Daily News - Setembro (01/09 - 07/09) - 36 Semana de 2024

Cyber Security, Hacking, Privacy and Information Security News --- Daily Updates !! Weekly Resume...

07/09

280 fake Android apps used to steal crypto wallets have been unearthed

A flaw in WordPress LiteSpeed Cache Plugin allows account takeover

Como descobrir se suas contas de e-mail e redes sociais foram hackeadas

Despite cyberattacks, water security standards remain a pipe dream

Disney data breach: Disneyland, Disney Cruise guests and employees personal info leaked

Divulge Stealer Unveiled: Advanced Info-Stealer Targets 25 Cryptocurrency Wallets

FBI Cracks Down on Dark Web Marketplace Managed by Russian and Kazakh Nationals

Free Russia Foundation to investigate data breach after internal documents published online

Hacker Behind $27 Million Penpie Attack Receives Compliment From Counterpart

Islamabad Safe City, police internal records hacked

New RAMBO attack steals data using RAM in air-gapped computers

North Carolina Musician Charged After Employing AI Tools And Bots to Boost Streams

North Korean Threat Actors Deploy COVERTCATCH Malware via LinkedIn Job Scams

Ransomware demands exponentially increase, averaging $1.5 Million this year

Sextortion scam now use your "cheating" spouse’s name as a lure

Social Security has suffered a historic attack: 272 million affected, and you may have lost this

Telegram Founder Pavel Durov Hits Back Against Charges But Pledges Stricter Moderation

Threat Actor Claims to Sell Unauthorized VPN Access to Taiwanese Bank and U.S. Company

U.S. Army Special Forces Hackers Attack Wi-Fi Networks

U.S. CISA adds Draytek VigorConnect and Kingsoft WPS Office bugs to its Known Exploited Vulnerabilities catalog

06/09

4 Ways to Future-Proof Your Firm in the Digital Age

6 Hackers Charged for Hacking Ukrainian Government Networks

83% of organizations experienced at least one ransomware attack in the last year

A new malware named “Voldemort” may be a cyber espionage campaign

Adobe evolves its risk management strategy with homegrown framework

AI Firm’s Misconfigured Server Exposed 5.3 TB of Mental Health Records

Alleged Data Leak Exposes Sensitive Information of Dingding Talk Users

Apache fixed a new remote code execution flaw in Apache OFBiz

Apache OFBiz team patches critical RCE vulnerability (CVE-2024-45195)

Apache OFBiz Update Fixes High-Severity Flaw Leading to Remote Code Execution

Australia Proposes New Rules for Human Oversight, Transparency in AI

Avis Car Rental Customers Hit By Hack, Data Breach

Car rental giant Avis discloses data breach impacting customers

Charles Darwin School Bromley closes due to cyber attack

CISA Breaks Silence on Controversial ‘Airport Security Bypass’ Vulnerability

Critical Progress LoadMaster Vulnerability Let Attackers Execute Arbitrary Code

Critical RCE Vulnerability Patched in Apache OFBiz (CVE-2024-45195)

Critical Security Flaw Found in LiteSpeed Cache Plugin for WordPress

Cultura de cibersegurança pode prevenir ataques hackers nas Prefeituras

Cyber attack on Illinois Bone & Joint Institute compromised patients’ healthcare data

Disabled passengers impacted by London transport cyber attack

Dutch government retakes export control over two ASML tools from US

Electric vehicle (EV) Owners beware of Quishing Attacks via EV Chargers

Exposed: Russian military Unit 29155 does digital sabotage, espionage

Gamaredon APT Launches Spear-Phishing Campaign Targeting Ukrainian Military

GeoServer Vulnerability Targeted by Hackers to Deliver Backdoors and Botnet Malware

GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious Code

Hackers Target Ukrainian Army with Fake Military Apps to Siphon Authentication and GPS Data

How to Make Security Policies Truly Transparent to Users

Human firewalls are essential to keeping SaaS environments safe

Human operated ransomware is far more formidable for African enterprises

Hundreds of Russian US election disinformation posts remain on social media despite alerts

