DAILY NEWS: Abril (21/04 - 27/04) - 17 Semana de 2024

Cyber Security, Privacy and Information Security News --- Daily Updates !! Weekly Resume...

27/04

17000 Credit Cards Blocked by ICICI Bank for Data Breach

Bogus npm Packages Used to Trick Software Developers into Installing Malware

Brokewell Android malware supports an extensive set of Device Takeover capabilities

Change Healthcare cyberattack: VA notifies 15 million veterans about breach

Congress must work to prevent future cyber-attacks on health care industry

Data breach tsunami hits Australia

Hacker Group Claims It Penetrated Belarusian KGB Network

Hackers may have accessed thousands of accounts on the California state welfare platform

International Survey Reveals Over 70% Of Firms Fear Cyber Attack

Japanese police create fake support scam payment cards to warn victims

Kaiser notifies millions of its members of a privacy data breach

Montclair residents told their information was compromised in cyberattack

Okta warns of "unprecedented" credential stuffing attacks on customers

Ransomware attacks occur on average every 11 seconds

Threat Actor Allegedly Offers Database and Source Code of Egypt-Based Lucky App for Sale

Ukraine Targeted in Cyberattack Exploiting 7-Year-Old Microsoft Office Flaw

26/04

10 Critical Endpoint Security Tips You Should Know

90% of company attacks start with a phishing email

93% of security leaders anticipate daily AI attacks by 2025

5,000 officers and staff involved in legal action after PSNI data breach

AI, quishing and multi-channel attacks top phishing trends

AI-Powered Cyber Attack Predicted to Increase, Particularly Phishing Attacks

Alleged Data Breach: Threat Actor ‘netnsher’ Claims Leaks of Nota by M&T Bank and TTEC Databases

Avoid Using Unregistered Cryptocurrency Transfer Services, FBI Warned

Baby Reindeer review – a real-life account of digital abuse

Berry, Dunn, McNeil & Parker Announces Third-Party Data Breach at Reliable Networks of Maine Affecting Over 1.1 Million Consumers

BerryDunn suffers third-party breach, 1M affected

Blackstone Valley Community Health Care Announces Data Breach

Breaking down the numbers: Cybersecurity funding activity recap

Cactus Ransomware Exploiting Qlik Servers Vulnerability

Check Point says 90% of phishing attacks come via email

China-linked PlugX malware infections found in more than 170 countries

Chrome Critical Flaw Let Attackers Execute Arbitary Code : Patch Now

CISA Launches Ransomware Vulnerability Warning Pilot to Protect Critical Infrastructure

CISA’s ransomware warnings helped patch 852 vulnerabilities

Cisco says hackers subverted its security devices to spy on governments

Cryptocurrencies and cybercrime: A critical intermingling

Cyber attack anxiety apologies

Cyber claims increasing, despite underwriting refinement

Cybersecurity researchers spotlight a new ransomware threat – be careful where you upload files

DDoS attacks continue, post-election, against Russian independent media site Meduza

Despite complaints, Apple hasn’t yet removed an obviously fake app pretending to be RockAuto

El Salvador’s Chivo Wallet Hit by Cyber Attacks and Data Leak

Ensuring the Security and Efficiency of Web Applications and Systems

Essex County Council pay out £15,000 in data breach claims amid 'worrying' national rise

Experts warn of an ongoing malware campaign targeting WP-Automatic plugin

ExtraHop report shows Singapore firms vulnerable to ransomware attacks

Fake job interviews target developers with new Python backdoor

FBI warns against unregistered cryptocurrency services

Feds Bust Privacy-Centric Samourai Wallet Over BTC Money Laundering

Hacker Group Claims It Penetrated Belarusian KGB Network

Hackers Abuse Autodesk Drive For Hosting Weaponized PDF Files

Hackers Actively Exploiting WP Automatic Updates Plugin Vulnerability

Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress Sites

Hackers leak World-Check, sanctions, and crimes database

Hackers vazam imagens de pacientes de cirurgia plástica nus e prontuários de clínica de saúde sexual

Healthcare app exposes sensitive patient data

Hernando County Recovering from Easter Ransomware Attack

HunterInternational Ransomware Group Attacked Chicony Electronics. Compromising Data of Space X, HP, Google and Amazon

ICICI Bank blocks 17,000 credit cards after data breach

ICICI Bank takes action after credit card data breach, promises compensation to affected customers

Impact of organizational structure on ransomware outcomes: Where does your org fit in?

