Daily News - Outubro (20/10 - 26/10) - 43 Semana de 2024

Cyber Security, Hacking, Privacy and Information Security News --- Daily Updates !! Weekly Resume...

26/10

33 Corporate RDP Accesses Offered for Sale on Dark Web

100 million people hit in largest healthcare data breach in history — medical info, SSNs and more

Black Basta Ransomware Operators Using Microsoft Teams To Breach Organizations

Cash App data breach settlement offers compensation for affected users

CERT-UA Identifies Malicious RDP Files in Latest Attack on Ukrainian Entities

Council avoids six-figure fine after data breach

Cybersecurity in Nigeria’s digital age: Securing the future of our nation

Data Breach Exposes Sensitive Information from Major Egyptian Clubs, Banks, and Real Estate Firms

Database Leak of 50,000 Records Reported in Brazil

FBI, CISA investigating China-linked telecom hacks following reports of intrusions on Trump, Harris phones

Four REvil Ransomware Members Sentenced in Rare Russian Cybercrime Convictions

Hacker returns $19m in stolen crypto to US government just one day after breach

Irish Data Protection Commission fined LinkedIn €310M for GDPR infringement

Majority of Aussies caught in cyber attacks as threats surge

New Attack Lets Hackers Downgrade Windows to Exploit Patched Flaws

New Cisco ASA and FTD features block VPN brute-force password attacks

New Google Cyber Attack Warning As Russian APT28 Hackers Strike

New Windows Driver Signature bypass allows kernel rootkit installs

Notorious Hacker Group TeamTNT Launches New Cloud Attacks for Crypto Mining

Passport, Visa Details Compromised In Cyber Attack On ZicroDATA

PrestaShop Admin Access Up for Sale on Dark Web

Unitedhealth Confirms That 100 Million Users Were Impacted in the February Ransomware Attack

25/10

1StopBedrooms.com Database Breach Exposes 1 Million Orders

7 essential password rules to follow in 2024, according to security experts

99% of CISOs report fear over losing positions due to a data breach

100 million US citizens officially impacted by Change Healthcare data breach

800,000 people just had their full names, SSNs and more exposed in massive insurance admin company data breach

Amazon seizes domains used in rogue Remote Desktop campaign to steal data

Achieving peak cyber resilience

Apple announces Bug Bounty Program for its AI

Apple Opens PCC Source Code for Researchers to Identify Bugs in Cloud AI Security

AWS CDK Vulnerabilities Let Attackers Gain Admin Access to AWS Accounts

AWS Seizes Domains Used by Russian Threat Group APT29

Beyond Business Email Compromise: Multi-Channel Phishing Is Here To Stay

Biden administration plans to boost national security using AI

Cash App users can claim thousands of dollars in a data breach settlement

Celulares de Trump e de seu vice foram alvos de hackers chineses, diz jornal

Change Healthcare Breach Affects 100 Million Americans

Change Healthcare data breach exposed ‘only’ 100 million US health records

Chimienti & Associates Experiences Data Breach Following Compromised Email Account

Chinese influence operation targets US down-ballot races, Microsoft says

CISA Warns of Cisco ASA & Roundcube Vulnerabilities Exploited in Wild

Cisco Patches Critical Vulnerability Affecting VPN Services

Connecticut Attorney General settles $500,000 data breach case with Guardian Analytics

Critical Vulnerabilities Found in Siemens and Schneider Electric Products

DDoS attacks surge to unprecedented levels, bombarding servers with 4.2Tbps

Eliminating AI Deepfake Threats: Is Your Identity Security AI-Proof?

