DAILY NEWS: Janeiro (31/12/2023 - 06/01/2024) - 01 Semana de 2024

Cyber Security, Privacy and Information Security News --- Daily Updates !! Week Resume

06/01

23andMe Blames Users for Data Breach

At least 83 victims have lost $155,000 in DBS phishing scam since the start of January

British Library ransomware cyber attack ‘set to cost £7million’

British Library says final cost of cyber attack is ‘not confirmed’

CoinsPaid Suffers $7.5M Crypto Theft in Second Cyber Attack

Como a implementação da LGPD pode ajudar a evitar um ataque hacker?

Cyber Attack Drains 40% of British Library’s Reserves

Cyber Crimes In 2024: Predictions Of Digital Security and Technology

Cyberattack exposes Swiss Air Force documents on the darknet

Cyberattack of health tech company affects more than 4 million

Cyberattacks Hits Museums and Causes Online Collections Drop

Deepfakes Gone Wild: 10 Trends That Will Reshape 2024

Experts spotted a new macOS Backdoor named SpectralBlur linked to North Korea

From Phishing To Cryptocurrency, Crimes Without Borders

Gamma Heist — Over $3M in Digital Assets Drained, 1,000 ETH Moved to Tornado Cash

Google: Malware abusing API is standard token theft, not an API issue

Hackers can now access your Google account without password

Hospitals sue ransomware group

Job Frauds, Sextortion Scams: What 2023 Cybercrime Trends Looked Like in India

Law firm Orrick data breach impacted 638,000 individuals

Merck settles with insurers regarding a $1.4 billion claim over NotPetya damages

Microsoft introduces AI-powered cybersecurity solution

Mobile Spyware: A Potential Threat to Your Organization?

North Korean Hackers Intensify Cyber-espionage with New Spear-Phishing Attacks

Polychain Capital CEO’s account hacked, promotes fake airdrop

Pro-Iranian Hacker Group Targeting Albania with No-Justice Wiper Malware

Ransomware payment ban: Wrong idea at the wrong time

Refuah Health to pay $450K in penalties following ransomware attack

Richard Osman among authors missing royalties amid ongoing cyber-attack on British Library

Sea Turtle Cyber Espionage Campaign Targets Dutch IT and Telecom Companies

The Impact of a Cyber-Attack on Public Lending Right Payments to Authors

Under siege: how DDoS security transformed during Hamas war

Unmasking New Year-themed Spam Emails: A Closer Look at the Remcos RAT Connection

Unveiling the Essentials of Information Security: Penetration Testing and Cybersecurity Insights

US-Based SentinelOne Acquires Peak XV Backed Cybersecurity Startup PingSafe

X users fed up with constant stream of malicious crypto ads

Writers left in a bind by British Library cyber-attack, but it remains a closed book

05/01

19 xDedic Cybercrime Market Users and Admins Face Prison

23andMe Blames User “Negligence” for Data Breach

Airbnb scam allowed fake renters to pocket $8.5 million until caught

Alert: Ivanti Releases Patch for Critical Vulnerability in Endpoint Manager Solution

Alleged Phoenix Group DDoS Attack Disrupts US Congress Website

Artists fighting back against AI by poisoning their images

BreachForums admin detained over VPN use

BreachForums admin jailed again for using a VPN, unmonitored PC

Breaking down the state of authentication

Budget cuts take a toll on IT decision makers’ mental health

CISA Advisory: Critical Vulnerabilities Found in Rockwell, Mitsubishi, and Unitronics Devices

Crypto start-up co-founder scammed out of $125,000

Crypto wallet founder loses $125,000 to fake airdrop website

Cyber-Attacks Drain $1.84bn from Web3 in 2023

Data breach could affect 21,000, cost senior living operator $1M

DevSecOps tools: A beginner’s guide

DNA Analysis Firm, 23andMe, Blames Customers For Data Breach

Escalating cyber threats: Bots, fraud farms, and cryptojacking surge, urgently requiring attention

Everything we know about the Kyivstar cyberattack

Exposed Secrets are Everywhere. Here's How to Tackle Them

First Choice Dental reports data breach, patient information at risk

FTC proposes new restrictions on the use of children's data

G20 website saw 1.6 million cyberattacks per minute during the summit: Indian Cybercrime Coordination Centre CEO

Global Data Breaches and Cyber Attacks in December 2023 – 2,241,916,765 Records Breached

Google crafts helper robot to make you snacks and wipe your table

Hacked X accounts with gold checkmarks are for sale on the dark web, says study

Hackers target Apache RocketMQ servers vulnerable to RCE attacks

Healthcare IT giant Welltok says MOVEit data breach impacted close to 4 million individuals

HealthEC Data Breach Prompts Urgent Notification to Affected Individuals

How Can Data Breach Be A Trouble For Your Industry?

