DAILY NEWS: Dezembro (18/12 - 24/12) - 51 Semana de 2022

Felipe Prado
19 de dez. de 2022
14 min de leitura

Atualizado: 25 de dez. de 2022

Cyber Security and Information Security News - Daily Updates !! Weekly Review

24/12

10 Biggest Hacks and Cyber Security Threats of 2022

Cincinnati State data breach possibly exposed Social Security numbers, other information

How to Know if Someone Is Spying on Your Phone in 2022

How To Protect Your Passwords From Hackers

Legislature warns about social media scam using official seal

23/12

3Commas API Dispute Highlights Risks of Algorithmic Trading

4 Types of Active Attacks and How to Protect Against Them

48,000 South Africans had their online data stolen by bots – this is how much it sells for on the dark web

A hacker's tips on how to spot a phishing attack

Accelerate Your Incident Response

Anúncios em sites de busca são iscas para golpes com ransomware e criptomoedas

Ataque hacker invade sistema da SPTrans, e 13 milhões de usuários têm dados expostos

Atlanta airport steps up its cyber security

Biden signs $858 billion defense policy bill into law, expanding gov’t cyber operations

Christmas scams warning as criminals cash in on cost-of-living crisis

Cloud Security Risk for Retail Companies: Why Ignoring Best Practices Could be Costly – The Redmart Story

CMS Subcontractor Breach Affects 254k Medicare Beneficiaries

Crooks copy source code from Okta’s GitHub repository

Cybercriminals using search engine ads to direct users to sites with malware, FBI warns

Cybersecurity threatscape: Q3 2022

Dados de 13 milhões de usuários do Bilhete Único são vazados em ataque hacker

Dixons school trust in Bradford hit by cyber attack

Don’t bite! The Coca-Cola scam is back on WhatsApp, now also at Christmas

Email Security: Protecting Your Organization from Within

EU Watchdog Probes Twitter for 5.4 Million User Data Breach

France Fines Microsoft €60 Million for Using Advertising Cookies Without User Consent

FrodoPIR: New Privacy-Focused Database Querying System

Ghost CMS vulnerable to critical authentication bypass flaw

Godfather Android Malware Targets 400+ Banks and Crypto Exchanges

Gootkit Loader continues to be used on multiple Australian networks

Growing cybersecurity skills gap necessitates human factor security

Hacker expõe dados de 13 milhões de usuários do bilhete de ônibus e metrô

Hacker invade sistema da SPTrans e 13 milhões de usuários do Bilhete Único têm dados expostos

Hackers exploit bug in WordPress gift card plugin with 50K installs

Hackers obtained LastPass customer data vaults in recent data breach

How access monitoring keeps providers at bay from data breaches

How to protect yourself from hackers and online threats

Huge number of Iranian cyber attacks against 'Israel': Official

IcedID Botnet Distributors Abuse Google PPC to Distribute Malware

ICO Slams Editors for Comments on Journalism Code

It’s beginning to look a lot like ‘phishmas’!

Jersey school is attacked by cyber criminals demanding ransom

Key cyber security trends of 2022 and expectations from 2023

LastPass Admits to Severe Data Breach, Encrypted Password Vaults Stolen

LastPass: Customer Vault Data Was Taken

LastPass: Hackers accessed and copied customers’ password vaults

LastPass says attackers got users’ info and password vault data

Legal firm says cyber attack on water firm could lead to “substantial claims for compensation”

Massive Twitter data leak investigated by EU privacy watchdog

Meta settles data breach case linked to Cambridge Analytica scandal for £600m

More Aussies find out they’re caught up in major Medibank data breach months after cyber attack

MultiCare Notifies 23K of Third-Party Breach

New NFT private auction scam threatens OpenSea users

North Korean hackers stole over 800 billion won worth of cryptocurrencies from DeFi platforms: Report

Online Casinos DraftKings and BetMGM Hacked; Data of Millions at Risk

Patch now: Serious Linux kernel security hole uncovered

Paying ransomware is financing crime -- how organizations can break the cycle

Positive Technologies warns of cybercriminals creating platforms to distribute phishing kits

