Daily News - Dezembro (15/12 - 21/12) - 51 Semana de 2024

Information Security, Cyber Security, Privacy and Hacking News --- Daily Updates !! Weekly Resume...

!!! Security Is a Lifestyle Weekly News !!!

21/12

Authorities Arrested LockBit Ransomware Developer & Team Core Member

Bitfinex Hacker Speaks Out After Sentencing, Urges Public Not to Blame His Wife

Cyber attack costing six-figure sum, council says

Douglas County Data Breach

Fraud or Fallacy? Is Meezan Bank Covering Up a Data Breach?

Global Pursuit: Unraveling the Lockbit Ransomware Network

India’s Rapido fixes data breach exposing user, driver info

Judge rules NSO Group is liable for spyware hacks targeting 1,400 WhatsApp user devices

LockBit Developer Rostislav Panev Charged for Billions in Global Ransomware Damages

Ransomware gangs’ merciless attacks bleed small companies dry

Romanian national was sentenced to 20 years in prison for his role in NetWalker ransomware attacks

Unmasking the Lockbit Cyber Menace: International Crackdown on Ransomware Architect

U.S. charges Russian-Israeli dual national tied to Lockbit ransomware group

US hospital operator Ascension says 5.6 million affected in medical data breach in May

US waits for extradition of Russian-Israeli national as part of LockBit Ransomware arrests

20/12

5.6M people exposed in Ascension Health ransomware incident earlier this year

46% of financial institutions had a data breach in the past 24 months

120,000 Bitcoin Theft: Bitfinex Hacker Refutes Netflix Documentary’s Story

AI is becoming the weapon of choice for cybercriminals

Alleged Dark Engine Leak Exposes Sensitive Phone Data in the U.S.

Alleged Data Breach at Codo.ma.gov Exposes Governmental Data

Alleged Data Breach at Modia's Magento-Based Platform Exposes Sensitive Information

Alleged Data Breach at Xiaomi Exposes Sensitive User Information

Alleged Data Leak Exposes Information of Wealthy Businessmen in China

Alleged Data Leak Exposes WhatsApp Information of 11,346 Users in China

Alleged Personal Data Leak in Vietnam Exposes Sensitive Information

Alleged Personal Data Leak in Vietnam Raises Privacy Concerns

Amazon Data Breach Allegations: User Disputes Company’s Claims

Another NetWalker affiliate sentenced to 20 years in prison

Ascension: Health data of 5.6 million stolen in ransomware attack

Avoid holiday phishing traps: Fake invoices and shipping alerts flood inboxes

Battling Cyber Warfare: Securing Indonesia’s Digital Future – OpEd

Bitfinex hacker addresses public from prison: “I hate myself”

BitLyft Predicts Cybersecurity Trends for 2025: AI, Ransomware & More

Builder.ai Database Misconfiguration Exposes 1.29 TB of Unsecured Records

CISA Adds Critical Flaw in BeyondTrust Software to Exploited Vulnerabilities List

CISA Urges Encrypted Messaging After Salt Typhoon Hack

CISA: Use Signal or other secure communications app

Critical Sophos Firewall Vulnerabilities Let Attackers Execute Remote Code

Cyber attack hits Valio, putting data of 5,000 at risk

Cyber attack on state registries: Security Service of Ukraine checks data leakage

Data Security Best Practices to Safeguard Data Against Cyber Threats

Dragos claims cyber threat actors targeting manufacturing

Executives targeted in mobile spearphishing attacks

Fake DocuSign docs used to secure corporate credentials in mishing campaign

FBI Warns Gmail, Outlook, Apple Mail Users—Check 3 Things To Stop Attacks

Firm fined for scraping data on LinkedIn

Five under-the-radar phishing scams you may not know of

Foxit PDF Editor Vulnerabilities Let Attackers Execute Remote Code

Google Calendar users, watch out for this phishing scam

Hackers Exploiting Critical Fortinet EMS Vulnerability to Deploy Remote Access Tools

How a ransomware attack caused a British company to go bust

Indonesia’s ransomware scare highlights need for proper implementation of privacy law

