DAILY NEWS: Fevereiro (25/02 - 02/03) - 09 Semana de 2024

Cyber Security, Privacy and Information Security News --- Daily Updates !! Week

02/03

Cybersecurity Marketing Trends to Watch for in 2024

Hackers target FCC, crypto firms in advanced Okta phishing attacks

New Bifrost RAT Variant Targets Linux Devices, Mimics VMware Domain

U.S. Charges Iranian Hacker, Offers $10 Million Reward for Capture

U.S. Court Orders NSO Group to Hand Over Pegasus Spyware Code to WhatsApp

Why Companies Are Now Outsourcing IT and Cybersecurity Services

Windows Kernel bug fixed last month exploited as zero-day since August

01/03

4 Instructive Postmortems on Data Downtime and Loss

92% of companies experienced an application-related breach last year

98% of businesses linked to breached third parties

AI behind surge in business email compromise attacks

AI service Cutout.Pro suffers data breach exposing 20 million users' personal information

Arizona casino severely disrupted after cyberattack

Audacious Attacks, Evading Answers: Why LockBit, BlackCat Targeting US Healthcare?

Average Initial Ransomware Demand in 2023 Reached $600K

Biden Warns Chinese Cars Could Steal US Citizens' Data

Black Basta Ransomware Group Adds 5 New Victims to Leak Site

BlackCat Ransomware Gang Behind Change Healthcare Cyberattack, Optum Confirms

Businesses foresee major impact from new SEC cybersecurity disclosure rules

Change Healthcare cyberattack: What's the status of ransomware attack impacting pharmacies, payments nationwide

CISA, Mandiant Warn of a Worsening Situation for Ivanti Users

CISA warns of Microsoft Streaming bug exploited in malware attacks

Critical Infrastructure Organizations Warned of Phobos Ransomware Attacks

CryptoChameleon Phishing Scam Targets Crypto Users and FCC Employees

CutOut.Pro AI Tool Data Breach: Hacker Leak 20 Million User Info

CWE Version 4.14 Released : What’s New!

Cybercriminals harness AI for new era of malware development

Details of 20M Cutout.pro users exposed on leak forum

Facebook accounts were vulnerable to zero-click takeovers

February 2024 Top CVEs and Vulnerabilities Report

Five Eyes Agencies Warn of Active Exploitation of Ivanti Gateway Vulnerabilities

Five Eyes Warn of Ivanti Vulnerabilities Exploitation, Detection Tools Insufficient

Forget ransomware and phishing attacks — CTOs rate human error as their number one security risk

Four Strategies To Protect Against Generative AI-Powered Attackers

France concerned by potential cyber attack on electricity grid - minister

Fulton County stands firm against ransom demands amid cyberattack

German applied sciences university hit by criminal cyberattack

Germany takes down cybercrime market with over 180,000 users

GitHub Rolls Out Default Secret Scanning Push Protection for Public Repositories

Golden Corral Data Breach Impacts 180,000 Employees

GTPDOOR Linux Malware Exploiting GPRS Protocol For Stealthy C2 Communication

Hacker Group Publicly Announced That They Are Recruiting Pentesters

HackerGPT 2.0 – A ChatGPT-Powered AI Tool for Ethical Hackers & Cyber Community

How to secure your API secret keys from being exposed?

I-Soon suffers data breach revealing state hacking activities

Internet-connected Doorbell Cameras Flaw Let Attackers Hijack Devices

JCDC’s strategic shift: Prioritizing cyber hardening

Key areas that will define the intersection of AI and DevOps

Large Pharmacy Claims Processor Hit with Ransomware Attack

Lazarus Hackers Exploited Windows kernel 0-day In The Wild

Major ransomware attack knocks Romanian hospitals offline

Massive cyber attack creates crushing billing burdens for skilled nursing; sparks efforts for payment relief

Massive Data Breach at YX International Exposes 2FA Codes for Google, Facebook, TikTok Users

Millions Of GitHub Repos Found Infected With Malicious Code

Mogilevich hacker group claims it breached Ireland’s Department of Foreign Affairs