Linux Pluggable Authentication Modules Abused to Create Backdoors

LiteSpeed Cache Plugin Vulnerability Exposes Millions of WordPress Sites to Attacks

London transport chiefs restrict access to photocard portal for 60+ Oyster and other cards after cyber attack

Lowe’s home warehouse employees targeted in Google ad phish

Men jailed after running sextortion scheme that resulted in teen's death

Microsoft Office 2024 to disable ActiveX controls by default

New global standard aims to build security around large language models

New KTLVdoor Malware Linked to Chinese Threat Actor Earth Lusca

New malware shakes macOS security paradigm – hackers eying iPhones next

New research shows 12% of CISOs faced budget declines in 2024

Nykaa Fashion initiates legal proceedings against former CBO over alleged data theft

One million US Kaspersky customers to be migrated to this lesser-known alternative

OnlyFans Hack Targets Naive Cybercriminals With Lummac Stealer

Pavel Durov Criticizes Outdated Laws After Arrest Over Telegram Criminal Activity

Penpie DeFi Hack: $27 Million Stolen, Pushing Crypto Theft Over $1.2 Billion in 2024

PoC Exploit Released for Linux Kernel Vulnerability that Allows Root Access

ProPark Mobility suffers data breach: Consumer information potentially compromised

RansomHub Claims Planned Parenthood Hack, Steals 93GB of Sensitive Data

Ransomware rocked healthcare, public services in August

Red Nucleus Reports Data Breach to State Regulators

Researcher Details Exploitation of Exchange PowerShell via MultiValuedProperty

Respotter: Open-source Responder honeypot

Riverside Resort & Casino Notifies Consumers of July 2024 Data Breach

Russia-linked GRU Unit 29155 targeted critical infrastructure globally

Russian cyber militants responsible for damage to critical assets: US offers $10 million bounty

Russian Cyber Unit 29155 Exposed: Targeting NATO and Allied Nations

Russia's largest social media platform VKontakte suffers data breach, exposing 390M user records

SEC Accuses Former CIRCOR Executive of Misleading Financial Disclosures

Security Budgets Come Under Pressure as “Hypergrowth” Ends

Security leaders respond to the White House's internet routing guide

September 2024 Patch Tuesday forecast: Downgrade is the new exploit

Service Access & Management Files Notice of Data Breach with the HHS-OCR

Services disrupted as local council near GCHQ’s headquarters hit by cyberattack

SonicWall SSLVPN access control flaw is now exploited in attacks

SonicWall Urges Users to Patch Critical Firewall Flaw Amid Possible Exploitation

SonicWall Warns of Access Control Vulnerability Exploited in the Wild

SonicWall warns that SonicOS bug exploited in attacks

South Korean chip executive detained again over alleged technology leak to China

SpyAgent Android malware steals your crypto recovery phrases from images

Spyware Vendors' Nebulous Ecosystem Helps Them Evade Sanctions

Support for TikTok ban wanes in the US

Tewkesbury Borough Council hit by cyber attack

Tewkesbury Council Shuts Down Systems After Cyberattack, Investigation Underway

The State of the Virtual CISO Report: MSP/MSSP Security Strategies for 2025

The true cost of cybercrime for your business

The Windows 10 clock is ticking: here are 5 ways to save your old PC in 2025 (most are free)

Threat Actor Claims Breach of Tamil Nadu Labour Department Data

Threat Actor Claims to Sell 7.5 Million Bitfinex User Records for 25 BTC

Threat Actor Claims to Sell Unauthorized Access to American Company with $100 Billion Revenue

Threat Actor Offers Access to Spanish College IT Systems

Threat Actors Abuse Red Team Tool MacroPack to Deliver Malware

Transport for London staff faces systems disruptions after cyberattack

Transport for London outages drag into weekend after cyberattack

UK staffing agency exposes gig workers: passports, visas, and more made public

US and Allies Accuse Russian Military of Destructive Cyber-Attacks

US, Britain, EU to sign first international AI treaty

US Charges Russian Military Members Over WhisperGate Cyberattack

US DHS Seeks Input to Enhance Maritime Port Security

U.S. oilfield giant Halliburton says cyber attack compromised customers’ sensitive personal information

