NEWS: Outubro (17/10 - 23/10) - 42 Semana de 2021
Cyber Security and Information Security News - Daily Updates !!!
23/10
Facebook Sues Ukrainian Hacker Who Stole Millions of Sensitive User Details From Messenger - TechNadu
Human Hacking and Multi-Channel Phishing is Surging - Slash Next
Microsoft Warns of TodayZoo Phishing Kit Used in Extensive Credential Stealing Attacks - The Hacker News
Popular NPM library hijacked to install password-stealers, miners - Bleeping Computer
Russian Drivers' Personal Data Available Online for Less than the Price of an iPhone - Auto Evolution
22/10
3 Million CoinMarketCap Email Addresses Have Leaked - Crypto Briefing
Attack that is blocking CBS shows like 'Jeopardy!' What is, Russian ransomware? - The Gainesville Sun
Candy production impacted by ransomware attack - Forest Park Review
Cisco SD-WAN Security Bug Allows Root Code Execution - Threatpost
Countries agree to 'urgent action' on ransomware, but issue few specifics - Saskatoon StarPhoenix
Cybersecurity threats challenge K-12 schools’ resilience and preparedness - Security Infowatch
DarkSide ransomware rushes to cash out $7 million in Bitcoin - Bleeping Computer
DNS attacks are targeting more businesses than ever - Techradar Pro
Embracing secure hybrid work with four foundational IT controls - Help Net Security
Ferrara Hit With Ransomware Attack - Food processing
FIN7 Sets Up Fake Pentesting Company Site to Recruit Talent - GovInfo Security
Groove ransomware calls on all extortion gangs to attack US interests - Bleeping Computer
Halloween Horror-Show for Candy-Maker Hit by Ransomware - InfoSecurity Magazine
Italian celebs' data exposed in ransomware attack on SIAE - Bleeping Computer
Missouri Officials: Teacher Information Data Breach to Cost $50M Outline - Insurance Journal
Over 35,000 citizen data at stake as digital marketing agency Fimmick attacked by ransomware - Marketing Interactive
Phishing Tackle releases Smishing-as-a-Service to reduce the risk of text message phishing - Help Net Security
Ransomware Gang Built A Fake Cybersecurity Start-Up To Recruit Unwitting IT Specialists - Hot Hardware
SCUF Gaming store hacked to steal credit card info of 32,000 customers - Bleeping Computer
The Biggest Cyber-Threat Isn't Hackers, It's Insider Threats - InfoSecurity Magazine
The Tokyo 2020 Olympics saw how many attempted cyber attacks? - Government Technology
Unhappy customers and their own tricks used against them, REvil ransomware gang reportedly pulled offline by 'multi-country' operations - The Register
21/10
Bug in Popular WinRAR Software Could Let Attackers Hack Your Computer - The Hacker News- The Hacker News
Data Scrapers Expose 2.6 Million Instagram and TikTok Users - InfoSecurity Magazine
Fraud never sleeps: Why biometrics is essential for effective fraud prevention - Help Net Security
Hackers Stealing Browser Cookies to Hijack High-Profile YouTube Accounts - The Hacker News
How do I select a GRC solution for my business? - Help Net Security
Increased activity surrounding stolen data on the dark web - Help Net Security
Malicious NPM Packages Caught Running Cryptominer On Windows, Linux, macOS Devices - The Hacker News
Many organizations lack basic cyber hygiene despite high confidence in their cyber defenses - Help Net Security
Siloed security data hamper the ability to achieve collective defense - Help Net Security
Smartphone counterespionage for travelers - Help Net Security
Threat Actors Abusing Discord to Spread Malware - InfoSecurity Magazine
U.S. Government Bans Sale of Hacking Tools to Authoritarian Regimes - The Hacker News
US to Ban Export of Hacking Tools to Authoritarian States - InfoSecurity Magazine
20/10
81% of UK Healthcare Organizations Hit by Ransomware in Last Year - InfoSecurity Magazine
Attack surface larger than ever as organizations shift to remote and hybrid work - Help Net Security
Companies Failing to Protect Domain Registrations - Security Boulevard
Five game-changing factors for companies dealing with ransomware attacks - Help Net Security
LightBasin Operation Compromises 13 Global Telcos in Two Years - InfoSecurity Magazine
Members of at least two health insurance plans notified of ransomware attack on PracticeMax - DataBreaches Net
Microsoft, Intel and Goldman Sachs Team Up For New Supply Chain Security Initiative - InfoSecurity Magazine
Microsoft launches Privacy Management for Microsoft 365 - Help Net Security
Microsoft Warns of New Security Flaw Affecting Surface Pro 3 Devices - The Hacker News
Mobile application security guide, from development to operations - Help Net Security
Organizations lack basic cybersecurity practices to combat the growing tide of ransomware - Help Net Security
OWASP's 2021 List Shuffle: A New Battle Plan and Primary Foe - The Hacker News
Supply chain attacks are the hacker's new favourite weapon. And the threat is getting bigger - ZDNet
Twitter Pulls Account After Argentinian Mega Breach Claims - InfoSecurity Magazine
Zerodium is looking for zero-day exploits in ExpressVPN, NordVPN, and Surfshark Windows VPN clients - Security Affairs
What are the post-pandemic security concerns for IT pros? - Help Net Security
19/10
83% of Ransomware Victims Pay the Demand - InfoSecurity Magazine
A New Variant of FlawedGrace Spreading Through Mass Email Campaigns - The Hacker News
