NEWS: Julho (17/07 - 23/07) - 29 Semana de 2022

Cyber Security and Information Security News - Daily Updates !! Weekly Review

23/07

23 terabytes of Chinese citizen’s personal data available for just 10 bitcoins

An Entire Canadian Town Is Being Extorted By Ransomware Cyber Criminals

Atlassian: Confluence hardcoded password was leaked, patch now!

Chrome use subject to restrictions in Dutch schools over data security concerns

City of Newport advising past, current employees of potential data loss

Croatia’s data protection regulator fines telecom €285,000 for insufficient security that facilitated data breach

Cybersecurity Alert Issued For Scarily Realistic-Appearing YouTube Ad Malware On Google Search

Cybersmartness makes web safe for children

Data breaches can have ripple effects on businesses years after

Email scam warning issued across the UK and tips to help you avoid the phishing attacks

FBI seized $500,000 worth of bitcoin obtained from Maui ransomware attacks

Here are the top phone security threats in 2022 and how to avoid them

Industry Analyst Firm Ranks Accenture as Top Cybersecurity Service Provider

iPhone WARNING over 9 common mistakes that expose your device – they could cost you

Majority of Malaysian firms concerned about growing attack surface, says Trend Micro

Massive Microsoft 365 outage caused by faulty ECS deployment

Microsoft to begin from July 27 blocking Office Macros by default

Neopets Hacker Tries To Sell 69 Million Users' Account Information for Bitcoin

North Korean hackers attack EU targets with Konni RAT malware

Police warn PayPal and energy bill scams are in circulation

SonicWall fixed critical SQLi in Analytics and GMS products

T-Mobile agrees to give money to customers affected by 2021 data breach

T-Mobile settles to pay $350M to customers whose personal information was stolen

Top 7 NFT Scams to Look Out For

Uber admits massive 2016 data breach coverup, cooperates with feds

Uber avoids federal prosecution over data breach that exposed data of 57 million users

Verified Twitter Vulnerability Exposes Data from 5.4 Million Accounts

Zelle Scams: Protect Yourself to Stop Thieves in Their Tracks

22/07

A CISO’s ‘How-To Guide’ for Active Directory security

Admission of culpability leads to early end in trial of Razer's S$10m claim against IT vendor over data leak

Atlassian: Confluence hardcoded password was leaked, patch now!

Bellingham Public Library investigating after data breach

Benson Health Notifies 28,913 Patients About May 2021 Data Breach

Bitdefender identifies 192 active ransomware families worldwide

Central Florida construction firm: Ex-employee snatched personal records in data breach

Complete Guide to OT Security

Cyber-attacks on Port of Los Angeles have doubled since pandemic

Cyberthreats impacting Australian and New Zealand businesses: Fortinet

Defending the Edge Data Center

Digital security giant Entrust breached by ransomware gang

Empire of Hacking: U.S. is the Biggest Threat to Cyber Security

Former Employee Brings Suit Against Hospital and HR Company Following Ransomware Attack

Global Firms Fear the Worst Over Risk Management Failures

Google Bringing the Android App Permissions Section Back to the Play Store

Google Chrome security update fixes 'high risk' flaws

Hacked Ukrainian Radio Stations Broadcast Fake News About President Zelensky’s Health

Hacker selling Twitter account data of 5.4 million users for $30k

Hackers breach Ukrainian radio network to spread fake news about Zelenskiy

How kitemarks are kicking off IoT regulation

How To Avoid 5 Nagging Security Issues With Blockchain

Identity-based fraud and ATO attacks

Interisle Reports a 61% Increase in Phishing in Annual Study

Israeli Spyware Vendor Uses Chrome 0day to Target Journalists

Kaspersky puts spotlight on malicious ransomware group Luna

LinkedIn most impersonated brand in phishing attacks

Majority of global companies struggle to assess cyber risks

Malware: On sale for the price of a pint on dark web

Malware mayhem: Netskope research finds sharp increase in phishing downloads as cyber criminals leverage SEO to lure victims

Malware-as-a-Service Creating New Cybercrime Ecosystem

Microsoft Resumes Blocking Office VBA Macros by Default After 'Temporary Pause'

Mixed Messages as Neopets Scrambles to Respond to Mega Breach

Neopets Data Breach Includes Personal Info Of Over 69 Million Accounts

New Biden administration rules give pipeline operators more flexibility to combat cyber threats

Nottinghamshire County Council fraud teams stopped two cyber attacks and prevented £527k in losses

One-third of businesses are reckless with customer data: poll

Orgs Struggling to Balance Security and End-User Experience

PayPal Used to Send Malicious “Double Spear” Invoices

Perth Festival, Black Swan Theatre and other arts organisations hit by major data breach