Interior Designer Arrested in HDFC Life Insurance Data Breach

Italy’s Data Protection Watchdog Issues €15m Fine to OpenAI Over ChatGPT Probe

Hackers Selling Cracked Version of Acunetix Tool as Araneida Scanner

Krispy Kreme breach, data theft claimed by Play ransomware gang

Krispy Kreme Hack Claimed by Play Ransomware – Threatens to Release Data

Lazarus Group Spotted Targeting Nuclear Engineers with CookiePlus Malware

LockBit 4.0: Ransomware Kingpins Plot February Comeback

LockBit Admins Tease a New Ransomware Version

LockBit Developer Rostislav Panev, a Dual Russian-Israeli Citizen, Arrested

Luxottica settles data breach class action lawsuit over 2020 hacking incident

Machine Identity: An Important Defense Against Rising Phishing Threats

Major data breach at SRP Federal Credit Union exposes sensitive information of 240,000 individuals

Malicious Rspack, Vant packages published using stolen NPM tokens

Mandatory ransomware reporting key to Australia's cyber resilience

Massive live sports piracy ring with 812 million yearly visits taken offline

Meezan Bank Compensates Victims of Alleged Third Party Data Breach

Nearly 6 million people were impacted by ransomware attack on Ascension Health

NetWalker Ransomware Operator Sentenced For Hacking Hundreds Of Organizations

New Gmail Security Warning For 2.5 Billion—Second Attack Wave Incoming

New infosec products of the week: December 20, 2024

New “NotLockBit” Ransomware Attack Windows and macOS

North Korean Hackers Stole $1.34 Billion in Crypto in 2024

Online shoppers are at a higher risk of becoming data breach victims

Operational tech under attack, deepfake phishing and learning to use passkeys -- cybersecurity predictions for 2025

Over 1,800 records exposed in Rapido data breach

Phishing Statistics Small Businesses Should Know

Raccoon Infostealer operator sentenced to 60 months in prison

Ransomware Attackers Target Industries with Low Downtime Tolerance

Ransomware Spotlight: RansomHub

Ransomware's 35th birthday: How a floppy disk evolved into a multi-billion dollar criminal business

Rhode Island’s RIBridges system targeted in ransomware attack

RIBridges data breach: Answering questions about credit freezes, getting benefits and more

Rocky Mountain Gastroenterology Associates Data Breach Affects 366K Patients

Romanian Netwalker ransomware affiliate sentenced to 20 years in prison

Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack

Russia launches major cyber attack on Ukraine amid missile strikes

Session Smart Routers With Default Passwords Hacked By Mirai Malware

Siemens UMC Vulnerability Let Remote Attacker Execute Arbitrary Code

Sophos discloses critical Firewall remote code execution flaw

Sophos Issues Hotfixes for Critical Firewall Flaws: Update to Prevent Exploitation

Student information accessed in school division cyber attack

Third member of LockBit ransomware gang has been arrested

Threat Actors Selling Nunu Stealer On Hacker Forums

Ukraine struck by “largest cyberattack” affecting critical infrastructure

Ukraine's Security Service Probes GRU-Linked Cyber-Attack on State Registers

US charges Russian-Israeli as suspected LockBit ransomware coder

U.S. CISA adds BeyondTrust software flaw to its Known Exploited Vulnerabilities catalog

Washington County implements cybersecurity policy to combat potential ransomware attacks

Webcams and DVRs Vulnerable to HiatusRAT, FBI Warns

Why cybersecurity is critical to energy modernization

19/12

$2.2 billion stolen from crypto platforms in 2024 cyberattacks

5M unique credit and debit cards exposed in data breach

Alleged Data Breach at BASC.edu.ph Exposes Sensitive Information

Alleged Data Breach at SENATI Exposes 880,000 Records

Alleged Data Breach at University of Baghdad Exposes Sensitive Information

Alleged Data Breach Exposes WhatsApp User Database in Russia

Alleged Discord Database Leak Raises Significant Security Concerns

Alleged Leak of Lunar Scampage Raises Concerns About Phishing Schemes

Are threat feeds masking your biggest security blind spot?

