NEWS: Março (13/03 - 19/03) - 11 Semana de 2022

Cyber Security and Information Security News - Daily Updates !!

19/03

75 Percent Of All Cyberattacks Start With An Email, How To Keep Safe

2021 Saw 153% Increase in Phishing and Scam Sites

Attack behind news-app outage

BlockFi confirms unauthorized access to client data hosted on Hubspot

Can malware go undetected?

Default Credentials Are Making Automated Cyber Attacks A Lot More Frequent

FBI: Avoslocker ransomware targets US critical infrastructure

FTC Takes Action Against CafePress for Data Breach Cover Up

Google Exposes Initial Access Broker Ties to Ransomware

Here’s how a hacker stole $800,000 worth NFTs through Discord

Here's how hackers could turn your beloved vape against you

How to know if hackers are in your phone

Is Russia holding back from cyberwar?

Leaked ransomware documents show Conti helping Putin from the shadows

National Rifle Association (NRA) confirms last year’s ransomware attack

Russia's cyber war flops as 'hackers oppose invasion of Ukraine', security experts say

The Microsoft Office productivity tool used in some ransomware attacks: Macros

The Transportation Security Administration’s First Crack at Protecting Pipelines From Hackers Falls Short

TransUnion data breach leaves 54 million South Africans exposed

Unchained Capital Discloses Data Leak at Email Marketing Partner

18/03

76,000 online scams taken down after tip-offs to suspicious email reporting service

A new model to automatically detect and filter spam emails

A Third of Malicious Logins Originate in Nigeria

Agencies Warn on Satellite Hacks & GPS Jamming Affecting Airplanes, Critical Infrastructure

Aircraft Disrupted by Satellite Jamming Following Russian Invasion

Albuquerque Schools Find No Data Compromised in Cyber Attack

Arkansas Sues Health System for Abandoning Patient Files

Asus Wi-Fi routers attacked by Russian military hackers — what to do now

Bloqueio do Telegram atinge grupo de hackers que atacaram Saúde

Budget cuts undermining SA firms’ ability to protect against cyberattacks

Businesses should recalibrate their cybersecurity approach around these elements

CISOs face 'perfect storm' of ransomware and state-supported cybercrime

Cloud-Based Email Threats Surge 50% in 2021

Credit bureau TransUnion hacked – ‘R224m ransom sought

Crypto Phishing Groups Solicit Phony Aid Donations Amid Ukraine Conflict

Cryptocurrency Exchanges Binance, Huobi and FAMEEX Warn of Massive Imposter Websites and Phishing Scams

Cyberattack on Wheeling Health Right, Inc. Results in Data Breach

Cyclops Blink Malware Expands to Target Asus

DarkHotel APT Targets Wynn, Macao Hotels to Rip Off Guest Data

DarkHotel hacking campaign targets luxury Macao resorts

Data breach affects workers at convenience food firm Greencore

Domain Security: An Underused Cybersecurity Strategy and First Line of Defense in Your Zero Trust Model

Email Authentication Basics for SaaS Teams

Emotet Malware Sending Emails Disguised as IRS

FBI and CISA warn over threats to satellite communications networks

Fighting in Ukraine Raises Prospect of US Cyberattacks

Firm with 'negligent' security practices fined £100k after cyber attack

Free decryptor released for TrickBot gang's Diavol ransomware

Google Blows Lid Off Conti, Diavol Ransomware Access-Broker Ops

Google exposes 'uniquely personal' access broker behind worst Conti, FIN12 ransomware attacks

Hackers Are Targeting Your March Madness Bracket

Hackers claim to breach TransUnion South Africa with 'Password' password

Hackers Target Bank Networks with new Rootkit to Steal Money from ATM Machines

HIPAA Security Rule Compliance Can Prevent and Mitigate Most Cyberattacks

How prepared are organizations to face a ransomware attack on Kubernetes?

Japan's Bridgestone reports ransomware attack at U.S. subsidiary

Leaked Ransomware Docs Show Conti Helping Putin From the Shadows

Microsoft Defender Flagged Office Updates As Ransomware Activity

Mobile gaming scams and dangers: What are they and how to avoid them

Mydoom Virus: Why Is It Considered the Worst Computer Virus in History?