New BIFROSE Linux Malware Variant Using Deceptive VMware Domain for Evasion

New Phishing Kit Leverages SMS, Voice Calls to Target Cryptocurrency Users

NIST Cybersecurity Framework: A Cheat Sheet for Professionals

Over 325,000 people impacted by data breach reported by Houser LLP

Ransomware attack wreaks havoc on prescription payments

Researchers spot new infrastructure likely used for Predator spyware

Richland Community College Struggling After Cyber Attack

Safeguard your data from email-based fraud and phishing scams

Spyware maker NSO Group ordered to turn over Pegasus code in WhatsApp case

Thales Defense Contractor in Hot Water: Alleged Data Breach Traced to USDoD Hacker

Top AI service hit by massive data breach — 20 million Cutout.Pro users have personal info leaked, so change passwords now

Trio of former Mid Devon councillors criticise authority’s data breach allegations

U.S. charges Iranian for hacks on defense orgs, offers $10M for info

UK Home Office Breached Data Protection Law with Migrant Tracking Program, ICO Finds

UK’s NCSC Issues Warning as SVR Hackers Target Cloud Services

Understanding Risks on the SaaS Attack Surface

UnitedHealth says 'Blackcat' ransomware group behind hack at tech unit

US law firm Houser said May data breach impacted more than 326,000 individuals

29/02

Airbnb and Tripadvisor scammers targeting travelers

Airbnb scammers pose as hosts, redirect users to fake Tripadvisor site

ALPHV/BlackCat exposes UnitedHealth hack details on leak blog

ALPHV/BlackCat threatens to leak data stolen in Change Healthcare cyberattack

Biden Bans Mass Sale of Data to Hostile Nations

BobTheSmuggler: Open-source tool for undetectable payload delivery

Chinese Hackers Exploiting Ivanti VPN Flaws to Deploy New Malware

Coinbase investigates crypto accounts showing zero balance

Cryptojacking is no longer the sole focus of cloud attackers

Dark Web Market Revenues Rebound but Sector Fragments

DashExe RAT Advetised on Hacking Forums for $17.95

GTPDOOR Linux Malware Targets Telecoms, Exploiting GPRS Roaming Networks

Hackers Using Weaponized ZIP File To Steal NTLM Hashes

How organizations can navigate identity security risks in 2024

How to Prioritize Cybersecurity Spending: A Risk-Based Strategy for the Highest ROI

Inside the book: Androids – The Team That Built the Android Operating System

Is the LockBit gang resuming its operation?

Lazarus APT exploited zero-day in Windows driver to gain kernel privileges

Lazarus exploits typos to peddle malware

Lazarus Exploits Typos to Sneak PyPI Malware into Dev Systems

Lazarus Hackers Exploited Windows Kernel Flaw as Zero-Day in Recent Attacks

Money laundering scheme caught employing mules via Android app XHelper

New Backdoor Targeting European Officials Linked to Indian Diplomatic Events

New SPIKEDWINE APT group is targeting officials in Europe

New Silver SAML Attack Evades Golden SAML Defenses in Identity Systems

Pharma Giant Cencora Reports Cybersecurity Breach

President Biden Blocks Mass Transfer of Personal Data to High-Risk Nations

RSM US Deploys Stellar Cyber Open XDR Platform to Secure Clients

Savvy Seahorse Targets Investment Platforms With DNS Scams

The CISO’s guide to reducing the SaaS attack surface

The Power of Threat Intelligence Platforms for Faster Threat Investigations Checklist

Threat actor uses Facebook to lure victims, sends cash to Russia

TimbreStealer Malware Targets Mexican Victims with Tax-Related Lures

Top cybersecurity salaries shoot past $780k

Twenty billion scam calls repelled by T-Mobile’s first line of defense

US Government Warns Healthcare is Biggest Target for BlackCat Affiliates

Vishing, smishing, and phishing attacks skyrocket 1,265% post-ChatGPT

Why governance, risk, and compliance must be integrated with cybersecurity

28/02

34 Million Roblox Credentials Exposed on Dark Web in Three Years

47% of cloud storage billing is allocated to data and usage fees

Ads for Zero-Day Exploit Sales Surge 70% Annually

AI-driven DevOps: Revolutionizing software engineering practices

AI in cybersecurity presents a complex duality

Broken China? Separating fact from fiction

Building Your Privacy-Compliant Customer Data Platform (CDP) with First-Party Data

Como ataques hackers a produtoras de games afetam o mercado e jogadores?