Hunters International Strikes Again: Four New Victims Added to Dark Web Portal

International law firm Orrick suffers extensive data breach affecting thousands

Ivanti fixed a critical EPM flaw that can result in remote code execution

Investigation of xDedic cybercrime site reaches ‘culmination,’ US says

Iranian crypto exchange leaks user passports and IDs

January 2024 Patch Tuesday forecast: A Focus on Printing

Memorial University recovers from cyberattack, delays semester start

Mimecast Acquires Elevate Security to Personalize Controls

Monti Ransomware Group Claims Diablo Valley Oncology as Latest Cyberattack Victim

More US school districts claimed by BlackSuit ransom group

MyEstatePoint Property Search Android app leaks user passwords

Nest Wallet CEO Loses $125,000 in Wallet Draining Scam

New Bandook RAT Variant Resurfaces, Targeting Windows Machines

NIST Fortifies Chatbots and Self-Driving Cars Against Digital Threats

Orange España suffers national outage caused by “ridiculously weak” password

Orange Spain Faces BGP Traffic Hijack After RIPE Account Hacked by Malware

Orrick, Herrington & Sutcliffe Data Breach Exposes Information of Over 600000 Individuals

Republican Representatives Demand Accountability in Wake of DC Elections Voter Data Breach

Russia-linked APT Sandworm was inside Ukraine telecoms giant Kyivstar for months

Russian Hackers Had Covert Access to Ukraine's Telecom Giant for Months

SCADA systems: How secure are the systems running our infrastructure?⎥ Malav Vyas (Security Researcher at Palo Alto Networks)

Signal, AI Generated Art Least, Amazon, Facebook Most Invasive Apps, Study

Singapore telcos to let subscribers block international calls in new anti-scam measure

SpectralBlur: New macOS Backdoor Threat from North Korean Hackers

The Importance of Implementing Two-Factor Authentication (2FA) to Combat Phishing Attacks

The source code of Zeppelin Ransomware sold on a hacking forum

Transformative Healthcare says breach of former subsidiary's records compromised nearly 1m people

Understanding AI Risk Management – Securing Cloud Services with OWASP LLM Top 10

Update your white hat hacking skills with $70 off this training bundle

Web3 security firm CertiK's X account hacked to push crypto drainer

What are hackers predicting as the biggest cybersecurity concerns for 2024?

04/01

15 open-source cybersecurity tools you’ll wish you’d known earlier

23andMe: It’s YOUR Fault We Lost Your Data

Accenture adquire consultoria especializada em cibersegurança

Alleged data breach impacts millions on Crunchbase platform

American Business Council Launches Cybersecurity Hub In Nigeria

As lawmakers mull outlawing poor security, what can they really do to tackle online gangs?

Barrick Gold breach exposes thousands of Social Security numbers

Beware: 3 Malicious PyPI Packages Found Targeting Linux with Crypto Miners

British Library could take months to completely recover from Rhysida ransomware attack

British Library Falls Victim to Cyber Attack

Chinese Hackers Allegedly Use ChatGPT to Write Ransomware

Ciberataque interrompe serviços de internet da Orange Espanha

CISA Warns of Exploited Vulnerabilities in Chrome and Excel Parsing Library

Commissioner instructs Land Registry over cyber-attack incident

Consumers prepared to ditch brands after cybersecurity issues

Creditors association profits off free-of-charge data

Crooks hacked Mandiant X account to push cryptocurrency scam

Cyber attack on Ukrainian telecoms firm 'a big warning'

Cyber-attack on widely used service provider causes downtime for online museum collections

Cytek to Build Cybersecurity Operations Center for Caribbean Defense Customer

December ransomware attacks disrupt healthcare organizations

Descriptografador explora falha no ransomware Black Basta

DoT investigates Khalistani threat calls, asks Finance Ministry, SEBI to ensure cyber security of stock exchanges