Nasty Phishing Hack Loses Enthusiastic ApeCoin Fans Over $75k

NCSC Launches Awareness Campaign to Strengthen Password Practices

Over 74,000 scams axed after 10 million-plus reports to the Government - what to do if you've been scammed

Police warn of SMS phishing scam involving fake Singpass website

Rare Bears Discord phishing attack nabs $800K in NFTs

Rare Bears NFT loses $790,000 worth of NFTs in a phishing attack

Russian Hackers Allegedly Compromise Ukrainian News Sites, Displaying ‘Z’ Symbol

Sandworm APT Hunts for ASUS Routers with Cyclops Blink Botnet

Securing the Perimeter is Not Enough to Protect Your Data

Six ways to ensure the safety of your cryptocurrency

South Denver Cardiology cyberattack, data access impacts 287K patients

The 5 Rules Of HIPAA Compliance

The Biggest Cyber Security Risks In 2022

The Road Ahead for Cyber and Infrastructure Security

Top 5 myths businesses believe about bots

TransUnion Confirms Data Breach at South Africa Business

Urgent DVLA warning issued over scam costing drivers £1,000

US Critical Infrastructure Targeted by AvosLocker Ransomware

Wandsworth Council emails residents’ private electoral information to 43,000 strangers

What is Escobar malware?

While questions about RaidForums remain unanswered, BreachForums opens

Why Data Privacy & Compliance Is a Year-Round Event

Why the city of Fresno in US kept silent about losing US$600,000 to a phishing scam

17/03

5 Steps to Take Right After a Data Breach

2021 cyberattacks led by Russian hackers cost companies $600 mil

4,749 KrisShop customers' personal data 'may have been exposed' after phishing attack

Alarm raised over ‘trickster’ LokiLocker ransomware

Attackers have come to love APIs as much as developers

Barracuda Research Uncovers New Insights Into the Ways Cybercriminals Are Targeting Businesses With Spear-Phishing Attacks

Best practices in securing today’s remote workforce

BlackCat is the newest ransomware group you should be aware of

Bridgestone confirms data loss in ‘ransomware attacks’

Critical Veeam backup vulnerabilities exposed Windows users to ransomware assault

Cybersecurity Awareness for Employees: Best Practices

Devil-may-care Lapsus$ gang is not the aspirational brand infosec needs

Email authentication helps governments and private companies battle ransomware

Emotet malware impersonates IRS as 2022 tax season approaches

'Everyone loses': This new ransomware threatens to wipe Windows PCs if its victims don't pay up

Ex CafePress owner fined $500,000 for 'shoddy' security, covering up data breach

Four key risks exacerbated by Russia’s invasion of Ukraine

FTC Takes Action Against CafePress for Alleged Data Breach 'Cover Up', Fines Former Owner $500K

Greencore staff considering legal action after data breach

Healthcare cybersecurity trends: Organizations not quite ready to deal with threats

HMRC warns of tax return scam for self assessment customers as 2022 deadline looms: How to protect yourself

How can you protect yourself from cyber scams during a global crisis?

How CAPTCHAs can cloak phishing URLs in emails

Law firm issued fine from ICO over unpatched software and lack of MFA

Malware and Phishing Attacks for Smartphones See Massive Year on Year Increase

Microsoft: Here's how this notorious botnet used hacked routers for stealthy communication

Microsoft Defender drops "downpour" of false ransomware alerts on customers

Most NASA Systems at Risk From Insider Threats: Audit

New report shows that the majority of organizations are not equipped to combat emerging HEAT cyber attacks

New Vulnerability in CRI-O Engine Lets Attackers Escape Kubernetes Containers

Practical Tips for Creating Winning Cybersecurity Teams

Pro-Ukrainian hacktivists are taking down Russian websites

Raspberry Pi Users Urged to Change Default Passwords as Attacks Surge

Realizing the importance of data literacy

Sanctions could drive surge in cybercrime: Moody’s

SEC filings show hidden ransomware costs and losses

Severity of mobile threats rising, 10+ million mobile endpoints impacted

Singapore Airlines’ in-flight retailer KrisShop targeted in phishing attack, data of 4,749 customers exposed