Please Keep Reporting Scam Sites to the Australian Competition and Consumer Commission (ACCC), They’re Actually Taking Them Down

Quick Study: Cyber Resiliency and Risk

Ransomware Attacks Against Higher Ed Increase

Ransomware attacks threaten the NHS

Robots Join the Fight for Cyber Security

Small businesses are easy targets for cyberattacks: Report

Social Engineering Threats And Mitigation

SonicWall: Patch critical SQL injection bug immediately

Spinneys suspects some customer data was compromised in last week’s cyber attack

Tackling The Double Threat From Ransomware And Stolen Credentials

The biggest cyber-crime threat is also the one that nobody wants to talk about

The top 5 most dangerous habits online

Top 5 phishing statistics of 2022

Transportation Security Administration (TSA) revises cybersecurity requirements for oil and gas pipelines

Ukrainian Radio Stations Hacked to Broadcast Fake News About Zelenskyy's Health

Unprotected Entry into the Metaverse Brings Accrued Cyber Risks

USA’s plan to build its cyber workforce, improve skills-based pathways to cyber jobs

Visibility into runtime threats against mobile apps and APIs still lacking

WannaCry five years on: lessons we can learn

What Is a Gray Hat Hacker?

What Is Single Sign-On (SSO) and What Are Its Benefits?

21/07

10 Ways to Prevent Ransomware Attacks on Your Data

60% of IT leaders are not confident about their secure cloud access

8220 Gang Cloud Botnet infected 30,000 host globally

37,800 people sent privacy breach notifications linked to N.L. cyberattack

Albania Continues Investigations into Cyberattack as Online Services Resume

Apple fixes multiple flaws in iOS, iPadOS, macOS, tvOS, and watchOS devices

AppViewX raises $20 million to help businesses reduce risk

Ataque de ransomware cai 34% no 2º tri, mas quadro é preocupante

Atlassian fixes critical flaws in Confluence, Jira, Bitbucket and other products, update quickly!

Atlassian Rolls Out Security Patch for Critical Confluence Vulnerability

Banks have opportunity to plug digital identity gap in metaverse

Biggest Cyberattacks So Far this Year, Explosive Ransomware Protection Market Forecast

Cassava unveils its first cyber security centre in SA

China Fines Didi Global $1.19bn for “Heinous” Data Security Infringements

Chrome zero-day used to infect journalists with Candiru spyware

Client-side CSAM scanning proposal raises security and privacy fears

CloudMensis backdoor spies on users of compromised Macs

Costa Rica Disables Servers due to Cyber-Attack Threat

Council blocks TWO cyber attacks targeting over £500,000

Cresce o número de ataques de ransomware nos últimos anos

Cyber security school launched in PH

Didi slapped with $1.1B fine for breaching China data security laws

Employee or employer: who’s to blame for a cyber breach?

European OEM ropes in L&T Tech to prevent cyber attack

Google blocks site of largest computing society for being ‘harmful’

Governments must do more to fight ransomware, says insurance industry

Hacker enfrenta julgamento por serviço de aluguel de vírus

Hackers invadem perfil da revista Exame no Twitter para vender NFTs

Hackers Target Ukrainian Software Company Using GoMet Backdoor

Hackers Use Evilnum Malware to Target Cryptocurrency and Commodities Platforms

How Conti ransomware hacked and encrypted the Costa Rican government

How organizations can implement a complete data strategy

Inmarsat deploys cybersecurity guidance

Introducing the book: Managing the Dynamic Nature of Cyber Security

Lightning Framework, a previously undetected malware that targets Linux systems

Magecart Supply Chain Attacks Hit Hundreds of Restaurants

Microsoft adds default protection against RDP brute-force attacks

Microsoft starts blocking Office macros by default, once again

New ‘Lightning Framework’ Linux malware installs rootkits, backdoors

New Linux Malware Framework Lets Attackers Install Rootkit on Targeted Systems

New Redeemer ransomware version promoted on hacker forums

Ransomware attacks drop 34% in Q2, but experts warn of potential ‘uptick’

Ransomware attacks slowing as 2022 wears on

Ransomware Compromises Slump 34% in Q2

Ransomware Luna criptografa sistemas Windows, Linux e ESXi

Siemens Energy to list its cyber security tool with AWS Marketplace

The importance of secure passwords can’t be emphasized enough

The Kronos Ransomware Attack: What You Need to Know So Your Business Isn't Next

The New Weak Link in SaaS Security: Devices

The rise and continuing popularity of LinkedIn-themed phishing

Threat actors target software firm in Ukraine using GoMet backdoor

Time to update all of your Apple gadgets ASAP

UK Regulator Issues Record Fines as Financial Crime Surges

US Government Launches Campaign to Boost Cybersecurity Apprenticeships

Windows 11 now blocks RDP brute-force attacks by default

20/07

96% of Organizations Faced Phishing Attempts in the Past Year, New Survey Reveals

