Daily News - Setembro / Outubro (29/09 - 05/10) - 40 Semana de 2024

Cyber Security, Hacking, Privacy and Information Security News --- Daily Updates !! Weekly Resume...

05/10

Apple Releases Critical iOS and iPadOS Updates to Fix VoiceOver Password Vulnerability

Disney Faces Lawsuit Over Data Breach Threatening Hundreds of Employees

Dutch Police Hacked, 63,000 Officers’ Details Exposed

EigenLayer diz que hack de US$ 5,7 milhões é um incidente "isolado", sem vulnerabilidade no protocolo

Hacker reveals which passwords you should never use

Hackers chineses invadem sistemas de vigilância dos EUA

‘Light at end of tunnel’ for London NHS after June cyber attack

Member sues USAA over data breach that impacted more than 30,000 customers

Ministry Servers “Hacked” and Secret Data Theft: Young Hacker Arrested

MoneyGram: No evidence ransomware is behind recent cyberattack

Potentially Catastrophic Cyber-Attack by China May Have Penetrated U.S. Wiretaps

The impacts of a cyber-attack on TfL could soon be resolved, Sadiq Khan has suggested

04/10

2 in 3 healthcare firms, including insurers, hit by ransomware

5 reasons to update your iPhone to iOS 18.0.1 right now

45% of cybersecurity leaders are stressed about budget restraints

100+ domains seized to stymie Russian Star Blizzard hackers

About a quarter million Comcast subscribers had their data stolen from debt collector

Agence France-Presse (AFP) Reports Potential Data Breach to French Authorities

Batcom Suffers From Alleged Data Breach

Best practices for implementing threat exposure management, reducing cyber risk exposure

Building Cyber Resiliency Through Governance

Cloudflare Mitigates Record Breaking 3.8 Tbps DDoS Attack

Cloudflare Thwarts Largest-Ever 3.8 Tbps DDoS Attack Targeting Global Sectors

Columbus Mayor Andrew Ginther discloses how much money city has spent on cyberattack

CRI Releases Guidance on Avoiding Ransomware Payments

Criminals Are Testing Their Ransomware Campaigns in Africa

Crypto phishing losses drop to $43m in September: Scam Sniffer

Cyberattack Disrupts Michigan’s Largest County

Cybercriminals capitalize on poorly configured cloud environments

Cybersecurity incident at Idaho's Weiser Memorial Hospital persists after month-long probe

Cybersecurity professionals are turning to AI as more lose control of detection tools

DoJ, Microsoft Seize 100 Russian Phishing Sites Targeting US

Experts Warn of DDoS Attacks Exploiting Linux Printing Vulnerabilities

Fake Trading Apps for Android, iOS Lead to Pig Butchering Scam

Five percent of all Adobe Commerce and Magento stores hacked, researchers say

Google removed Kaspersky’s security apps from the Play Store

Google removes Kaspersky's antivirus software from Play Store

Highline Public Schools confirms ransomware behind shutdown

How Cloud-Based Solutions Are Transforming Software Quality Assurance

How Confidence Between Teams Impacts Cyber Incident Outcomes

How to Get Going with CTEM When You Don't Know Where to Start

Irish privacy regulator probes Ryanair's use of facial recognition

Is TikTok leading users into a credential-stealing trap?

MaLDAPtive: Open-source framework for LDAP SearchFilter parsing, obfuscation, and more!

Man fears being target of identity theft after personal details stolen in cyber attack

Manufacturing and production industries are facing a 41% increase in ransomware attacks over four years – with no end in sight

Medical devices maker PRC-Saltillo confirms major breach of patient records

Microsoft and DOJ seized the attack infrastructure used by Russia-linked Callisto Group