Exploited: Cisco, SharePoint, Chrome vulnerabilities

Federal Prosecutors Offer Plea Deal to SEC X Account Hacker

FortiManager Devices Mass Compromise Exploiting CVE-2024-47575 Vulnerability

From bad to infamous: UnitedHealth says hack impacted 100M Americans

From Risk Assessment to Action: Improving Your DLP Response

Gándara Mental Health Center Provides Notice of Recent Data Breach

Hacker Returns $19.3 Million to Drained US Government Crypto Wallet

Hackers Allegedly Claiming Breach NoBroker Users Data & Demands Ransom

Hackers put 350M Hot Topic customers’ records for sale: “largest retail breach in history”

Hackers Using Weaponized RDP Setup Files to Attack Windows Servers

Healthcare giant Henry Schein reveals data breach following major ransomware attack

HOMESTEEL Malware Emerges as the Latest Cyberthreat to Ukraine’s Data Assets

How Interpol is adapting to the ever-evolving cybercrime landscape

How to fend off a quantum computer attack

‘I’m not a Robot’ reCAPTCHA Trojanized by Russian Hackers to Target Local Ukrainian Government

Inequity Challenges Women in Digital Trust, But Progress is Being Made

Internet Archive is back online, but for how long?

Irish Data Protection Watchdog Fines LinkedIn $336m

Irish Watchdog Imposes Record €310 Million Fine on LinkedIn for GDPR Violations

Is the Blockchain Secure? Yes, and Here’s Why

Kremlin-linked hackers target Ukraine’s state, military agencies in new espionage campaign

LinkedIn fined €310 million by Irish regulator over GDPR breach

MacOS-Focused Ransomware Attempts Leverage LockBit Brand

Microsoft Reports Nearly 400 U.S. Healthcare Facilities Targeted by Ransomware Attacks

Nearly a million users affected by Landmark data breach

OnePoint Patient Care data breach impacted 795916 individuals

Proteção de dados é um desafio em meio ao avanço digital; veja dicas

Public Relations (PR) dos and don’ts for a company data breach

QNAP, Synology, Lexmark devices hacked on Pwn2Own Day 3

QR Codes Fuel Rising Phishing Threats

Radisson properties allegedly suffer data breach

Ransomware Attacks Down Month-on-month

RansomHub gang allegedly behind attack on Mexican airport operator

Researchers Discover Command Injection Flaw in Wi-Fi Alliance's Test Suite

SEC Charges 4 Companies Over Misleading SolarWinds Cyberattack Disclosures

SonicWall firewalls the common access point in spreading ransomware campaign

Sysdig Predicts Global Cyberattacks Costs Will Exceed $100B in 2025

The future of cyber insurance: Meeting the demand for non-attack coverage

The Securities and Exchange Commission (SEC) fines tech companies for misleading SolarWinds disclosures

The State of Cybersecurity: Challenges, Priorities and Insights

Transport for London (TfL) update about London Underground refunds and discount cards as computer systems hit by cyber attack

Ukraine Warns of Mass Phishing Campaign Targeting Citizens Data

UNC5820 Exploits FortiManager Zero-Day Vulnerability (CVE-2024-47575)

Unclear pricing for GRC tools creates market confusion

UnitedHealth Data Breach Impacts Over 100 Million American Users

Urgent fraud warning for more than 300,000 Aussies after their details leak onto the dark web as retailer digiDirect is allegedly hacked in huge data breach

U.S. CISA adds Cisco ASA and FTD, and RoundCube Webmail bugs to its Known Exploited Vulnerabilities catalog

US government likely lost $20M in crypto hack

US Senator Calls Out Domain Firms over Russian Disinformation Networks

Windows 11 CLFS Driver Vulnerability Allow Attackers To Escalate Privileges: PoC Exploit Released

24/10

67% of organizations say employees lack basic security awareness

389 healthcare companies hit by ransomware this year, Microsoft finds

AI and deepfakes fuel phishing scams, making detection harder

AI honeypot hit 800K times and managed to trap six AI-powered hacking agents

Apple Computers Targeted With macOS.NotLockBit Ransomware

AWS Cloud Development Kit Vulnerability Exposes Users to Potential Account Takeover Risks

