Daily News - Novembro (10/11 - 16/11) - 46 Semana de 2024

Cyber Security, Hacking, Privacy and Information Security News --- Daily Updates !! Weekly Resume...

16/11

Chinese Hacker Group Salt Typhoon Targets US Telecoms

Equinox discloses data breach involving health info of clients, staff

German stats body says suffered possible data breach

GitHub projects targeted with malicious commits to frame researcher

Glove Stealer bypasses Chrome’s App-Bound Encryption to steal cookies

Google thinks these are the biggest security threats facing businesses in 2025

Here's What a Hacker Could Really Do With Access to Your Wi-Fi Router

NSO Group used WhatsApp exploits even after Meta-owned company sued it

PAN-OS Firewall Vulnerability Under Active Exploitation – IoCs Released

Snowflake Hackers Charged With Massive 50B Data Breach Of AT&T

T-Mobile Hacked – China Launched Massive Cyber Attack on U.S. Telecom Networks

T-Mobile hacked in massive Chinese breach of telecom networks: report

Turkey fines Amazon's Twitch 2 million lira for data breach

Warning: DEEPDATA Malware Exploiting Unpatched Fortinet Flaw to Steal VPN Credentials

What a second Trump term means for the future of ransomware

15/11

8.8 Rated PostgreSQL Vulnerability Puts Databases at Risk

60 Hours of Cyber Defense: Hong Kong’s Innovative Cybersecurity Drill Begins

183 million business contacts stolen from DemandScience listed for sale by hacker

2016 Bitfinex Hack Case Closed: Ilya Lichtenstein Sentenced for Laundering Billions in Stolen Bitcoin

888 Has Allegedly Leaked the Data of Absolute Dogs

A clever new infostealer malware is able to easily bypass Google Chrome cookie encryption

A Threat Actor is Allegedly Selling Access to an Unidentified Energy Company in South America

AI, hybrid identity, and cybersecurity’s next frontier: Key takeaways from Semperis CEO at HIP conference

AI’s impact on the future of web application security

American Associated Pharmacies allegedly breached by Embargo ransomware

ANZ warns Aussie shoppers to beware of scams during Black Friday and Cyber Monday sales

Bitfinex hacker gets 5 years in prison for 120,000 bitcoin heist

Bitfinex hacker Ilya Lichtenstein was sentenced to 5 years in prison

Bitfinex Hacker Sentenced to 5 Years, Guilty of Laundering $10.5 Billion in Bitcoin

Black Lotus, Emotet, Beep, and Dark Pink, still the top malware threats of 2024

BSI’s 2024 Cybersecurity Report: How Germany Is Battling Ransomware, APTs, and Election Security Challenges

Children's shoemaker Start-Rite confirms major security incident, full customer details leaked

China-linked hackers stole surveillance data from telecom companies, US says

Chinese hackers are using this open-source VPN to mask spying activities

Chinese malware attack hits Tibetan websites

Chris Inglis: Why cybersecurity success hinges on strategic choices, not just tech

Critical vulnerabilities persist in high-risk sectors

CISA, FBI say US government officials’ call data exfiltrated by Chinese hackers

CISA Flags Two Actively Exploited Palo Alto Flaws; New RCE Attack Confirmed

CISA flags two more major Palo Alto security issues, so patch now

CISA no more? Rand Paul has a plan, and it’s not good for US cyber defenders

CISA Warns of Hackers Actively Exploiting Multiple Palo Alto Networks Vulnerabilities

Congress questions Amazon over ‘dangerous and unwise’ TikTok partnership

Critical Laravel Vulnerability Let Hackers Gain Unauthorized Access

CVE-2024-4577 RCE Exploit; PHP CGI Argument Injection

Cyber crooks push Android malware via letter

Cyberattack leads to bare shelves at Stop & Shop, Hannaford, Food Lion and more

Data aggregator breach exposes 122M individuals’ info

DHCP Vulnerability in TP-Link Lets Attackers Takeover Routers Remotely – PoC Released

DNS predators steal 70K websites with simple hack: researchers warned it was coming

Drinking water systems for 26M Americans face high cybersecurity risks

European Club and Media Giant Abandon X Amid Growing Hate Speech Concerns

FBI, CISA confirm China-linked cyber espionage targeting US telecoms, government

GitHub CLI RCE Vulnerability Let Attackers Execute Malicious Commands

Hackers charged in AT&T data breach that exposed 50 billion customer records

Hackers now sending physical malicious letters, Swiss authorities warn

Herron Todd White says new ransomware claim is the same dataset

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

High-Severity Vulnerability in Cisco ECE Could Lead to Denial of Service, CERT-In Issues Alert

How AI Is Transforming IAM and Identity Security

Is the private cloud the answer to data sovereignty and AI concerns?