Best endpoint protection software of 2024

Best firewall software of 2024

Best malware removal of 2024

BeyondTrust Remote Access & Support Flaw Enables Command Injection Attacks

BeyondTrust says hackers breached Remote Support SaaS instances

Billion-dollar airline faces $450M fine over alleged GDPR violations

CERT-UA: Russia-linked UAC-0125 abuses Cloudflare Workers to target Ukrainian army

CISA Mandates Cloud Security for Federal Agencies by 2025 Under Binding Directive 25-01

CISA orders federal agencies to secure their Microsoft cloud environments

CISA Released National Cyber Incident Response Plan (NCIRP) – 2024

CISA releases mobile best practices guide for high-value persons after China telecos attacks

CISA Urges Use of End-to-End Encrypted Messaging Services like Signal, Following U.S. Telecoms Hack

CISA Warns of 4 New Vulnerabilities Exploited in the Wild

CRIL Investigates: LNK Files, SSH Commands, and the Evolution of Cyberattack Techniques

Criminals Abuse Microsoft Dynamics 365 to Steal User Credentials

Critical Chrome Vulnerabilities Let Attackers Execute Remote Code – Update Now

Crypto-Hackers Steal $2.2bn as North Koreans Dominate

Cryptocurrency hackers stole $2.2 billion from platforms in 2024

Cybersec firm gets a ‘rare compliment’ as Moscow declares it ‘undesirable’

Developers targeted by malicious Microsoft VSCode extensions

Dutch DPA Fines Netflix €4.75 Million for GDPR Violations Over Data Transparency

EU Opens Door for AI Training Using Personal Data

Europol Reveals How Cyber Criminals Boost Economy By Hacking Legal Businesses

Europol seizes €27M in cryptocurrencies from drug traffickers

Facing TP-Link allegations, China blames the US for attacking its critical tech companies

Fortinet Vulnerabilities Let Attackers Execute Arbitrary Code Remotely

Fortinet warns about Critical flaw in Wireless LAN Manager FortiWLM

Fortinet Warns of Critical FortiWLM Flaw That Could Lead to Admin Access Exploits

Fortinet warns of FortiWLM bug giving hackers admin privileges

GitHub Launches “Copilot Free” Access to 150 Million Developers

Google Calendar Phishing Scam Targets Users with Malicious Invites

Google warns of holiday scam surge: how to protect yourself from fraud

Government employees are still using Kaspersky despite the ban

Hacker behind Racoon Infostealer sentenced to 5 years in federal prison

Hacker group leaked Telecom Namibia's data after it refused to pay a ransom

Hackers Exploiting Azure Key Vault Access Policies To Read Sensitive Data

Hackers Exploiting FortiClient EMS Vulnerability (CVE-2023-48788) in the Wild

Hackers leak Telecom Namibia data following ransom refusal

Hackers stole the data of 1.4m individuals from Texas Tech University Health Sciences Centres

Hikvision Camera Driver Vulnerability Records Login details in Log files

Internet-exposed HMIs are a risk to water facilities, CISA warns

Interpol Calls for an End to “Pig Butchering” Terminology

Juniper Warns of Mirai Botnet Targeting SSR Devices with Default Passwords

Leadership skills for managing cybersecurity during digital transformation

LockBit Ransomware Group Plots Comeback With 4.0 Release

Microsoft really wants users to ditch passwords and switch to passkeys

Microsoft says Auto HDR causes game freezes on Windows 11 24H2

Midnight Blizzard hacking group hijacks RDP proxies to launch malware attacks

Mirai botnet targets SSR devices, Juniper Networks warns

Netflix fined $5 million by Dutch regulator for privacy violations

New Malware Can Kill Engineering Processes in ICS Environments

New Mobile Phishing Targets Executives with Fake DocuSign Links

New Phishing Attack Exploiting HubSpot Tools To Steal Microsoft Azure Logins

North Korean hackers steal $1.34B in crypto in 2024

Políticos americanos não devem mandar SMS ou fazer ligações, orienta governo

Raccoon Infostealer Admin Arrested for Hacking Computers

Ransomware in 2024: New players, bigger payouts, and smarter tactics

Recorded Future CEO Calls Russia’s “Undesirable” Listing a “Compliment”

They (don't) want you to know this: how hackers get "colossal" bounties

Thousands Download Malicious npm Libraries Impersonating Legitimate Tools

Thousands of GPS tracking customers have info leaked following data breach

Top security solutions being piloted today — and how to do it right

UAC-0125 Abuses Cloudflare Workers to Distribute Malware Disguised as Army+ App

Ukrainian hacker gets prison for infostealer operations

US considers banning TP-Link routers over cybersecurity concerns

US government mulls entire TP-Link product ban - routers, switches and more all set to be blocked