Brace yourself for the 48 hours before election day: Russia, China, and Iran ramping up attacks

Brazilian police arrest National Public Data hacker

Change Healthcare data breach officially affects 100M

Chrome Security Update, Patch for High Severity Vulnerability

CISA Warns Active Exploitation of Microsoft SharePoint Vulnerability

Cisco ASA & FTD VPNs Vulnerability Actively Exploited in Attacks

Cisco fixes VPN DoS flaw discovered in password spray attacks

Cisco Issues Urgent Fix for ASA and FTD Software Vulnerability Under Active Attack

Critical Cisco ASA Flaw Allows SSH Remote Command Injection

Cyber attack effecting Texas Tech Health System's students, patients

Cybersecurity Teams Largely Ignored in AI Policy Development

DarkComet RAT – A Remote Access Tool Lets Attackers Remotely Control Windows

Embargo Ransomware Actors Abuses Safe Mode To Disable Security Solutions

Enhancing national security: The four pillars of the National Framework for Action

Facing the uncertainty of cyber insurance claims

First credible ransomware variant detected for Macs: creeping evolution spells danger

FortiJump flaw CVE-2024-47575 has been exploited in zero-day attacks since June 2024

Fortinet Confirms Exploitation of Critical FortiManager Zero-Day Vulnerability

Fortinet FortiManager flaw exploited in zero-day attacks (CVE-2024-47575)

Fortinet FortiManager RCE zero-day Flaw Exploited in-the-wild

Fortinet Warns of Critical Vulnerability in FortiManager Under Active Exploitation

GitLab Patches Critical HTML Injection Flaw Leading To XSS Attacks

Google extends software updates for Android phones

Governo americano sofre hack e perde R$ 117 milhões em criptomoedas

Hackers Can Be Heroes: The Importance of Responsible Disclosure

Hackers Leak 180,000 Esport North Africa User Records a Day Before Tournament Begins

How to use the Private Space feature in Android 15 - and secure your sensitive data

Increased stealth integrated into novel Grandoreiro banking trojan variants

Iranian Hackers Target U.S. Election Systems Ahead of 2024 Presidential Race

Ireland fines LinkedIn $335 million over EU data breach

Landmark Admin Announces Data Breach Affecting 806,519 Liberty Bankers Insurance Group Policyholders

Landmark, an administrator for insurance firms, says 800,000 affected by data breach

Lazarus Group Exploits Chrome 0-Day for Crypto with Fake NFT Game

Lazarus Group Exploits Google Chrome Vulnerability to Control Infected Devices

LinkedIn fined €310 million for violating EU privacy rules

Mallox ransomware decryption tool issued by Avast

Managed SIEM Pricing – 2025 : A Guide to Cost and Value

Mandiant says new Fortinet flaw has been exploited since June

Massive data breach exposes security flaws at Atif Aslam concert in Dhaka

Millions of Hot Topic shoppers have data stolen by "Satanic" hacker

Misconfigured UN Database Exposes 228GB of Gender Violence Victims’ Data

New generation of QR code phishing tries to evade detection with text-based codes and specially crafted URLs, Barracuda research

New macOS vulnerability allows unauthorized data access

New Qilin ransomware encryptor features stronger encryption, evasion

New Qilin.B Ransomware Variant Emerges with Improved Encryption and Evasion Tactics

Over 940,000 Medicare Beneficiaries Impacted by Data Breach

Penn State Fined £1.25 Million for Cybersecurity Failures in Federal Contracts

Pinterest accused of secretly tracking their users

Radiant Capital hacker moves $52M in stolen funds

Ransomware Gang Targets Easterseals, A Nonprofit for Disabled Individuals

Ransomware's ripple effect felt across ERs as patient care suffers

Report Shows Well-Known Threats Persist at Alarming Levels

Russia says unprecedented cyber attack hits foreign ministry

Russia says 'unprecedented' cyber attack hits foreign ministry amid BRICS summit

Samsung Galaxy S24 and Sonos Era hacked on Pwn2Own Ireland Day 2

Securities and Exchange Commission (SEC) Fines Four Tech Firms for Downplaying SolarWinds Impacts