Draft Law to Establish National Authority for Cyber Security is Posted for Public Consultation

DriveFS Sleuth: Open-source tool for investigating Google Drive File Stream’s disk forensic artifacts

Eagers Automotive halts trading following cyber attack

Electrostim Medical Services Notifies Consumers of Recent Data Breach Impacting Their Personal Information

Embattled LastPass Enforcing 12-Character Passwords for All

Estes Express Lines Says Personal Data Stolen in Ransomware Attack

'everything' blocks devs from removing their own npm packages

‘everything’ matters — why the npm package sparked controversy

Experts Clash Over Ransomware Payment Ban

Experts found 3 malicious packages hiding crypto miners in PyPi repository

First Choice Dental Files Notice of Data Breach with HHS-OCR Following Apparent Cyberattack

Flaws in Mobile Password Manager: Auto-Fill to AutoSpill

FTC offers $25,000 prize for detecting AI-enabled voice cloning

Gamma attempts to negotiate with hacker after $3.4M exploit

Greece to Establish New Authority to Counter Cyber-Attacks

Hacker wanted by the US and Russia extradited to Moscow

Hackers hijack govt and business accounts on X for crypto scams

Hackers inside Kyivstar’s system since May 2023 – media

HealthEC Data Breach Impacts 4.5 Million Patients

HealthEC data breach impacted more than 4.5 Million people

HealthEC digital platform breached, 4M+ exposed

How AI Is Transforming Payment Risk and Fraud at Genpact

iFlock Security Consulting secures funding to bolster cyber services

Images that distort AI’s vision affect humans too

In the shadows of self-censorship: The impact of the Cyber Security Act on Bangladesh’s LGBTQ+ movement

Infosec experts divided over 23andMe's 'victim-blaming' stance on data breach

Infostealer malware, weak password leaves Orange Spain RIPE for plucking

Israeli Firm Providing Cybersecurity For Chinese Car Operating System

Ivanti warns critical EPM bug lets hackers hijack enrolled devices

LastPass Enforces 12-Character Master Passwords

Mais de 100 bancos europeus farão testes de ciber-resiliência

Major Spanish mobile carrier suffers three-hour outage after account takeover

Mandiant's Twitter Account Restored After Six-Hour Crypto Scam Hack

Mandiant’s X account hacked to push crypto scam

Meta tracks your Facebook link history, but now you can opt out

Microsoft desativa Windows App Installer online após invasões

Mint Mobile Sends Customers an Email Disclosing a Recent Data Breach

Most consumers will ditch a brand that’s suffered a data breach

New risk management framework helps with SEC mandate compliance

Nigerian Faces $7.5m BEC Charges After Charities Are Swindled

Over 11M SSH Servers are Vulnerable to new Terrapin Attacks

Plataforma de blockchain sofre ataque hacker e perde US$ 84 milhões

Population health software company HealthEC faces massive data breach

Real estate Android app leaks user passwords

Researchers Hunted Malicious Stockpiled Domains Analyzing DNS Records

Resecurity Identifies AI Tool Being Used to Compromise Business Email

Russian hackers infiltrated Ukrainian telecom giant months before cyberattack

Russian hackers wiped thousands of systems in KyivStar attack

Sandworm hacker group behind cyber attack on Kyivstar – Security Service of Ukraine

SBU cybersecurity chief: Hackers had access to Kyivstar months before December attack

Security Vulnerabilities Addressed in Firefox 121

SonicWall buys up SSE startup to accelerate SASE offerings

SonicWall compra startup de zero trust Banyan Security

Swedish supermarket chain Coop says cyber attack impacted card payments at stores

The dynamic relationship between AI and application development

This company says AI can help design sustainable smart home appliances

Threat actors can “fairly easily” alter AI systems, NIST warns

Three Ways To Supercharge Your Software Supply Chain Security

Top 8 ways to improve cybersecurity for your organization

UAC-0050 Group Using New Phishing Tactics to Distribute Remcos RAT

Ukraine Blames Russian Sandworm Hackers for Kyivstar Attack

University of Manchester’s CISO on Managing Major Cyber Incidents

Using Stronger Passwords Among Top 2024 Digital Resolutions

X Account of Google Cybersecurity Firm Mandiant Hacked in Crypto Scam

Xerox’s US subsidiary Hit by Cyber Attack: Personal Information Exposed

Zeppelin ransomware source code sold for $500 on hacking forum

What is cyber kidnapping - explained

Wireshark 4.2.1 Released: What’s New!