Microsoft Thwarts Russian 'Spear Phishing' Campaign Targeting 2024 Election

New MedusaLocker Ransomware Variant Deployed by Threat Actor

New Perfctl Malware targets Linux servers in cryptomining campaign

Notable post-quantum cryptography initiatives paving the way toward Q-Day

October 2024 Patch Tuesday forecast: Recall can be recalled

Outlast game development delayed after Red Barrels cyberattack

Over 80% of phishing sites now target mobile devices

Phishing Scams Led to $46M Loss from Over 10K Crypto Addresses in September

Quishing: The New Phishing Scam You Need to Know About

Russia arrests US-sanctioned Cryptex founder, 95 other linked suspects

Ryanair flight booking practices catch eye of EU privacy watchdog

Seguro contra ataque hacker cresce 512% no Brasil

Sellafield Fined for Cybersecurity Failures at Nuclear Site

Sellafield nuclear facility fined £332,000 over significant data security failings

Swiggy reports two data breaches amidst growing cybersecurity concerns

To catch a predator admin: the power of OSINT

UK nuclear site Sellafield fined $440,000 for cybersecurity shortfalls

Universal Music Group discloses breach affecting personal data

U.S. and Microsoft Seize 107 Russian Domains in Major Cyber Fraud Crackdown

WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks

03/10

10% of IT professionals have zero visibility measures

14 DrayTek Routers Vulnerabilities Let Hackers Hijack 700K Devices Remotely

15% of office workers use unsanctioned GenAI tools

86% of Users Neglect Critical Router Security, Says Latest Survey

£750,000 fine for Police Service of Northern Ireland (PSNI) over data breach

AI could provide the cyber-risk crystal ball every CISO needs

ANY.RUN Upgrades Threat Intelligence to Identify Emerging Threats

Arc Browser Announces Bug Bounty Program Following RCE Vulnerability

Baptist Health Medical Center-Drew County releases statement following data breach

C-level executives are a weak point for cybersecurity

CeranaKeeper Emerges as New Threat to Thai Government Networks

Chrome Security Vulnerabilities Let Attackers Execute Arbitrary Code

CISA Director Assures: Foreign Interference Cannot Alter US Election Results

CISA Launches 21st Cybersecurity Awareness Month: Secure Our World

CISA releases threat response guide for K-12 schools

Cisco Nexus Vulnerability Let Attackers Launch Command Injection Attack

Cisco Small Business Routers Vulnerabilities Allow Attacker Exploits It Remotely

CKS Packaging Confirms Recent Data Breach in Filings with State Attorney General Offices

Cloudflare blocks largest recorded DDoS attack peaking at 3.8Tbps

Cloudflare mitigated new record-breaking DDoS attack of 3.8 Tbps

Crypto-Doubling Scams Surge Following Presidential Debate

CUPS vulnerabilities could be abused for DDoS attacks

CyberMonth: Inside Ransomware.live, Free Ransomware Intelligence for Everyone

Cybersecurity Spending on the Rise, But Security Leaders Still Feel Vulnerable

Detroit-area government services impacted by cyberattack

Dutch Police: ‘State actor’ likely behind recent data breach

Email Phishing Attacks Surge as Attackers Bypass Security Controls

‘Embarrassingly Bad’ Zimbra RCE Vulnerability Under Active Attack. Patch Now.

Fake trading apps infiltrate major app stores with a pig-butchering scheme

FIN7 Gang Hides Malware in AI “Deepnude” Sites

Find Great People Data Breach Affects Personal Information of 12,205 Individuals

Fraudulent Trading Apps Fuel Global Pig Butchering Scheme

Hacker invade firma de investimentos e rouba R$ 209 milhões em criptomoedas

Healthcare ransomware attacks spike as other sectors see decline

How to use the Apple Passwords app

INTERPOL Arrests 8 in Major Phishing and Romance Fraud Crackdown in West Africa

Is AI making cyber-hacking easier?