Source Code of TargetMaps Geo-Analytics Leaked on Dark Web

Swiss vocational training institute pauses operations following a ransomware attack

Technologist Bruce Schneier on security, society and why we need 'public AI' models

The ransomware negotiation playbook adds new chapters

The University of Manchester avoided disaster in last year’s cyber attack – now it wants to set an industry example

This refreshed Palma e-reader comes with a fingerprint sensor and Android 13

UK Government Introduces New Data Governance Legislation

UK Government Urges Organizations to Get Cyber Essentials Certified

Unauthorized access leads to data breach in Arkansas Blue Cross Blue Shield rewards program

UnitedHealth says data of 100 million stolen in Change Healthcare breach

U.S. CISA adds Fortinet FortiManager flaw to its Known Exploited Vulnerabilities catalog

U.S. Govt Announces Rewards Up To $10 Million For Info On Iranian Hackers

Vendors responsible for almost half of breaches in the energy sector, study finds

What’s more important when hiring for cybersecurity roles?

White House Issues AI National Security Memo

Why Phishing-Resistant MFA Is No Longer Optional: The Hidden Risks of Legacy MFA

Yearlong Henry Schein breach probe surges victim total five-fold

23/10

4 organizations charged with misleading cyber disclosures

10 most common passwords you should never use according to an ethical hacker

14% Increase in Large Cyber Claims, Driven by Data Breaches and Privacy Violations

49% of CISOs plan to leave role without industry action

52 Zero-Days Uncovered: Hackers Earn $486,250 at Pwn2Own Ireland 2024

70% of Leaders See Cyber Knowledge Gap in Employees

Akira Double-Extortion Ransomware Tactics Return

API Vulnerabilities Jump 21% in Third Quarter

Argus: Open-source information gathering toolkit

Arkansas Blue Cross Addresses Data Breach

Attackers Use Encoded JavaScript to Deliver Malware

Avg data breach cost hit Rs 19 cr in 2024; 16% Indians know privacy rights

Balancing Clients' Security and Functionality in the Cloud

Campus.gov.il Data Breach Exposes Over 110GB of Sensitive Information

Casio yet to recover affected systems following a devastating ransomware attack

CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)

Confessions of a company infiltrator: "I was the last person you’d ever suspect"

Connecticut Obtains Settlement Over Data Breach Affecting Webster Bank Customers

Crooks are targeting Docker API servers to deploy SRBMiner

Cybersecurity Meets Play: UCF’s Horse Plinko Prepares Students for Real-World Threats

Cyble Sensors Uncover Cyberattacks on Java Framework and IoT Devices

Data Breach Exposes Over 220,000 Users of TrueCalia.com

Data breach impacts insurer Johnson & Johnson

Effective strategies for measuring and testing cyber resilience

Embargo Ransomware Gang Deploys Customized Defense Evasion Tools

Evolving cloud threats: Insights and recommendations

Flaw crashes Apple devices with a single click, Tesla also vulnerable

Former British PM Cameron Calls for Tech Engagement with China Despite Cyber Threats

Fortinet warns of new critical FortiManager flaw used in zero-day attacks

Google Messages adds nudity blur option, plus other new security upgrades

Google to let businesses create curated Chrome Web Stores for extensions

Great Expressions Dental Centers agrees to $2.7M settlement over 2023 data breach

Hacker May Have Breached Hot Topic, Stolen Data on Millions

Hackers exploit 52 zero-days on the first day of Pwn2Own Ireland

Happy Hack-tober! Don’t be Scared: How to Protect Your Business from RaaS Threats

Hardcoded Creds In Popular Apps Put Millions Of Android And iOS Users At Risk

High-Risk ICS Vulnerability Exposes ICONICS and Mitsubishi Electric Products to Data Breaches

