DAILY NEWS: Março (03/03 - 09/03) - 10 Semana de 2024

Cyber Security, Privacy and Information Security News --- Daily Updates !! Week

09/03

Autonomous cyber security strategy

Hacker Claims Breaching US Federal Contractor Acuity, Selling ICE, USCIS Data

Magnet Goblin hackers use 1-day flaws to drop custom Linux malware

Microsoft Confirms Russian Hackers Stole Source Code, Some Customer Secrets

OTAN: Time to Adopt a Pre-emptive Approach to Cyber Security in New Age Security Architecture

Paysign investigating reports of consumer information data breach

Russian Spies Hacked Microsoft Email Systems & Stolen Source Codes

08/03

2023 FBI Internet Crime Report reported cybercrime losses reached $12.5 billion in 2023

Apple won‘t update third-party apps if users leave the EU

Are You Ready to Protect Your Company From Insider Threats? Probably Not

Belgium’s largest coffee roaster falls victim to cyber attack

Capita suffers a £106m loss to a ransomware attack, plans to cut costs across the board

Change Healthcare Gets Pharmacy Systems Up After Ransomware Attack

China biotech firms amass Americans' genetic data, lawmakers warn

Chinese Evasive Panda Targets Tibetans with Nightdoor Backdoor

CISA expresses concerns with VPNs, and security leaders respond

CISA Warns of Actively Exploited JetBrains TeamCity Vulnerability

Cisco Fixes High-Severity Code Execution and VPN Hijacking Flaws

Cisco Issues Patch for High-Severity VPN Hijacking Bug in Secure Client

Cisco patches Secure Client VPN flaw that could reveal authentication tokens (CVE-2024-20337)

Critical Fortinet flaw may impact 150,000 exposed devices

Data breaches caused by insiders can cost you over $15 million

Data breach hits Jersey financial regulator, exposing non-public information

Dozens of data brokers disclose selling reproductive healthcare info, precise geolocation and data belonging to minors

Dropbox Used to Steal Credentials and Bypass MFA in Novel Phishing Campaign

How new and old security threats keep persisting

Immediate AI risks and tomorrow’s dangers

JetBrains vulnerability actively exploited in the wild: CISA urging users to patch

Leveraging AI and automation for enhanced cloud communication security

Major online dictionary Glosbe exposes personal data of millions in server breach

March 2024 Patch Tuesday forecast: A popular framework updated

Meta Details WhatsApp and Messenger Interoperability to Comply with EU's DMA Regulations

Meta is building a giant AI model to power its video ecosystem

Microsoft email breach: Attackers accessed internal systems, source code

Microsoft: Russians are using stolen information to breach company’s systems

Microsoft says Russian hackers breached its systems, accessed source code

Microsoft sofre nova tentativa de ataque hacker: clientes correm risco?

OpenARIA: Open-source edition of the Aviation Risk Identification and Assessment (ARIA)

Overcoming the AI Privacy Predicament

Password pirates are after PetSmart accounts

Play ransomware attack on Xplain exposed 65,000 files containing data relevant to the Swiss Federal Administration

QEMU Emulator Exploited as Tunneling Tool to Breach Company Network

QNAP warns of critical auth bypass flaw in its NAS devices

Ransomware attack downs City of Hamilton's online payment systems and public computers

Russia claims of US cyber offense surface on X

Russian Hackers Access Source Code in Ongoing Attack on Microsoft

Secrets Sensei: Conquering Secrets Management Challenges

Securing the future: Addressing cybersecurity challenges in the education sector

Top cybersecurity M&A deals for 2024

UnitedHealth brings some Change Healthcare pharmacy services back online

UnitedHealth Sets Timeline to Restore Change Healthcare Systems After BlackCat Hit

Unsecured Video Doorbells Sold on Major Platforms: Millions at Risk of Hacking

07/03

78% of MSPs identify cybersecurity as prime IT challenge

30,000+ Individuals Impacted in Fidelity Investments Third-party Data Breach

A cybercriminal is sentenced, will it make a difference?