Veeam Patches Critical Vulnerabilities in Enterprise Products

Veeam Security Bulletin Fixes Critical Vulnerabilities for Backup & Replication, Veeam ONE and More

What is ACK Piggybacking?-Definition, Attack Types & Prevention

YouTube terminating Tenet Media channel after US indictment

05/09

7 weeks after ransomware attack, still no answers why Columbus was targeted by hackers

25 Best Managed Security Service Providers (MSSP) in 2024

AI Marketing Firm Relevvo Allegedly Breached

Australia Proposes New Rules for Human Oversight, Transparency in AI

Bitcoin ATM scams on the rise: Americans lose $65 million in six months

Builders Mutual Insurance Co. data breach class action to proceed with settlement

Chinese-Speaking Hacker Group Targets Human Rights Studies in Middle East

Cisco Fixes Two Critical Flaws in Smart Licensing Utility to Prevent Remote Attacks

Cisco Systems Manager for Windows Vulnerability Let Attackers Escalate Privilege

Cisco Warns of Critical Vulnerabilities in Smart Licensing Utility

Cloud Access Security Brokers (CASBs): Are They Still Relevant?

Consumers urge FTC to crack down on tech companies gatekeeping their devices

Critical Cisco Smart Licensing Vulnerabilities Let Attackers Take Over System

Critical Update Alert! Patch Your Android Device Now (September 2024 Bulletin)

Crypto Phishing App Angel Drainer Returns, 300+ Malicious dApps Deployed in 4 Days

Data breaches reported by three Californian healthcare providers

Despicable Hackers Hold Disabled Bus Users To Ransom In New Attack

Disney data breach: Financial, strategic, and personal information leaked

Earth Lusca adds multiplatform malware KTLVdoor to its arsenal

Enterprise DSPM for Fortune 500 – 1touch.io is your go-to solution

Fake OnlyFans Checker Tool Infects Hackers with Lummac Stealer Malware

Fake OnlyFans cybercrime tool infects hackers with malware

FBI Issues Alert on North Korean Cyber Attacks Targeting Cryptocurrency

Federal Trade Commission (FTC) cites Verkada for alleged CAN-SPAM violations

File-sharing phishing attacks zero-in on the financial sector

Granville Recreation District offering free credit monitoring services after phishing scam

Hacker slip-up? 762,000 car owners have vehicles, home addresses exposed online

Hearing Aid Company WS Audilogy Breach: Patients Info, Employees’ Bank Details Leaked

How 32 Russian Cybersquatted Domains Were Used in a Campaign to Sway US Voters

How Microchip Technology Is Recovering After a Cyberattack: Lessons for All Businesses

How to gamify cybersecurity preparedness

Information Commissioner’s Office (ICO) proposes £6M fine on software provider to the NHS after ransomware breach

Iran pays threat actor’s ransom after cyber attack on nation’s banking system

Is Russian group APT28 behind the cyber attack on the German air traffic control agency (DFS)?