03/01

5 New Year's resolutions for CISOs

5 Ways to Reduce SaaS Security Risks

29 malware families target 1,800 banking apps worldwide

2024 Trends Affecting Software Product Security

Accounts in danger: Google recommends enhanced safe browsing and extra care

AI won't replace judges yet: US Supreme Court warns of dangers

Alleged Crunchbase Data Breach Exposes Millions to Potential Threats

Australian car dealership Eagers Automotive dealing with a LockBit 3.0 ransomware attack

BlackBasta Ransomware Rampage Continues: NALS, Graebener, Among Latest Victims

BlackCat Ransomware Claims Attack on SAED International

Can We Protect the Ballot Box? Global Guide to Election Cyber Threats in 2024

Child’s digital avatar assaulted in the metaverse

CISA Adds Two Critical Vulnerabilities to Watchlist: CVE-2023-7024 and CVE-2023-7121

CISA warns of actively exploited bugs in Chrome and Excel parsing library

Construction firms are at high risk of cyber attacks: What you need to know

Coop Admits to Cyberattack Nightmare: Värmland Stores’ Checkout Systems Crippled

Cross Switch Suffers Data Breach: 3.6 Million Records Allegedly Exposed

Crypto Phishing Scams Reigned Supreme In 2023

Cybersecurity challenges emerge in the wake of API expansion

Dark Web Havoc: PLAY Ransomware Strikes Madison Capital, WPM, and The Time Group

Dark web sees “surge” of X gold accounts on sale

Data breach at healthcare tech firm impacts 4.5 million patients

DentalXChange Provides Notice of Data Breach to Patients of Dentists Across the Country

Developers, watch your code: Official Python respository spread malicious projects

DOJ Slams XCast with $10 Million Fine Over Massive Illegal Robocall Operation

Don’t trust links with known domains: BMW affected by redirect vulnerability

Emerging cybersecurity trends and expectations for 2024

European parking app announced data breach

Facebook’s New Privacy Nightmare: ‘Link History’

Facts and misconceptions about cybersecurity budgets

Fake and Stolen X Gold Accounts Flood Dark Web

Fallon Ambulance Service reports data breach; consumer information exposed

Flaw in Black Basta Ransomware Exploited to Create Decryptor

Freight transporter Estes Express Lines says ransomware attack compromised the data of 21k individuals

Google Kubernetes Engine Vulnerabilities Could Allow Cluster Takeover

Hacker de 18 anos suspeito de invadir sites de órgãos públicos é alvo de busca e apreensão no CE

Hacker Exploits Radiant Capital for $4.5 Million Ethereum

Hacker hijacks Orange Spain RIPE account to cause BGP havoc

Hackers hit Australian state's court recording database

Hackers quietly loot $81M in crypto assets from Orbit Chain

Hackers stole more than $81 million worth of crypto assets from Orbit Chain

Highlands Oncology Group Notifies Patients of September 2023 Data Breach

Highly exploited Chromium bug traced to a Google OAuth endpoint

How Russia’s NoName057(16) could be a new model for hacking groups

How to Rebuild SQL Database with Corrupted or Deleted Log File

HTTP/2 Rapid Reset Mitigation With Imperva WAF

I added a hardware security key to my MacBook, and it made my logins faster and safer

‘Large-scale’ cyberattack hits French township, all local services down

LastPass now requires 12-character master passwords for better security

Legal, compliance and privacy leaders anxious about rapid GenAI adoption

LockBit Ransomware Strikes Again: Groupe IDEA Added to Victim List

Malware Using Google MultiLogin Exploit to Maintain Access Despite Password Reset

Michigan Attorney General Calls for New Data Breach Notification Law

Middlefield Bank Announces Data Breach Affecting Customers and Employees

Nationwide data breach impacts Northern Nevada Medical Center: What we know

Nearly 11 million SSH servers vulnerable to new Terrapin attacks

Network180 data breach impacts as many as 59,000 people

New Xamalicious Backdoor Infects 25 Android Apps, Affects 327K Devices

Over 100 European Banks Face Cyber Resilience Test

Over 900k Impacted by Data Breach at Defunct Boston Ambulance Service

Plataforma de blockchains tem cerca de US$ 85 mi roubados

Polícia Civil cumpre mandado de busca e apreensão em desfavor de hacker suspeito de invadir páginas de diversos órgãos estaduais e municipais

Polícia investiga hacker suspeito de invadir páginas de órgãos estaduais e municipais do Ceará e de outros estados

Política Nacional de Cibersegurança: qual o impacto na vida do CISO?