Cybersecurity Agencies Warn Ubiquiti EdgeRouter Users of APT28's MooBot Threat

Epic Games: "Zero evidence" we were hacked by Mogilevich gang

Egyptian Health Department reports data breach, sensitive information compromised

Epic Games investiga suposto ataque hacker com roubo de quase 200GB de dados

European retailer Pepco hit by costly phishing attack

European retailer Pepco loses €15.5 million in phishing (possibly BEC?) attack

FBI Alert: Russian Hackers Target Ubiquiti Routers for Data, Botnet Creation

FBI, CISA, HHS warn of targeted ALPHV/Blackcat ransomware attacks against the healthcare sector

FBI Warns U.S. Healthcare Sector of Targeted BlackCat Ransomware Attacks

Hackers alegam ter 189GB de dados da Epic Games e pedem resgate

How AI is reshaping the cybersecurity job landscape

How Security Leaders Can Break Down Barriers to Enable Digital Trust

Iran-Linked UNC1549 Hackers Target Middle East Aerospace & Defense Sectors

Iranian hackers impersonate Boeing and DJI, post fake job offers

Japan warns of malicious PyPi packages created by North Korean hackers

Lazarus hackers exploited Windows zero-day to gain Kernel privileges

LockBit ransomware returns to attacks with new encryptors, servers

Matthew Perry’s X account hacked by scammers

Need to Know: Key Takeaways from the Latest Phishing Attacks

New executive order bans mass sale of personal data to China, Russia

New York labour union says hackers stole the data of 800,000 workers from its network

NIST Releases Cybersecurity Framework 2.0: Guide for All Organizations

North Korea's first spy satellite is 'alive', can manoeuvre, expert says

OpenAI hits back at NYT: you hacked our chatbot

Over Half of UK Firms Concerned About Insider Threats

Pharmaceutical giant Cencora discloses cybersecurity incident, data breach detected

Preparing for the NIS2 Directive

Ransomware gang claims they stole 6TB of Change Healthcare data

Registrars can now block all domains that resemble brand names

Rhysida ransomware wants $3.6 million for children’s stolen data

Russia-linked APT28 compromised Ubiquiti EdgeRouters to facilitate cyber operations

Russia’s use of malware to enhance election influence operations sign of things to come

Savvy Seahorse gang uses DNS CNAME records to power investor scams

State-sponsored hackers know enterprise VPN appliances inside out

Superusers Need Super Protection: How to Bridge Privileged Access Management and Identity Management

The death of the CIO

Third-party attack vectors are responsible for 29% of breaches

Threat actor uses Facebook to lure victims, sends cash to Russia

ThyssenKrupp AG says cyber attack impacted operations at its automotive division

TimbreStealer Malware Spreading via Tax-themed Phishing Scam Targets IT Users

UK ICO Vows to Safeguard Privacy in AI Era, Rules Out Bespoke Regulation

UK Unveils Draft Cybersecurity Governance Code to Boost Business Resilience

Understanding employees’ motivations behind risky actions

Unmasking 2024’s Email Security Landscape

US healthcare alerted against BlackCat amid targeted attacks

27/02

21 Newly Uncovered Malware Variants Attacks MacOS Users

69% of Organizations Infected by Ransomware in 2023

Akira Ransomware Group Threatens to Leak Stolen Data from Swedish Municipality

APT29 revamps its techniques to breach cloud environments

Around 50% of IT leaders believe IoT security is their weakest point

Attackers penetrate Walmart’s Spark Driver portal

Black Basta, Bl00dy ransomware gangs join ScreenConnect attacks

Business Logic Abuse Dominates as API Attacks Surge

Change Healthcare incident drags on as report pins it on ransomware group

ConnectWise Phishing Scam Targets Healthcare and Crypto Sectors in US

Dark Web Actor Selling Source Code for Rust-Based Information Stealer

Dark Web User Selling Access to an Undisclosed Brazilian Currency Exchange for $15,000

Does AI remediation spell the end for developers in 2024?