The Big, Baffling Crypto Dreams of a $180 Million Ransomware Gang

The Phases Of Account Takeover Attacks And How To Stop Them

These four types of ransomware make up nearly three-quarters of reported incidents

TrickBot Malware Abusing MikroTik Routers as Proxies for Command-and-Control

Trickbot uses compromised MikroTik routers as C2 communication proxies

Understanding Features and Vulnerabilities of The Decentralized Finance Attack Surface is Key to Protecting Against Cyber Attacks

What is Phishing? A look at the latest trends in data breach protection

Why IoT Security is Important for Today’s Networks?

Your data could be more exposed than you think

Your K8s Environment Was Attacked: What to Do in the First 24 Hours

16/03

Another Destructive Wiper Targets Organizations in Ukraine

Attackers using default credentials to target businesses, Raspberry Pi and Linux top targets

Automotive components supplier Denso confirms cyber attack

Biden signs ransomware reporting mandate into law

CafePress owners settle with FTC over data breach 'cover up'

Chelan Douglas Health District Warning Residents of 2021 Data Breach

CISA: Fix MFA and Patch Promptly to Stop Russian Attackers

CTOs Talk Cybersecurity

Data Breach Alert: FCI Constructors, Inc

Does Sandboxing Have A Future?

Electric vehicle cybersecurity has business owners worried

Emotet malware campaign impersonates the IRS for 2022 tax season

Employees consider legal action after cyber-attack on food manufacturer

Everything You Need to Know About Operation Aurora

Facebook parent company Meta joins UK anti-scams initiative

Firms Must Report Hacks to DHS in 72 Hours Under Law

Food bosses respond to staff data breach action

Fraudsters use intelligent bots to attack financial institutions

German Government Warns Against Using Russia's Kaspersky Antivirus Software

Hacker breaches key Russian ministry in blink of an eye

Hackers Spread BazarBackdoor Malware Via Website Contact Forms Attribution

Health district says data breach last summer led to loss of clients’ private information

How Cloud Automation is Changing Business World

How fast can organizations respond to a cybersecurity crisis?

How to build a security tool that sells

HSE to spend €1MILLION contacting individuals whose personal data stolen in cyber attack

Hundreds of GoDaddy-hosted sites backdoored in a single day

(IN)SECURE Magazine issue 71 released

Kaspersky Hits Back at "Politically Motivated" BSI Advisory

Kubernetes an Achilles Heel in Defense Against Ransomware Attacks

Linux botnet spreads using Log4Shell flaw

LokiLocker ransomware family spotted with built-in wiper

Microsoft Defender tags Office updates as ransomware activity

Multiple Flaws Uncovered in ClickHouse OLAP Database System for Big Data

New "B1txor20" Linux Botnet Uses DNS Tunnel and Exploits Log4J Flaw

New Infinite Loop Bug in OpenSSL Could Let Attackers Crash Remote Servers

NSA and CISA: Here's how to improve your Kubernetes cluster security

OpenSSL cert parsing bug causes infinite denial of service loop

Phony Instagram ‘Support Staff’ Emails Hit Insurance Company

Ransomware: What You Need to Know About It and How to Protect Yourself

Sensitive mobile app data found unprotected in the cloud

Sites do governo russo são alvos de ciberataques 'sem precedentes'

Small Businesses Are More Frequent Targets Of Cyberattacks Than Larger Companies: New Report

SolarWinds warns of attacks targeting Web Help Desk instances

Supply Chains are an Easy Target for Cybercriminals

Take a walk on the client side: The importance of front-end JavaScript security assessments

The Hacker With a Back-Up Plan

The Workaday Life of Conti, the World’s Most Dangerous Ransomware Gang

Thousands of Mobile Apps Expose User Data Via Cloud Misconfigurations

Unpatched RCE Bug in dompdf Project Affects HTML to PDF Converters

Unsecured Microsoft SQL, MySQL servers hit by Gh0stCringe malware

What is Spear Phishing? Here's how to safeguard yourself from email frauds

Why a modern vulnerability management strategy requires state-of-the-art solutions

Why Fresno kept silent about losing $600,000 to a phishing scam

Will vacancies create security voids?