Rafa Kalimann, após ter foto íntima exposta por hacker, expõe incômodo sobre crime virtual: 'Me senti muito invadida'

Reinsel Kuntz Lesher, LLP Files Official Notice of Data Breach

Russia Spies on Kyiv Defenses via Hacked Cameras Before Missile Strikes

Russian man charged for hacked Christmas lights displaying “Glory to Ukraine”

Scammers Selling Twitter (X) Gold Accounts Fueling Disinfo, Phishing

SMTP Smuggling: New Flaw Lets Attackers Bypass Security and Spoof Emails

The Role of SSL Certificates: Secure Your Website Against Cyber Attacks

These are the 11 biggest health data breaches of 2023

Ukraine’s SBU said that Russia’s intelligence hacked surveillance cameras to direct a missile strike on Kyiv

US fines XCast $10M over illegal robocalling

VoIP Firm XCast Agrees to Settle $10m Illegal Robocall Case

Xerox Business Solutions Reveals Security Breach

Xerox Business Solutions U.S. affected by cybersecurity incident

Xerox discloses 'cyber incident' claimed by INC ransom gang

WordPress Security: How to Secure Your Website?

Worried about online privacy and security? This browser protects you more than Firefox

02/01

10 Most Common Types of Cyber Attacks in 2023

After ransomware claims, Xerox says subsidiary hit with cyberattack

Alleged DDoS Rampage: NoName Targets Multiple Finnish Organizations

AltNet UK Broadband Engineers Unfairly Accused of Exposing Sites to Cyber Attack

An attacker can trigger the flaw to downgrade the connection’s security implemented by the protocol.

Anonymous Collective Targets Bahrain’s E Visa Service

Anonymous Sudan Allegedly Attacks Twitch, But Is It Real?

Arion Kurtaj, o hacker de GTA 6, recebe prisão perpétua

Australian Court Service Hacked, Hearing Recordings at Risk

Black Basta Ransomware Decryptor Published

BianLian Ransomware Hits MOOver.com: Claims to Breach 1.1 TB Data

Bunker Hill Community College announces data breach

CiphBit Ransomware Strikes MPM Medical Supply in Latest Attack

Crypto Wallet Co-Founder Explains How He Fell Victim to a Phishing Attack

CTS cyber-attack: Disruption to home sales now over

Cyber attack breaches Australian court system’s AV network

Cyber attack, haggling delay Aspen Valley Ranch sale

Cyber Attack on Victoria State Court Recordings Disrupts In-Court Technology Network

Cyber Siege Strikes Australian Legal Proceedings as Court Recordings Breached in Daring Hack

Cybercriminals set their sights on crypto markets

Essential skills for today’s threat analysts

Exploring the Top Ten Cyber Threats in 2024

Free Decryptor Released for Black Basta Ransomware

Google Settles $5 Billion Privacy Lawsuit Over Tracking Users in 'Incognito Mode'

Hack da Orbit Bridge eleva total de criptomoedas roubado em dezembro de 2023 para quase US$ 100 milhões

Hackers Attack UK’s Nuclear Waste Services Through LinkedIn

Hackers employ nuanced tactics to evade detection

Hackers hit Australian state's court recording database

Hackers invadem sistema judicial da Austrália e roubam gravações

Intelligence researchers seek to find trusted computing similarities in software to pinpoint cyber attacks

Iranian Food Delivery Giant Snappfood Cyber Attack: 3TB of Data Stolen

Iranians exposed by “mysterious hacker,” selling staggering amounts of data

Key cybersecurity skills gap statistics you should be aware of

Nearly a million people exposed after ambulance service attack

Over $80m in Crypto Stolen in Cyber-Attack on Orbit Chain

Possible Cyberattack at Aspiration Training: Users Urged to Remain Cautious

Quishing is the New Phishing. What MSSPs Need to Know

Ransomware hit 2,200 US hospitals, schools and governments last year and is killing about one Medicare patient each month - as calls grow to outlaw extortion payments to hackers