Enterprises’ progress in digital trust implementation is far from great

Five Eyes Agencies Expose APT29's Evolving Cloud Attack Tactics

Four Million WordPress Sites Vulnerable to LiteSpeed Plugin Flaw

From Alert to Action: How to Speed Up Your SOC Investigations

FTC bans Avast from selling browser data

Hackers Poison SEO Results To Deploy Gootloader Malware And Steal RDP Access

Half of IT Leaders Identify IoT as Security Weak Point

Hessen Consumer Center says systems encrypted by ransomware

I-Soon GitHub Leak: What Cyber Experts Learned About Chinese Cyber Espionage

Industrial Cyber Espionage France's Top Threat Ahead of 2024 Paris Olympics

LabHost cybercrime service lets anyone phish Canadian bank users

LockBit back online, already targeting hospitals with ransomware

Malicious code in Tornado Cash governance proposal puts user funds at risk

Meta plans to prevent disinformation and AI-generated content from influencing voters

Mogilevich Ransomware Group Claims Cyberattack on Bazaarvoice, Data on Sale

Most Commercial Code Contains High-Risk Open Source Bugs

New Hugging Face Vulnerability Exposes AI Models to Supply Chain Attacks

New Vulnerabilities in ConnectWise ScreenConnect Massively Exploited by Attackers

NIST CSF 2.0 released, to help all organizations, not just those in critical infrastructure

NIST Releases Final Version of Cybersecurity Framework 2.0

Open-Source Xeno RAT Trojan Emerges as a Potent Threat on GitHub

Overcoming the pressures of cybersecurity startup leadership

Pharmaceutical giant Cencora says data was stolen in a cyberattack

RansomHouse Adds Webber International University, GCA Nederland to Victim List

Ransomware gang seeks $3.4 million after attacking children’s hospital

ResurrecAds Attack Hijacks Brand Names, Spreads Spam Via ‘SubdoMailing’

Russian cyber espionage gang adapts to target cloud systems

Russian hackers hijack Ubiquiti routers to launch stealthy attacks

Safe Data Sharing Practices: How to Avoid Data Leaks

The average open source vulnerability is 2.5 years old

UK email mistake put ‘lives at risk’ for Afghans who had worked with British military

Unmanaged third-party access threatens OT environments

User got a $104K bill from hosting provider: “I thought it was a joke”

Using AI to reduce false positives in secrets scanners

Vendor Email Compromise (VEC) and Business Email Compromise (BEC) attacks rise in the energy and infrastructure industry

White House: Use memory-safe programming languages to protect the nation

WordPress Plugin Alert - Critical SQLi Vulnerability Threatens 200K+ Websites

26/02

8 Worrying Cybersecurity Statistics You Need to Know in 2024

48% of executives focus AI strategy on SaaS applications

8,000+ Domains of Trusted Brands Hijacked for Massive Spam Operation

8220 Hacker Group Attacking Linux & Windows Users to Mine Crypto

AI fake news sites continue to flood web

Aleo blockchain platform faces privacy breach concerns ahead of mainnet launch

Anonymous Sudan Launches New DDoS-for-Hire Service, Filling Skynet Botnet Void

Avast Faces $16.5m Fine for Unlawfully Selling User Browsing Data

Avast Fined Millions for Selling User Browsing Data

Banking Trojans Target Latin America and Europe Through Google Cloud Run

Bitcoin Giant MicroStrategy Hit by X Account Hack, Users Lose Funds in Phishing Scheme

Breaking down the language barrier: How to master the art of communication

Change Healthcare provides update on cyberattack

Chicago's Lurie Children's Hospital Battles Cyberattack Amidst Global Crackdown on Ransomware Groups

China to bolster cyber defenses against “major risks”

China to increase protections against hacking for key industries

CISA Issues Alert on APT29’s Cloud Infiltration Tactics

Código Apex inseguro afeta várias implantações do Salesforce

Conta da MicroStrategy no X foi hackeada e está divulgando golpe de phishing com token baseado na Ethereum

Cross-Border Vigilance: How OPP and U.S. Secret Service Thwarted a $600K Spear Phishing Scam

CrowdStrike 2024 Global Threat Report: 6 Key Takeaways

CVE count set to rise by 25% in 2024

Cybersecurity crisis in schools

Cybersecurity Training Not Sticking? How to Fix Risky Password Habits

Documentos vazados mostram espionagem e atividade hacker na China

Empresa chinesa hackeou governos estrangeiros por 8 anos

Escalating cyber threats spark demand for stronger regulations

Estudo revela as falhas críticas e mais frequentes de 2023

Expecting privacy from ChatGPT is like asking the NSA to stop spying on citizens

Expert Warns of Growing Android Malware Activity

Florida man could face 62 years in prison for hacking and related charges

Friendzone Launches Social Monetization on Polygon PoS for 5,000+ Waitlisted Users