Public Warning Following Surge Of Phishing Scams

Putin Team ransomware emerges from leaked Conti’s source code

Rackspace retrieves email data for some customers after ransomware attack

Ransomware In-Advance Prevention Storage is Released, Not a Backup Storage

Ransomware Is on the Rise—Here’s How to Protect Yourself

Recent ransomware attacks show vulnerability in Iowa schools

Researchers Warn of Kavach 2FA Phishing Attacks Targeting Indian Govt. Officials

Students across Dorset urged to beware of scams

The Impact of Russia’s Fancy Bear Attacks on U.S. Satellite Networks

The Top 23 Security Predictions for 2023 (Part 1)

Threat predictions for 2023: From hacktivism to cyberwar

Three ways companies can meet the evolving requirements of the insurance carriers

TikTok's Parent Company Admits Using the Platform's Data to Track Journalists

Top 10 Risks in Cyber Security

Valley Children's Medical Group victim of nationwide data breach, officials say

Vice Society Ransomware Attackers Adopt Robust Encryption Methods

Zerobot Botnet Devs Add New Functionality

22/12

2023 Should Be the Year of On-Chain User Security

Adversarial risk in the age of ransomware

Alarming email gap exploited by state sponsored hackers

Amplified security trends to watch out for in 2023

Australian businesses facing identity-based attacks

Being one of the 1% sucks if you're a Rackspace user

Clop ransomware group targeting medical images

Corporate Tech Leaders Untangle Their Cybersecurity Roles

Credentials Are the Best Chance To Catch the Adversary

Critical Security Flaw Reported in Passwordstate Enterprise Password Manager

Cyber attack on Angus Council cost taxpayer £25,000

Cyberattack compromises German industrial giant ThyssenKrup

Cybersecurity Could Emerge as the Biggest Challenge in 2023

Dealing with cloud security shortfalls

‘Due to improper network segmentation’: Centre tells LS on AIIMS cyber attack

FCC Proposes Massive $300m Fine for Robocall Firm

FIN7 Cybercrime Syndicate Emerges as Major Player in Ransomware Landscape

FIN7 hackers create auto-attack platform to breach Exchange servers

France Fines Microsoft $64m for Imposing Ad Cookies to its Bing Users

Gambling platform DraftKings breached – Do this if you have an account

Guardian Newspaper Suffers Ransomware Attack

Hackers Breach Okta's GitHub Repositories, Steal Source Code

Hands On With Flipper Zero, the Hacker Tool Blowing Up on TikTok

How carding can affect your business

Improvement in Internet Security and Tips to Stay Safe Online

India’s Commercial, Critical Infrastructure Under Ransomware Threat: Govt

Infostealer Malware Threat Grows as MFA Fatigue Attacks Spread

Insufficient Data Privacy Legislation Is Costing Companies: Three Ways Businesses Are Suffering

Kaspersky uncovers attacks targeting Albanian government with ransomware and wipers signed with stolen certificates

KentuckianaWorks participants potentially affected by third-party data breach

Media Giant Guardian Hit By Suspected Ransomware Attack

Morley Companies data breach $4.3M class action settlement

North Korea-linked hackers stole $626 million in virtual assets in 2022

One in three Australians have fallen victim to scams

Play ransomware gang claims major cyber attack on H-Hotels that disrupted digital communications

Protecting a Network Without Concrete Boundaries

Queensland University of Technology shuts IT systems after being hit by ransomware attack

Ransomware Attack Hits The Guardian Newspaper

Ransomware Cases Have Grown over Time with Modern Tactics: MeitY in Parliament

Raydium revela detalhes sobre hack e propõe compensação para as vítimas

Report Surfaces Top Vulnerabilities of 2022

Researchers Develop AI-powered Malware Classification for 5G-enabled IIoT

SEO Poisoning Attack Linked to 144,000 Phishing Packages

SickKids reports ‘cybersecurity incident’ affecting some phone lines and web pages

Tesla competitor faces Bitcoin ransomware attack during economic crisis

The Different Ways to Mine Cryptocurrency

The Era of Cyber Threat Intelligence Sharing

The GTA 6 leak was one of the biggest ever, and the only winners were the news writers

21/12

6 Key Questions to Ask Yourself When Scaling Up Your Cybersecurity

2023 Cybersecurity Spending Increases to Combat Evolving Threats

Acronis Report Uncovers Cloud Environments Are New Potential Targets for Threat Actors

