Daily News - Novembro (10/11 - 16/11) - 46 Semana de 2024

Cyber Security, Hacking, Privacy and Information Security News --- Daily Updates !! Weekly Resume...

14/11

API Security in Peril as 83% of Firms Suffer Incidents

Bank of England U-turns on Vulnerability Disclosure Rules

Data breach at Alltech Consulting exposes over 216,000 job seekers' personal information

FBI confirms China-linked cyber espionage involving breached telecom providers

France's Thales sees revenue and profit growth after cyber expansion

German interior minister warns of cyber threat ahead of elections

GigaChad Investor Loses $6 Million in Phishing Attack Involving Fake Zoom Link

Google Cloud Cybersecurity Forecast 2025: AI, geopolitics, and cybercrime take centre stage

Google launches on-device AI to alert Android users of scam calls in real-time

Hamas Hackers Spy on Mideast Gov'ts, Disrupt Israel

How a Windows zero-day was exploited in the wild for months (CVE-2024-43451)

How cybersecurity failures are draining business budgets

How Intel is making open source accessible to all developers

How to make any password manager your autofill service on Android

Iran Paper Information Center Data Breach Exposes Sensitive Data

Massive Telecom Hack Exposes US Officials to Chinese Espionage

NIS2 Directive: Everything EU Member States and Organizations Need to Know to Prepare and Comply

Organizations face mounting pressure to accelerate AI plans, despite lack of ROI

Set Forth data breach exposes sensitive information of 1.5 million customers

The Expert View: GenAI Security - How to Deploy the Power of Generative AI Safely and Securely

URL-Log-Pass Data Breach Exposes 147K User Login Credentials

US says China-linked hackers behind ‘significant’ cyberespionage campaign

Zero-days dominate top frequently exploited vulnerabilities

What 2025 holds for user identity protection

13/11

300,000 Patients Impacted By Law Firm Data Breach

Aerospace employees targeted with malicious “dream job” offers

AI Threat to Escalate in 2025, Google Cloud Warns

Amazon Confirms Data Breach Exposing Employee Phone Numbers and Sensitive Information

Amazon MOVEit Leaker Claims to Be Ethical Hacker

Amazon says hackers stole employee data from vendor’s servers

ASM Global Notifies Affected Individuals of Recent Data Breach

AT&T, Ticketmaster data breach hackers charged with stealing 50 billion records

Atlanta law firm says hackers stole the data of about 140,000 clients

Australian Critical Infrastructure Faced Heightened Cyberthreats in 2024: Report

Bitdefender Finds New ShrinkLocker Ransomware, Releases Its Decryptor Tool

CarSwitch.com Data Breach Exposes Personal Information of 220K Users

China-linked group hacked Tibetan media and university sites to distribute Cobalt Strike payload

CISA Alerts: Five Newly Exploited Vulnerabilities Added to Critical Watchlist

CISA reveals hackers’ favorite targets: critical flaws affect major tech giants

CISOs in 2025: Balancing security, compliance, and accountability

Comprehensive Guide to Building a Strong Browser Security Program

Critical bug in EoL D-Link NAS devices now exploited in attacks

Cyber attack caused major outage at Washington state's district and municipal courts

Cyber attack on debt relief company Set Forth impacted about 1.5 million individuals

Cyber attack on tech vendor disrupted Serco's prisoner transport service

Cyber professionals face an IP loss reckoning in 2025

Delta Air Lines joins Amazon in confirming third-party data leak

DNA-testing firm vanishes with highly sensitive customer genetic data

Drilling equipment provider Newpark Resources hit by a ransomware attack

Eagle Bank notifies customers of potential data breach compromising Mastercard accounts

Emmenhtal Loader Uses Scripts to Deliver Lumma and Other Malware

Ex-Air Guardsman Sentenced to 15 Years for Leaking Top-Secret U.S. Military Intel on Social Media

Florida law firm Gunster settles 2022 data breach case for $8.5 million

Free Decryptor Released for BitLocker-Based ShrinkLocker Ransomware Victims

GitHub users targeted by dangerous new phishing threat

GoIssue phishing tool targets GitHub developer credentials

Government Accountability Office (GAO) Finds Persistent Gaps in HHS Cybersecurity Efforts in U.S. Healthcare

Hamas-Affiliated WIRTE Employs SameCoin Wiper in Disruptive Attacks Against Israel