Internet Archive Secures Zendesk Account, Works Toward Full-Service Restoration

Lack of investment leaving firms open to cyber attack - PwC

Lansing Community College reaches $1.45M settlement over data breach affecting 750,000 individuals

Largest Retail Breach in History: 350 Million "Hot Topic" Customers’ Personal & Payment Data Exposed — As a Result of Infostealer Infection

Lazarus APT Hackers Exploit Chrome Zero-Day via Cryptocurrency Game

Mail-in Ballots at Risk? CISA and USPIS Unleash New Protections for Voters

Mallox Ransomware Flaw Let Victims Recover Files Without Ransom Payment

Meta To Use Facial Recognition For Recovering Compromised Accounts

Millions affected in major health data breach caused by a missing password

Millions of iOS and Android Users at Risk as Popular Apps Expose Cloud Keys

MITRE CVE Program Marks 25th Anniversary, Accumulating 240,000 Records by 2024

Most women in IT work overtime to advance in their careers

Multiple High-Severity Vulnerabilities Found in Bitdefender Products: Patch Now

New Anti-Bot Services Bypassing Google’s Protective ‘Red Page’ Warnings

New Grandoreiro Banking Malware Variants Emerge with Advanced Tactics to Evade Detection

New Malware WarmCookie Targets Users with Malicious Links

Novel PowerRAT, DCRat deployed via Gophish toolkit

Over 1,000 NHS Accounts Leaked on Dark Web Forum

Over 52K American car wash customers exposed in data breach

Penn State fined $1.25 million for failing to meet cyber requirements in federal contracts

Permiso State of Identity Security 2024: A Shake-up in Identity Security Is Looming Large

Phishing scams use QR codes in PDFs to bypass defences

PriceBlink Data Leak Exposes Information of Over 148,000 Users

Prove you’re not a robot by running malware: crooks delivering stealers with fake CAPTCHAs

'Quishing': That QR Code You Scan May Be Malicious

Ransomware attack on Leaders Staffing impacted close to 52,000 customers

Ransomware Gangs Use LockBit's Fame to Intimidate Victims in Latest Attacks

Red Hat NetworkManager Flaw Let Attackers Gain Root Access To Linux Systems

Researchers Reveal 'Deceptive Delight' Method to Jailbreak AI Models

Rogue RDP Files Used in Latest Campaign Targeting Ukrainian Government, Military

Russia says 'unprecedented' cyber attack hits foreign ministry amid BRICS summit

Samsung Use-After-Free Zero-day Vulnerability Exploited In The Wild

Security priorities emphasize CISO role on the rise

September 2024 Healthcare Data Breach Report

SIEM Automation Explained: Faster Threat Detection, Smarter Responses

SMB Force-Authentication Vulnerability Impacts All OPA Versions For Windows

TA866 Group Linked to New WarmCookie Malware in Espionage Campaign

The Key Components For a Secure Password Policy (And Why Complexity Isn’t One)

Think You're Secure? 49% of Enterprises Underestimate SaaS Risks

Tor Browser 14.0 Released: What’s New?

Transak Data Breach Exposes 92K Users: Employee Phishing Attack, Ransomware Group Claims Responsibility

UK Government Weighs Review of Computer Misuse Act to Combat Cybercrime

U.S. CISA adds Microsoft SharePoint flaw to its Known Exploited Vulnerabilities catalog