Integrated Residential Security Solutions to Employ in 2024

Introducing Coconut Botnet: A Comprehensive Overview of Its Features and Pricing

Kaiser Permanente data breach may have impacted 13.4 million patients

Kaiser Permanente: Data breach may impact 13.4 million patients

Kaiser reports 13.4 million people affected by data breach

Kaiser’s website tracking tools may have compromised data on 13 million customers

Label working with Snoop Dogg and Iggy Azalea faces cyberthreat

Lamont Hanley & Associates Confirms June 2023 Data Breach Leaked Confidential Atrius Health Patient Information

LivaNova Begins Sending Data Breach Letters Following October 2023 Data Breach

LSA Whisperer: Open-source tools for interacting with authentication packages

Major Japanese Freight Forwarder Kintetsu World Express Allegedly Hit by Data Breach

Medical Tech Company LivaNova Reports Cyberattack Compromising US Patients Data

Microsoft Releases Historical MS-DOS 4.0 Source Code to the Public

Most people still rely on memory or pen and paper for password management

MuddyWater Hackers Abusing Legitimate RMM Tool to Deliver Malware

Multi-Year Cyberattack: Chinese Hackers Suspected in Breaching Volkswagen

New CISO appointments 2024

New 'Brokewell' Android Malware Spread Through Fake Browser Updates

Omni Hotels Data Breach: Why Are Hackers Targeting Hotel Chains?

OracleCMS faces cyber security breach; data exposed by Lockbit 3.0

Over 850 Vulnerable Devices Secured Through CISA Ransomware Program

Over 1,400 CrushFTP internet-facing servers vulnerable to CVE-2024-4040 bug

Palo Alto Networks Outlines Remediation for Critical PAN-OS Flaw Under Attack

PF retoma serviço online para emissão de passaporte, após ataque hacker

Phishing attack compromises LA County Health Services data

Plasma donation company Octopharma says cyber attack disrupted its U.S. operations

PoC Exploit Released For Critical Flowmon Vulnerability

Ransomware attacks occur on average every 11 seconds

Ring to Pay Out $5.6m in Refunds After Customer Privacy Breach

Russian Hacker Groups Claim Responsibility for Coordinated Cyber Attacks on Moldova

Severe Flaws Disclosed in Brocade SANnav SAN Management Software

Sistema do TSE foi alvo de novo ataque hacker no dia 16 de abril

SpaceX Data Breach Back From the Dead: Hunters International Posts Alleged Stolen Information

Stuxnet: the first true cyberweapon

Sweden’s liquor supply severely impacted by ransomware attack on logistics company

The biggest data breach fines, penalties, and settlements so far

Thoma Bravo Acquires UK Cybersecurity Leader Darktrace in $5.3 Billion Deal

Time to ditch eight-character passwords – they may no longer be enough in 2024

What AI can tell organizations about their M&A risk

Why Federal Agencies Must Learn from the Cyber Safety Review Board Report on Microsoft

25/04

11% of Cybersecurity Teams Have Zero Women

25 cybersecurity AI stats you should know

56% of cyber insurance claims originate in the email inbox

73% of SME security pros missed or ignored critical alerts

90% of company attacks start with a phishing email

Action needed amid escalating ransomware attacks, record-high payments

AI tools linked to data exposure in 1 in 5 UK organisations

Alcohol sales disrupted in Sweden after reported ransomware attack

Alleged data breach exposes employee records linked to job recruitment platform Glints

Applying DevSecOps principles to machine learning workloads

ArcaneDoor Exploiting Cisco Zero-Days To Attack Government Networks

Asbury Automotive Group Announces Data Breach Leaking Consumers’ Social Security Numbers

BEC and Fund Transfer Fraud Top Insurance Claims

Beware! Zero-click RCE Exploit for iMessage Circulating on Hacker Forums

BeyondTrust lauded as a leader in Identity Threat Detection

Bharat Sanchar Nigam Limited (BSNL) Leaked Data Resurfaces with 2.9 Million Records Exposed on Dark Web

Central Power Systems & Services’ Website Down After Alleged Hunters Group Cyberattack

CISA adds Microsoft Windows Print Spooler flaw to its Known Exploited Vulnerabilities catalog

Cisco urges immediate software upgrade after state-sponsored attack

Cradlepoint launches rapid-deploy secure network solution NetCloud SASE

Crypto Crackdown: Samourai Wallet Founders Arrested for Laundering Over $100 Million

Cyber Attack Defenders Up For Battle: Huge Uptick In Timely Detections

Cyberattacks on the rise – key recommendations

DragonForce Ransomware Group Uses LockBit's Leaked Builder

East Sussex Council pays out £26,000 in data breach claims amid ‘worrying’ rise

Founders of Cryptocurrency Mixing Service Arrested for Money Laundering Offenses

Frontier Communications Cyber Attack Shuts Down Systems, Leaks Personal Data

Gen AI optimism high in ANZ but cybersecurity concerns loom

GitHub’s 2FA rollout a success, says platform

GitLab High-severity Flaw Let Attackers Takeover Account – Update Now

Google fixed critical Chrome vulnerability CVE-2024-4058

Google Meet Now Allows Non-Google Account Users to Join Encrypted Calls

Google Patches Critical Chrome Vulnerability and Additional Flaws

Google Postpones Third-Party Cookie Deprecation Amid U.K. Regulatory Scrutiny

Hackers Employ Black Hat SEO Techniques To Deliver Malware

Hackers usam dia zero da Cisco para violar redes de governos

High Performance Podcast Duo to Unveil Secrets of Success at Infosecurity Europe 2024

