NEWS: Agosto/Setembro (29/08 - 04/09) - 35 Semana de 2021
Cyber Security and Information Security News - Daily Updates !!!
04/09
Cyber Criminal Actors are Targeting the Food and Agriculture Sector with Ransomware Attacks - EIN PressWire
Hive is dangerous new ransomware threat, FBI says - FOX Business
Ransomware attacks are rising, and cities are taking some of the biggest hits - The Philadelphia Inquirer
Turkey fines WhatsApp over data breach - The Jakarta Post
03/09
Attacks against SolarWinds Serv-U SW were possible due to the lack of ASLR mitigation - Security Affairs
Babuk ransomware's full source code leaked on hacker forum - Bleeping Computer
CISA, FBI Post Ransomware Alert Ahead of Holiday Weekend - Security Boulevard
Confessions of a ransomware negotiator: Well, somebody's got to talk to the criminals holding data hostage - The Register
Conti ransomware now hacking Exchange servers with ProxyShell exploits - Bleeping Computer
Dallas Independent School District reports data breach impacting current and former students, staff - The Daily Swig
Dallas Independent School District reveals breach, but details are still missing - Data Breaches Net
Eight US States to Begin Accepting Digital Driving Licenses - Info Security Magazine
FBI: Sextortion complaints spike leads to $8 million in losses - Bleeping Computer
FBI warns of ransomware attacks targeting the food and agriculture sector - Security Affairs
Implementing a strategic planning process is key to drive future revenue growth - Help Net Security
Increasing number of investigations calls for advanced technology and dedicated teams - Help Net Security
Modernizing Health Care Security with SASE - Security Boulevard
Over 60,000 domains parked at MarkMonitor could be taken over - Bleeping Computer
Patched: Critical bug with public PoC exploit in Cisco infrastructure virtualization software (CVE-2021-34746) - Help Net Security
Russia Blocks ExpressVPN, NordVPN, and IPVanish for Failure to Comply With Censorship Rules - TechNadu
Tech CEOs: Multi-Factor Authentication Can Prevent 90% of Attacks - Info Security Magazine
This New Malware Family Using CLFS Log Files to Avoid Detection - The Hacker News
When Cyber-Attacks Lead to Disasters, Does the Stafford Act Apply? - Info Security Magazine
Why should enterprises invest in machine identity management tools? - Help Net Security
Women Make Gains in Cybersecurity, But Gaps Remain - Security Boulevard
02/09
A dropper-as-a-service miscreants pay to push their malware onto potentially 1,000s of victims - The Register
Autodesk reveals it was targeted by Russian SolarWinds hackers - Bleeping Computer
Bad Bots Focus Attacks on E-Commerce Targets - InfoSecurity Magazine
Chinese Authorities Arrest Hackers Behind Mozi IoT Botnet Attacks - The Hacker News
Cisco fixes critical authentication bypass bug with public exploit - Bleeping Computer
Comcast RF Attack Leveraged Remotes for Surveillance - Threatpost
Deerfield offering credit monitoring after data breach potentially exposed residents’ info - Greenfield Recorder
FBI warns of ransomware gangs targeting food, agriculture orgs - Bleeping Computer
How companies can keep cybercriminals at bay - Back End News
How SMBs can prevent QR code abuse - BizReport
Previous employees with access to corporate data remain a threat to businesses - Help Net Security
Ransomware gangs target organizations during holidays and weekends - Help Net Security
Sacked Employee Deletes 21GB of Credit Union Files - InfoSecurity Magazine
UK Researchers Invent Device to Thwart USB Malware - InfoSecurity Magazine
Vulnerabilities allow attackers to remotely deactivate home security system (CVE-2021-39276, CVE-2021-39277) - Help Net Security
What is AS-REP Roasting attack, really? - The Hacker News
WhatsApp Fined €225m for GDPR Violations - InfoSecurity Magazine
01/09
700,000 French pharmacy Covid test results left publicly available - The Connexion French News
Finding and using the right cybersecurity incident response tools - Help Net Security
Fired NY credit union employee nukes 21GB of data in revenge - Bleeping Computer
Getting ahead of a major blind spot for CISOs: Third-party risk - Help Net Security
Hybrid work is here to stay, but security concerns are high - Help Net Security
Linphone SIP Stack Bug Could Let Attackers Remotely Crash Client Devices - The Hacker News
LockBit gang leaks Bangkok Airways data, hits Accenture customers - Bleeping Computer
LockBit ransomware operators leak 200GB of data belonging to Bangkok Airways - Security Affairs
New standard enhances the cybersecurity of pipeline control systems - Help Net Security
QNAP Working on Patches for OpenSSL Flaws Affecting its NAS Devices - The Hacker News
SEC announces sanctions against entities over email account hacking - Security Affairs
Sturdy Hospital in Attleboro sued over data breach - The Sun Chronicle
The cybersecurity metrics required to make Biden’s Executive Order impactful - Help Net Security
Twitter adds Safety Mode to automatically block online harassment - Bleeping Computer
Watch out, ransomware attack risk increases on holidays and weekends, FBI and CISA - Security Affairs