US Energy Sector Vulnerable to Supply Chain Attacks

US Government Pledges to Cyber Threat Sharing Via TLP Protocol

Xerox Printers Vulnerability Let Attackers Remotely Takeover Devices

Zendesk Assists Internet Archive in Securing Account After Cyber Breach

Why DSPM is Essential for Achieving Data Privacy in 2024

22/10

7 risk management mistakes CISOs still make

34% of CIOs ranked securing the network as their number one priority

75% of US Senate Campaign Websites Fail to Implement DMARC

A Comprehensive Guide to Finding Service Accounts in Active Directory

Access to US-Based Finance Company Network Listed for Sale on Dark Web

AI-Powered Attacks Flood Retail Websites

Akira ransomware is encrypting victims again following pure extortion fling

Ataque hacker causa instabilidade no sistema digital da Sabesp

Bumblebee and Latrodectus Malware Return with Sophisticated Phishing Strategies

CISA Adds Sciencelogic SL1 Unspecified Vulnerability to KEV Catalog

CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack

Cisco shuts down DevHub developer environment following data breach

Consumer Financial Protection Bureau (CFPB): New regulations will better protect consumers’ personal financial data

Crypto Payment Firm Transak Hit by Data Breach After Employee’s Laptop Hack

CVE-2024-9537: CISA Warns of Unpatched ScienceLogic SL1 Exploit in Active Use

Cyber attack prompts early dismissal at Nebraska school

Cybercriminals Exploiting Docker API Servers for SRBMiner Crypto Mining Attacks

Cybersecurity, AI, Fiduciary Duty Top SEC’s 2025 Examination Agenda

Dark Web Anti-Bot Services Let Phishers Bypass Google’s Red Page

Data breaches against financial services drop

Database Access for Brazilian Microcredit Organization Auctioned on Dark Web

Exploit released for new Windows Server "WinReg" NTLM Relay attack

Experts warn of a new wave of Bumblebee malware attacks

Fair Vote Canada discloses data leak involving 34,000 email addresses

Gambling sector subjected to APT41 intrusions

Georgetown University faces class-action lawsuit following data breach

Gophish Framework Used in Phishing Campaigns to Deploy Remote Access Trojans

Great Expressions Dental Centers Settle Data Breach Lawsuit for $2.7 Million

Greek Ruling Party Fined Over Data Breach

Hackers are finding new ways to leverage AI

Hong Kong watchdog slams sports club for sloppy cybersecurity ahead of data breach

How enhanced classification of cloud data can minimize ransomware risk

Huawei Cloud Partners with CSA to Enhance Cybersecurity in Singapore

Immutable storage essential to protect against ransomware attacks on backup data, finds Object First

India, Australia, Japan, and US Unite for Quad Cyber Challenge to Boost Global Cybersecurity Workforce

Infosys McCamish Systems Updates Data Breach Victim Count to Over 6 Million and Adds Wells Fargo, Continental Casualty Company, and The Nolan Financial Group

IT security and government services: Balancing transparency and security

Japanese electric car manufacturer Nidec confirms major cyber attack on internal systems

LLMjacking and Open-Source Tool Abuse Surge in 2024 Cloud Attacks

Low turnover leaves job-seeking CISOs with nowhere to go

Malicious npm Packages Target Developers' Ethereum Wallets with SSH Backdoor

Massive data leak hits Mexican healthcare sector with over 5 million at risk

Meta to Fight Celeb-Bait Scams with Facial Recognition

Microsoft reported nearly 400 ransomware attacks in fiscal year 2024

Myths holding women back from cybersecurity careers

National Financial Services Announces Data Breach Affecting MassMutual Subsidiary, MML Investors Services LLC

Phishing Attack Impacts Over 92,000 Transak Users

Phishing scams and malicious domains take center stage as the US election approaches

Proposed settlement to compensate those impacted by LCC Data Breach

Radisson’s Country Inn and Suites Allegedly Hit by Ransomware

Ransomware attacks on health care sector are driving increase in emergency patient care

Researchers link Polyfill supply chain attack to huge network of copycat gambling sites

Rocky Mountain Gastroenterology Reportedly Experiences Triple Cyberattack, Resulting in Data Breach Affecting Up to 169k

Roundcube XSS flaw exploited to steal credentials, email (CVE-2024-37383)