Ivanti Endpoint Manager Flaw Actively Targeted, CISA Warns Agencies to Patch

Ivanti Endpoint Manager Vulnerability Public Exploit is Now Used in Cyber Attacks

Jovem hackeia NASA para relatar bugs em site e não recebe nenhuma recompensa; ele fez isso de novo e acabou recebendo uma resposta

Kansas’ City of Arkansas Water Treatment Facility Hit by a Suspected Ransomware Cyber Attack

Linux malware “perfctl” behind years-long cryptomining campaign

Litespeed Cache Plugin Flaw Allows XSS Attack, Update Now

LockBit Ransomware and Evil Corp Members Arrested and Sanctioned in Joint Global Effort

Microsoft and DOJ disrupt Russian FSB hackers' attack infrastructure

Microsoft and US Government Disrupt Russian Star Blizzard Operations

Microsoft updates Defender to automatically detect unsafe WiFi connections

Millions of Enterprises at Risk: SquareX Shows How Malicious Extensions Bypass Google’s MV3 Restrictions

New Linux Malware ‘Perfctl’ Targets Millions by Mimicking System Files

New Perfctl Malware Targets Linux Servers for Cryptocurrency Mining and Proxyjacking

New Zealand hearing clinic Bloom warns of massive data theft in ransomware attack

Nigerian Hackers Sentenced for Business Email Compromise Targeting Businesses in U.S

North Korean Hackers Using New VeilShell Backdoor in Stealthy Cyber Attacks

Northern Ireland Police Data Leak Sees Service Fined by ICO

Office for Civil Rights (OCR) Settles Fourth Ransomware Investigation

Outlast studio Red Barrels hit by cyber attack, over 1.8TB of data allegedly stolen

Over 700k DrayTek routers could be at risk from security threats

Over 4,000 Adobe Commerce, Magento shops hacked in CosmicSting attacks

PoC Exploit Released for Microsoft Office 0-day Flaw – CVE-2024-38200

Police Service of Northern Ireland (PSNI) gets £750k slap on the wrist after data breach that exposed almost 10,000 people

Private US companies targeted by Stonefly APT

Rackspace hit by data breach after exploited Zero-day vulnerability in a third-party tool

Ransomware activity shows no signs of slowing down

Record Breaking 3.8 Tbps DDoS attack With Packet rate of 340 million Pps

Red Barrels IT Systems Breached by Nitrogen Ransomware Group

Red Barrels Reportedly Hit With Cyber Attack With Over 1TB of Data Compromised

Russian authorities bust cybercriminal-focused crypto payment ring

Samsung’s new update getting phones stuck in boot loop

Spotting AI-generated scams: Red flags to watch for

Telegram revealed it shared U.S. user data with law enforcement

Thousands of Adobe Commerce e-stores hacked by exploiting the CosmicSting bug

Thousands of Zimbra servers attacked following email account compromise

Three hard truths hindering cloud-native detection and response

Tor Browser 13.5.6 Released – What’s New!

True horror story for Outlast devs: major data breach will result in delays

Two Harvard students turn Meta’s smart glasses into a privacy nightmare

US government flags major Ivanti security flaw, so patch now

Wave of record-breaking DDoS attacks originating from compromised WiFi routers

Whitepaper: Reach higher in your career with cloud security

Why your password policy should include a custom dictionary

02/10

4 new LockBit-related arrests, identities of suspected Evil Corp members, affiliates revealed

5 Must-Have Tools for Effective Dynamic Malware Analysis

14 underrated pentesting tools to round out your red team arsenal

80% of Manufacturing Firms Have Critical Vulnerabilities

$760 million cost of ransomware attacks now on fraud balance sheets

ACSC and CISA Launch Critical OT Cybersecurity Guidelines

Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit

Alert: Over 700,000 DrayTek Routers Exposed to Hacking via 14 New Vulnerabilities

Alleged BCP Bank Data Shared Again

Andariel Hacking Group Shifts Focus to Financial Attacks on U.S. Organizations

Cambodia Arrests Investigative Journalist Amidst Concerns Over Press Freedom

Casino Fandango Files Official Notice of Data Breach

China-Linked CeranaKeeper Targeting Southeast Asia with Data Exfiltration

Cincinnati Public Schools targeted in cyberattack, investigating potential data breach

CISA: Network switch RCE flaw impacts critical infrastructure

CISA’s platform receives 2,400 unique vulnerability disclosures, researchers paid $335K

Critical Ivanti RCE flaw with public exploit now used in attacks

Critical Zimbra Postjournal flaw CVE-2024-45519 actively exploited in the wild. Patch it now!