How a crippling cyber attack on a U.S. healthcare company is impacting Pueblo physicians

How to turn on Private DNS Mode on Android (and why you should)

India’s ICICI Bank exposed thousands of credit cards to ‘wrong’ users

"Junk gun" ransomware: the cheap new threat to small businesses

KnowBe4 to Acquire Egress for Aids in Email Awareness Training

KnowBe4 to acquire Egress for enhanced AI-driven cybersecurity

Leicester streetlights on day and night following cyber-attack

NetApp 2024 report uncovers 'disrupt or die' era powered by AI

Network Detection and Response (NDR) in the Modern Cybersecurity Landscape

Network Threats: A Step-by-Step Attack Demonstration

New Brokewell malware takes over Android devices, steals data

New ITW Global Leaders Forum code targets international voice fraud

New Qiulong Ransomware Well-Equiped To Make Waves

North Korea hacking teams hack South Korea defence contractors - police

North Korea's Lazarus Group Deploys New Kaolin RAT via Fake Job Lures

Oklahoma man sues EMSA after private info compromised in data breach

Online Banking Security Still Not Up to Par, Says Which?

Over 1,400 CrushFTP servers vulnerable to actively exploited bug

Overcoming GenAI challenges in healthcare cybersecurity

PlugX USB worm Infected Over 2.5M Devices

Popular File Transfer Software CrushFTP Hit by Zero-Day Exploit

‘Project Melissa’ coalition reveals victims of Cactus ransomware

Psoglav Ransomware Partnership: The New Ransomware Threat Encrypting Your Files

Qiulong Ransomware Group Targets Brazilian Surgeon Dr. Willian Segalin, Citing Privacy Concerns

RansomHouse on the Move Again: Hirsh Industries Latest Target

Ransomware activity spikes 20%, hospitals now in crosshairs

Ransomware Group BlackBasta Targets TRUE Solicitors

Ransomware threats escalating in Southeast Asia – report

Reddit down in major outage blocking access to web, mobile apps

Researchers Discover Connection Between LockBit and DragonForce Ransomware Builders

Salt Security adds defense against OAuth attacks

Scammers bypassing Google ad checks to impersonate real brands

Scientists find a way to detect AI deepfake videos

ServiceSeeking joins ConnectID for enhanced online security for SMEs

Serviço de emissão de passaporte da PF volta a funcionar após tentativa de invasão hacker

Sistema on-line para emissão de passaporte é restabelecido pela PF

Social Engineering Paves the Way for the XZ Cyber Incident

Social housing provider reprimanded after data breach of antisocial behaviour case files

South Korean Defense Industry Under Siege by North Korean Hacker Groups

State Spies Exploited Cisco Zero-Days to Intrude Government Networks

State-Sponsored Espionage Campaign Exploits Cisco Vulnerabilities

State-Sponsored Hackers Exploit Two Cisco Zero-Day Vulnerabilities for Espionage

Supplement maker hack allegedly exposes 1M customers

The Federal Trade Commission (FTC) issues refunds to Ring customers following privacy settlement

The real space race: Inside geopolitics and security of a $1.8T industry

The U.S. Department of Justice (DoJ) Arrests Founders of Crypto Mixer Samourai for $2 Billion in Illegal Transactions

The U.S. Department of Justice (DoJ) arrested the founders of crypto mixer Samourai for facilitating $2 Billion in illegal transactions

Third-party ransomware attack threatens Sweden’s liquor supply

Threat Actor Allegedly Offers Access to Source Code of 150 Companies, Priced at $7000

UnitedHealth admits to paying a ransom to regain access to Change Healthcare's systems

University System of Georgia says MOVEit Transfer breach compromised students' personal data

US is reviewing risks of China's use of RISC-V chip technology

US Takes Down Illegal Cryptocurrency Mixing Service Samourai Wallet

Volkswagen hit by cyberattack originating in China, threatening global EV industry

Warnings Issued on Potential Neighbourhood Watch Data Breach

Will Meta’s New Approach to AI-Generated Content End Fake News?