Hive0145 Targets Europe with Advanced Strela Stealer Campaigns

How to add PGP support on Android for added security and privacy

Integrante de quadrilha de sequestros, ‘hacker’ é preso durante operação em AL e SP

Iranian Hackers Use "Dream Job" Lures to Deploy SnailResin Malware in Aerospace Attacks

It’s a Hard Time to Be a CISO. Transformational Leadership Is More Important Than Ever

Lazarus Group Uses Extended Attributes for Code Smuggling in macOS

Lawyer allegedly hacked with spyware names NSO founders in lawsuit

Leaked info of 122 million linked to B2B data aggregator breach

LePoint.fr Data Breach Exposes Thousands of User Records

Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler Bugs

Microsoft Fixes Four More Zero-Days in November Patch Tuesday

Microsoft Patch Tuesday security updates for November 2024 fix two actively exploited zero-days

Microsoft patches Windows zero-day exploited in attacks on Ukraine

Microsoft’s November 2024 Patch Tuesday Addresses 91 Vulnerabilities, Including Four Critical Zero-Days

New England Grocers Stop & Shop, Hannaford Coping With Cyber Attack

New ShrinkLocker ransomware decryptor recovers BitLocker password

NIST says exploited vulnerability backlog cleared but end-of-year goal for full list unlikely

Oilfield giant Halliburton took a $35 million hit from the August ransomware attack

OvrC Platform Vulnerabilities Expose IoT Devices to Remote Attacks and Code Execution

Patch Tuesday: Four Critical Vulnerabilities Paved Over

Pentagon leaker Jack Teixeira sentenced to 15 years in federal prison

Ransomware fiends boast they've stolen 1.4TB from US pharmacy network

Research uncovers the tool creating recent GitHub phishing attacks

Rhysida group claims major cyber attack on Fylde Coast Academy Trust

Roblox Data Breach Exposes Millions of User Accounts

Sango Family Dentistry notifies 27,000 patients of data breach, offers identity protection

Signal offers an encrypted alternative to Zoom - see how it works

Social engineering scams sweep through financial institutions

South West Family Medicine Associates notifies nearly 37,000 patients and employees of data breach

The CISO paradox: With great responsibility comes little or no power

The infamous Volt Typhoon hacker group is back

Thousands of Israeli gun owners allegedly exposed

Tips for a successful cybersecurity job interview

Top 15 Exploited Cyber Vulnerabilities Revealed: Five Eyes Alliance Urges Immediate Patching

UK and allies warn of cyber attack vulnerabilities

U.S. Department of Health and Human Services (HHS) Announces Additional Settlements Following Ransomware Attacks Including First Enforcement Under Risk Analysis Initiative

US government charges hackers behind massive AT&T breach

US indicts Snowflake hackers who extorted $2.5 million from 3 victims

Wisconsin city of Sheboygan says ransom demanded after cyberattack

Your Biggest Security Risk: The Insider Threat

12/11

5 Ways Behavioral Analytics is Revolutionizing Incident Response

13 essential enterprise security tools — and 10 nice-to-haves

4,800 phishing incidents monthly in India's banks

A cyberattack on payment systems blocked cards readers across stores and gas stations in Israel

Accused Ticketmaster hacker Connor Moucka facing extradition and decades in jail

Ahold Delhaize Confirms Cyber Breach – Food Lion, Stop & Shop, Hannaford Among Affected Brands

Ahold Delhaize experienced a cyber incident affecting several of its U.S. brands

AI-enhanced ransomware attacks in the UK necessitate ERP security

Alleged Data Leak of Equis Financial Exposes Detailed Client Information

Alleged Data Leak of Michelin-Starred Restaurant in Singapore Exposes Customer Information

Almost 500 million Instagram users had their data scraped, hackers claim

Amazon Confirms Employee Data Breach Via Third-party Vendor

Amazon confirms employee data compromised amid 2023 MOVEit breach claims – but the hacker behind the leak says a host of other big tech names are also implicated

Amazon Confirms MOVEit Data Breach Exposes Employee Data

Ambitious cybersecurity regulations leave companies in compliance chaos

Apple indeed added a feature called “inactivity reboot” in iOS 18.1 that reboots locked devices