ACE takes down Electro TV Sat pirate streaming service - Bleeping Computer
Apple iCloud Hacker Steals Nudes - InfoSecurity Magazine
Bots to become the future of work and provide ROI to organizations using them - Help Net Security
Compliance does not equal security - Help Net Security
Data Breach Hits US Dental Patients - InfoSecurity Magazine
Forrester report suggests Imperva Data Protection delivers high value and rapid ROI - Security Boulevard
Government Gunning for Cryptocurrency—Uses Ransomware as Pretext - Security Boulevard
How Your Organization Can Prevent Data Breaches - Security Boulevard
Microsoft fixes Surface Pro 3 TPM bypass with public exploit code - Bleeping Computer
Multi-factor authentications soar as enterprises move away from passwords to secure hybrid workers - Help Net Security
New Karma ransomware group likely a Nemty rebrand - Bleeping Computer
Prison for UPMC Data Thief - InfoSecurity Magazine
Recommendations for improving DEI in cybersecurity teams - Help Net Security
Secure your databases against opportunistic attackers - Help Net Security
Shared Responsibility Key to Protecting Critical Infrastructure - InfoSecurity Magazine
Squirrel Engine Bug Could Let Attackers Hack Games and Cloud Services - The Hacker News
Symantec uncovered a previously unknown nation-state actor, named Harvester, that targeted telcos - Security Affairs
The Challenge of Regulatory Compliance for Critical Infrastructure - Security Boulevard
The CISO’s guide to evaluating third-party security platforms - Help Net Security
Trustwave released a free decryptor for the BlackByte ransomware - Security Affairs
UK in Midst of $200m Crypto Fraud Epidemic - InfoSecurity Magazine
US Authorities Issue BlackMatter Ransomware Alert - InfoSecurity Magazine
VPN Provider's Misconfiguration Exposes One Million Users - InfoSecurity Magazine
WFH is here to stay: Five tactics to improve security for remote teams - Help Net Security
18/10
Analyzing and implementing a national zero trust architecture - Help Net Security
Atento Infectada por Malware - Felipe Payão (Twitter)
Attackers Weaponizing Zero-Days at Record Pace - Security Boulevard
BEC attacks: Scammers’ latest tricks - Help Net Security
Credit card PINs can be guessed even when covering the ATM pad - Bleeping Computer
Cyber-Attack on US TV Broadcaster - InfoSecurity Magazine
Cyber risk trends driving the surge in ransomware incidents - Help Net Security
Cybersecurity Risk’s “New Math” - Security Boulevard
DEF CON 29 ICS Village – Mert Can Kilic’s ‘Do We Really Want To Live In The Cyberpunk World’ - Security Boulevard
Espionage Group ‘Harvester’ Uses New Tools to Target South Asia and Focuses on Afghanistan - TechNadu
Europol Warns of Major EU Recovery Fund Fraud - InfoSecurity Magazine
Facebook diz que mais reportagens com documentos vazados devem ser publicadas em breve - G1 Tecnologia
FBI, CISA, NSA share defense tips for BlackMatter ransomware attacks - Bleeping Computer
Fraud Victims Lose £9.3bn in Well-Being per Year - InfoSecurity Magazine
Learning Framework For Detection of Novel Malware | Avast - Security Boulevard
Microsoft asks admins to patch PowerShell to fix WDAC bypass - Bleeping Computer
Most employees believe backing up company data is not their problem - Help Net Security
Popular student monitoring software could have exposed thousands to hacks - Data Breaches Net
Prometheus endpoint unprotected installs could expose sensitive data - Security Affairs
Remote access security strategy under scrutiny as hybrid/remote working persists - Help Net Security
REvil ransomware operation shuts down once again - Security Affairs
Sinclair TV stations downtime allegedly caused by a ransomware attack - Security Affairs
Sinclair TV stations crippled by weekend ransomware attack - Bleeping Computer
South Korea Wants Help to Arrest Alleged Cyber-Criminals - InfoSecurity Magazine
State-backed hackers breach telcos with custom malware - Bleeping Computer
Suspected Chinese hackers behind attacks on ten Israeli hospitals - Bleeping Computer
TeamTNT Deploys Malicious Docker Image On Docker Hub - Security Affairs
The importance of crisis management in the age of ransomware - Help Net Security
Twitch: No Passwords Were Taken in Data Breach - InfoSecurity Magazine
Update: Student and personnel files from Manhasset Union Free School District appear on the dark web - Data Breaches Net
US Treasury Tracks $5.2bn of Ransomware Transactions in Six Months - InfoSecurity Magazine
Why Database Patching Best Practice Just Doesn't Work and How to Fix It - The Hacker News
17/10
Cloud security is an ongoing struggle to keep sensitive data safe. Is it getting any easier? - HackRead
Former Microsoft Security Analyst Claims Office 365 Knowingly Hosted Malware For Years - Hothardware
Google sent 50K warnings to targets of government-backed hackings - Business Standard
Report: Iran’s Islamic Revolutionary Guard Behind Massive Hacking Campaign in the U.S. - Legal Insurrection
REvil Ransomware Gang Goes Underground After Tor Sites Were Compromised - The Hacker News
REvil ransomware shuts down again after Tor sites were hijacked - Bleeping Computer
The True Cost of DDoS Attacks - InfoSecurity Magazine
Twitch confirms no user data was leaked in recent data breach – Houstonian Online
Comments