Addresses of non-molestation order applicants disclosed in data breach

Adult Google Ad Fraud Campaign Garnered Millions of Impressions

Ankr Confirms $5M Crypto Hack Was An Inside Job

APIs are placing your enterprise at risk

British newspaper The Guardian says it’s been hit by ransomware

Chinese electric automaker Nio hit by data breach

CISO roles continue to expand beyond technical expertise

Class action suit alleges Oakwood University responsible for massive data breach

Compliance Investigation Into Mercury IT Breach Commenced

Cyber-Incident Causes System Failures at Canadian Children's Hospital

Cyber Security Tips To Stay Safe This Holiday Season

Cybercriminals attack users with 400,000 new malicious files daily

Cybersecurity demands adequate manpower, updated laws — Nwachukwu, Zoracom CEO

Data protection: Safeguard the path to digitalisation of power networks

Debunking 5 Myths About Detection-as-Code

Employee Privacy And Cybersecurity: Spot The Difference

FBI warns of search engine ads pushing malware, phishing

Female Founder Of Cybersecurity Startup Builds Better Response To Threats

Four tips to avoid online holiday shopping being ruined by hackers

German industrial giant ThyssenKrupp targeted in a new cyberattack

Gloucester cyber attack: A year since hackers disrupted vital services for thousands of citizens

GodFather Android Banking Trojan Targeting Users of Over 400 Banking and Crypto Apps

GodFather Android malware targets 400 banks, crypto exchanges

Godfather Trojan Targets 400 Financial Services Firms

Guardian hit by serious IT incident believed to be ransomware attack

Guardian newspaper hit by suspected ransomware attack, staff told not to come to office

How are healthcare CISOs reporting & measuring risks?

How to avoid getting hooked by crypto ‘ice phishing’ scammers: CertiK

Is Enterprise VPN on Life Support or Ripe for Reinvention?

Keppel Telecommunications and Transportation hit by data breach

Ladders Slashes Infrastructure Costs by 10-15% & Frees Up Time With DataDome

Lancaster University announce major cyber security development

Loot from NZ ransomware attack being sold on dark web

Meaningful Protection: A Regulatory Proposal And Roadmap To Protecting Healthcare And Other Critical Infrastructure

Medicare Data Breach Affects Thousands of Beneficiaries

Meet Sourya Biswas: An Indian Cybersecurity Professional Making An Impact In America

More than compliance: cybersecurity best practices for the Oil and Gas sector

Morley Companies data breach $4.3M class action settlement

New Microsoft Exchange exploit chain lets ransomware attackers in (CVE-2022-41080)

November 2022 Healthcare Data Breach Report

Okta's source code stolen after GitHub repositories hacked

Personal info possibly leaked in Hope College data breach

Play ransomware gang claims H-Hotels cyberattack

Post-Brexit cyber dynamics in the UK and Europe: diverging paradigms?

Ransomware Hackers Using New Way to Bypass MS Exchange ProxyNotShell Mitigations

Ransomware incidents targeting 'critical infrastructure' have grown

Raspberry Robin Worm Strikes Again, Targeting Telecom and Government Systems

RedMart fined S$72,000 for data breach resulting in online sale of customer data

Remote, third-party workers raise security risks for enterprises: report

Restaurant CRM platform SevenRooms confirms breach after stolen data appear for sale

Royal overtakes LockBit as top ransomware in November as attacks increase 41%

Russian Killnet Hackers Claim Data Theft of FBI Agents

Russians hacked JFK airport’s taxi dispatch system for profit

Securonix predicts more successful major cloud provider-level attacks in 2023

Shoemaker Ecco leaks over 60GB of sensitive data for 500+ days

Social media use can put companies at risk: Here are some ways to mitigate the danger

South Dakota health system notifies patients of 3rd-party data breach

Sports betting operator BetMGM hit by data breach

The Average Cost of a Ransomware Attack in 2022

The benefit of adopting a hacker mindset for building security strategies

The Guardian Hit By Ransomeware Attack, Staff Told To Work From Home

The Rise of the Rookie Hacker - A New Trend to Reckon With

The Top Security Vulnerabilities of 2022 and Their Workarounds

Trusted computing for national defense

UK Security Agency Wants Fresh Approach to Combat Phishing

Ukraine's DELTA Military System Users Under Attack from Info Stealing Malware

University Of East London Research Shows Two Thirds Of European Youth Involved In Some Form Of Cybercrime Or Online Risk Taking

US Most Impacted by Data Breaches in the Financial Industry in 2022

Who’s Keeping Computers Safe When Everybody’s Working From Home?