WP Automatic WordPress plugin hit by millions of SQL injection attacks

24/04

2 Iranian Firms, 4 Individuals Sanctioned For Cyber Attack On US Companies

73% of security professionals failed to act upon security alerts

8Base Ransomware Group Launches Cyberattack on Bieler Lang GmbH, Threatens Data Leak

AI set to play key role in future phishing attacks

Analysts have identified the favorite attack method of the hacker group Lazarus Group

ArcaneDoor hackers exploit Cisco zero-days to breach govt networks

AT&T facing 2nd class action lawsuit over major data breach exposing 70 million customers’ data

Attacker dwell time dips, but firms grapple with ransomware, zero day attacks

Australian organisations face surge in ransomware attacks

BlackSuit ransomware gang claims hack on Octapharma Plasma

Bugs in keyboard apps revealing what users type

Cactus Ransomware Hits Singapore Garment Giant Ghim Li Global

Carpetright shuts down network infrastructure following a ransomware attack

CISO Perspectives on Complying with Cybersecurity Regulations

Coalition reveals uptick in cyber insurance claims driven by ransomware in 2023

Coast Guard Reserve deals with data breach amid cybersecurity push

CoralRaider Hacker Evade Antivirus Detections Using Malicious LNK File

CoralRaider Malware Campaign Exploits CDN Cache to Spread Info-Stealers

Cybersecurity jobs available right now: April 24, 2024

Dark web inundated by cheap ransomware tools

Data breach at Bega Valley Council's after-hours customer service provider

Diagnostics giant Synlab Italia shuts entire network following a ransomware attack

eBook: Cloud security skills

eScan Antivirus Update Mechanism Exploited to Spread Backdoors and Miners

Euro police chiefs rekindle end-to-end encryption battle amid continued rollouts

ExtraHop finds 77% of Australian organisations made ransomware payments last year

Fifth of CISOs Admit Staff Leaked Data Via GenAI

GenAI can enhance security awareness training

GISEC Global 2024 video walkthrough

Glints Data Breach: Alleged Leak of Sensitive Employee Data from Singapore’s Recruitment Platform

Global attacker median dwell time continues to fall

Google Meet opens client-side encrypted calls to non Google users

Google yet again delays killing third-party cookies in Chrome. Here's what you need to know

Hacker exposes source code for El Salvador bitcoin ATMs

Hackers hijacked the eScan Antivirus update mechanism in malware campaign

Ho Chi Minh City alerts Ransomware malware attacks

How the ToddyCat threat group sets up backup traffic tunnels into victim networks

How to Avoid Phishing Attacks Within a Business

Hunt3r Kill3rs Group Allegedly Infiltrates Israeli Government and Military Systems, Threatens Further Attacks

Leeds Talent Pool Attracts BlueVoyant's First UK Security Operations Center

Major Security Flaws Expose Keystrokes of Over 1 Billion Chinese Keyboard App Users

Malaysia records 69% decline in ransomware detections in 2023

Mandiant unveils latest M-Trends 2024 cybersecurity report

Megazord Ransomware Attacking Healthcare And Government Entities

Microsoft issues warning over ‘GooseEgg’ tool used in Russian hacking campaigns

Microsoft: Russian APT 28 exploits Windows bug with GooseEgg tool

Microsoft to warn if your Windows 11 PC doesn't meet system requirements for AI Explorer

New OT security service can help secure against critical systems attacks

New Ransomware Group APT73 (Eraleign) Raises Alarms in Companies

Nigeria, Romania, Russia, U.S. Among Top Cybercrime Nations

North Korean Hackers Target Dozens of Defense Companies

North Korean Lazarus hacker group using LinkedIn to target and steal assets: Report

Nothing Admits to 2022 Data Breach Exposing Community Emails

Nothing Community Confirms Data Breach of 2,250 Members

Personal details of 200,000 people at risk after neighbourhood watch system data breach

Phishing Attacks Rise By 58% As The Attackers Leverage AI Tools

Photos: GISEC Global 2024

PoC for critical Progress Flowmon vulnerability released (CVE-2024-2389)

RansomHouse Strikes Again: Banten Regional Development Bank Tbk Targeted

Ransomware Evolution | How Cheated Affiliates Are Recycling Victim Data for Profit

Ransomware Groups are Rebranding — As ‘Services’

Ransomware payments surpass $1 billion in 2023, report finds

Researchers Detail Multistage Attack Hijacking Systems with SSLoad, Cobalt Strike

Ring customers get $5.6 million in privacy breach settlement

Russian Hackers Claim Responsibility for Cyber Attack on Indiana Water Plant

Security bugs in popular phone-tracking app iSharing exposed users’ precise locations

Security Leaders Braced for Daily AI-Driven Attacks by Year-End

Steer Clear of the Iceberg: Navigating the Waters of New SEC Cyber Regulations

Sweden facing dry weekend as ransomware hits alcohol supplier

Sweden's liquor shelves to run empty this week due to ransomware attack

The hacker group CiberInteligenciaSV brings the government of El Salvador to its knees and publicly leaks the source code of the Bitcoin Chivo wallet

The relationship between cybersecurity and work tech innovation

The rise in CISO job dissatisfaction – what’s wrong and how can it be fixed?