Sabesp sofre ataque hacker

Samsung zero-day flaw actively exploited in the wild

Schreck Financial Group Experiences Email-Related Data Breach

SEC hits security companies with massive fines for misdirection over SolarWinds Orion hack

Securities and Exchange Commission (SEC) Charges Tech Firms Over Misleading SolarWinds Hack Disclosures

Security Flaw in Styra's OPA Exposes NTLM Hashes to Remote Attackers

Splunk’s Recent Security Advisory: Addressing Vulnerabilities in Splunk Enterprise

Think Tanks Urge Action to Curb Misuse of Spyware and Hack-for-Hire

Threat actors increasingly using malicious virtual hard drives in phishing attacks

Threat actors prepare at least 1,000 new malicious domains ahead of US presidential elections

Transak Data Breach Exposes 92K Users: Employee Phishing Attack, Ransomware Group Claims Responsibility

U.S. CISA adds ScienceLogic SL1 flaw to its Known Exploited Vulnerabilities catalog

US justice department indicts two Anonymous Sudan operatives

VMware failed to fully address vCenter Server RCE flaw CVE-2024-38812

VMware fixes critical vCenter Server RCE bug – again! (CVE-2024-38812)

VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability

VMware vCenter Server Vulnerabilities Let Attackers Execute Remote Code

WazirX moved over $73 million crypto after data breach: CoinSwitch

Wells Fargo named in Infosys attack affecting 6M

Whitepaper: Securing GenAI

Windows Remote Registry Client EoP Flaw Exposes Systems to Relay Attacks

21/10

50,000 Files Exposed in Nidec Ransomware Attack

225K+ German B2B Leads Database Leaked on the Dark Web

A CISO’s guide to creating a cyber resilience toolkit

Addressing Vulnerabilities in Critical ICS Products: A Focus on Siemens, Rockwell, and Delta

AI in Remote Sensing Prone to Exploitation, Study Warns of Digital and Physical Risks

AI scam targets Ripple holders and memecoin trader loses it all: Crypto-sec

Alleged Data Breach at PT Haleyora Power Exposes Employee Information

Anti-Bot Services Help Cybercrooks Bypass Google 'Red Page'

Aranya: Open-source toolkit to accelerate secure by design concepts

Australia's Privacy Watchdog Publishes Guidance on Commercial AI Products

Bank of Cyprus: Cyber-attack thwarted on Friday

Beast Ransomware Attacking Windows, Linux, And ESXi Systems

BlackSuit ransomware claims to have hacked Kansas City Hospice

Building secure AI with MLSecOps

Bumblebee malware returns after recent law enforcement disruption

ByteDance denies reports that intern caused $10M in damages

Caleb & Brown Client Data Leaked and Up for Sale

Chinese drone maker DJI sues DoD: we’ve been stigmatized

Chinese Nation-State Hackers APT41 Hit Gambling Sector for Financial Gain

Cisco Confirms Security Incident After Hacker Offers to Sell Data

Cisco denies data breach exposed sensitive personal data

Cisco takes DevHub portal offline following threat actor data leak

Community Day School (CDS) data breach spurs digital review and recommitment to student safety

Connecticut Attorney General Reaches Settlement In Webster Bank Data Breach

Critical Vulnerability at Epicor Software Corporation Exposes Sensitive Data of Over 6,300 Clients

Crypto Hack: Transak Hit By Data Breach, 57,000 Users Affected

CyberMonth: Behind the Jersey Cyber Security Centre's Proactive Cyber Defense Mission

Cyprus' critical infrastructure targeted by coordinated cyberattacks linked to pro-Palestine groups

Data Breach Statistics [2024] : Penalties and Fines for Major regulations

Dumbest Thing in Security This Week: The Most Exploited Vulnerability Is…

Evolving cybercriminal tactics targeting SMBs

FBI Arrested Hacker Behind the Takeover of the U.S. SEC X account

Fortinet releases patches for undisclosed critical FortiManager vulnerability

Genomics company 23andMe to pay up to $10,000 per person to victims of data breach