Why Security Teams Shouldn't Snooze on MFA Fatigue

Wing Financial data breach investigation underway

20/12

5 types of malicious codes attack millions of computers in VN

18 cybersecurity predictions for 2023

20 Ransomware Statistics Small Businesses Should Know

2022 Cyber Security Review of the Year

2023 cybersecurity forecasts: Zero trust, cloud security will top spending

A Guide to Efficient Patch Management with Action1

AIIMS cyber attack puts digital health ID plan under scanner

As cyber criminals start targeting retail, companies must be ready to fight back

Australians demand executives held liable for cyber breaches

Balance Sheet Blind Spot: Cryptocurrency Is Not as Protected as You Think

Beware: Cybercriminals Launch New BrasDex Android Trojan Targeting Brazilian Banking Users

Beyond Ransomware: Cybercrime Trends to Watch in 2023

Brooklyn hospital network reverts to paper charts for weeks after cyberattack

Chinese electric automaker Nio hit by data breach

Chinese Hackers Exploit Citrix Vulnerabilities

CMS subcontractor hit with ransomware

Colombian energy supplier EPM suffers BlackCat ransomware attack

Companies overwhelmed by available tech solutions

Connected homes are expanding, so is attack volume

Critical Windows code-execution vulnerability went undetected until now

Cyber attack affects phones, website at Toronto’s SickKids Hospital

Cyber-proofing the healthcare industry from ransomware attacks

Cybersecurity is a Team Sport – Avoid the ‘Us and Them’ Culture

DraftKings Data Breach Impacts Personal Information of 68,000 Customers

Fortnite Dev to Pay $520m in Record-Breaking Settlement

FTC Fines Fortnite Maker Epic Games $275 Million for Violating Children's Privacy Law

Google Ad fraud campaign used adult content to make millions

Google brings client-side encryption to Gmail for Workspace

Hackers bombard PyPi platform with information-stealing malware

Health Care Cybersecurity: Past, Present And Future

How MSSPs Can Deliver Value Through Dark Web Threat Intelligence

Indian foreign ministry portal found leaking passport details of millions of overseas Indians

Keppel Telecommunications and Transportation hit by data breach

KmsdBot Botnet Suspected of Being Used as DDoS-for-Hire Service

Maior complexo de radiotelescópios do mundo volta a funcionar após ataque hacker

Make sure your company is prepared for the holiday hacking season

Microsoft Details Gatekeeper Bypass Vulnerability in Apple macOS Systems

Military operations software in Ukraine was breached by Russian hackers

Mimecast report highlights ransomware risk and impact on UAE organisations

Nevada and North Dakota have highest cybercrime data

Nokoyawa Ransomware: Rust or Bust

Organizations Warned of New Attack Vector in Amazon Web Services

Personal information of 37,000 people exposed in Whitehall ransomware data breach

Protecting Your Brand With Public Web Data Scraping

Ransomware attacks increased 41% in November

Ransomware hackers take demands directly to college students: ‘For you, it’s a sad day’

Ransomware predictions for 2023

Raspberry Robin worm drops fake malware to confuse researchers

Recent Tech Layoffs Sharply Increase Insider Cybersecurity Threat

Russian hackers attempted to breach petroleum refining company in NATO country, researchers say

Russian Hackers Targeted Petroleum Refinery in NATO Country During Ukraine War

SevenRooms announces third-party vendor breach, says PII and banking details were not compromised