Critical Zimbra RCE flaw exploited to backdoor servers using emails

Critical Zimbra RCE vulnerability under mass exploitation (CVE-2024-45519)

CyberDragon Announces Cyber Operation Against South Korea

Cybersecurity hiring slows, pros’ stress levels rise

Data leak hits Latin America’s financial institutions, leads point to fintech app

Decade-Old Linux Vulnerability Can Be Exploited for DDoS Attacks on CUPS

DrayTek fixed critical flaws in over 700,000 exposed routers

Enhancing firewall management with automation tools

European police forces deal blow to ransomware group LockBit

Evil Corp Cyber Criminals Group Identity Exposed Along with Lockbit Affiliate

Fake browser updates spread updated WarmCookie malware

Fake Job Applications Deliver Dangerous More_eggs Malware to HR Professionals

Fake Trading Apps Target Victims Globally via Apple App Store and Google Play

Fortinet confirms data breach, files stolen

FTC can proceed with antitrust claims against Amazon, judge rules

Global LockBit Crackdown Leads to Server Sequestration, Arrests

Hacker made millions from breaking into business Office 365 accounts

Hawaii-based community clinic says ransomware attack affected over 120,000 patients

IBM report finds phishing remains intrusion tactic of choice for threat groups

Lockbit dismantling progresses

Meta Teams Up with Banks to Target Fraudsters

New Bluetooth Vulnerability Leak Your Passcode to Hackers While Pairing

News agency AFP notifies French authorities of potential data breach

Obsidian Security Warns of Rising SaaS Threats to Enterprises

Pennsylvania township says ransomware attack compromised residents' personal data

Pig Butchering: Fake Trading Apps Target Crypto on Apple, Google Play Stores

Police arrested four new individuals linked to the LockBit ransomware operation

PyPI Repository Found Hosting Fake Crypto Wallet Recovery Tools That Steal User Data

Researchers Warn of Ongoing Attacks Exploiting Critical Zimbra Postjournal Flaw

Rhadamanthys information stealer introduces AI-driven capabilities

Roblox cheaters targeted by cybercriminals offering malicious gaming ‘hacks’

Royal Mail impersonated in Prince ransomware campaign

Russian Cyber Offensive Shifts Focus to Ukraine’s Military Infrastructure

Scots warned over fake Universal Credit app and phishing texts

Security leaders discuss INC ransomware attacks targeting healthcare

Share of Women in UK Cyber Roles Now Just 17%

Sniper Dz Phishing-as-a-Service (PhaaS) Platform Increasingly Used in Cyberattacks

Sono Bello data breach exposes sensitive information of customers and employees

Stonefly Group Targets US Firms With New Malware Tools

Suricata: Open-source network analysis and threat detection

Threat Actor Claims Breach of Indonesian Government Database

TIAA latest big firm to report data breach and hack

UK sanctions cyber-crime gang it says Russia charged with attacking NATO

Zimbra Remote Command Execution Vulnerability (CVE-2024-45519) – Exploit POC Released

What bots mean for businesses and consumers

01/10

3 easy microsegmentation projects

5 Actionable Steps to Prevent GenAI Data Leaks Without Fully Blocking AI Usage

9 types of phishing attacks and how to identify them

58% of organizations have experienced document-based identity fraud

8220 Hacker Group Added Hadooken & K4Spreader Tools To Their Arsenal

AFP News Agency’s Content Delivery Systems Hit by Cyberattack

AI-Powered Rhadamanthys Stealer Targets Crypto Wallets with Image Recognition

Alleged KintApp Breach Exposes High-Profiles From Thai Organizations

Alleged Sportstech Breach Leaked +44,000 Customer Data

Arc browser launches bug bounty program after fixing RCE bug

Australian e-tailer digiDirect customers' info allegedly stolen and dumped online