ROM Hacker está fazendo um port do primeiro Mega Man para o Super Nintendo

Steam drops support for Windows 7 and 8.1 to boost security

Sweden grocer cyberattack, Black Basta flaw, Boston hospital cyberattack

Teen Found Alive After “Cyber-Kidnapping” Incident

Teen found alive in tent after falling victim to a ‘cyber-kidnapping’

Terrapin attack allows to downgrade SSH protocol security

The Definitive Enterprise Browser Buyer's Guide

Theft of Vancouver rape crisis centre server containing sensitive data raises privacy concerns

Unveiling Zeppelin2 Ransomware: A New Threat Emerges on Dark Web

US water utilities targeted by foreign hackers, prompting calls for cybersecurity overhaul

Victoria court recordings exposed in reported ransomware attack

Victorian courts caught in cyber attack

Victoria Courts Confront Unprecedented Ransomware Assault on AV Technology Network

Xerox says subsidiary XBS U.S. breached after ransomware gang leaks data

Wi-Fi 7’s mission-critical role in enterprise, industrial networking

01/01/2024

6 ways to protect yourself from scams in 2024

8 Essential Steps to Recover a Hacked Website

A Cybersecurity Diagnosis of the Healthcare Industry

Akumin Corp. faces class action after data breach allegedly compromises health info

Australia’s Victoria State Court Recordings Database Hit by Cyber Attack

Blockchain and Cybersecurity: A Powerful Duo in the Digital Age

Cactus RANSOMWARE gang hit the Swedish retail and grocery provider Coop

Crypto phishing scams took almost $300M from 324K victims in 2023: Report

Cyber Attacks Hit the Assembly of the Republic of Albania and Telecom Company One Albania

Cyber attack on Victoria's court system may have exposed recordings of sensitive cases

Digital detox: make a change this New Year

Learnings from the Cyber Attack Statistics of 2023 can help improve cybersecurity strategies, according to SecureClaw

Malware exploits undocumented Google OAuth endpoint to regenerate Google cookies

Microsoft Disabled App Installer Following Malware Abuse

MS Excel Vulnerability Exploited To Distribute Agent Tesla

New JinxLoader Targeting Users with Formbook and XLoader Malware

New Terrapin Flaw Could Let Attackers Downgrade SSH Protocol Security

New Variant of DLL Search Order Hijacking Bypasses Windows 10 and 11 Protections

Phishing scams: 7 safety tips from a cybersecurity expert

ProSmile Holdings Notifies Patients About July 2022 Data Breach

Ransomware Attacks: An Escalating Threat to National Security

Researchers Crack Tesla Autopilot with ‘Elon Mode,’ Access Critical Data

Scammers drained nearly $300m in 2023, data shows

The biggest cybersecurity and cyberattack stories of 2023

The law enforcement operations targeting cybercrime in 2023

Top 2023 Security Affairs cybersecurity stories

Welltok announces data breach that may affect CHI Memorial patients

31/12/2023

5 common hacking tactics to watch out for in 2024

Android game dev’s Google Drive misconfig highlights cloud security risks

Attention Xfinity Users! Michigan Hit with a Massive Data Breach

ChatGPT-aided ransomware in China results in four arrests as AI raises cybersecurity concerns

CHI Memorial alerts patients of possible data breach

Giant Iranian online food ordering platform hacked

Google agreed to settle a $5 billion privacy lawsuit

How to protect your Android from a banking threat that bypasses fingerprint unlock and steals your PIN

Identity theft: Seven tips to defeat online fraudsters

Microsoft disables 'App Installer' used by hackers to spread malware

Rising threats: Cybercriminals unleash 411,000 malicious files daily in 2023

Security Researchers Develop Decryptor for Black Basta Ransomware

St Vincent’s cyberattack work of sophisticated criminals, say investigators

US Government issues ‘New Year’ scam warning to avoid your bank being emptied by crooks

DAILY NEWS: Dezembro (24/12 - 30/12) - 52 Semana de 2023