The street lights in Leicester City cannot be turned off due to a cyber attack

Threat Actor Claims to Sell Windows 0-Day Exploit for $100,000

Threat Actor Offers MongoDB Remote Code Execution (RCE) Exploit for $100,000, Claiming Unidentified 0-Day Vulnerability

Tietoevry: conclusions on the ransomware attack

University Systems of Georgia data breach, personal information compromised

US Congress Passes Bill to Ban TikTok

US offers a $10 million reward for information on four Iranian nationals

U.S. Reveals Charges Against Iranian Nationals in Extensive Cyber Attack Plot

US Sanctions Iranian "Fronts" for Cyber-Attacks on American Entities

U.S. Treasury Sanctions Iranian Firms and Individuals Tied to Cyber Attacks

Volkswagen Hacked – Hackers Stolen 19,000 Documents From VW Server

Welsh Government data system infiltrated by ‘hacker’

What is biometrics? 10 physical and behavioral identifiers that can be used for authentication

WhatsApp reportedly working on an in-app dialer for its messaging app

Why Banks Should be Taking Quantum Security Very Seriously

Windows 11 KB5036980 update goes live with Start Menu ads

23/04

10 colleges and universities shaping the future of cybersecurity education

91% of Organisations Made Ransomware Payments Last Year

A cyber attack paralyzed operations at Synlab Italia

A Massive Cyber Attack Disrupts Operations Across Numerous French Municipalities

Apache Cordova App Harness Targeted in Dependency Confusion Attack

Attacker dwell time down, ransomware up in 2023

Authentication failure blamed for Change Healthcare ransomware attack

Behavioral patterns of ransomware groups are changing

Binance Labs-backed Velvet Capital repels potential phishing attack

Blackbyte ransomware group hacked Kisco Senior Living, stole the data of 26k customers

Can a VPN Be Hacked?

Carpetright unable to trade after cyber attack

Catholic Medical Center Hit by Data Breach, Affecting Nearly 2,792 Patients

CISA Releases Physical Security Checklist for Polling Locations to Safeguard U.S. Elections

CrushFTP zero-day exploited by attackers, upgrade immediately! (CVE-2024-4040)

Cyber-attack leaves Leicester street lights permanently on

Cyberattacks are on the rise, and that includes small businesses. Here's what to know

Data breach affects thousands at Kisco Senior Living

Details of 200k people at risk after data breach at Neighbourhood Watch system used by Lancs Police

Double-extorted Change Healthcare says “a substantial proportion” of Americans exposed

DPRK hacking groups breach South Korean defense contractors

End-to-End Encryption Sparks Concerns Among EU Law Enforcement

Facebook death notices: How to spot phishing attacks hitting social media users

FBI Director Wray Issues Warning on Chinese Cyber Attacks

Forminator WordPress Plugin Flaw Exposes Over 50,000 Websites to Cyber Attacks

German Authorities Issue Arrest Warrants for Three Suspected Chinese Spies

GitHub Comments Abused to Spread Malware in Fake Microsoft Repositories

Hacker Groups GLORIAMIST, LAPSUS, and Anonymous Warn of Impending French Ministry of Agriculture Database Leak

Hacker leaks source code for El Salvador Chivo ATMs

Hackers hijack antivirus updates to drop GuptiMiner malware

Hackers Hijacking Antivirus Updates to Deliver GuptiMiner

Hackers que invadiram sistema do governo roubaram dinheiro de pagamento dos servidores

HelloKitty ransomware rebranded and back in business, looking for employees

How a new law protects your thoughts from tech companies – and why it matters

How lava lamp randomness is aiding encryption

How Long It Would Take A Hacker To Brute Force Your Password In 2024, Ranked

Increase of nearly 60 percent in phishing attacks

Is Your Password Strong Enough? Brute Force Attack on the Rise!

'Junk gun' ransomware: New low-cost cyber threat targets SMBs

Kisco Senior Living & Island Ambulatory Surgery Center Disclose Summer 2023 Cyberattacks

Leicester City Cyber Attack Leads to Street Light Burning All Day & Night

Major Security Flaw in Popular Keyboard Apps Puts Millions at Risk

Microsoft says a Russian hacker group has been exploiting an old Windows Print Spooler issue

Microsoft Uncovers GooseEgg Malware: A New Weapon in Russian State Hackers’ Arsenal

Microsoft’s mea culpa moment: how it should face up to the CSRB’s critical report