JAS Forwarding Hit by Ransomware Attack, Data Leaked

LiteSpeed Cache bug exposes 6 million WordPress sites to takeover attacks

Malware Attackers Using MacroPack to Deliver Havoc, Brute Ratel, and PhantomCore

Microchip Technology Confirms Personal Information Stolen in Ransomware Attack

Microchip Technology confirms theft of employee data

New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm

New Supply Chain Attack “Revival Hijack” Risks Massive PyPI Takeovers

NIST Cybersecurity Framework (CSF) and CTEM – Better Together

No evidence that TP-Link routers are a Chinese security threat

OnlyFans Hackers Targeted With Infostealer Malware

Palo Alto Networks Acquires IBM’s QRadar in $500 Million Deal

Park ‘N Fly Data Breach Impacts a Million Customers

Penpie Releases Hack Report; Hacker Moves 1000 ETH to Tornado

Phishing Remains Top Cyber Threat Despite Drop in Incidents

Planned Parenthood confirms cyberattack as RansomHub claims breach

Planned Parenthood May Have Been Breached By RansomHub Group

Play ransomware group claims a major cyber attack on U.S. chipmaker Microchip

PyPI Revival Hijack Puts Thousands of Applications at Risk

Quishing, an insidious threat to electric car owners

Researcher Finds Unfixable Yet Tricky to Exploit Flaw in Yubikeys

Russian Blamed For Mass Disinformation Campaign Ahead of US Election

Telegram Addresses Deepfake Porn Concerns in South Korea

The biggest cyber attacks of 2024

The fundamentals of API security

The future of automotive cybersecurity: Treating vehicles as endpoints

The Future of Loyalty: AI-Driven and Personalized

Threat Actor Claims to Sell Access to Thai Financial Company on Dark Web

Tor Browser 13.5.3 Released, What’s New?

Tor Browser 13.5.3 Update Improves Privacy and Stability Across Devices

Transport for London confirms cyber attack but normal operations remain unaffected

Trump family crypto project targets stablecoins as global US dollar protector

Ukrainian soldiers targeted with data-stealing malware to harvest GPS coordinates

U.S. Places $1 million Bounty for Russian Hacker Tim Stigal

U.S. Seizes 32 Pro-Russian Propaganda Domains in Major Disinformation Crackdown

vCISO services thrive, but challenges persist

Veeam Releases Security Updates to Fix 18 Flaws, Including 5 Critical Issues

Veeam warns of critical RCE flaw in Backup & Replication software

WazirX hacker launders $10 million through Tornado Cash

04/09

6 things hackers know that they don’t want security pros to know that they know

12 hottest IT security certs for higher pay today

Active Ransomware Groups Increase by 57% as Ransomware Landscape Fragments

Actively Exploited Android Zero-Day Elevation of Privilege vulnerability Patched

Alert for Shein shoppers: Beware of phishing emails offering free clothing prizes

Alleged Data Breach at SchenkYou: A Threat Actor Claims to Sell 6 Million Records on Dark Web

Android Users Urged to Install Latest Security Updates to Fix Actively Exploited Flaw

APP Fraud Dominates as Scams Hit All-Time High

Blackwired Launches ThirdWatch℠, A Paradigm Shift in Cybersecurity

CBIZ Benefits & Insurance Services discloses data breach affecting client information

CEO's Arrest Will Likely Not Dampen Cybercriminal Interest in Telegram

Cisco fixes root escalation vulnerability with public exploit code

Cisco warns of backdoor admin account in Smart Licensing Utility

Clearview AI Faces €30.5M Fine for Building Illegal Facial Recognition Database

Clearview AI Fined €30.5m by Dutch Watchdog Over Illegal Data Collection

Computer glitch nearly drowns Amsterdam, utility worker saves the day

Criminal IP Earns PCI DSS v4.0 Certification for Top-Level Security

Criminal IP Secures PCI DSS v4.0 Certification, Enhancing Payment Security with Top-Level Compliance

‘Critical’ cyber attack on pension fund ‘almost certain’

Crypto scammers hack Trump family members' X accounts

Cyber attack on Tennessee-based healthcare systems provider affected over 400k patients

DDoS Attacks Hit France Over Telegram’s Pavel Durov Arrest

Discontinued D-Link DIR-846 routers are affected by code execution flaws. Replace them!

European data privacy watchdog closes case against X over its Grok AI bot

Fake GlobalProtect VPN Downloads Used to Spread WikiLoader Malware

Família de Trump é alvo de ataque hacker para promover golpe com criptomoedas

FTX Collapse Exposes Crypto Fund to SEC Scrutiny, Results in Penalty

Google backports fix for Pixel EoP flaw to other Android devices

Hackers Abuse Red Team Tool MacroPack To Deliver Multiple Malicious Payloads

Hackers inject malicious JS in Cisco store to steal credit cards, credentials

Hackers Use Fake GlobalProtect VPN Software in New WikiLoader Malware Attack

Halliburton Confirms Unauthorized Third-Party Access Led to Data Breach After August Cyberattack