JPCert Details on Event Tracing Over EventLog for Windows Forensics

Law firm Thompson Coburn says data breach impacted over 300,000 Presbyterian Healthcare patients

LodaRAT Malware Attacking Windows Users To Steal Login Details

Master Certificate Management: Join This Webinar on Crypto Agility and Best Practices

Microsoft Power Pages Misconfigurations Expose Millions of Records Globally

Microsoft pulls Exchange security updates over mail delivery issues

Millions of sensitive data records exposed online due to settings fault with this top Microsoft tool

Multinational retailer Ahold Delhaize says cyber attack impacted its U.S. operations

NIST report on hardware security risks reveals 98 failure scenarios

North Korean hackers target macOS with trojanized apps to test security vulnerabilities

Novel ShrinkLocker ransomware decryptor unveiled

NSO Group entirely responsible for operating Pegasus spyware, not clients

O2’s AI Granny Outsmarts Scam Callers with Knitting Tales

Palo Alto Networks firewalls, Expedition under attack (CVE-2024-9463, CVE-2024-9465)

Palo Alto Networks warns of critical RCE zero-day exploited in attacks

Palo Alto Warns of Hackers Exploiting RCE Flaw in Firewall Management Interfaces

Ransomware attack forces Wisconsin's City of Sheboygan to take its network offline

Ransomware Groups Use Cloud Services For Data Exfiltration

Researchers Detailed WezRat, Know for Executing Attackers Commands

Researchers Warn of Privilege Escalation Risks in Google's Vertex AI ML Platform

Second threat actor claims Cisco data breach

Security awareness training: Topics, best practices, costs, free options

Shoemaker Start-Rite says hackers accessed customers' personal and payment information

Ten billion dollar crypto theft lands hacker five years sentence

Thousands of web domains hijacked in "sitting ducks" attack

U.S. CISA adds Palo Alto Networks Expedition bugs to its Known Exploited Vulnerabilities catalog

Using AI to drive cybersecurity risk scoring systems

Vietnam Strengthens Cybersecurity by Partnering with CISA to Secure Critical Infrastructure

Vietnamese Hacker Group Deploys New PXA Stealer Targeting Europe and Asia

WatchTowr Finds New Zero-Day Vulnerability in Fortinet Products

Wollongong-based Micon Office National confirms ransomware attack

WordPress Plugin Vulnerability Exposes 4M+ Websites To Hackers

14/11

1.1 Million UK NHS Employee Records Exposed From Microsoft Power Pages Misconfiguration

39% of firms have shown ransomware readiness

60% increase in scam domain registrations targeting holiday shoppers

200,000+ customers’ data compromised at retailer

ACao.org Data Breach Exposes Sensitive User Information

American Associated Pharmacies allegedly breached by Embargo ransomware

API Security in Peril as 83% of Firms Suffer Incidents

Bank of England U-turns on Vulnerability Disclosure Rules

Bitdefender released a decryptor for the ShrinkLocker ransomware

Bitdefender Releases ShrinkLocker Ransomware Decryptor That Recovers BitLocker Files

Cargill employee’s ransomware attack and discrimination claims dismissed

China-linked threat actors compromised multiple telecos and spied on a limited number of U.S. government officials

Chinese malware attack hits Tibetan websites

CISA and FBI: Chinese Hackers Compromised US Telecom Networks

Container port CEO highlights “painful” cyber attack as call for stronger cybersecurity culture

Cybercriminals target victims in Spain, Germany, Ukraine with Strela Stealer malware

Data breach at Alltech Consulting exposes over 216,000 job seekers' personal information

Data Breach Exposes 87K User Records from American Companies and Infragard.org

Data Breach Exposes Personal Information of 57 Million Retail Customers

DeFi Capital Data Breach Exposes Sensitive Investment Fund Data

Delhi Police Crack Down on WazirX Crypto Heist, Arrest Bengal Man for ₹2,000 Crore Theft

DOC Data Breach Exposes 6K User Records

Dominican Republic Data Breach Exposes Vaccination Information

Embargo Ransomware Group Claims Attack on American Associated Pharmacies

Experts Uncover 70,000 Hijacked Domains in Widespread 'Sitting Ducks' Attack Scheme

FBI confirms China-backed hackers breached US telecom giants to steal wiretap data

FBI confirms China-linked cyber espionage involving breached telecom providers

Fortifying data security with advanced technology

France's Thales sees revenue and profit growth after cyber expansion

German Federation Statistical Database Breach Exposes 3.8GB of Sensitive Data

German interior minister warns of cyber threat ahead of elections

GigaChad Investor Loses $6 Million in Phishing Attack Involving Fake Zoom Link

GoCloud Router Zero-Day Vulnerability for Sale

Google Cloud Cybersecurity Forecast 2025: AI, geopolitics, and cybercrime take centre stage