Millions of Americans' Data Potentially Exposed in Change Healthcare Hack

MITRE cyber attack saw threat actors exploit Ivanti Connect Secure zero-days

Modern Phishing Techniques Surge, Report Urges Zero Trust Adoption

Navigating the Rising Tide of Phishing and BEC Threats

Nespresso Domain Hijacked in Phishing Attack Targeting Microsoft Logins

New home security system meets intruders with paintballs and tear gas

New research discovers vulnerability in an archived Apache project

NHS board apologises for 'anxiety' following major cyber attack

Nothing data breach: Company says it is an old vulnerability that has resurfaced now

People doubt their own ability to spot AI-generated deepfakes

Phishing attacks up 60 percent driven by AI

Police Chiefs Call for Solutions to Access Encrypted Data in Serious Crime Cases

Post-ransomware disruptions continue at California county library system

Proton Mail Unveils Dark Web Monitoring to Check for Credentials Leaks

Ransomware attacks rise in global food & agriculture sector

Ransomware Gang Leaks Data Allegedly Stolen From Government Contractor

Russian APT28 Group in New “GooseEgg” Hacking Campaign

Russian hackers claim cyberattack on Indiana water plant

Russian hackers’ custom tool exploits old Windows Print Spooler flaw (CVE-2022-38028)

Russian Hackers Exploiting Windows Print Spooler Using GooseEgg Tool

Russian Sandworm Group Hit 20 Ukrainian Energy and Water Sites

Russian state-sponsored hacker used GooseEgg malware to steal Windows credentials

Russia's APT28 Exploited Windows Print Spooler Flaw to Deploy 'GooseEgg' Malware

South Texas Oncology and Hematology Experiences Data Breach Following Cyberattack

‘Substantial proportion' of US had data stolen in Change Healthcare ransomware attack

SYNLAB Italia Acknowledges Potential Data Compromise Following Cyber Incident

The rising influence of AI on the 2024 US election

This Website is Selling Billions of Private Messages of Discord Users

Threat Actor Offers Database of Spanish Synergym for Sale at $2600

Top 10 physical security considerations for CISOs

United Nations Development Programme (UNDP) says data breach at Copenhagen office compromised sensitive human resources data

UnitedHealth admits IT security breach could 'cover substantial proportion of people in America'

UnitedHealth confirms it paid ransomware gang to stop data leak

UnitedHealth Confirms Paying Ransom to Secure Patient Data After Change Healthcare Cyberattack

UnitedHealth Data Breach: Many Americans Exposed on Dark Web

UnitedHealth Group Ransomware Attack : Hackers Stolen Patients Data

UnitedHealth subsidiary’s data breach could impact ‘substantial proportion’ of Americans

University Systems of Georgia announces data breach, personal information compromised

Unmasking the True Cost of Cyberattacks: Beyond Ransom and Recovery

U.S. Gov imposed Visa restrictions on 13 individuals linked to commercial spyware activity

US imposes visa bans on 13 spyware makers and their families

U.S. Imposes Visa Restrictions on 13 Linked to Commercial Spyware Misuse

US Imposes Visa Restrictions on Alleged Spyware Figures

U.S. Issues Visa Restrictions on Individuals Linked to Commercial Spyware

Valley Mountain Regional Center Announces July 2023 Data Breach Affecting Patients’ SSNs

Velvet Capital, Backed by Binance Labs, Temporarily Offline Due to Phishing Attack Risk

Velvet Capital Goes Offline to Allay Frontend Phishing Attack

Vulnerability Exploitation on the Rise as Attackers Ditch Phishing

Zscaler report warns of AI’s growing role in sophisticated phishing attacks

Zscaler Research Finds 60% Increase in AI-Driven Phishing Attacks

What is multi-factor authentication (MFA), and why is it important?

WordPress Responsive Theme Flaw Let Attackers Inject Malicious HTML Scripts

22/04

5 things to know about LabHost, the fallen SMS scamming empire

6 security items that should be in every AI acceptable use policy

10 Essentials Every Anti-Phishing Course Must Have

48 Vulnerabilities Uncovered In AI systems : Surge By 220%

A flaw in the Forminator plugin impacts hundreds of thousands of WordPress sites

Alert! Zero-day Exploit For WhatsApp Advertised On Hacker Forums

Alleged Cyberattack on Bureau van Dijk: US Consumer Data Compromised

Alleged Luxor Data Breach: Sensitive Information from Indian Stationery Giant Leaked

Android users are at high data tracking risk, study shows

AT&T Faces Class Action Lawsuit Over 70 Million Customers’ Data Breach

Australians arrested in worldwide phishing sting

Authorities investigate LabHost users after phishing service shut down

Belarusian hackers claim to breach fertilizer plant in retaliation for support of Lukashenko regime