US may ban Chinese TP-Link routers next year due to security risks

US Organizations Still Using Kaspersky Products Despite Ban

US to Ban TP-Link Routers, as They Fuel Chinese Cyber Attacks

"Vamos atingir a NATO e Portugal": site do Estado português atacado

Vulnerability Exploit Assessment Tool EPSS Exposed to Adversarial Attack

WiFi hacking for the everyday spy

Windows 11 24H2 upgrades blocked on some PCs due to audio issues

18/12

Androxgh0st Botnet Targets IoT Devices, Exploiting 27 Vulnerabilities

APT29 Hackers Target High-Value Victims Using Rogue RDP Servers and PyRDP

Attacker Distributes DarkGate Using MS Teams Vishing Technique

Auto parts maker LKQ Corporation says cyber attack impacted its Canadian operations

BADBOX Botnet Hacked 74,000 Android Devices With Customizable Remote Codes

Beware Of Malicious SharePoint Notifications Delivering Xloader Malware

BeyondTrust fixes critical vulnerability in remote access, support solutions (CVE-2024-12356)

BeyondTrust Issues Urgent Patch for Critical Vulnerability in PRA and RS Products

Cellebrite shatters smartphone security illusion: everything can be unlocked, researchers warn

CISA and ONCD Push Cybersecurity for Federal Grants with New Playbook

CISA Issues Best Practices to Secure Microsoft 365 Cloud Environments

CISA urges switch to Signal-like encrypted messaging apps after telecom hacks

Cisco Data Breach – IntelBroker Group Leaked 2.9GB of Data Online

CISO accountability: Navigating a landscape of responsibility

CISOs should stop freaking out about attackers getting a boost from LLMs

Consumers wrongly attribute all data breaches to cybercriminals

Credential phishing attacks rose by 703% in H2 of 2024

Data breach comes back to haunt Meta as tech giant fined $260M

Earth Koshchei Hackers Using Red Team Tools To Attack RDP Servers

European Commission Opens TikTok Election Integrity Probe

European companies hit with effective DocuSign-themed phishing emails

Google’s New XRefer Tool to Analyze More Complex Malware Samples

Guernsey Revenue Service reprimanded for mishandling sensitive data

Hacker rouba US$ 5,36 mi em criptomoedas aproveitando vazamento do LastPass

Hackers Exploit Google Calendar & Drawings to Bypass Email Security

Hackers Exploiting Linux eBPF to Spread Malware in Ongoing Campaign

Healthcare software provider ConnectOnCall says cyber incident impacted over 900,000 individuals

HubPhish Exploits HubSpot Tools to Target 20,000 European Users for Credential Theft

HubSpot phishing targets 20,000 Microsoft Azure accounts

Instant loan app leaks nearly 30 million files with user data

IntelBroker publishes partial data allegedly stolen from Cisco

INTERPOL Pushes for "Romance Baiting" to Replace "Pig Butchering" in Scam Discourse

Interpol replaces dehumanizing "Pig Butchering" term with "Romance Baiting"

INTERPOL To Replace ‘Pig Butchering’ Term With “Romance Baiting”

Irish Data Protection Commission (DPC) fined Meta €251 million for a 2018 data breach

Key steps to scaling automated compliance while maintaining security

Key strategies to enhance cyber resilience

Losses from LastPass breach continue to grow with another $12M stolen

Malicious Microsoft VSCode extensions target devs, crypto community

Maximizing Productivity with Online Document Solutions

Meta Fined €251 Million for 2018 Data Breach Impacting 29 Million Accounts

Meta Hit with Massive $263m GDPR Fine

Microsoft Sentinel Launched Agentless Integration for SAP Security

Multiple GStreamer Vulnerabilities Impact Linux Distributions Using GNOME

Nearly 400,000 WordPress credentials stolen

Nebraska sues Change Healthcare over massive data breach impacting 575,000 residents

New Apache Tomcat Vulnerabilities Let Attackers Execute Remote Code

New Attacks Exploit VSCode Extensions and npm Packages

Nigeria Cracks Down on Cryptocurrency Investment Fraud and Romance Scams

No Pornhub in Florida? Here's what's happening

Not Your Old ActiveState: Introducing our End-to-End OS Platform

Okta Warns of Phishing Attacks Mimic “Okta Support” to Steal MFA Tokens

ONLY Cynet Delivers 100% Protection and 100% Detection Visibility in the 2024 MITRE ATT&CK Evaluation