American Express announces data breach

AnyCubic fixes exploited 3D printer zero day flaw with new firmware

Anyone can work in cybersecurity, veteran says

ArubaOS Security Flaw Let Attackers Execute Remote Code

As Big Tech scrambles to meet EU rules, investigations seen as likely

Beware Of New Money Laundering Attack Targeting UPI Users

Beyond the table stakes: CISO Ian Schneller on cybersecurity’s evolving role

BofA clinches record number of patents with AI, information security in focus

Chinese State Hackers Target Tibetans with Supply Chain, Watering Hole Attacks

CISA adds Apple iOS and iPadOS memory corruption bugs to its Known Exploited Vulnerabilities Catalog

Cisco Duo for Windows Logon and RDP Let Attacker Bypass Authentication

Cisco Secure Client Flaw let Attackers Trigger CRLF Injection Attack

Copybara Uses On-Device Fraud to Steal Funds Directly from the Victim’s Device

Delhi police seek extension for Indian Parliament security breach investigation

Evasive Panda Targets Tibet With Trojanized Software

Ex-Google Engineer Arrested for Stealing AI Technology Secrets for China

Ex-Google engineer charged with theft of AI tech for Chinese firms

FBI: U.S. lost record $12.5 billion to online crime in 2023

FBI: US Ransomware Losses Surge 74% to $59.6 Million in 2023

Five Unintended Consequences of the New SEC Cybersecurity Disclosure Rule

Flipper Zero WiFi attack can unlock and steal Tesla cars

Former Google Engineer Charged With Stealing AI Secrets

Google engineer caught stealing AI tech secrets for Chinese firms

Google sets up first Asia-Pacific cybersecurity base in Tokyo, Nikkei reports

Governments Eye Disclosure Requirements for AI Development Labs

Hacked WordPress Sites Abusing Visitors' Browsers for Distributed Brute-Force Attacks

Hackers Hijacking Web Server To Deploy z0Miner Malware

How Public AI Can Strengthen Democracy

Human vs. Non-Human Identity in SaaS

Hundreds of Rogue Users Added to Unpatched TeamCity Servers

Illinois school employs ZeroEyes AI-based gun detection technology

LinkedIn back up following brief outage

Linux Malware targets misconfigured misconfigured Apache Hadoop, Confluence, Docker, and Redis servers

Major shifts in identity, ransomware, and critical infrastructure threat trends

Microsoft .NET Framework & Visual Studio Flaw Let Attackers Write or Delete Files

National intelligence agency of Moldova warns of Russia attacks ahead of the presidential election

New Python-Based Snake Info Stealer Spreading Through Facebook Messages

New research uncovers an emerging malware campaign

New SSH-Snake Worm-Like Tool Threatens Network Security

Ransomware Attackers Leak Sensitive Swiss Government Documents, Login Credentials

RATs Spread Via Fake Skype, Zoom, Google Meet Sites

Researcher found millions 2FA codes spilling online for tech giants

Rhysida ransom gang sells child patient data

Snake, a new Info Stealer spreads through Facebook messages

Stark French regulator warning may spell trouble to 23andMe

Stormous claims cyberattack on Belgian brewer

Tazama: Open-source real-time fraud management

TeamCity supply chain bugs receive massive exploitation

Today’s biggest AI security challenges

Top US university data for sale on dark web

VMware patches critical flaws in ESXi, Workstation, Fusion and Cloud Foundation

Watch Out for Spoofed Zoom, Skype, Google Meet Sites Delivering Malware

Web-based PLC malware: A new potential threat to critical infrastructure

What Is A Cyber Incident Response Policy?

Windows 10 KB5001716 update fails with 0x80070643 errors, how to fix

06/03

4 tabletop exercises every security team should run

5 ways to keep API integrations secure

6 Ways to Simplify SaaS Identity Governance

69% of financial services consumers prioritize fraud protection

A New Way To Manage Your Web Exposure: The Reflectiz Product Explained

AI tools put companies at risk of data exfiltration

Alert: GhostSec and Stormous Launch Joint Ransomware Attacks in Over 15 Countries

ALPHV/BlackCat ransom gang fakes own takedown, fact or fiction?

Apple fixes two actively exploited iOS zero-days (CVE-2024-23225, CVE-2024-23296)

Apple warns users against critical memory-corrupting attacks

Boston Red Sox partner with Centripetal for cyber network security

Canada's anti-money laundering agency offline after cyberattack

CISA Adds Android Pixel And Sunhillo Sureline Bugs To Its Known Exploited Vulnerabilities Catalog

Critical vulnerability in TeamCity servers exposes to administrative takeover

Cyber Pros Turn to Cybercrime as Salaries Stagnate

Cyber workers turning to crime, warns study

Duvel says it has "more than enough" beer after ransomware attack

EU Agrees 'Cyber Solidarity Act' to Bolster Incident Response and Recovery

Exit Scam: BlackCat Ransomware Group Vanishes After $22 Million Payout

Georgia's Fulton County restores affected services following a LockBit ransomware attack