15/03

70% of financial service providers are implementing API security

Android trojan persists on the Google Play Store since January

Are you willing to take a calculated risk? Quantifying your cyber risk and predicting future threats

Australia's big four banks tackling cybersecurity with a team sport mentality

CaddyWiper, a new data wiper hits Ukraine

CaddyWiper: More destructive wiper malware strikes Ukraine

CaddyWiper: Yet Another Data Wiping Malware Targeting Ukrainian Networks

Clearview AI Helping the Ukrainian War Effort

Critical flaws affect Veeam Data Backup software

CVE-2022-0778 DoS flaw in OpenSSL was fixed

Dirty Pipe Linux flaw impacts most QNAP NAS devices

Dozens of ransomware variants used in 722 attacks over 3 months

East Tennessee Children’s Hospital Statement on Security Issue

FBI warns of MFA flaw used by state hackers for lateral movement

Financially motivated threat actors willing to go after Russian targets

FTC Takes Action Against CafePress for Data Breach Cover Up and Poor Security

FTC to fine CafePress for cover up of massive data breach

German government advises against using Kaspersky antivirus

Hacker afirma ter 7 bilhões de dólares em Bitcoin

Hackers ‘se alistam’ em guerra cibernética entre Rússia e Ucrânia

HackerOne apologizes to Ukrainian hackers for mistakenly blocking payouts

Hackers Hit Rosneft

How cloud services become weapons in Russia-Ukraine cyber conflict

Israeli Government Websites Taken Offline in Large-Scale Cyber-Attack

Malicious web application requests skyrocketing, bad actors stealthier than ever before

Massive DDoS Attack Knocked Israeli Government Websites Offline

Massive phishing campaign uses 500+ domains to steal credentials

Mobile Devices See 466% Annual Increase in Zero-Day Attacks

Nasty Linux netfilter firewall security hole found

Nearly 34 Ransomware Variants Observed in Hundreds of Cyberattacks in Q4 2021

Nearly 300k Heart Patients’ Data Exposed

New Linux botnet exploits Log4J, uses DNS tunneling for comms

No rational basis: Defamation law expert says Australia's anti-trolling Bill should be canned

Pandemic pushes cybersecurity to top agenda in Asean boardrooms

Phishing attempts against smartphones are on the rise. And those small screens aren't helping

Russia faces IT crisis with just two months of data storage left

SentinelOne acquires Attivo Networks for identity-based threat detection

The German BSI agency recommends replacing Kaspersky antivirus software

The massive impact of vulnerabilities in critical infrastructure

The simple secret to app security? Time

Top threats for the financial sector

Twitter concerned Australia's anti-trolling Bill leaves minority communities vulnerable

UK Blocks Assange's Extradition Appeal

Ukrainian Targets Hit by Another Destructive Malware Variant

Veeam fixes critical RCEs in backup solution (CVE-2022-26500, CVE-2022-26501)

14/03

2021 mobile security: Android more vulnerabilities, iOS more zero-days

Amazon Echos Hack Themselves, Fraud Is Flourishing on Zelle, Samsung Galaxy Source Code Stolen

Anonymous claims to have hacked German subsidiary of Russian energy giant Rosneft

Attacker uses websites’ contact forms to spread BazarLoader malware

Automotive giant DENSO hit by new Pandora ransomware gang

Automotive giant Denso confirms hack, Pandora ransomware group takes credit

Best YubiKey: You need this cheap security tool

Brazilian trojan impacting Portuguese users and using the same capabilities seen in other Latin American threats

Building trust in a zero-trust environment

Canada Cops Arrests Teen Cyber-Attack Suspect

Critical Infrastructure Threat as Ransomware Groups Target 'Enemies of Russia'