Patch Alert: Critical Apache Struts Flaw Found, Exploitation Attempts Detected

Phishing Attacks Double in 2024

Polícia identifica hacker que invadiu sistema e apagou dados da Defensoria Pública do Amapá

Recorded Future CEO applauds "undesirable" designation by Russia

The Mask APT is back after 10 years of silence

The Need for Specialized AI Models in Today’s Transforming Industry Challenges

The open-source tools that could disrupt the entire IT incident management market

Thousands of users in Europe getting malicious emails with DocuSign-enabled PDFs

Threat Actors Abusing Cloudflare Workers Service To Deliver Weaponized Application

Top 10 Cyberattacks in 2024 that Stole the Spotlight

US Government Issues Cloud Security Requirements for Federal Agencies

USAA settles $3.25 million data breach case, faces fresh allegations of negligence

Vanir: Open-source security patch validation for Android

17/12

1-Click RCE Attack in Kerio Control UTM Let Attackers Gain Root Access To the Firewall

1.4M Affected in Texas Tech Data Breach, Ransomware Hits Hard

5 Practical Techniques for Effective Cyber Threat Hunting

10 Major Ransomware Attacks And Data Breaches In 2024

27 DDoS-for-hire operations shut down by law enforcement

2024 cyber threat landscape highlights key attack trends

All Major European Financial Firms Suffer Supplier Breaches

‘All student records accessed’ in Granite School District data breach

Alleged Cisco Source Code Leak Raises Security and IP Concerns

Alleged Data Breach at Platinum-Celebs.com Exposes 72,000 User Records

Alleged Data Breach at RM Group of Education Exposes Sensitive User Information

Alleged Data Breach at Talentely.com Exposes TMS-LMS Platform Data

Alleged Data Breach at Warid Telecom Exposes Sensitive User Information

Alleged Data Breach Exposes Information of 261,000 Insurance Agents in the U.S.

Alleged Leak of 1.3 Billion Fresh URL Login Credentials Raises Serious Security Concerns

Attackers Exploit Microsoft Teams and AnyDesk to Deploy DarkGate Malware

Australian Facebook users score $50 million settlement with Meta over Cambridge Analytica data harvesting scandal

Azure Data Factory And Apache Airflow Integration Flaws Let Attackers Gain Write Access

Balancing security and user experience to improve fraud prevention strategies

Bitter APT Targets Turkish Defense Sector with WmRAT and MiyaRAT Malware

CISA and FBI Raise Alerts on Exploited Flaws and Expanding HiatusRAT Campaign

CISA releases first draft of updated National Cyber Incident Response Plan

CISA Warns of Adobe & Windows Kernel Driver Exploited in Attacks

CISA’s pre-ransomware alerts nearly doubled in 2024

Cisco to Acquire Threat Detection Company SnapAttack to Power Splunk

Cleo data theft incident claimed by the Clop ransomware group

Critical Infrastructure Under Siege: 42% Spike in Ransomware Attacks on Utilities

Cybercriminals Exploit Google Calendar to Spread Malicious Links

Cybersecurity Incident at Deloitte May Be Responsible for RIBridges Data Breach

DarkGate Malware Distributed Via Microsoft Teams Voice Phishing

Dump user 'horrified' by Cornwall Council data breach

EU Sanctions Russian Cyber Actors for “Destabilizing Actions”

EU Watchdog Fines Meta $263 Million for Data Breach

Even Great Companies Get Breached — Find Out Why and How to Stop It

Exclusive-Major cloud providers could get key role in AI chip access outside the US, sources say

Fake Hacking: What It Is & How to Protect Yourself?

FBI biometrics division website outage claimed by Mr Hamza

FBI Warns Of HiatusRAT Attacking Web Cameras & DVRs To Gain Full Access

GenAI is already here, but how is it affecting the labor market?