SSL Stripping Explained and How to Avoid It

Study finds troubling perception gap in data breach awareness and coverage

Telegram Hack Exposes Growing Russian Cyber Threat in Moldova

Telling users to ‘avoid clicking bad links’ still isn’t working

The Importance Of Putting Employees At The Center Of A Security Strategy

The Most Common Mistakes People Make with Malware

UK Privacy Regulator Names and Shames Breached Firms

Ukraine's Delta Military Intel System Hit by Attacks

19/12

3 Reasons to Take a Layered Approach to Offensive Cybersecurity

5 cybersecurity trends accelerating in 2023

10 useful tips to secure your social media accounts from getting hacked

85% of attacks now use encrypted channels

A Closer Look at Windows Kernel Threats

A Practical Guide to Software Supply Chain Security [10 Tips]

Acronis Cyberthreats Report Year-end 2022: Data under attack

Acronis End-of-Year Cyberthreats Report Finds Average Cost of Data Breaches Expected to Surpass $5 Million Per Incident in 2023

Antwerp denies negotiating ransomware payment as city disappears from leak site

API Vulnerabilities Discovered in LEGO Marketplace

Average cost of data breaches to surpass $5 mn per incident in 2023: Report

Avoid The XRP Staking Scam Claiming To Offer Up To 31% Returns

BadUSB: A Growing Cybersecurity Threat

Battling back the scammers: Six steps the elderly can take to avoid being fraud victims

Beware of Highly Sophisticated DarkTortilla Malware Distributed Via Phishing Sites

BlackBerry shares key insights into state of cybersecurity for 2023

BlackCat ransomware group leaks files stolen from D.C. convention bureau

Bored Ape Yacht Club (BAYC) Over a Million Worth NFT Reported Stolen

Brooklyn hospital resorts to pen-and-paper charts following cyberattack

CPTM sofre ataque hacker

Cyber attack on FuboTV logged subscribers out during World Cup semi-final clash

Cyber National Mission Force elevated in fight against foreign hackers

Cyberattacks in 2022 and what hospitals, health systems can learn going into 2023

Cybercrime (and Security) Predictions for 2023

Cybersecurity crucial for OT and ICS in 2023

Data Resilience Predictions: Using the Economy to Inform Security Strategy

DraftKings warns data of 67K people was exposed in account hacks

Email Fraud: How to Recognize and Avoid It

Epic Games to pay $520 million for privacy violations, dark patterns

Experts spotted a variant of the Agenda Ransomware written in Rust

Facebook Cracks Down on Spyware Vendors from U.S., China, Russia, Israel, and India

Forget AI art — AI-powered cyberattacks are what we should be worried about

Former T-Mobile Store Owner Scores Long Prison Sentence For $25M Phone Unlock Hack

FoxIt Patches Code Execution Flaws in PDF Tools

From Twitter, Samsung to Rockstar Games, here are the top data breaches of 2022

Glupteba Botnet Continues to Thrive Despite Google's Attempts to Disrupt It

Glupteba botnet is back after Google disrupted it in December 2021

Hacker Swipes FBI’s Info Sharing InfraGard Database of 80K Contacts

Holiday Spam, Phishing Campaigns Challenge Retailers

How Much Does a Password Reset Cost? More Than You’d Think

How Reveton Ransomware-as-a-Service Changed Cybersecurity

How you can stop corporate login credential theft

Infamous hacker steals 14 BAYCs worth over 852 ETH ($1.07 million)

IoT Security: How to safeguard IoT devices against cyberattacks

IRS mistakenly publishes 112,000 taxpayer records for the second time

Is Quantum Security The Next Guy’s Problem?

Is Your Organization Safe from Common Cybersecurity Threats?

Jisc moves to protect tertiary education from ransomware

LinkedIn has massively cut the time it takes to detect security threats. Here's how it did it

Louise W. Eggleston Center, Inc. Reports Data Breach Following Ransomware Attack

Malicious ‘SentinelOne’ PyPI package steals data from developers

McGraw Hill exposed student data and grades, online privacy firm says

Medicare data breach affects up to 254,000 beneficiaries

Medicare Data Breach: Letters Sent Regarding New Cards Issued to 254K Recipients

Meta Takes Down Over 200 Covert Influence Operations Since 2017

Microsoft: Achilles macOS bug lets hackers bypass Gatekeeper

Microsoft finds macOS bug that lets malware bypass security checks

Microsoft: KB5021233 causes blue screens with 0xc000021a errors

Microsoft Vulnerability Upgraded to Critical Due to RCE Risk

Mobile App Users at Risk as API Keys of Email Marketing Services Exposed

Moving Beyond Security Awareness to Security Education

Navigating the Path to Enhanced Authentication

New Agenda Ransomware Variant, Written in Rust, Aiming at Critical Infrastructure