Denso ransomware attack – Pandora gang claims to steal 1.4 TB of data

Discord is plagued by hackers and users say the company doesn’t care

Elden Ring: hacker diz ser um 'mal necessário' para o bem do jogo

Exclusive: iboss Issues School District Cybersecurity Warning

FCA: Crypto ATMs Are Illegal in the UK

Gaming Company Ubisoft Confirms It was Hacked, Resets Staff Passwords

Hacker diz ter R$ 35 bilhões em bitcoin, mas quer levar uma vida normal

HelpSystems to Acquire Alert Logic to Gain MDR Service

Hit by ransomware or paid a ransom? Now some companies will have to tell the government

How to contain a privileged access breach and make sure it doesn’t happen again

How to enable Lockdown mode on a Pixel phone

Leaks reveal the surprisingly mundane reality of working for a ransomware gang

Legal Practice Fined £100k After Hacker Stole Court Info

Microsoft is testing ads in the Windows 11 File Explorer

Microsoft removes Windows 11 update block for VirtualBox users

Model contract language for medical technology cybersecurity published

New CaddyWiper data wiping malware hits Ukrainian networks

New Hampshire: Litchfield School District employee wrongdoing created student data security incident

New Linux Bug in Netfilter Firewall Module Lets Attackers Gain Root Access

Penetration Testing Azure: The User-Friendly Guide

Poor data sanitization practices put public sector data at risk

Purdue University’s CERIAS 2021 Security Symposium – Dr. Theresa Mayer’s ‘Welcome’

QNAP warns severe Linux bug affects most of its NAS devices

RagnarLocker Targets Critical Infrastructure, Sidestepping Security

Researchers Find New Evidence Linking Kwampirs Malware to Shamoon APT Hackers

Russian Ransomware Gang Retool Custom Hacking Tools of Other APT Groups

Russia-Ukraine cyber conflict poses critical infrastructure at risk

SCA Rules Come into Force Today for E-commerce Transactions

The Analyst Prompt #04: MuddyWater APT attributed to Iranian Ministry of Intelligence and Security, and the Increasing Global Ransomware Threat

The Human Factor in Data Security Breaches

The importance of building in security during software development

Ubisoft reveals 'security incident' forcing company-wide password refresh

UK Unveils New Cyber Flashing Law

Ukrainian hackers say HackerOne is blocking their bug bounty payouts

Ukraine is using Clearview AI’s facial recognition during the conflict

Ukraine reportedly adopts Clearview AI to track Russian invaders

Ukraine Using Clearview AI Facial Recognition Tech to Monitor ‘People of Interest’

Why Enterprise Threat Mitigation Requires Automated, Single-Purpose Tools

Women in cybersecurity: How far have they come?

13/03

10 things to do now to protect your business against cyberwar

After Nvidia and Samsung, gaming giant Ubisoft suffers cyber attack

Americanas diz à Justiça que contratou ‘especialistas mundialmente reconhecidos’ para lidar com ataque hacker

Anonymous - Discover the origin of the hacktivist group that declared war on Russia

Anonymous sent a message to Russians: “remove Putin”

BreachQuest – Post internal chats of the Pro-Russia Ransomware group

Canadian Cops Confiscate Bitcoin Worth Over $28 Million From Ex-Gov’t Employee

Chinese hackers are allegedly targeting US government Gmail accounts

Devious Escobar Android malware can steal credentials for 190 financial apps

Fake Valorant cheats on YouTube infect you with RedLine stealer

Focus should be on pre-empting cyber crime cases

Hacker que invadiu site de shopping para postar currículo é contratado

Handy Tips to Protect Your Personal Data from AI Bots

Japan's Denso hit by apparent ransomware attack - NHK

Karnataka lost Rs 221 crore to cybercrimes in last three years: Home Minister Araga Jnanendra

Kaspersky: Cyberthreats still likely in Metaverse

Lessons from Russia-Ukraine war: Is India ready to tackle state-sponsored ‘hybrid war’?

NHS horror warning as Putin tipped to cripple UK hospitals in DAYS - ‘Confusion and chaos’

Pandemic effect: Cybercrime on the rise

Russia-Ukraine Cyberwar: Five Things We Learned

Senior Swiss researcher says Russia-Ukraine cyber-war hype is just that

Toyota Motor supplier Denso hit by ransomware attack

Where Next for Government in the Cyber Insurance Market?

NEWS: Março (06/03 - 12/03) - 10 Semana de 2022