Google launches on-device AI to alert Android users of scam calls in real-time

Google starts rolling out scam and malware detection tools for Pixel smartphones

Google Warns of Rising Cloaking Scams, AI-Driven Fraud, and Crypto Schemes

Guarding against ransomware in the midgame

Hacker gets 10 years in prison for extorting US healthcare provider

Hamas Hackers Spy on Mideast Gov'ts, Disrupt Israel

How a Windows zero-day was exploited in the wild for months (CVE-2024-43451)

How cybersecurity failures are draining business budgets

How Intel is making open source accessible to all developers

How to make any password manager your autofill service on Android

Hungary confirms hack of defense procurement agency

Idaho Hacker Sentenced to 10 Years for Extortion and Data Breach Affecting 132,000, Including Georgia Residents

Indian Police Arrest Key Suspect in $234 Million WazirX Cyber Attack

Iran-linked group aims malware at aerospace industry through fake job recruiters

Iran Paper Information Center Data Breach Exposes Sensitive Data

Key ICS Vulnerabilities Identified in Latest CISA Advisories

Lazarus Group Targets macOS with RustyAttr Trojan in Fake Job PDFs

Law enforcement keeps raiding the homes of high-profile crypto players

Lebak Regency Data Breach Exposes Full Citizen Data

LinkedIn Data Breach Exposes Personal and Professional Data of 50K Users

Major Data Breach Exposes Personal Information of 1.5 Million Americans

Massive Data Breach Exposes 122 Million Business Contacts from DemandScience

Massive Telecom Hack Exposes US Officials to Chinese Espionage

Microsoft just killed the Windows 10 Beta Channel again

Microsoft Power Pages Misconfiguration Leads to Data Exposure

Millions Still Use Basic Passwords Despite Rising Data Breach Risks

New RustyAttr Malware Targets macOS Through Extended Attribute Abuse

NIS2 Directive: Everything EU Member States and Organizations Need to Know to Prepare and Comply

NIST Clears Backlog of Known Security Flaws but Not All Vulnerabilities

NIST is chipping away at NVD backlog

Novel ShrinkLocker ransomware decryptor unveiled

Oak Valley Hospital Reaches Settlement in Class Action over Data Breach

Organizations face mounting pressure to accelerate AI plans, despite lack of ROI

Russian Hackers Exploit New NTLM Flaw to Deploy RAT Malware via Phishing Emails

Ruthless sextortion scammers now threatening to show up at your house

Set Forth data breach exposes sensitive information of 1.5 million customers

ShrinkLocker Ransomware: What You Need To Know

Singapore targets ransomware with tougher policies, avoids payouts

Six steps companies should take after a data breach

Study: Major Companies Lag in Reporting Phishing Scams Using Their Brand Names

The data breach on Hot Topic retail firm impacts millions of clients

The Expert View: GenAI Security - How to Deploy the Power of Generative AI Safely and Securely

The Real Price of a Data Breach in Retail

The State of Cloud Ransomware in 2024

TIAA data breach exposes 2.4 million Social Security numbers

URL-Log-Pass Data Breach Exposes 147K User Login Credentials

US agencies confirm Beijing-linked telecom breach involving call records of politicians, wiretaps

US says China conducted massive espionage through breached telcos

US says China-linked hackers behind ‘significant’ cyberespionage campaign

Xobin leak: screening job applicants with AI, but storing personal data in an open bucket

Zero-days dominate top frequently exploited vulnerabilities

WazirX hack: West Bengal man arrested over $235 million cyber attack

What 2025 holds for user identity protection

Why that Google Meet error might be a sneaky hacker trick

Yorozu Corporation Faces Cyberattack, Delays Financial Report Submission Amid Data Breaches

You Can Lock Your Social Security Number After a Data Breach. Here's How

13/11

300,000 Patients Impacted By Law Firm Data Breach

Aerospace employees targeted with malicious “dream job” offers

AI Threat to Escalate in 2025, Google Cloud Warns

Amazon Confirms Data Breach Exposing Employee Phone Numbers and Sensitive Information

Amazon MOVEit Leaker Claims to Be Ethical Hacker

Amazon says hackers stole employee data from vendor’s servers

ASM Global Notifies Affected Individuals of Recent Data Breach

AT&T, Ticketmaster data breach hackers charged with stealing 50 billion records

Atlanta law firm says hackers stole the data of about 140,000 clients

Australian Critical Infrastructure Faced Heightened Cyberthreats in 2024: Report

Bitdefender Finds New ShrinkLocker Ransomware, Releases Its Decryptor Tool

CarSwitch.com Data Breach Exposes Personal Information of 220K Users

China-linked group hacked Tibetan media and university sites to distribute Cobalt Strike payload