Halliburton reveals data stolen in August cyberattack

Head Mare hacktivist group targets Russia and Belarus

High-Risk Vulnerabilities Discovered in Zyxel Firewalls: What You Need to Know

Hospital Português é alvo de invasão hacker e pacientes ficam sem acesso a resultados de exames e histórico de atendimentos

INE Security Announces 5 Practical Steps to Elevate Cyber Defense Strategies

Initial Access Brokers Target $2bn Revenue Companies

Ireland’s privacy watchdog ends legal fight with X over data use for AI after it agrees to permanent limits

Linux Ransomware Threats: How Attackers Target Linux Systems

Mad Liberator Added Logistics Company YCH as Their New Victim

Malaysian Government, Politicians Targeted with Babylon RAT

Malaysia’s Data Protection Bill: Public Consultation on Data Breach Notification Ends on September 6

Malicious Actors Possibly Used MacroPack Red-Teaming Tool to Deploy Malicious Payloads

Malwarebytes review: Solid, free protection with a user-friendly interface

Massive DDoS poured 3.15 billion packets per second on Microsoft server

Massive QR Code Phishing Campaign Exploits Microsoft Sway to Steal Credentials, 2FA Codes, Cookies

New Emansrepo Malware Weaponizing HTML Files To Attack Windows Users

New Eucleak attack lets threat actors clone YubiKey FIDO keys

North Korea Targeting Crypto Industry, Says FBI

North Korean Hackers Targets Job Seekers with Fake FreeConference App

Only 25% of organizations are prepared to manage a DDoS attack

OpenBAS: Open-source breach and attack simulation platform

Planned Parenthood confirms breach, RansomHub gang claims responsibility

PoC Exploit Released for 0-Day Windows Kernel Privilege Escalation Vulnerability

Protecting national interests: Balancing cybersecurity and operational realities

Radiological Society of North America (RSNA) reports data breach impacting sensitive information

Rage Stealer Rebranded as Angry Stealer, Now Uses Telegram Bot for Data Theft

Ransomware attack on Toronto District School Board compromised students' personal information

Ransomware attacks escalate as critical sectors struggle to keep up

Red Teaming Tool Abused for Malware Deployment

Report Shows a 56 Percent Increase in Active Ransomware Groups in First Half of 2024

Researchers Find Over 22,000 Removed PyPI Packages at Risk of Revival Hijack

Researchers Unpacked ViperSoftX Malware’s Evasion Tactics And Techniques

Revival Hijack supply-chain attack threatens 22,000 PyPI packages

RomCom Group Exploiting Microsoft Office 0-day To Deploy Ransomware

RSNA reports data breach impacting sensitive information

Samba 4.21 comes with upgraded security features

Security experts discuss CISA’s cyber incident reporting portal

Sites do Governo do Distrito Federal ficam fora do ar e servidores suspeitam de ataque hacker

Telegram apologizes for handling of deepfake porn content

That massive Pixel security flaw has been patched

That massive Pixel security flaw reported last month has been patched

The CEO’s Guide to Avoiding Phishing Scams

The New Effective Way to Prevent Account Takeovers

The number of active ransomware groups is on the rise, research finds

There was a 56% increase in ransomware groups in H1 2024

They'll deny it, but your phone is definitely listening in

Threat Actor Allegedly Claims Leak of BMW Customer Database

Threat Actor Claims to Sell 1.4 Million Customer Records from Data Bilgi İşlem

Travelers Beware of Sophisticated Booking.com Phishing Attack

Trio of Cybercriminals Behind $10 Million 2FA Bypass Operation Plead Guilty

‘Unusual’ Voldemort cyberespionage attack impersonates tax authorities

US Government Set Out to Improve Internet Routing Security

VMware on macOS affected by high-severity flaw: attackers can run arbitrary code

Vulnerability allows Yubico security keys to be cloned

Zyxel Critical Vulnerability Let Attackers Perform OS Command Injection

Zyxel fixed critical OS command injection flaw in multiple routers

Zyxel Patches Critical OS Command Injection Flaw in Access Points and Routers

What is an Access Matrix?