Akamai uncovers sophisticated PayPal phishing scam

Albanian government services suffer ‘massive’ cyber attack

Benefits of Data Loss Prevention

Beware Web3 – The Wild West Has Gone Online

BJC Healthcare Settles Data Breach Lawsuit Stemming from 2020 Phishing Attack

Black Basta ransomware gang claims responsibility for Knauf cyberattack

Browser exploits: A Concerning Revival Led by the Lazarus Group

Building a cyber resilience strategy for a geopolitically unstable world

China to fine Didi more than $1 billion for data breaches: Report

Conti’s Reign of Chaos: Costa Rica in the Crosshairs

Cyber risk management: Navigating an unpredictable business environment

Cyberattacks Increased by 60% In Tourism Sector This Year

Data breach average cost tops $9.5M, according to report

Deep learning delivers proactive cyber defense

DOJ Recovers $500K Paid to North Korean Ransomware Actors

Fake Passports are Sold on the Dark Web with Stolen Identity Data

FBI recovers $500,000 healthcare orgs paid to Maui ransomware

Flaws in a popular GPS tracker could allow hackers to track or stop vehicles, say security researchers

Four new ransomware groups to be aware of

Government claims 7726 service has cut scam texts but consumers still report high fraud levels

GPS tracker exploit puts the world’s most high-value individuals in real-world danger

Hacked ATMs Lead to Compromised Personal Information

HavanaCrypt Ransomware Poses as Google Update

How DevOps Teams Can Defend Against API Attacks

Huntress acquires security awareness training platform Curricula for $22 million

Israeli cybersecurity researchers: New phishing scam mimics popular language learning apps

June 2022 Healthcare Data Breach Report

Justice Department Seizes $500K From North Korean Ransomware Group

Legal Experts Concerned Over New UK Digital Reform Bill

LinkedIn most faked brand in Phishing attacks

Magecart Serves Up Card Skimmers on Restaurant-Ordering Systems

Minors using Discord servers to spread malware for cash

New Luna ransomware encrypts Windows, Linux, and ESXi systems

New Rust-based Ransomware Family Targets Windows, Linux, and ESXi Systems

Only 1/4 of small businesses see cybersecurity as a top priority

Phishing Scams Were the Biggest Contributor to Singapore’s Cyber Attacks

Popular business web apps fail to implement critical password requirements

QR Codes and CAPTCHA Tests: New Scams in a Digital Age

Ransomware is indiscriminatory – prepare for everything to fail

Russian Hackers Target Ukrainians Via Copycat DoS App

Scam warning: Canadians receiving fake $90 Rogers rebate after outage

Surge in online scams, hacks expected ahead of FIFA World Cup, expert warns

Tesco warns millions of shoppers over voucher scam that preys on cost of living crisis

The fallout from Alibaba’s huge data breach

The Pandemic’s Lasting Effects: Are Cyber Attacks One Of Them?

The past, present and future of Metasploit

The top 10 reasons your employees are falling prey to phishing scams

This Cloud Botnet Has Hijacked 30,000 Systems to Mine Cryptocurrencies

Unpatched GPS Tracker Bugs Could Let Attackers Disrupt Vehicles Remotely

Unprotected entry into the Metaverse brings accrued cyber risks

US recovers half million dollars stolen by North Korean hackers from hospitals

Vulnerabilities in popular GPS tracker could allow hackers to remotely stop cars

What Is Cybersecurity?

What threats and challenges are CISOs and CROs most focused on?

Why SBOMs aren’t the silver bullet they’re portrayed as

19/07

10 Cybersecurity Compliance Statistics That Show Why You Must Up Your Cybersecurity Game

82% of global insurers expect the rise in cyber insurance premiums to continue

20K jobs up for grabs at Indy cybersecurity conference

Air-gapped systems leak data via SATA cable WiFi antennas

Albanian Government Hit by “Massive Cyber-Attack”

Automotive Cyber Security Market Size, Scope, Growth Opportunities, Trends by Manufacturers And Forecast to 2029

Belgium says Chinese hackers attacked its Ministry of Defense

Brazil surpasses US in breached users in Q2 2022

Chinese authorities to fine Didi $1 billion following cyber security review

CISA Post-Quantum Cryptography Initiative: Too Little, Too Late?