Apple introduces new feature that helps in the hunt for lost luggage

BBS Financial Confirms Data Breach Following January 2024 Ransomware Attack

Brightline reaches $7 million settlement over 2023 data breach

Business Bank Accounts from Major Platforms Allegedly Listed for Sale, Raising Financial Security Concerns

CISA’s VDP is going gangbusters but could still be improved

CISOs Turn to Indemnity Insurance as Breach Pressure Mounts

Communication after a cyber-attack

Court filings reveal inner workings of alleged hackers accused of the ShinyHunters data breach

Critical Veeam CVE targeted by new ransomware variant

Cyber Attack on UK Train Station WiFi Sparks Safety Concerns

Cyble and Digit Solutions Join Forces to Tackle Cyber Threats Across Middle East and Africa

D-Link won’t fix critical bug in 60,000 exposed EoL modems

Dell Enterprise SONiC Vulnerabilities Let Attackers Compromise The System

Dell India Vendor Portal Allegedly Compromised, Exposing Sensitive User Data

Devastating email compromise scheme robs home buyers of life’s savings

Employee data from Canada Post, Amazon and more revealed in data breach

Energy Giant Halliburton Reveals $35m Ransomware Loss

Evaluating your organization’s application risk management journey

Ex-funcionário é autor de ataque hacker à Embaixada da Alemanha, conclui polícia

FBI, CISA, and NSA reveal most exploited vulnerabilities of 2023

From Amazon to McDonald’s: what do we know about the latest major data leak?

GIGA investor loses $6M to phishing scam via fake Zoom link

Google Chrome Users at Risk: CERT-In Advises Urgent Update to Fix Security Flaws

Hacker Leaks BBVA Bank Data, Including User Details

Hackers Leveraging Microsoft Visio Files & SharePoint For Two-Step Phishing Attack

Harnessing Chisel for Covert Operations: Unpacking a Multi-Stage PowerShell Campaign

Hot Topic breach: Has your credit card info been compromised?

Hot Topic Data Breach: A Massive Leak Exposes Millions of Customer Records

How cyber hacks might change under Trump's presidency

HPE Issues Urgent Patches for Critical Vulnerabilities in Aruba Networking Access Points

Important lessons to be learned from PSNI Data Breach

Insurance Firm Introduces Liability Coverage for CISOs

Major Hot Topic Data Breach Affects 57 Million Customers

Malicious Python Package Index steals Amazon Web Services credentials

Massive troves of Amazon, HSBC employee data leaked

Met. Department’s website being restored after cyber attack

Microsoft Exchange adds warning to emails abusing spoofing flaw

Microsoft fixes actively exploited zero-days (CVE-2024-43451, CVE-2024-49039)

Microsoft November 2024 Patch Tuesday fixes 4 zero-days, 91 flaws

Microsoft Visio files used to carry out dangerous phishing attacks

MOVEit Data Leak Exposes Employee Data of Amazon, HSBC & More – What You Need to Know

New Android Malware SpyAgent Taking Screenshots Of Users’ Devices

New Citrix Zero-Day Vulnerability Allows Remote Code Execution

New England Grocery Stores and Pharmacies Hit Hard by Devastating Cyber Attack

New Flaws in Citrix Virtual Apps Enable RCE Attacks via MSMQ Misconfiguration

New GitLoker-Linked GoIssue Tool Targets GitHub Users for Phishing

New iOS security feature may reboot your iPhone if it gets stolen

New MOVEit exploit hits Amazon, HP and McDonald’s

New Phishing Campaign Delivers Advanced Remcos RAT Variant

New Phishing Tool GoIssue Targets GitHub Developers in Bulk Email Campaigns

New Ymir Ransomware Exploits Memory for Stealthy Attacks; Targets Corporate Networks

North Korea Hackers Leverage Flutter to Deliver macOS Malware

North Korean hackers create Flutter apps to bypass macOS security

North Korean Hackers Target macOS Using Flutter-Embedded Malware

Only 39% of Indian companies have the ability to withstand a prolonged ransomware event: Sophos

Pakistan Telecommunication Authority (PTA) Report Reveals Surge in Cyber Attacks, APT Threats in Pakistan’s Digital Sector