Worried about the YubiKey 5 vulnerability? Here's why I'm not

YubiKeys cryptographic Flaw Let Attackers Clone Devices by Extracting Private Key

03/09

44% of foiled ransomware attacks are caught during lateral movement

A third of organizations suffered a SaaS data breach this year

Active Ransomware Groups Surge by 56% in 2024

Alleged Data Breach at EnglishCentral: Threat Actor Claims to Sell Customer Information on Dark Web

Arbitrary Code Execution Vulnerabilities Affecting WPS Office – Technical Analysis

August sees $63m lost in crypto phishing despite fewer victims: Scam Sniffer

Bank Rakyat stops possible data breach

Bonjour Network Service Vulnerable to Privilege Escalation Attacks

Canonical Addresses Critical Linux Kernel AWS Vulnerabilities with New Patches

Canvey Infant School in Essex dealing with a significant cyber incident

CBIZ Discloses Data Breach: Vulnerability Exploited, Client Data Stolen

CERT-IN Warns About Critical Vulnerabilities in Palo Alto Networks Applications

Chinese Influence Operation Spamouflage Targets U.S. Ahead of 2024 Election

City of Columbus Sues Researcher After Ransomware Attack

Civil Rights Groups Call For Spyware Controls

Clearview AI fined €30.5 million for unlawful data collection

Clearview AI fined $33 million and declared “illegal”

Cloud providers must own up to their part in the current state of insecurity

Cobalt Strike deployment sought by covert China-targeted campaign

Cost of a data breach: Cost savings with law enforcement involvement

Could Russia be behind Transport for London (TfL) cyber attack amid rise in ransomware?

Critical flaw in Zyxel’s secure routers allows OS command execution via cookie (CVE-2024-7261)

Crypto phishing scams surge 215% in August: $63 million stolen despite fewer victims

Cyber A.I. Group Announces Global Presentation

Cyberattack Hits Shoshone-Bannock Tribes: Key Services Unaffected, Recovery in Progress

Cybersecurity M&A Roundup: CheckPoint Boosts SOC Offering with Cyberint

D-Link Declines to Patch RCE Vulnerabilities That Affected End-of-Life Routers

D-Link says it is not fixing four RCE flaws in DIR-846W routers

Decoding the Puzzle: Cicada3301 Ransomware Threat Analysis

Dutch DPA Imposes €30.5M Fine on Clearview AI Over ‘Illegal Database’ of Facial Recognition

Emerging RaaS group Cicada3301 identified with suspected links to ALPHV/BlackCat

Ethics for ransomware: To pay or not to pay?

Ex-Engineer Charged in Missouri for Failed $750,000 Bitcoin Extortion Attempt

FBI warns crypto firms of aggressive social engineering attacks

Federal Trade Commission (FTC) issues $3 million fine for security camera firm, issuing penalties for a range of violations

Forescout reports cyber threats surge, state-sponsored hackers target VPN vulnerabilities, ransomware attacks rise

FTC: Over $110 million lost to Bitcoin ATM scams in 2023

Google Chrome Vulnerability Allow Attackers To Execute Arbitrary Code Remotely

Hacker Leaks Data of 390 Million Users from VK, a Russian Social Network

Hacking Poisoning GlobalProtect VPN To Deliver WikiLoader Malware On Windows

Hacktivists Exploits WinRAR Vulnerability in Attacks Against Russia and Belarus

Halliburton confirms data stolen in recent cyberattack

Housing charity’s data leaked on dark web after cyber attack

How ransomware tactics are shifting, and what it means for your business

How to ensure cybersecurity strategies align with the company’s risk tolerance

Indian Crypto Exchange WazirX Faces Uncertain Future After Cyberattack

Is Tornado Cash Illegal? WazirX Hacker Transferred 2500 ETH Tokens

Ivanti Virtual Traffic Manager RCE Vulnerability (CVE-2024-7593) Exploit Released

JAS Forwarding recovers from cyber-attack, but saw 'many stolen credentials'