Authorities Unmasked LockBit Affiliate Evil Corp Key Member

Barbados Revenue Authority (BRA), police investigating data breach of vehicle registration data

Beware Of Fake Google Chrome Update That Delivers Malware

British Hacker Charged in the US For $3.75m Insider Trading Scheme

Brown Integrated Logistics Provides Notice of November 2023 Data Breach

CF Medical says FBCS data breach impacted more than 600,000 of its patients

CISA Commits to Revitalising Threat Sharing System Following Watchdog Report

CISOs are seemingly alone in their concerns about ransomware

Community Clinic of Maui says 123,000 affected by May cyberattack

Counterfeit HP printer cartridges use “sticker-in-the-middle” attacks to bypass restrictions

Customers told to 'stay extra vigilant' after cyber attack at 10 London railway stations

CyberMonth: How to Outsmart Novel Phishing Tactics and Techniques

Cybersecurity Awareness Month 2024: How Everyone Can Play a Role in Protecting the Digital World

Cybersecurity M&A Roundup: MasterCard and Visa Announce Cybersecurity Acquisitions

Data breach at Maui Healthcare Clinic impacts over 120,000 individuals following cyberattack

Data of 300k digiDirect customers leaked in alleged attack

Dell Suffers a Second Security Incident Hot on the Heels of an Employee Data Breach Impacting 10,000

Elastic report highlights growing cyber risks from AI-driven phishing and deepfakes

Evil Corp hit with new sanctions, BitPaymer ransomware charges

Evil Corp's LockBit Ties Exposed in Latest Phase of Operation Cronos

Fan forum leaks Miami Dolphins supporters’ private messages

Four LockBit ransom gang arrests, servers seized by Europol

Free Sniper Dz Phishing Tools Fuel 140,000+ Cyber Attacks Targeting User Credentials

Global Cyber Attacks to Double from 2020 to 2024, Report Finds

Global Wafers Subsidiary, MEMC, Confirms Recent Data Breach

Google Workspace Implements New Password Policies to Enhance Security

Hacker group attacks Ukraine and NATO countries

Hackers Exploiting Critical SolarWinds Serv-U Vulnerability In The Wild

Hackers Exploiting Docker Swarm, Kubernetes & SSH Servers In Large Scale

ISACA: European Security Teams Are Understaffed and Underfunded

Inside the trials and tribulations of a major ransomware attack

Iran-linked Threat Group Handala Actively Targets Israel

LockBit and Evil Corp Targeted in Anti-Ransomware Crackdown

Manufacturing and production industry is fighting with an 41% increase of ransomware attacks over 4 years – with no end in sight

Microsoft Defender Adds protection to Detect unsecured Wi-Fi connections Automatically

Microsoft fixes Outlook email sending issue for users with many folders

Microsoft fixes Windows KB5043145 reboot loops, USB and Bluetooth issues

Mr. Hamza Group Claim Leak of Sensitive Egyptian Army Data

MrHamza Claims Responsibility for Disabling Saudi Security Website

New Cryptojacking Attack Targets Docker API to Create Malicious Swarm Botnet

New Sophisticated Linux Malware Exploiting Apache2 Web Servers

New Variant Of XWorm Delivered Via Windows Script File

News agency AFP hit by cyberattack, client services impacted

New PyPI Malware Poses as Crypto Wallet Tools to Steal Private Keys

Nitrogen Ransomware Group Allegedly Targets Six New Companies

North Korea-linked APT Kimsuky targeted German defense firm Diehl Defence

North Korean Hackers Linked to Breach of German Missile Manufacturer

One year until Windows 10 ends: Here’s the security impact of not upgrading

Password management habits you should unlearn

Police arrest four suspects linked to LockBit ransomware gang

Rackspace monitoring data stolen in ScienceLogic zero-day attack

Ransomware Attack Forces Texas Level 1 Trauma Center to Divert Patients

Ransomware Attack Forces The University Medical Center (UMC) to Divert Emergency Patients