GHOSTPULSE Hides Within PNG File Pixel Structure To Evade Detections

Guide: The Ultimate Pentest Checklist for Full-Stack Security

Hacker Advertises “Top Secret US Space Force (USSF) Military

Hackers Exploiting Roundcube XSS Vulnerability To Steal Login Credentials

Hackers Mimic As ESET To Attack Organizations With Wiper Malware

Half of Organizations Have Unmanaged Long-Lived Cloud Credentials

High-risk vulnerability affecting UniFi Network Server

How Microsoft outplays scammers with clever virtual ‘honeypot’ traps

If you’ve emailed the Internet Archive, “your data is now in the hands of some random guy”

Internet Archive Breached Again, Hackers Exploited Unrotated API Tokens

Internet Archive breached again through exposed Zendesk tokens, user data at risk

Internet Archive Struggles with Third Cyberattack in October

Internet Archive suffers third October cyber attack

Internet Archive was breached twice in a month

Japanese tech giant Nidec confirms 8Base data breach, company data published

Juventus sofre ataque hacker e ''anuncia'' contratação de craque do Real Madrid

Major Australian mechanic Ultra Tune suffers alleged cyber attack

Meet Latrodectus: Initial access brokers’ new favorite malware loader

Microsoft blocks Windows 11 24H2 on two ASUS models due to crashes

More of Internet Archive is back online, despite hackers infiltrating its helpdesk

Netskope Reports Possible Bumblebee Loader Resurgence

New AI Tool to Discover 0-Days at Large Scale With Click of a Button

New Cybersecurity Warning As 1,000 Elite Hackers Embrace AI

New York-based pediatric group says hackers stole patients' sensitive personal data

Nidec confirms ransomware attack leaked company data online

None of big AI models meet EU regulatory standards, analysis shows

Over 6,000 WordPress hacked to install plugins pushing infostealers

Over 10 Million Personal And Corporate Devices Infected By Information Stealers

Perfil do PT da Paraíba no Instagram é alvo de ataque hacker

PT da Paraíba tem perfil no Instagram alvo de ataque hacker

Researchers Discover Severe Security Flaws in Major E2EE Cloud Storage Providers

Russia subjected to intrusions with LockBit 3.0, Babuk ransomware

Russian group’s hack of Texas water system underscores critical OT cyber threats

Should the CISOs role be split into two functions?

Sophos Acquires Secureworks in $859 Million Deal

SolarWinds Help Desk software vulnerability added to CISA catalogue

Spate of ransomware attacks on German-speaking schools hits another in Switzerland

Stolen Access Tokens Lead to New Internet Archive Breach

The Internet Archive breach continues

Tougaloo College Launches Cybersecurity Clinic to Protect Underserved Communities

Transak hit by data breach, 92K users exposed

UK Biobank denies claims of data breach by 'race science' group

Unknown threat actors exploit Roundcube Webmail flaw in phishing campaign

U.S. insurer Globe Life faces ransom demand following a major breach

What makes a great CISO

Why you should power off your phone at least once a week - according to the NSA

20/10

10 Best Bot Protection Software – 2024

Ataque hacker: 8 maneiras de deixar a empresa longe das estatísticas

French eCommerce Site Up for Auction on Dark Web

Hackers Exploit Roundcube Webmail XSS Vulnerability to Steal Login Credentials

Internet Archive breached again through stolen access tokens

Mirai-Inspired Gorilla Botnet Hits 0.3 Million Targets Across 100 Countries

North Korean IT Workers in Western Firms Now Demanding Ransom for Stolen Data

Office 365 Access for Major U.S. Energy Company on Sale

Severe flaws in E2EE cloud storage platforms used by millions

Site da Câmara Municipal de Ribeirão Bonito é hackeado e dados são expostos

Daily News - Outubro (13/09 - 19/10) - 42 Semana de 2024