CISA Set to Open London Office

Cloud Native and the Hype of Security

Cyber Safety Review Board classifies Log4j as ‘endemic vulnerability’

Cyber security experts issue warning after latest breach

Cyber Security Insurance Market May See a Big Move : Major Giants AXA, Beazley, Allianz

Cyber-war game case study: Preparing for a ransomware attack

Data breach at debt collector affects almost 2M healthcare patients

Data is the new oil — how companies can shield themselves from cyber attacks

Data Protection Investments Fail to Blunt Ransomware Impact

Defence Cyber Security Market Report, Latest Trends, Industry Opportunity & Forecast to 2028

Don’t Trust But Verify: Getting to Zero Trust for OT and IoT

Druva Unveils Industry’s First Data Posture and Observability Innovations for Cyber Attack Readiness

EU warns of Russian cyberattack spillover, escalation risks

Experts Uncover New CloudMensis Spyware Targeting Apple macOS Users

FBI: Fake Crypto Apps Have Cost Investors $43m

First CSRB Report Tackles on Ongoing Log4j Risk

Former Conti Actors Remain Active in Cybercrime Underworld

Fort Hays State University (FHSU) earns redesignation as a Center for Excellence in Cyber Defense

Google deal to buy Mandiant clears key antitrust hurdle

Hacker tenta extorquir dinheiro ao Roblox mas a plataforma recusou cooperar

Hackers russos miram em países da OTAN em novo cibercrime

Hackers se passam por funcionários do Twitter para roubar contas de jornalistas

Hackers steal 50,000 credit cards from 300 U.S. restaurants

Hackers turn to cloud storage services in attempt to hide their attacks

Health Care System Still Vulnerable to Cyber Attack: Opposition

How adversaries are leveraging pentesting tools to launch attacks

How Weak Passwords Lead to Ransomware Attacks

India records 36.29 lakh cyber security incidents since 2019 till June this year, says Govt

Juha Saarinen: Maybe don't listen to cyber security experts?

Justice Department Seizes and Forfeits Approximately $500,000 from North Korean Ransomware Actors and their Conspirators

Malicious Android apps with 300K installs found on Google Play

New Air-Gap Attack Uses SATA Cable as an Antenna to Transfer Radio Signals

New CloudMensis malware backdoors Macs to steal victims’ data

New MacOS Backdoor Communicates Via Public Cloud

Popular vehicle GPS tracker gives hackers admin privileges over SMS

Preventing the next cyber attack incident at your local school

Removing the blind spots that allow lateral movement

Russian hackers use fake DDoS app to infect pro-Ukrainian activists

Russian SVR hackers use Google Drive, Dropbox to evade detection

Security Experts Warn of Two Primary Client-Side Risks Associated with Data Exfiltration and Loss

Sensitive Roblox data stolen in yet another cyber attack

Steps to strengthen the cyber attack recovery position

The Analyst Prompt #13: Zero-Day Vulnerabilities and Sophisticated Spyware Make a Case for Layered Security

The benefits of cyber security awareness training within universities

Trellix underlines MSP cyber threats

TSE prevê ataque hacker no primeiro turno das eleições

US Cybersecurity Agency CISA to Open London Office

U.S. Departments of Labor, Commerce Announce 120-Day Cybersecurity Apprentice Spring to Promote Registered Apprenticeships

What NATO’s virtual rapid response cyber capability means for the fight against cyber warfare

Why diverse recruitment is the key to closing the cyber-security skills gap

Why the cloud is the new rainmaker for cybersecurity

18/07

5 Cybersecurity Questions CFOs Should Ask CISOs

2021 was worst year for ransomware attacks. How FBI says cybercrimes affected Idahoans

A Closer Look At Wiper Malware

A New Cybercrime Mindset: The Web Attack Lifecycle

Academic health center pays $875K fine in data breach

Albania: Cyber Attack, President Calls on Institutions to Take Measures

Albania Blames ‘Massive Cyber Attack’ as Govt Servers go Down

At 12.5% CAGR, Cybersecurity Market Size is Expected to Reach USD 403.01 Billion by 2027 Report Published by Brandessence Market Research

Beware of password-cracking software for PLCs and HMIs!