PAN-OS Access Management RCE Vulnerability, 11k+ Interface IPs Exposed

Phemedrone Stealer V2.3.2 Malware Tool for Sale, Posing Major Security Threat

Phishing Emails Are On the Rise: Spot These Trends

Phishing Tool GoIssue Targets Developers on GitHub

Powerpipe: Open-source dashboards for DevOps

Reported Data Leak at Equis Financial Exposes Extensive Client Information

Reporting Into the Void: Research Suggests Companies Fall Short When It Comes to Addressing Phishing

Samsung update caused audio issues on some Galaxy devices

SAP Security Update: Patch For High Severity Vulnerabilities

SelectBlinds Data Breach, 200,000+ Customers Card Details Skimmed in Cyberattack

Signal introduces convenient "call links" for private group chats

Signal offers an encrypted alternative to Zoom - see how it works

Singapore wants police to stop stubborn victims from sending money to scammers

SlashNext warns of ‘GoIssue’ phishing tool targeting GitHub users

Surge in exploits of zero-day vulnerabilities is ‘new normal’ warns Five Eyes alliance

TA455’s Iranian Dream Job Campaign Targets Aerospace with Malware

The changing face of identity security

The future of cyber-security education

The rise of phishing-resistant MFA and what it means for a passwordless future

The Ultimate Guide to the CGRC

Two major hacking groups are teaming up for dangerous new ransomware attacks

Understanding the Cybercriminal Mindset: Protecting Your School’s Data

Verified Cryptocurrency Exchange Accounts Allegedly for Sale, Raising Security and Fraud Concerns

VMware Workstation & Fusion Now Free For All Users

Volt Typhoon rebuilds malware botnet following FBI disruption

Washington State Court systems face widespread outages following “unauthorized activity” on networks

Watch out, that Excel document could be infected with dangerous malware

Why SEBI’s New Guidelines Make Cyber Threat Intelligence Essential for Security Teams

Windows 10 KB5046613 update released with fixes for printer bugs

Ymir ransomware, a new stealthy ransomware grow in the wild

11/11

1.5 million Americans hit in massive debt relief service data breach — names, addresses, SSNs and more exposed

4 reasons why veterans thrive as cybersecurity professionals

91 Million Mobile and Phone Number Records Allegedly Leaked, Raising Privacy Concerns

2014-2021 Mazdas vulnerable: attackers can take over infotainment system using USB

A new fileless variant of Remcos RAT observed in the wild

A surge in Pro-Russia cyberattacks after decision to monitor North Korean Troops in Ukraine

Alleged Data Breach at Indian Ayurvedic Herbs Online Store Exposes Sensitive Customer Data

Alleged Data Breach at Mr. Winter Wheels Exposes Sensitive Customer Information

Alleged Leak of Updated GTA V Source Code Raises Security Concerns for Rockstar Games

Alleged Scraping of 489 Million Instagram User Records Raises Privacy Concerns

Amazon confirms employee data breach after vendor hack

Anti-Israel hacker claims hack on Ministry of National Security, posts settler IDs online

Are You Googling This? You Could Be Walking Into a Cyber Trap

Authorities arrest alleged Ticketmaster, AT&T hacker

Bitcoin Fog Operator Gets 12.5 Years for Longest-Running Bitcoin Laundering

Chinese threat actor exploits credentials from password spray attacks

CISA Urges Patching of Critical Palo Alto Networks’ Expedition Tool

CISA Warns of Critical Vulnerabilities in Industrial Control Systems Affecting Key Infrastructure Sectors

City of Sheboygan Hit by Cyberattack – Here’s the Latest on the Ransom Threat

Combating the Ransomware Menace: How to Safeguard and Respond Effectively

Crypto Community on Alert: Dormant Hacker Steals and Launders Millions!

'Cyber attack' council working to ease backlog

Cyberattack Cost Oil Giant Halliburton $35 Million

Cyberattack Disrupts Israel’s Gas Stations and Payment Systems—Here’s What We Know

Cybercriminals Use Excel Exploit to Spread Fileless Remcos RAT Malware

D-Link to Not Fix Critical Bug Found in End-of-Life NAS Devices

English Construction Company Targeted in Ransomware Attack, Leading to Data Breach Affecting Former Employees

EU Ramps Up Cyber Resilience with Major Crisis Simulation Exercise

For the first time, Telegram hands criminal user data to Dutch authorities

Gmail's worldwide warning 'over large-scale phishing campaign' - urges users to delete scam emails