Ransomware attack forces UMC Health System to divert some patients

Recent Windows update causes restart loops and blue screens of death

Reducing credential complexity with identity federation

Richmond Community Schools (RCS) parent-teacher conferences canceled Thursday in aftermath of ransomware attack

Russian national indicted in ransomware attacks in US

SlowMist Q3 Report: Crypto Thefts Decline, Phishing Becomes More Sophisticated

Sniper Dz steals credentials from over 140,000 sites

T-Mobile to Pay $15.75m Penalty for Multiple Data Breaches

Ten Million Brits Hit By Fraud in Just Three Years

Threat Actor Allegedly Selling Zero-Day Android RCE Exploit for $800,000

Two-thirds of healthcare organizations hit by ransomware in past year: survey

U.K. Citizen Charged for Hacking into Computer Systems of U.S. Companies

U.K. Hacker Charged in $3.75 Million Insider Trading Scheme Using Hacked Executive Emails

UK regulator ICO launches investigation into MoneyGram data breach impacting global operations

UK, US, Australia Sanction Russian-Linked Evil Corp and LockBit Affiliates

UMC Health System diverted patients following a ransomware attack

U.S. CISA adds D-Link DIR-820 Router, DrayTek Multiple Vigor Router, Motion Spell GPAC, SAP Commerce Cloud bugs to its Known Exploited Vulnerabilities catalog

Use Windows event logs for ransomware investigations, JPCERT/CC advises

Vesta Admin Panel Vulnerability Allows Complete Linux Server Takeover

X-Force report reveals top cloud threats: AITM phishing, business email compromise, credential harvesting and theft

Western Digital My Cloud Devices Flaw Let Attackers Execute Arbitrary Code

What is Autonomous System? Types, Roles & ASN Definition

Windows 11 users, beware: A recent update has been causing constant reboots

30/09

$1.7M Lost In Bedrock DeFi Exploit Amid Rising Crypto Hacks In 2024

A British national has been charged for his execution of a hack-to-trade scheme

A Hacker's Era: Why Microsoft 365 Protection Reigns Supreme

AA warns of phishing emails and takes steps to beat scammers

AFP Cyberattack: French News Agency Faces Major Security Breach

Alleged Data Breach Exposes Over 128,000 Mobility Compare Customers

Arcserve Southern Africa highlights lasting consequences of ransomware attacks

Bay Ridge Automotive Management Group Provides Notice of February 2024 Data Breach

BBTok Attacking Organizations Using PowerShell, Python, And dnlib

Broken Hill : An Automated Penetration Testing Tool To Trick AI Chatbots

Businesses turn to private AI for enhanced security and data management

Cameroon’s pension fund downplays ransomware attack

Can AI-Driven Strategies Transform Cloud Security? Insights from a Leading Cybersecurity Expert

CF Medical Announces Data Breach Stemming from Incident at Financial Business and Consumer Solutions

City of Richardson shuts down internal network following a cyber attack

Cloudflare denies hosting sites linked to data leak at India's Star Health

Community Clinic of Maui discloses a data breach following May Lockbit ransomware attack

Could APIs be the undoing of AI?

Critical Flaws in Tank Gauge Systems Expose Gas Stations to Remote Attacks

Critical NVIDIA Container Toolkit flaw could allow access to the underlying host

Critical printing system bugs affect hundreds of thousands of Linux machines

Critical RCE Vulnerabilities Found in Common Unix Printing System

Cyber-Attacks Hit Over a Third of English Schools

digiDirect’s Customer Information Allegedly Leaked on Dark Web

Elitecare hospital says cyber attack compromised the data of about 25,000 patients

EU picks experts to steer AI compliance rules

Facebook retains consumer data for 180 days post account deletion

Facial DNA provider leaks biometric data via WordPress folder

FBI warns of sophisticated Iranian hackers targeting personal accounts

Feldstein & Stewart Sends Data Breach Letter to 8,171 Individuals

French news agency AFP targeted amid rising cybersecurity threats

Globe warns customers against voice phishing scam

GorillaBot Emerged As King For DDoS Attacks With 300,000+ Commands

Healthcare Ransomware Attacks Continue to Increase in Number and Severity

Hybrid cloud environments being targeted by worrying new ransomware attacks

IDA 9.0 Released: A Reverse Engineering Tool Gets a Major Updates – What’s New!