BJC Healthcare data breach class action settlement

Centerspace, LP Files Notice of Data Breach Following Unauthorized Access to Consumer Data

Colorado police investigating ransomware attack on small town

Cyber Security Today, July 18, 2022 – Ransomware targets small businesses, warnings for Digium Elastix and Netwrix Auditor administrators, and more

Cybersecurity is a journey, not a destination

Cybersecurity Takes Center Stage

Data breach at debt collector affects almost 2M healthcare patients

Data of millions at risk if Malaysia faces cyberattack

Ex-hacker da CIA condenado a 80 anos de prisão por divulgar segredos

Experts Notice Sudden Surge in Exploitation of WordPress Page Builder Plugin Vulnerability

Fighting cyber threats

Flipkart’s Cleartrip confirms data breach after hackers put data for sale

Global ransomware activity surges again following a short decline in Q1

GoTyme Bank ‘heavily’ investing in cyber security

Hackers pose as Twitter employees, journalists in new breach tactics

Healthcare is now the industry most targeted by hackers

How the cybersecurity skills gap threatens your business

How to prepare your organization for a Slack or Office 365 breach

Industrial cybersecurity leaders are making considerable headway

Information Systems Are Intact, Says Albanian Government after Cyber Attack

Lawson Products, Inc. Reports Data Breach Affecting a Large Number of Data Types

Let’s Unpack the 10 Immutable Laws of Security Administration

Luxury jeweller sues insurer over cyber ransom

New phishing scams are tricking users into sharing their Twitter and Discord login information

New Study Finds Most Enterprise Vendors Failing to Mitigate Speculative Execution Attacks

NFT Artist DeeKay Twitter Hacked, Phishing Attack Steals $150k

Northcentral University Announces Data Breach Affecting Sensitive Student Information

Online payment fraud losses to exceed $343 billion

OpenDocument malware scams target hotels across the world

Pakistan-backed hacker outfit targets Indian students, educational institutions: Report

Pegasus Spyware Used Against Thailand’s Pro-Democracy Movement

Pegasus Spyware Used to Hack Devices of Pro-Democracy Activists in Thailand

Public Cloud Customers Admit Security Challenges

Ransomware Attempts Flag as Payments Also Decline

Roaming Mantis hits Android and iOS users in malware, phishing attacks

SEC’s cybersecurity proposals: Why visibility into risk is at the heart of it

SecurityWeek Analysis: Over 230 Cybersecurity M&A Deals Announced in First Half of 2022

Singapore: At least S$12,500 lost this month to Netflix phishing scams

Site Premint é alvo de ataque hacker que rouba NFTs dos usuários

Sixt Rent-a-Car, LLC Reports Data Breach That Appears to Have Affected Employees, Their Dependents, and Possibly Customers

Social Engineering: Definition, Examples, Types of Attacks and How to Prevent Them

Survey Suggests Zero-Trust IT Transition Will Take Time

The case for physically destroying — and not just wiping clean — old hard drives

The first formal verification of a prototype of Arm CCA firmware

The Potential Of Blockchain Technology To Address Healthcare’s Biggest Challenges

These moonlighting hackers are using ransomware against 'random' targets

TikTok Engaging in Excessive Data Collection

Treating Healthcare’s Insider Threat

TSE trabalha com previsão de ataque hacker no dia da eleição

What to look for when taking out a cyber insurance policy

Zero-day attacks climb as hackers get more sophisticated

17/07

A cyber threat to the users’ data on Google’s search engine is leaking private information

Albania Shuts Down Digital Services and Government Websites after Cyber Attack

Banks need best practices to fight rising cyberattacks

Cost of living warning: Energy bill scams on the rise - ‘Be extra vigilant!’

Department for Work and Pensions (DWP): Those expecting £326 Cost of Living payment this month warned about scamming techniques

Email scams are getting so personal they even fool cybersecurity experts

GoDaddy Reports Data Breach: Impacted Customer Data from 1.2 Million Individuals

Hackers pedem R$250 milhões em bitcoins para liberar sistema de prefeitura do ES

Hacker Posts Internal Roblox Employee Documents Online

‘It looks so legit!’ Santander scam email includes full name and account number

Juniper Releases Patches for Critical Flaws in Junos OS and Contrail Networking

Lloyds Bank scam warning: Personal detail to spot that indicates an email is fake

Microsoft discovers email hack that circumvents two-factor authentication

New malware puts your banking applications at risk; know how to protect yourself

North Korean Hackers Using H0lyGh0st Ransomware To Attack & Demand 1.2 to 5 Bitcoins

Office Phishing Attack circumvents multi-factor authentication

Open source security needs automation as usage climbs amongst organisations

Spain: Guardia Civil warns of Whatsapp Coca-Cola scam offering mobile users €500 of fuel for €2

The State of Security: Malware in 2022

Using internet safely to tackle rising cyberattacks

What US Journalists Need To Know About The Foreign Hackers Targeting Them

NEWS: Julho (10/07 - 16/07) - 28 Semana de 2022