GenAI: Security Teams Demand Expertise-Driven Solutions

Hackers actively exploiting Windows flaw to gain system privileges, CISA warns

Hackers Demand Ransom in Rhode Island Health System Data Breach

Hackers Exploit Microsoft Management Console to Drop Backdoor Payloads on Windows

Hackers Exploit Webview2 to Deploy CoinLurker Malware and Evade Security Detection

Hackers Leverage Red Team Tools in RDP Attacks Via TOR & VPN for Data Exfiltration

Hackers Use Fake PoCs on GitHub to Steal WordPress Credentials, AWS Keys

Hackers Use Microsoft MSC Files to Deploy Obfuscated Backdoor in Pakistan Attacks

Healthcare Cybersecurity: 2024 Was Tough, 2025 May Be Better

Healthcare hacking spree continues as another 225K exposed

Helsinki City Board receives status update on Education Division data breach

IntelBroker publishes partial Cisco data

Ireland fines Meta $264 million over 2018 Facebook data breach

Kali Linux 2024.4 released! 14 new shiny tools added

Kitsap Mental Health Services Notifies Individuals of Recent Data Breach

Launceston dump user ‘horrified’ by council data breach

Malvertising on steroids serves Lumma infostealer

Meta fined $263M over 2018 security breach that affected ~3M EU Facebook users

Might need a mass password reset one day? Read this first.

Nebraska AG Sues Change Healthcare Over Data Breach

Nebraska Sues Change Healthcare Over ‘Historic’ Data Breach

New APIs Discovered by Attackers in Just 29 Seconds

New critical Apache Struts flaw exploited to find vulnerable servers

Nigerian Crypto-Romance Scam Leads to Nearly 800 Arrests

Organizations Warned of Rise in Okta Support Phishing Attacks

Over 25,000 SonicWall VPN Firewalls exposed to critical flaws

Personal data shared in new online booking system

Prefeitura de Itapema sofre ataque hacker e site fica fora do ar

Ransomware Defender Risk: 'Overconfidence' in Security Tools

Ransomware, deepfakes, and scams: the digital landscape in 2024

RATs can sniff out your Chinese-made web cameras: here’s how to defend yourself

RCE Vulnerability in 1,000,000 WordPress Sites Lets Attackers Gain Control Over Backend

Researchers reveal OT-specific malware in use and in development

Revenue Service email data breach was one of several

Rising scams involving phishing links swindled $36mn out of Carousell sellers

Russia FSB relies on Ukrainian minors for criminal activities disguised as “quest games”

Securities and Exchange Commission Settles Charges Against Flagstar for Misleading Investors About Citrix Data Breach

Sensitive data leaked after Namibia ransomware hack

Sophisticated TA397 Malware Targets Turkish Defense Sector

Starbucks restores systems after Blue Yonder ransomware attack

Texas medical school says hackers stole sensitive health data of 1.4 million individuals

Texas Tech University Data Breach Impacts 1.4 Million

The FBI warns of HiatusRAT scanning campaigns against Chinese-branded web cameras and DVRs

The Mask APT Resurfaces with Sophisticated Multi-Platform Malware Arsenal

The shifting security landscape: 2025 predictions and challenges

Thirty-Five Years of Ransomware-CISCO Official Reveals Lessons Learnt

Top 10 cybersecurity misconfigurations: Nail the setup to avoid attacks

Unlock and load: officials caught using Israeli spyware to snoop on Android users

U.S. CISA adds Microsoft Windows Kernel-Mode Driver and Adobe ColdFusion flaws to its Known Exploited Vulnerabilities catalog

US needs to do more make cyber attackers pay, Trump adviser says

US Unveils New National Cyber Incident Response Plan

Virtavo security camera users beware: app data spilled online

Vulnerabilidades no Windows e Adobe ColdFusion

Windows Malware Phishing Attacks Target YouTubers

Windows to block PornHub? German state leaders hope so

16/12

390,000 WordPress credentials compromised via phishing, GitHub repos

AI deepfakes are targeting women in politics at alarming rates

Alleged Data Breach at ApolloGames.com Exposes Sensitive CRM Data

Alleged Data Breach at CREFSP Exposes Full Database in São Paulo

Alleged Data Breach at Delhi Public Primary School Itarsi Exposes Sensitive Records