Belgian brewery Duvel Moortgat’s data made public because company refused to pay

Brewing Trouble: How Nespresso’s Open Redirect Made Way for a Phishing Frenzy

Bug no plugin Forminator afeta mais de 300 mil sites WordPress

Carpetright Pulls Plug After Cyber-Attack

Catholic Medical Center (CMC) notifies patients of potential data breach

Cisco corrige bugs no Integrated Management Controller

Citrix UberAgent Vulnerability Allows Attackers To Escalate Privileges

Cloud Console Cartographer: Open-source tool helps security teams transcribe log activity

Consol Energy Targeted in Cyberattack: Russian Cyber Army Claims Responsibility

Criminal IP Partners with Sumo Logic on Threat Intelligence Data Enrichment

CrushFTP File Transfer Vulnerability Lets Attackers Download System Files

Cyber Army of Russia Allegedly Targets CONSOL Energy in DDoS Attack

‘Cybercriminals posed as Microsoft, Google for most attacks in Q1’

Cyberpunk 2077 and The Witcher 3: HelloKitty Ransomware group has opened the source code

Dead ransomware HelloKitty reanimates in rebrand and releases CD Projekt and Cisco data

Dependency Confusion Vulnerability Found in Apache Project

Digi Yatra Foundation drops app maker after ‘data-breach’

Digi Yatra sidelines legacy facial recognition app maker amid data breach rumors

Educational Computer Systems Confirms Brandeis University Students Affected by Recent Data Breach

Email still the most popular phishing technique even on mobile

Ernest Health class action claims data breach was preventable

European police call to stop encryption on social media

European police chiefs target End-to-End encryption (E2EE) in latest demand for ‘lawful access’

Family-Owned Music Store Targeted: MEDUSA Ransomware Strikes Ted Brown Music

Fraudsters Exploit Telegram’s Popularity For Toncoin Scam

French hospital Simone Veil cancels patient services following a major cyber attack

Frontier Communications Confirms Recent Cyberattack and Investigates Possible Data Breach

Frontier Communications forced to take systems offline following a major cyber attack

Fuxnet malware: Growing threat to industrial sensors

GitLab affected by GitHub-style CDN flaw allowing malware hosting

GPT-4 Is Capable Of Exploiting 87% Of One-Day Vulnerabilities

Grindr faces UK lawsuit for 'revealing users' HIV status' with thousands affected in alleged data breach

Grindr named in UK lawsuit over sharing HIV data

Hackers atacam redes no mundo todo com milhões de tentativas de login

Hackers Broke Into Change Healthcare’s Systems Days Before Cyberattack

Hackers ligados à Rússia dizem ter atacado estação de tratamento de água dos EUA

Hackers Mimic Road Toll Collection Services to Steal Your Money

Hackers Offering Admin Access to 3000 Fortinet SSL-VPN

Hackers threaten to leak a copy of the World-Check database used to assess potential risks associated with entities

Haddad nega ataque hacker ao Siafi e diz que usuário cadastrado foi quem acessou a rede

Hellokity Ransomware Actors Returns Under New Name

How to improve response to emerging cybersecurity threats

How to optimize your bug bounty programs

Indian businesses saw 235,472 ransomware incidents from Jan-Dec 2023

Interpol teve papel chave na prisão de grupo hacker brasileiro

Jackson County's ransomware attack is just the latest cybercrime to target local governments

Kaspersky Blocked Nearly 300K Ransomware Incidents In Southeast Asia Last Year

Kisco Senior Living data breach could affect more than 26,000

Lambda Layers Code Execution Flaw Leads To Supply Chain On AI/ML Applications

LastPass Users Hit by Major Phishing Scam: Master Passwords Breached

Leicester street lights stuck on all day due to cyber attack

LockBit-leaked DC city agency data from third party

Malvertising: Fake Popular Software Ads Deliver New MadMxShell Backdoor

Meet the New Flexible Kapeka Backdoor With Destructive Attacking Capabilities

Microsoft: APT28 hackers exploit Windows flaw reported by NSA

Microsoft Warns: North Korean Hackers Turn to AI-Fueled Cyber Espionage

MITRE breached by nation-state threat actor via Ivanti zero-days

MITRE Corporation Breached by Nation-State Hackers Exploiting Ivanti Flaws

Mitre Corporation targeted by nation-state threat actors

MITRE é violada por meio de bugs de dia zero em sistema da Ivanti

MITRE Reveals Ivanti Breach By Nation State Actor

MITRE says nation-state hackers breached its R&D network

Multi-year Volkswagen breach points to Chinese hackers

Munich Re on the impact of cyber rate changes

NCSC Announces PwC’s Richard Horne as New CEO

New Qiulong Ransomware Group Attacks Brazilian Businesses: Rosalvo Automóveis and Dr. Lincoln Among Victims

Nothing Phone 3 Leak Surfaces; Data Breach Compromises User Data

NSA Launches Guidance for Secure AI Deployment

OctaPharma Plasma Closes Donation Centers While It Deals with Suspected Ransomware Attack