Hackers Exploit Misconfigured YARN, Docker, Confluence, Redis Servers for Crypto Mining

Hackers target Docker, Hadoop, Redis, Confluence with new Golang malware

How Security Leaders Can Break Down Barriers to Enable Digital Trust: Part 2

How to create an efficient governance control program

How to Find and Fix Risky Sharing in Google Drive

Insider-driven data loss incidents cost an average of $15 million

Linux Malware Targets Docker, Apache Hadoop, Redis and Confluence

LockBit 3.0’s Bungled Comeback Highlights the Undying Risk of Torrent-Based (P2P) Data Leakage

Meta hints security breach behind recent outage

Meta's Facebook, Instagram back up after global outage

Navigating regulation challenges for protecting sensitive healthcare data

New APT Group 'Lotus Bane' Behind Recent Attacks on Vietnam's Financial Entities

Northeast Orthopedics suffers data breach

NSA shares zero-trust guidance to limit adversaries on the network

PetSmart warns of credential stuffing attacks trying to hack accounts

Prompt engineer highest-paying AI job

RiskInDroid: Open-source risk analysis of Android apps

Skype, Google Meet, and Zoom Used in New Trojan Scam Campaign

TA4903 Phishing Campaigns Evolve, Targets US Government

TalentLaunch says 2023 data breach affected close to 120,000 individuals

Urgent: Apple Issues Critical Updates for Actively Exploited Zero-Day Flaws

U.S. Cracks Down on Predatory Spyware Firm for Targeting Officials and Journalists

US Sanctions Predator Spyware Maker Intellexa

US sanctions spyware company Intellexa for targeting American journalists and officials

US sanctions spyware vendor for targeting officials, journalists, dissidents

VMware fixes critical sandbox escape flaws in ESXi, Workstation, and Fusion

VMware Issues Security Patches for ESXi, Workstation, and Fusion Flaws

Watch out, GhostSec and Stourmous groups jointly conducting ransomware attacks

05/03

3 free data protection regulation courses you can take right now

A verdade por trás do suposto ataque hacker à Epic Games: Tudo não passou de uma grande farsa e os próprios hackers já confirmaram a história

ALPHV/BlackCat Ransomware Servers Go Down

American Express says customer data exposed in third-party breach

American Express Warns Credit Card Data Exposed in Third-Party Breach

American Express warns customers of credit card data breach via third-party processor

BlackCat ransomware shuts down in exit scam, blames the "feds"

California's City of Oakley declares an emergency following a ransomware attack

Carmakers must bring back physical controls to get a 5-star safety rating in Europe

Cogdell Memorial Hospital says hackers accessed the data of close to 90,000 patients

Critical JetBrains TeamCity On-Premises Flaws Could Lead to Server Takeovers

Cyberattack forces Canada’s financial intelligence agency to take systems offline

Cybercriminals Using Novel DNS Hijacking Technique for Investment Scams

DDoS attacks against customers in the Americas increases by 196%

Emerging Threats: Preparing for the Cybersecurity Challenges of 2024

Experts disclosed two severe flaws in JetBrains TeamCity On-Premises software

Following Taurus leak, Bundeswehr issues a statement using 1234 as password

GhostSec Evolves With Website Compromise Tools

Global Data Breaches and Cyber Attacks in February 2024 – 719,366,482 Records Breached

Hacker faz DOOM rodar em uma escova de dentes

Hackers abuse QEMU to covertly tunnel network traffic in cyberattacks

Hackers Exploit ConnectWise ScreenConnect Flaws to Deploy TODDLERSHARK Malware

How GenAI helps entry-level SOC analysts improve their skills

How to install and configure fail2ban for even more SSH security

Hundreds of orgs targeted with emails aimed at stealing NTLM authentication hashes

La Bonne Alternance Hit by Alleged Data Breach, Candidate Data Reportedly Exposed

Major data breach at Hathway Cable & Datacom Limited – Critical user data leaked on Dark Web!

