espionage scandal: High-profile data breach, secret service sales

Lockbit, blackcat, and stealer malware among top threats in Vietnam Q3 2024

Millions Affected by Largest US Data Breach – Check to See if You Are Affected

Portsmouth City Council website now working following cyber attack

What is BlackCat ransomware in crypto?

Watch out - OpenAI is being spoofed as part of a major phishing attack

Whistleblowers claim Children’s Health Ireland (CHI) staff are exposing hospitals to data breach by using personal phones and laptops

Who Is Responsible for the Star Health Data Breach? Investigation Update and IRDAI’s Response

Daily News - Outubro / Novembro (27/10 - 02/11) - 44 Semana de 2024