Hackers Exploiting Veeam RCE Flaw to Deploy New Frag Ransomware

Hackers use Visio files to spread phishing links

Halliburton reports $35 million loss after ransomware attack

Health and Human Services (HHS) Inks $90K Settlement Linked to Ransomware Hack

Hot Topic’s Approximately 57 Million Breached Accounts Added to Have I Been Pwned (HIBP)

How Crypto Whales Become Phishing Targets

How Data Breach Laws Impact Loan Terms for Businesses: A Study from UWA

How human ingenuity continues to outpace automated security tools

HPE Issues Critical Security Patches for Aruba Access Point Vulnerabilities

Kaspersky identifies new stealthy ransomware

Layering Defences to Safeguard Sensitive Data Within AI Systems

Man gets 10 years for stealing $20M in nest eggs from 400 US home buyers

Man Gets 12.5 Years for Running Bitcoin Fog Crypto Mixer

Mass Telegram account hijacking via supply-chain phishing campaign

Massive data breach: American debt relief service exposes 1.5 million

Microsoft Bookings Flaw Enables Account Hijacking and Impersonation

Microsoft Visio Files Used in Sophisticated Phishing Attacks

MOVEit fallout: hackers leak employee data from Amazon, MetLife, HSBC, and other major companies

New GootLoader Campaign Targets Users Searching for Bengal Cat Laws in Australia

New Remcos RAT Variant Targets Windows Users Via Phishing

Newpark Resources discloses October ransomware attack

Nokia Security Breach Leaks Source Code, Login Credentials, Keys and More; Hacker Sells Data To Special Buyers

November 2024 Patch Tuesday forecast: New servers arrive early

OpenText reveals 2024 nastiest malware, LockBit leads list

Orthopedics Rhode Island Confirms September 2024 Data Breach Compromised Sensitive Patient Information

Pensioners Warned Over Winter Fuel Payment Scam Texts

Philippines GCash hit by major phishing attack

Phishing attack targets Massachusetts employee emails

Planned Parenthood of Montana Confirms August 2024 Data Breach Leaking Sensitive Patient Information

Radwan Cyber Pal Hacker Group Alleges Access to Sensitive Data of Israeli Soldiers and Settlers

Scattered Spider and BlackCat reemerge after takedown

Security Flaws in Popular ML Toolkits Enable Server Hijacks, Privilege Escalation

Set Forth, Inc. Sends Data Breach Letters to 1.5 Million Consumers

Setting a security standard: From vulnerability to exposure management

Standard Bank data breach: How to check if you’ve been impacted

Strategies for CISOs navigating hybrid and multi-cloud security

The Importance of Effective Incident Response

The ROI of Security Investments: How Cybersecurity Leaders Prove It

This Crafty Excel Phishing Campaign Is Spreading Dangerous Fileless Malware

This mysterious iPhone upgrade protects your data from thieves

UK pensioners targeted with fake Winter Fuel Payment scam

UK Urges International Collaboration to Battle Ransomware Surge

US oilfield service provider disrupted by ransomware attack

White House Slams Russia Over Ransomware's Healthcare Hits

World Economic Forum (WEF) Introduces Framework to Strengthen Anti-Cybercrime Partnerships

World Health Organization (WHO), 50 countries warn UN of rising ransomware attacks on hospitals

10/11

200,000 SelectBlinds Customers Exposed In Card-Skimming Data Breach

ACSC’s OT Cyber Security Principles: Call to action for critical infrastructure providers to boost cyber resilience

Alleged Data Breach at Justice.fr Exposes Sensitive Judicial Information

Call of Duty hacker claims exploit let them falsely ban thousands of Warzone & MW3 players

Cybercriminals impersonate OpenAI in large-scale phishing attack: Barracuda

Hackers now use ZIP file concatenation to evade detection

Halloween hacker caught by Kraken in an attempt to impersonate the customer

North Korean Hacker Group Uses macOS Malware to Steal Crypto

Phishing attacks surge in 2024 as cybercriminals adopt AI tools and multi-channel tactics

Quishing is the new QR code scam you need to watch out for – here's how to stay safe

Ransomware Epidemic: Healthcare Under Siege as Attacks Soar

Why Cyber Security is a Key Pillar of Business Resilience

Daily News - Novembro (03/11 - 09/11) - 45 Semana de 2024