Irish Data Protection Commission fines Meta €91 million for improper password storage

Is your coworker a North Korean hacker? How AI impersonation is compromising the workforce

Japan's Computer Emergency Response Center (JPCERT) shares Windows Event Log tips to detect ransomware attacks

Louisiana accounting firm says data breach impacted more than 125,000 customers

Malama I Ke Ola Health Center Announces Data Breach Following “Cybersecurity Incident”

Media giant AFP hit by cyberattack impacting news delivery services

Medusa group leaks 200GB of data stolen from Rhode Island school district

Meta Fined €91 Million for Storing Millions of Facebook and Instagram Passwords in Plaintext

Microsoft revised the controversial Copilot+ Recall feature

Microsoft Updates Recall Security Architecture Amid Controversy

Millions of Aussies are falling victim to 'sophisticated' credit card fraud - and some aren't even reporting it

More than $44 million in cryptocurrency stolen from Singaporean platform BingX

Motorists warned over fake QR codes placed on parking machines

Mozilla Faces GDPR Complaint Over New Firefox Tracking Feature

National Cyber Security Centre (NCSC) warns of Iranian phishing attacks

New Research Reveals Windows Event Logs Key to Identifying Ransomware Attacks

New York Sports Club Notifies 19,836 Individuals of Recent Data Breach

Nitrogen Malware As IP Scanner Deploying Sliver & Cobalt Strike On Hijacked Server

"Normal" websites are being hijacked to overload victims with spam

NSCS: The New Watchdog for India’s Cybersecurity

NVIDIA Container Toolkit Vulnerability Exposes AI Systems to Risk

Open source maintainers: Key to software health and security

Over one million law firm passwords found on dark web

PwC Urges Boards to Give CISOs a Seat at the Table

Ransomware attackers hop from on-premises systems to cloud to compromise Microsoft 365 accounts

RipperSec Announces Departure Due to Telegram’s New Policy Changes

SCCMSecrets: Open-source SCCM policies exploitation tool

Security spending signals major role change for CISOs and their teams

Session Hijacking 2.0 — The Latest Way That Attackers are Bypassing MFA

Sono Bello Provides Notice of Data Breach Following Unauthorized Access to Company Email Account

T-Mobile pays $31.5 million FCC settlement over 4 data breaches

The CSO guide to top security conferences

The most common authentication method is also the least secure

The Story Of Conti Ransomware – Origins and Evolution of the RaaS Model (Episode 1)

Threat Actor Claims to Have Breached High-Profile Israeli Institutions

Three Iranian Hackers Charged for Influencing Trump Election Campaign

UK and US Warn of Growing Iranian Spear Phishing Threat

US State CISOs Struggling with Insufficient Cybersecurity Funding

Zoom Announces New Enterprise Features to Boost Security and Compliance

What is Authorization? Definition, Use Case & Models

WiFi Pineapple: a WiFi attacker’s pocket-sized superweapon

Windows 11 KB5043145 update causes reboot loops, blue screens

Woman ends up in hospital after nude images leaked across social media

29/09

$32M spWETH Stolen in Phishing Attack Targeting High-Profile Wallet

Alleged Insecure Direct Object Reference (IDOR) Vulnerability in Al Rajhi Bank’s APIs for Sale

Cloudflare denies hosting sites linked to data leak at India's Star Health

Critical flaw in NVIDIA Container Toolkit allows full host takeover

Crypto Whale Falls Victim To $32 Million Phishing Attack – Details

Massive MC2 Data Breach Affects Millions of Americans – Are You Affected?

Ransomware attack continues at UMC hospital in Lubbock. Here is what you need to know

The Real Human Cost of Healthcare Ransomware

Daily News - Setembro (22/09 - 28/09) - 39 Semana de 2024