NIST to Scrap SHA-1 Algorithm by 2030

Old vulnerabilities in Cisco products actively exploited in the wild

Open source vulnerabilities add to security debt

Over 54 mn users' data at risk via 3 popular email marketing apps

Palo Alto Networks research finds Baby Boomers better at password reuse than Gen Z

PF suspeita de acesso a sistema sigiloso do Judiciário por grupo hacker no Brasil

Phishing Targets Ukrainian Battlefield Awareness Tool Users

Play ransomware claims attack on German hotel chain H-Hotels

Rackspace Ransomware Attack Caused Email Outages; Thousands of Customers Migrated to Cloud Services

Ransomware Groups to Increase Zero-Day Exploit-Based Access Methods in the Future

Researchers Discover Malicious PyPI Package Posing as SentinelOne SDK to Steal Data

San Diego Unified Waited 5 Weeks to Notify Employees and Families of Data Breach

Security Experts Say You Should Always Disable This Setting When Using Airport Wifi

Security teams urged to prepare for next era of ransomware

SevenRooms Restaurant CRM Suffers Significant Data Breach

Sophisticated DarkTortilla Malware Serves Imposter Cisco, Grammarly Pages

State level cyber attacks – Why and how

T-Mobile Hacker Gets 10-Year Sentence for Unlocking Phones

The Growing Risk Of Malicious QR Codes

The state of OT security: a rapidly evolving landscape

Ukraine's DELTA military system users targeted by info-stealing malware

UID smuggling: A new technique for tracking users online

Urgent need to secure India’s healthcare ecosystem from cyber threats

US agencies seize 48 DDoS-for-hire domains, charge six people for running booter services

US Gov warns of BEC attacks to hijack shipments of food products

What is Account Takeover (ATO)?

What Is Doxxing, And Why Is It So Dangerous?

What happens once scammers receive funds from their victims

What is VPN split tunneling and should I be using it?

18/12

2022 Cyber Review: The Year the Ukraine War Shocked the World

AI-armed cyberattacks may get lethal in next 5 years, warns report

AIIMS cyber attack: Delhi Police seeks information on Chinese hackers through Interpol

Are Technical Support Scams Getting More Advanced?

Fire and rescue service in Victoria, Australia, confirms cyber attack

From parcel delivery scams to fake websites - what to look out for in run-up to Christmas

Gemini’s customer data leak was advertised for sale on hacker forums for 30 BTC in September

How FIFA World Cup 2022 became the hunting ground for hackers

How Many Spam Emails Are Sent Per Day in 2022?

Items seized in AirAsia data breach probe

Microsoft digital certificates used to sign malware by ransomware group Cuba

’One step ahead’: Cyber criminals running rings around Australian firms

Restaurant CRM platform ‘SevenRooms’ confirms breach after data for sale

Saudi Arabia Has Transformed Its Cyber Defenses, But Businesses Need To Do More: Kaspersky CEO

Scammers Are Now Scamming Fellow Scammers On Cybercrime Forums, Analysis Shows

Solana Based DeFi Exchange Raydium Investigated An Exploit

Stay safe from financial frauds during year-end sales

T-Mobile hacker gets 10 years for $25 million phone unlock scheme

The case for a security program

The digital age: Are you cyber secure?

Three Ways Schools Can Fend Off Ransomware Attacks

Top 5 Misuses of AI and their Consequences

Zimperium Discovers Novel Predatory Loan Malware In Flutter Apps

What Is Carding and How Can You Stay Safe From It?

What We Learned From Cybersecurity Attacks in Healthcare in 2022

DAILY NEWS: Dezembro (18/12 - 24/12) - 51 Semana de 2022

Cyber Security and Information Security News - Daily Updates !! Weekly Review

24/12

23/12

22/12

21/12

20/12

19/12

18/12

DAILY NEWS: Dezembro (11/12 - 17/12) - 50 Semana de 2022

Commenti

Procurar por Tags

Pelo Mundo Afora...