Alleged Data Breach at HemenBahis Exposes Sensitive User Information

Alleged Data Breach at Rozavam.ru Exposes Sensitive Customer Information

Alleged Data Breach at SAIC in Brazil Exposes Sensitive Information

Alleged Data Breach at World Leadership Academy Exposes Sensitive Information

Alleged Data Breach Exposes Sensitive Legal Proceedings Data in Colombia

Alleged Leak of 1.5 Billion URL Login Credentials Raises Online Security Concerns

Alleged Leak of 200 Million URL Login Credentials Raises Privacy Concerns

Amnesty Accuses Serbia of Tracking Journalists and Activists with Spyware

Arctic Wolf Acquires BlackBerry’s Cylance Assents For $160 Million in Cash

Authorities arrest 800 crypto romance scammers in Nigeria targeting Americans, Europeans

BADBOX malware hits 30,000 Android devices - make sure you update now

Byte Federal Data Breach Exposes 58,000 Customer Records

Cicada3301 Ransomware Claims Attack on French Peugeot Dealership

CISA and EPA Warn: Internet-Exposed HMIs Pose Serious Cybersecurity Risks to Water Systems

Cl0p Ransomware Exploits Cleo Vulnerability, Threatens Data Leaks

Clop ransomware gang confirms it is actively exploiting Cleo MFT vulnerabilities

Clop ransomware gang confirms responsibility for Cleo data theft attack

Cl0p ransomware group says it was behind Cleo attacks

CoinLurker, Next-Gen Tool Used by Threat Actors in Modern Cyberattacks

Combating the rising threat of AI-powered phishing attacks

ConnectOnCall breach exposes health data of over 910,000 patients

Critical Mullvad VPN Vulnerabilities Let Attackers Execute Malicious Code

CVE Assigned to Cleo Vulnerability as Cl0p Ransomware Group Takes Credit for Exploitation

Cyber attack forced Watsonville Community Hospital staff to rely on pen and paper to attend to patients

Cyber attack on SRP Federal Credit Union compromised the data of 240,000 individuals

Cyber Daily announces return of the Australian Cyber Summit for 2025

Cyberattack Targets Rhode Island’s RIBridges System, Compromising Sensitive Resident Information

Data Governance in DevOps: Ensuring Compliance in the AI Era

December 2024 Cyble Report: Malware, Phishing, and IoT Vulnerabilities on the Rise

DeceptionAds Delivers 1M+ Daily Impressions via 3,000 Sites, Fake CAPTCHA Pages

Deepfakes and AI attacks are worker's biggest security worries

Deloitte Alerts Rhode Island to Significant Data Breach in RIBridges System

ESET: RansomHub most active ransomware group in H2 2024

Evasive Node.js loader masquerading as game hack

Fake Captcha Campaign Highlights Risks of Malvertising Networks

Fake CAPTCHAs reaching millions: who’s responsible for malvertising mayhem?

Fake job tasks are costing victims millions, FTC warns

FBI spots HiatusRAT malware attacks targeting web cameras, DVRs

FBI subdivision firewall access listed by potential Schneider Electric hacker

FBI Targets 764 Network: Man Faces 30 Years for Cyberstalking, CSAM

Firmware Security: Identifying Risks to Implement Best Cybersecurity Practices

First man in the US sent to prison for hiding bitcoin profit

Hacker bounty fever: dopamine spikes and millions of dollars

Hackers Attacking YouTube Creators with Weponized Collaboration Requests

Hackers Claim to Have Stolen 17 Million Patient Records from PIH Health

Hackers Exploiting Google Search Ads to Launch Malvertising Campaigns

Hackers Exploiting Microsoft Teams to Gain Remote Access to User’s System

Hackers targeting thousands of YouTubers with fake collaboration offers and infostealers

Here’s what human collaboration with AI looks like

How companies can address bias and privacy challenges in AI models

Huge cybercrime attack sees 390,000 WordPress websites hit, details stolen

Kadokawa reportedly gives in to ransomware demand

Kaiser Permanente Employees Targeted via Malicious Google Search Ads to Deploy SocGholish

Malicious ads push Lumma infostealer via fake CAPTCHA pages

Malware Hidden in Fake Business Proposals Hits YouTube Creators

Massive Data Breach at Texas Tech University Health Sciences Centers: What You Need to Know

Medical Payment Company Facing Lawsuit in Nebraska Over Data Breach

Multiple flaws in Volkswagen Group’s infotainment unit allow for vehicle compromise