Wawa paying $9-million in cash, gift cards in data breach settlement; Nov. deadline to file claim - 6ABC
31/08
Attackers Can Remotely Disable Fortress Wi-Fi Home Security Alarms - The Hacker News
Bangkok Airways Admits Attackers Stole Passenger Data - InfoSecurity Magazine
Canada accepted 7,300 more immigration applications due to technical bug - Bleeping Computer
Chinese Developers Reveal Android Gamers' Data - Softpedia News
Coinbase seeds panic among users with erroneous 2FA change alerts - Bleeping Computer
Companies go scot-free despite breach of customer data - The leaflet
Cybercriminal sells tool to hide malware in AMD, NVIDIA GPUs - Bleeping Computer
Cybersecurity awareness is one of the skills needed for a post-pandemic economy - Help Net Security
Data Breaches in the Financial Sector - News Anyway
Don't want to get hacked? Then avoid these three "exceptionally dangerous" cybersecurity mistakes - ZDNet
FBI Flash Alert Warns Organizations of Hive Ransomware Group - Health IT Security
Fujitsu customer data is reportedly being sold on the dark web - TechRadar Pro
Government Efforts Take Cyber Awareness to the Next Level, but an Ocean of Obstacles Lies Ahead - DevPro Journal
How behavioral biometrics can stop social engineering and malware scams dead in their tracks - NuData Security
HPE wars customers of Sudo flaw in Aruba AirWave Management Platform - Security Affairs
Illinois Physicians Notify 600K Patients of Data Breach - InfoSecurity Magazine
Illinois Provider Faces Healthcare Data Breach, 171K Patients Exposed - Health IT Security
Increase in credential phishing and brute force attacks causing financial and reputational damage - Help Net Security
Lojas Renner claims that cyberattack did not result in data leakage - The Clare People
Microsoft Exchange ProxyToken flaw can allow attackers to read your emails - Security Affairs
QNAP Is Latest to Get Dinged by OpenSSL Bugs Fallout - ThreatPost
Ransomware May Have Cost US Schools Over $6bn in 2020 - InfoSecurity Magazine
Securities and Exchange Commission (SEC) fines brokerage firms over email hacks, customer data exposure - CyberScoop
The consumerization of the Cybercrime-as-a-Service market - Help Net Security
The new era of email authentication - Security Infowatch
Threat actors stole $19 million worth of crypto assets from Cream Finance - Security Affairs
30/08
Bangkok Airways apologizes for passport info breach as LockBit ransomware group threatens data leak - ZDNet
Boston Public Library discloses cyberattack - Security Affairs
CISA: Don’t use single-factor auth on Internet-exposed systems - Bleeping Computer
Consumers value privacy more than potential savings when purchasing insurance - Help Net Security
Cyber-thieves Hit DeFi Platform Again - InfoSecurity Magazine
Cyber threats, passenger vessels and superyachts: The current state of play - Help Net Security
Debunking myths about consumer expectations around mobile apps security - Help Net Security
DEF CON 29 Main Stage – Zhipeng Huo’s, Yuebin Sun’s & Chuanda Ding’s ‘Reveal And Exploit: IPC Logic Bugs In Apple’ - Security Boulevard
File upload security best practices rarely implemented to protect web applications - Help Net Security
Hacking IoT Security with Aaron Guzman - Security Boulevard
How Does MTA-STS Improve Your Email Security? - The Hacker News
How enterprises use security operations to modernize their business - Help Net Security
Israeli firm "bright data" (Luminati Networks) enable the attacks against Karapatan - Security Affairs
Men, Executives Pose Higher Cybersecurity Risk - Security Boulevard
Microsoft Exchange ProxyToken bug can let hackers steal user email - Bleeping Computer
Microsoft shares guidance on securing Azure Cosmos DB accounts - Bleeping Computer
New variant of Konni RAT used in a campaign that targeted Russia - Security Affairs
Operationalize AWS security responsibilities in the cloud - Help Net Security
QNAP works on patches for OpenSSL bugs impacting its NAS devices - Bleeping Computer
Rethinking Cloud Infrastructure Authentication - Security Boulevard
Rights Group Advises Afghans to Delete Data - InfoSecurity Magazine
Serverless security market size to reach $5.1 billion by 2026 - Help Net Security
T-Mobile Hacker Identified, China’s New Privacy Law, Tesla Bot Announcement - Security Boulevard
Unmanaged SaaS Data Brings Supply Chain Risks - Security Boulevard
US DoJ announces the creation of Cyber Fellowship Program - Security Affairs
Why WAFs Don’t Work According to a Hacker - Security Boulevar
29/08
1 GB of data belonging to Puma available on Marketo - Security Affairs
Apple launches service program for iPhone 12 no sound issues - Bleeping Computer
Cyberattacks, data loss among top management concerns today - The Manila Times
DDoS attacks target the Philippine human rights alliance Karapatan - Security Affairs
DEF CON 29 Main Stage – Kelly Kaoudis’ & Sick Codes’ ‘Rotten Code, Aging Standards & Pwning IPv4 Parsing’ - Security Boulevard
DEF CON 29 Main Stage – Rion Carter’s ‘Why Does My Security Camera Scream Like A Banshee?’ - Security Boulevard
Japan has no time to waste in boosting its cyberdefenses - The Japan Times
Some Synology products impacted by recently disclosed OpenSSL flaws - Security Affairs
Comments