Joint cybersecurity advisory warns of Iran-based attacks

LulzSec Black Claims Cyberattacks on Emirati Government and Other Sector Targets

Managing low-code/no-code security risks

Musely AI Allegedly Breached 100K User Information is For Sale

National Public Data Breach Confirmed: Here’s What to Do Next

New Flaws in Microsoft macOS Apps Could Allow Hackers to Gain Unrestricted Access

New Morphisec report finds links between emerging Cicada3301 ransomware and BlackCat

New ransomware variant has BlackCat-like similarities, report says

New Report Reveals Significant Surge in Active Ransomware Groups

New Rust-Based Ransomware Cicada3301 Targets Windows and Linux Systems

North Korean Hackers Actively Exploiting Chromium RCE Zero-Day In The Wild

Oil titan Halliburton confirms data was stolen in cyberattack

Palo Alto's GlobalProtect VPN Spoofed to Deliver New Malware Variant

Rocinante Trojan Poses as Banking Apps to Steal Sensitive Data from Brazilian Android Users

Russian state-owned social network VK breached again, affecting 390M users

Secrets Exposed: Why Your CISO Should Worry About Slack

Security Camera Firm Verkada Fined US$2.95 Million by FTC Over Cybersecurity Lapses

STF, Anatel e PF relatam que foram alvo de ataque hacker nos últimos dias

STF, PF e Anatel sofrem ataque cibernético

Swan Bitcoin CEO Cory Klippsten Alerts Users to be Aware of Phishing Emails

Switchbot unveils wallet-finder card with smart home integration

TfL Claims Cyber-Incident is Not Impacting Services

The attack with many names: SMS Toll Fraud

Three men plead guilty to running MFA bypass service OTP.Agency

Three Plead Guilty to Running MFA Bypass Site

Transport for London Faces Cyber Attack – Operation Distributed

Transport for London is dealing with a cyber security incident

Transport for London suffers ‘ongoing’ cybersecurity incident, leading to potential traffic issues

U.S. oil giant Halliburton disclosed a data breach

Verkada pay $2.95 Million Failed to Secure Data Lead to Massive Breach

VMware Fusion Vulnerability Let Attackers Execute Malicious Code

Vulnerabilities in Microsoft apps for macOS allow stealing permissions

Zyxel warns of critical OS command injection flaw in routers

Website Operators Arrested for Running an MFA Bypass Site

What is Access Management?

02/09

10 Best Data Protection Tools In 2024

10 Best Vulnerability Management Tools In 2024

59% of Asia/Pacific Enterprises Targeted by Ransomware in 2023, Exposing Cybersecurity Vulnerabilities

87% of executives are concerned about bot attacks and AI fraud

170 million strong data leak traced to US data broker

A new variant of Cicada ransomware targets VMware ESXi systems

A Threat Actor Claims to Sell Database of Boutiqaat

‘Accidental’ Data Breach Leaks Police Ombudsman for Northern Ireland Staff Details

Admins of MFA bypass service plead guilty to fraud

As children go back to school, countries are imposing smartphone bans

Atlantic General Hospital reaches $2.25m settlement with patients over 2023 data breach

Average cost of industrial data breaches soars

Business services giant CBIZ discloses customer data breach

Chinese organizations are being hit by Cobalt Strike malware from within China

Cicada3301 Ransomware Attacks Windows and Linux/ESXi Hosts

Cicada3301 Ransomware Group Emerges From the Ashes of ALPHV

Complying with PCI DSS requirements by 2025

Consulting Radiologists says February data breach compromised close to 600,000 patients

Crypto hacks exceed $300 million in a single month

Cybersecurity Tips For Businesses Using Remote Workers

CyberVolk Allegedly Threatens National Oceanic and Atmospheric Administration (NOAA) with Data Leak and Ransom Demand

Damn Vulnerable UEFI: Simulate real-world firmware attacks

Data Breaches for the Month August 2024

For Windows 11 setup, which user account type should you choose? How to decide

Freight Forwarder JAS Worldwide Restores Operations After Cyberattack

Global Phishing Scam Hits Canadian Pizza Chains for Credit Card Data

Godzilla Fileless Backdoor Exploits Atlassian Confluence Vulnerability CVE-2023-22527