Microsoft diz que hackers usam ChatGPT para melhorar ciberataques; entenda

Microsoft is killing off the Android apps in Windows 11 feature

Mr. Green Gaming Suffers Data Breach, Exposing Personal Information of 27,000 Users

New CHAVECLOAK Banking Trojan Targets Brazilians via Malicious PDFs

Organizations are knowingly releasing vulnerable applications

Over 225,000 Compromised ChatGPT Credentials Up for Sale on Dark Web Markets

Passwords are Costing Your Organization Money - How to Minimize Those Costs

Publishers seeking to paralyze pirate library LibGen

Researchers Test Zero-click Worms that Exploit Generative AI Apps

Secure your hybrid workforce: The advantages of encrypted storage

Security leaders weigh in on the recent UnitedHealth cyberattack

South Korean Police Develops Deepfake Detection Tool Ahead of April Elections

Suspected Chinese hackers breach Taiwan's largest Telco, selling stolen government data

TeamCity hit by critical software supply chain bugs

TeamCity Users Urged to Patch Critical Vulnerabilities

Ukraine Claims it Hacked Russian MoD

Ukraine’s GUR hacked the Russian Ministry of Defense

UnitedHealth rumored to have paid $22M to ALPHV/BlackCat hackers

U.S. sanctions Predator spyware operators for spying on Americans

Warning: Thread Hijacking Attack Targets IT Networks, Stealing NTLM Hashes

What is Exposure Management and How Does it Differ from ASM?

What organizations need to know about the Digital Operational Resilience Act (DORA)

Why cyber maturity assessment should become standard practice

04/03

1 in 10 Business Leaders Don’t Even Know They’ve Been Hacked

30 years of the CISO role – how things have changed since Steve Katz

86% of CIOS have implemented formal AI policies

95% believe LLMs making phishing detection more challenging

A Fake Ransomware Gang Claims It Extorted $85K, Calls Themselves Criminal Geniuses

Aetna Life Insurance Files Notice of Data Breach Impacting Tens of Thousands of Customers

ALPHV/BlackCat loses website after Change Healthcare breach

American Express Cardholders Impacted by Third-Party Vendor Data Breach

American Express credit cards exposed in third-party data breach

American restaurant chain Golden Corral says 2023 breach impacted 183k employees

American Vision Partners says data breach compromised the data of over 2.3m eye patients

Apple blames Spotify for $1.95 billion fine over "abusive" App store rules

Apple explains how it will comply with EU laws and how bad they are

Apple hit with over 1.8 billion euro EU antitrust fine in Spotify case

As AI-Powered Phishing Gains Steam, Organizations Use Password Managers to Combat Threats

Ataque hacker à Epic Games era falso, admitem autores

BlackCat ransomware turns off servers amid claim they stole $22 million ransom

Brazilian crypto influencer gets over $211,000 drained by airdrop-related phishing scam

Chinese Hacker Group Targets Taiwan with Geopolitical Malware Emails: Cybersecurity Report Unveils

CHIPS Act threatens Taiwan’s security and hurts the US, researchers warn

CISA Warns Phobos Ransomware Groups Attacking Critical Infrastructure

City dad moves for urgent action versus cyber attacks

Cloudflare adds new WAF features to prevent hackers from exploiting LLMs

Critical vulnerabilities in TeamCity JetBrains fixed, release of technical details imminent, patch quickly! (CVE-2024-27198, CVE-2024-27199)

Cyber attack: Hackers steal confidential client information from auto software company Auxo, demand ransom

Cybersecurity M&A Roundup: SentinelOne Completes PingSafe Acquisition

Drugs and Cybercrime Market Busted By German Cops

Enhancing security through proactive patch management

Epic Games Ransomware Attack Was Just a ‘Scam Operation’

Evolving cloud threats were observed in the last half of 2023

FCC and crypto firms are being hit in advanced phishing attacks using fake Okta logins

Former National Cyber Security Centre (NCSC) chief calls for ransomware payments ban, but cyber security experts aren't keen

From 500 to 5000 Employees - Securing 3rd Party App-Usage in Mid-Market Companies

Georgia’s Largest County Is Still Struggling With January’s Cyber Attack; New Threats Launched From the LockBit Gang

GitHub push protection now on by default for public repositories

Greek EU Deputy Probed Over Voter Data Breach Claims

Hacker roda GTA: Vice City em roteador com apoio de uma eGPU

Hackers target Coinbase, Binance staff with phishing clones of Gmail, iCloud

Hacktivist Collective NoName057 Strikes European Targets

How Cybercriminals are Exploiting India's UPI for Money Laundering Operations

Huge Surge in Ransomware-as-a-Service Attacks targeting Middle East & Africa

Integrating software supply chain security in DevSecOps CI/CD pipelines

Largest illegal German-speaking platform taken down

Latest Phishing Tactics Show Attackers Keep ‘Pushing The Envelope:’ Inky CEO

LockBit Hits Again: Renowned Fashion Brand Jovani Targeted in Ransomware Attack

LockBit Ransomware Group Expands Reach, Targets 8 New Victims

MEDUSA Ransomware Claims Cyberattack on Stoney Creek Furniture

META hit with privacy complaints by EU consumer groups

Mobile-Driven Phishing Spoofs Federal Communications Commission (FCC), Cryptocurrency Giants