German battery maker Varta AG says cyber attack caused prolonged disruption across factories

Hack me if you can: LockBit challenges authorities, promises to return

Hacker da KyberSwap transfere US$ 2,5 milhões em fundos roubados para Ethereum

Hackers exploit 14-year-old CMS editor on govt, edu sites for SEO poisoning

Hackers Hijack Websites to Inject Malware that Steals User Credentials

Hacking firm I-Soon data leak revealed Chinese gov hacking capabilities

Hampton County School District victim of cyber attack; SLED, law enforcement investigating

Hijacked subdomains of major brands used in massive spam campaign

IAM vs. PAM Solutions: What are the Key Differences?

If you have a Madrid public transport card, your data may be leaked after a cyber attack in November

IntelBroker claimed the hack of the Los Angeles International Airport

It’s time for security operations to ditch Excel

KyberSwap Hacker Transfers $2.5M to Ethereum Blockchain

Linked Oculus Accounts Trigger Facebook and Instagram Suspension

LoanDepot Ransomware Attack Exposed 16.9 Million Individuals

LockBit is back and threatens to target more government organizations

LockBit leak site is back online

LockBit makes 5 new victims after disruption by police

LockBit Ransomware Gang Returns, Taunts FBI and Vows Data Leaks

LockBit Ransomware Group Resurfaces After Law Enforcement Takedown

LockBit Takedown: What You Need to Know about Operation Cronos

Meta’s new team targeting disinformation and AI harms in EU elections

MGM Resorts says regulators probing September cyber attack

MicroStrategy hacker nets $440K in fake MSTR giveaway

MicroStrategy’s X Account Compromised, $440,000 Lost to Phishing Scam

NCSC to Offer Cyber Governance Guidance to Boards

Netskope Threat Labs: Financial sector remains one of the top sectors targeted by ransomware groups

New IDAT Loader Attacks Using Steganography to Deploy Remcos RAT

New Jersey deaddiction centre says hackers accessed customers' personal and financial data

New research finds gaps in secure access to OT environments

North Korean Hackers Targeting Developers with Malicious npm Packages

Oculus Meta hack leads to suspension of multiple Facebook accounts

Ontario Provincial Police (OPP), U.S. Secret Service probe 'Spear Phishing' fraud, prevent Canadian business from being scammed out of $600K

OWASP lança checklist para adoção segura de IA generativa

Perdas de vítimas de ransomware podem superar US$ 10 milhões

Pikabot returns with new tricks up its sleeve

Privacy Watchdog Cracks Down on Biometric Employee Tracking

RCMP initiates criminal probe amid cyber attack on network

Researchers say easy-to-exploit security bugs in ConnectWise remote-access software now under mass attack

Russian hackers shift to cloud attacks, US and allies warn

ScreenConnect flaws exploited to deliver all kinds of malware (CVE-2024-1709, CVE-2024-1708)

Startup to launch ultra high-resolution satellites, sparking privacy concerns

Steel giant ThyssenKrupp confirms cyberattack on automotive division

The true cost of ransomware: 78% saw attackers coming back for more

The UK has seen an increase in cyberattacks against higher education

ThreatHunter.ai Halts 100s of Attacks: Battling Ransomware & Nation-State Cyber Threats

Three Tips to Protect Your Secrets from AI Accidents

Travelers targeted with Booking.com refund malware

U-Haul admits data breach

U-Haul Informs Customers of Major Data Breach

Web Check: Open-source intelligence for any website

White House Urges Tech Industry to Eliminate Memory Safety Vulnerabilities

25/02

Authorities Claim LockBit Admin "LockBitSupp" Has Engaged with Law Enforcement

Cost of data breaches for companies in South Africa

Leaked Files Reveal Foreign Hacker Threats

LockBit is Back With New Claims and Victims

Rajasthan Hacker Arrested for Massive International Data Breach Involving Millions

Royal Canadian Mounted Police (RCMP) investigating cyber attack as its website remains down

Targeted ransomware groups grow in numbers, sophistication

Top-Ranked DeGods NFT Recovered After Phishing Scam Loss

Ukraine: cyber attack against the "Priyamy" TV channel, broadcast a message in favor of Russia

Underrated Incident Prevention Methods in Cyber Risk Management

DAILY NEWS: Fevereiro (18/02 - 24/02) - 08 Semana de 2024