Hackers poison Google search results by spreading malware as spoofed VPN solution

Hacktivist Group Exploit WinRAR Vulnerability to Encrypt Windows & Linux

How Phishing Messages Break Through Email Filters – Report

ICO reprimands Labour Party over delays in handling subject access requests

Investigation launched after data breach at Police Ombudsman’s office

Irish Wildlife Park Warns Customers to Cancel Credit Cards Following Breach

Keeping up with automated threats is becoming harder

Kootenai Health faces federal class action over alleged data breach

LockBit Claims Attack on Canada’s Largest District School Board as Data Leak is Confirmed

Lockbit gang claims the attack on the Toronto District School Board (TDSB)

Lumma Stealer malware linked as project fixes in GitHub comments

Malicious npm Packages Mimicking 'noblox.js' Compromise Roblox Developers' Systems

Microsoft Observed A New Tickler Malware Attack Satellite Devices

Microsoft vulnerability that could enable data theft is now patched

Millions of DirecTV customers lose access to ESPN, ABC, other Disney-owned channels

Monday hits two UK bank apps with outages

Next-Generation Attacks, Same Targets - How to Protect Your Users' Identities

New Latrodectus Attacking Users with Enhanced Capabilities & Evasion Techniques

New ManticoraLoader Malware Attacking Citrix Users To Steal Data

New ransomware group is hitting VMware ESXi systems hard

New Voldemort Malware Using Google Sheets To Store Stolen Data

North Korean Hackers Attack Developers Via Malicious NPM Packages

North Korean hackers exploit Chrome zero-day to target crypto users

North Korean Threat Actor Exploits Chromium Zero-Day Vulnerability

Patelco Credit Union says ransomware attack impacted over 700,000 members

RansomHub Ransomware Group Targets 210 Victims Across Critical Sectors

Ransomware crisis deepens as attacks and payouts rise

Ransomware recovery: 8 steps to successfully restore from backup

Real Hospital Português, no Recife, sofre ataque hacker

Record-Breaking 3.15 Billion Packets Per Second DDOS Attack Towards Minecraft Server

Roblox devs under attack by new malicious npm campaign

Russian Hackers Suspected in German Air Traffic Control Deutsche Flugsicherung Cyberattack

SafeTech Labs Takes Aim at $52B Digital Legacy Industry with World’s First Fully Comprehensive Digital Legacy Solution

Scores of Organizations Hit By Novel Voldemort Malware

Security camera company Verkada agrees to pay FTC almost $3M

Software supply chain experiences almost 1 attack every 2 days

South Korea Police Investigates Telegram Over Deepfake Porn

Strategies to Balance Frictionless User Experience with Robust Security

Telegram under investigation in South Korea over deepfakes

Tracelo Location Tracker Data Breach: 1.4 Million Users’ Data Dumped Online

Transport for London discloses ongoing “cyber security incident”

US Authorities Issue RansomHub Ransomware Alert

Verkada Facing $3m Penalty After Hackers Viewed Sensitive Video Footage

Verkada to pay $2.95M for security failures leading to breaches

Voldemort espionage malware hits organizations across the globe

VPNs on the rise in Brazil after X ban, despite government threats

Webinar: Learn to Boost Cybersecurity with AI-Powered Vulnerability Management

What happens when you get caught hacking WiFi

Why Incident Response Planning is Critical for Cybersecurity Resilience

01/09

7 password rules to live by in 2024, according to security experts

A Threat Actor Alleged 0-Day Vulnerability in Popular WordPress Plugin

An air transport security system flaw allowed to bypass airport security screenings

Cicada3301 ransomware’s Linux encryptor targets VMware ESXi systems

Class action filed after Kootenai Health data breach

Crypto losses to hacks exceed $313M in August

Hackers Steal $313.86M in Crypto Across Over 10 Incidents in August

Names, payment and other customer details of this condom maker may have leaked

Phishing campaign delivers Android banking malware for fraudulent transactions

Daily News - Agosto (25/08 - 31/08) - 35 Semana de 2024