Mr Green Gaming Community faces data breach: 27,000 members' details compromised

Multistage RA World Ransomware Uses Anti-AV Tactics, Exploits GPO

Nepali Hacker Tops Hall of Fame by Exposing Facebook’s Zero-Click Flaw

New compensation trends in the cybersecurity sector

New GTPDOOR backdoor is designed to target telecom carrier networks

New SSO-Based Phishing Attack Trick Users into Sharing Login Credentials

NoName Ransomware Claims Cyberattack on Denmark’s Key Websites

North Korea accused of hacking into chip makers

North Korea hacks two South Korean chip firms to steal engineering data

Ongoing Phobos ransomware threat prompts federal warning

Over 100 Malicious AI/ML Models Found on Hugging Face Platform

Phishers target FCC, crypto holders via fake Okta SSO pages

Phobos Ransomware Aggressively Targeting U.S. Critical Infrastructure

Predator Spyware Targeted Mobile Phones in New Countries

PyRIT: Open-source framework to find risks in generative AI systems

Ransomware attack behind over week-long City of Hamilton service disruption

Ransomware Readiness: Steps to Boost Resilience for Your Business

Ransomware report reveals Caricom-wide attacks

Report provides key insights into the energy and utilities sector

Russian Operatives Expose German Military Webex Conversations

Russian spies record secret German military talks by simply joining Webex call

Scottish Ambulance Service investigates data leak: First responders' details compromised

Securing Perimeter Products Must Be a Priority, Says NCSC

Securing software repositories leads to better OSS security

Self-Propagating Worm Created to Target Generative AI Systems

Singapore reviews ways to boost digital infrastructures after big outage

Some American Express customers’ data exposed in a third-party data breach

TA577 Exploits NTLM Authentication Vulnerability

TalentLaunch Subsidiary, Alliance Solutions Group, Notifies 119,261 of Recent Data Breach

Threat actors hacked Taiwan-based Chunghwa Telecom

Ukraine claims it hacked Russian Ministry of Defense servers

US to probe if Chinese cars pose national data security risks

Virgin Hotels breach exposes thousands

WayForward Hit by Data Breach: Unreleased Game Prototypes Leaked Online

WellNow Urgent Care Files Notice of Data Breach Following 2023 Ransomware Attack

Western National Notifies Consumers of June 2023 Data Breach

Yakima Valley Radiology Notifies 235,249 of Recent Data Breach Affecting

03/03

AI evaluates Tinder profile pictures to rate the hottest

BlackCat Ransomware Hit Healthcare Giant Optum, Stolen 6TB Sensitive Data

Coinsquare Data Breach Exposes User Info, Prompting Security Enhancements

‘Cyber-physical attacks’ fueled by AI are a growing threat, experts say

Cyber Threats in Middle East and Africa Escalate in Sophistication and Scale

EA Sports Investigates FIFA 22 Ultimate Team Account Thefts Linked to Phishing and Human Error

Eken camera doorbells allow ill-intentioned individuals to spy on you

Epic games ‘hacker” Mogilevich admits it was a scam operation

Generative AI's Dark Side: MIT's Madnick Warns of Cyber-Physical Attacks Escalating to Explosions

Georgia’s Largest County Is Still Repairing Damage From January Cyberattack

Hamilton pauses spring registration for recreation programs on day 7 of cyberattack

Hamilton public health pausing vaccine-related school suspensions due to cyber attack

Human Error is Biggest Cybersecurity Threat, CTOs Say

Kaspersky reveals 30% rise in ransomware attacks

Main computer viruses and their differences: spyware, trojan, ransomware, malware and more

More residents affected by Stratford Council data breach

New Zealand Nurses Fear Backlash After Vaccinator Data Leak Amid Pandemic Response Critique

Scottish Ambulance Service apologise after staff data leak

Stealthy GTPDOOR Linux malware targets mobile operator networks

TV Justiça sofre ataque hacker com mensagem misteriosa

U.S. Judge ordered NSO Group to hand over the Pegasus spyware code to WhatsApp

DAILY NEWS: Fevereiro (25/02 - 02/03) - 09 Semana de 2024