Only 28% of Ransomware Victims Choose to Pay Ransom

Operação derruba plataforma de phishing como serviço LabHost

Pandemonium Rocks Music festival hit by new blow as more than 400 ticket holders caught up in data breach

Path of Exile studio warns of 'malicious' phishing post that appeared on Steam, tells players 'please take immediate action to secure your account'

Pentera's 2024 Report Reveals Hundreds of Security Events per Week, Highlighting the Criticality of Continuous Validation

People’s CyberArmy Groups Allegedly DDoS Attacks on Metro Madrid and Avanza Websites

PF investiga invasão em sistema de pagamentos do governo federal

Phishers use Nespresso links, exploiting redirect vulnerability

Phishing is more prevalent via email than SMS/voice – MEF study

Police take down global phishing service used by 2,000 hackers

Ransomware Double-Dip: Re-Victimization in Cyber Extortion

Ransomware Payment Rate Hits Record Low in Early 2024, despite Rising Extortion Amounts

Record low ransomware payment prevalence observed

Researchers Uncover Windows Flaws Granting Hackers Rootkit-Like Powers

Russian Hacker Group ToddyCat Uses Advanced Tools for Industrial-Scale Data Theft

Russian Sandworm hackers targeted 20 critical orgs in Ukraine

Shiba Inu Team Sends Critical Phishing Warning To Users

St. Helena Public Library alerts community of potential data breach following cyberattack

Synlab Italia suspends operations following ransomware attack

TA547 Phishing Attack: German Companies Hit With Infostealer

Tesco shoppers targeted by £500 gift card scam email

The first steps of establishing your cloud security strategy

This Hacking Scam Uses a Free Game Cheat Tool to Hide a Ransomware Trojan from the User

Threat Actor Allegedly Offers 0-Day Exploit for iOS iMessage

ToddyCat APT Hackers Deploy Multiple Tools to Hijack Network Infrastructure

Transamerica Life Insurance Company Client Information Leaked in WebTPA Employer Services Data Breach

TransparentTribe Hackers Weaponize Websites & Documents to Attack Indian Orgs

Uncertainty is the most common driver of noncompliance

United Nations (UN) agency ransomware attack claimed by 8Base

US government says security flaw in Chirp Systems’ app lets anyone remotely control smart home locks

US telco Frontier Communications reports major disruptions following cyber attack

Victorian Councils Hit by OracleCMS Breach: Multiple Australian Cities Report Data Exposure

Wave of ransomware on the cheap: junk guns still okay for small targets

Will the Change Healthcare case finally make providers do a business impact analysis?

Windows DOS-to-NT flaws exploited to achieve unprivileged rootkit-like capabilities

21/04

Akira Ransomware: FBI and Europol Sound Alarm Over $42M Loss

Akira ransomware received $42M in ransom payments from over 250 victims

Androxgh0st Malware Compromises Servers Worldwide for Botnet Attack

AT&T faces class action lawsuit over massive data breach exposing 70 million customers’ personal information

Beyond 24/7: How Smart CISOs are Rethinking Threat Hunting

Cheap, independently produced 'Junk Gun' ransomware infiltrates dark web: Sophos

Consumer Alert: FBI Warns of Text Scam Targeting Toll Road Users Across Multiple States

Data breach rocks troubled Pandemonium Rocks music festival

'Didn’t mention morphed video in cyber-attack complaint,' says Shailaja

DuneQuixote campaign targets the Middle East with a complex backdoor

Emphasising cyber security

Empowering Rapid Attack Path Analysis with Generative AI

Enhancing Cybersecurity Resilience: A Guide for Safeguarding Enterprises

Federal Investigation After Data Breach at Manchester Hospital

iPhone Phishing Scams: Fake Find My Device Website Can Hack Your Phone - How To Spot

Jackson County operations set to return to normal following ransomware attack

Malware dev lures child exploiters into honeytrap to extort them

New RedLine Stealer Variant Disguised as Game Cheats Using Lua Bytecode for Stealth

Online Shops Become The Top Three Entities Most Often Imitated By Phishing Perpetrators

Pandemonium Rocks music festival is hit with massive data breach as 'hundreds ticketholders' bank details are leaked'

Ransomware payments drop to record low of 28% in Q1 2024

Remediation of the consequences of the cyber attack will cost MEPSO 8,7 million denars

Scammer gives cyber security tips to man, warns people of online fraud

South African agency waits three months to reveal data breach — importers and exporters furious

South Carolina data breach suits point at the perils of hoarding personal information

Sterling Holidays warns members of phishing scam, reassures on data security

USDoD’s Latest Attack: Exposed Personel Data of Millions, Breaching Bureau van Dijk and US Consumer Database

What to do if your personal info has been exposed in a data breach

DAILY NEWS: Abril (14/04 - 20/04) - 16 Semana de 2024