MUT-1244 targeting security researchers, red teamers, and threat actors

Namibia’s state telecom provider says hackers leaked data after it refused to pay ransom

Nebraska AG files lawsuit against Change Healthcare following data breach

New Android NoviSpy spyware linked to Qualcomm zero-day bugs

New Glutton Malware Exploits Popular PHP Frameworks Like Laravel and ThinkPHP

New HDMI standard to be announced at CES 2025

New Investment Scam Leverages AI, Social Media Ads to Target Victims Worldwide

NoviSpy Spyware Installed on Journalist's Phone After Unlocking It With Cellebrite Tool

Ofcom Issues Guidance for Tech Firms to Tackle Online Harms

Overlooking platform security weakens long-term cybersecurity posture

Phishing campaign targets Kaiser Permanente employees using Google Ads

Ransomware attack investigation continuing in Wood County

Ransomware attack targets Rhode Island public benefits system

Rhode Island confirms data breach after Brain Cipher ransomware attack

Rhode Island hit by data breach as hackers demand ransom

Rhode Island left scrambling as Deloitte confirms breach likely impacting thousands

Russia Recruits Ukrainian Kids for Sabotage and Reconnaissance

Schools are facing greater cybersecurity threats than ever before

Security experts respond to Krispy Kreme cyber attack

Security leaders top 10 takeaways for 2024

Serbian Authorities Use Novispy Spyware & Cellebrite Forensic Tools to Hack Journalists

Serbian government cracked phones with Cellebrite to install spyware, report says

Serbian government used Cellebrite to unlock phones, install spyware

Telecom Namibia Hit by Massive Cyberattack: Over 400,000 Files Leaked

Texas Tech University Health Sciences Center and Texas Tech Health El Paso Announce Massive Data Breach

Texas Tech University System data breach impacts 1.4 million patients

Thousands of Rhode Island citizens have data stolen after social services hit by cyberattack

Tic TAC Alert: A Remote Code Execution Vulnerability in Medical Imaging

Top healthcare company exposes data on millions of patients - find out if you're affected

Trapster Community: Open-source, low-interaction honeypot

Two men arrested for 'hazardous drone' ops in Boston adding to UAP hysteria

Ukrainian Minors Recruited for Cyber Ops and Reconnaissance in Russian Airstrikes

US government warns water firms to secure infrastructure at risk online

US sanctions Chinese firm over potentially deadly ransomware attack

US set to allow tech giants to control access to AI chips

Why You Need Cyber Resilience and Defence in Depth

Windows kernel bug now exploited in attacks to gain SYSTEM privileges

With DORA approaching, financial institutions must strengthen their cyber resilience

YouTube Creators Targeted in Global Phishing Campaign

15/12

2024 in retrospect: Lessons learned and cyber strategies shaping future of critical infrastructure

Alleged Data Breach at Fédération Française de Football (FFF) Exposes Sensitive Information

Alleged Data Breach at Meat Expert Forum Exposes User Information

Alleged Data Breach at NivteIndia.in Exposes Sensitive User Information

Alleged Data Breach at University of Georgia Exposes Sensitive Information

Alleged Data Breach in Shandong Exposes Courier and Engineering Personnel Database

Alleged Leak of 5 Billion URL Login Credentials Raises Serious Security Concerns

Clop ransomware claims responsibility for Cleo data theft attacks

Curl Vulnerability Let Attackers Access Sensitive Information

Cyberattack in Rhode Island: Sensitive data breach, hackers demand ransom

Cyberattack reported against Israeli banking services

Exploring Cyber-Darkness: How Moscow Undermines The West Via The Dark Web – Analysis

H2HC reuniu top hackers do Brasil e do mundo

NotLockBit ransomware targets Apple users with advanced file-locking and data exfiltration

Organizations should improve employee-wide cybersecurity awareness

PUMAKIT, a sophisticated rootkit that uses advanced stealth mechanisms

Resecurity introduces Government Security Operations Center (GSOC) at NATO Edge 2024

Rhode Island cyberattack underscores security issues with digital public assistance programs

Rhode Island hit by data breach as hackers demand ransom

Winnti hackers target other threat actors with new Glutton PHP backdoor

Yates County approves cyber security upgrades and contract renewals

Daily News - Dezembro (08/12 - 14/12) - 50 Semana de 2024