CISA Alerts: Five Newly Exploited Vulnerabilities Added to Critical Watchlist

CISA reveals hackers’ favorite targets: critical flaws affect major tech giants

CISOs in 2025: Balancing security, compliance, and accountability

Comprehensive Guide to Building a Strong Browser Security Program

Critical bug in EoL D-Link NAS devices now exploited in attacks

Cyber attack caused major outage at Washington state's district and municipal courts

Cyber attack on debt relief company Set Forth impacted about 1.5 million individuals

Cyber attack on tech vendor disrupted Serco's prisoner transport service

Cyber professionals face an IP loss reckoning in 2025

Delta Air Lines joins Amazon in confirming third-party data leak

DNA-testing firm vanishes with highly sensitive customer genetic data

Drilling equipment provider Newpark Resources hit by a ransomware attack

Eagle Bank notifies customers of potential data breach compromising Mastercard accounts

Emmenhtal Loader Uses Scripts to Deliver Lumma and Other Malware

Ex-Air Guardsman Sentenced to 15 Years for Leaking Top-Secret U.S. Military Intel on Social Media

Florida law firm Gunster settles 2022 data breach case for $8.5 million

Free Decryptor Released for BitLocker-Based ShrinkLocker Ransomware Victims

GitHub users targeted by dangerous new phishing threat

GoIssue phishing tool targets GitHub developer credentials

Government Accountability Office (GAO) Finds Persistent Gaps in HHS Cybersecurity Efforts in U.S. Healthcare

Hamas-Affiliated WIRTE Employs SameCoin Wiper in Disruptive Attacks Against Israel

Hive0145 Targets Europe with Advanced Strela Stealer Campaigns

How to add PGP support on Android for added security and privacy

Integrante de quadrilha de sequestros, ‘hacker’ é preso durante operação em AL e SP

Iranian Hackers Use "Dream Job" Lures to Deploy SnailResin Malware in Aerospace Attacks

It’s a Hard Time to Be a CISO. Transformational Leadership Is More Important Than Ever

Lazarus Group Uses Extended Attributes for Code Smuggling in macOS

Lawyer allegedly hacked with spyware names NSO founders in lawsuit

Leaked info of 122 million linked to B2B data aggregator breach

LePoint.fr Data Breach Exposes Thousands of User Records

Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler Bugs

Microsoft Fixes Four More Zero-Days in November Patch Tuesday

Microsoft Patch Tuesday security updates for November 2024 fix two actively exploited zero-days

Microsoft patches Windows zero-day exploited in attacks on Ukraine

Microsoft’s November 2024 Patch Tuesday Addresses 91 Vulnerabilities, Including Four Critical Zero-Days

New England Grocers Stop & Shop, Hannaford Coping With Cyber Attack

New ShrinkLocker ransomware decryptor recovers BitLocker password

NIST says exploited vulnerability backlog cleared but end-of-year goal for full list unlikely

Oilfield giant Halliburton took a $35 million hit from the August ransomware attack

OvrC Platform Vulnerabilities Expose IoT Devices to Remote Attacks and Code Execution

Patch Tuesday: Four Critical Vulnerabilities Paved Over

Pentagon leaker Jack Teixeira sentenced to 15 years in federal prison

Ransomware fiends boast they've stolen 1.4TB from US pharmacy network

Research uncovers the tool creating recent GitHub phishing attacks

Rhysida group claims major cyber attack on Fylde Coast Academy Trust

Roblox Data Breach Exposes Millions of User Accounts

Sango Family Dentistry notifies 27,000 patients of data breach, offers identity protection

Signal offers an encrypted alternative to Zoom - see how it works

Social engineering scams sweep through financial institutions

South West Family Medicine Associates notifies nearly 37,000 patients and employees of data breach

The CISO paradox: With great responsibility comes little or no power

The infamous Volt Typhoon hacker group is back

Thousands of Israeli gun owners allegedly exposed

Tips for a successful cybersecurity job interview

Top 15 Exploited Cyber Vulnerabilities Revealed: Five Eyes Alliance Urges Immediate Patching

UK and allies warn of cyber attack vulnerabilities

U.S. Department of Health and Human Services (HHS) Announces Additional Settlements Following Ransomware Attacks Including First Enforcement Under Risk Analysis Initiative

US government charges hackers behind massive AT&T breach

US indicts Snowflake hackers who extorted $2.5 million from 3 victims

Wisconsin city of Sheboygan says ransom demanded after cyberattack

Your Biggest Security Risk: The Insider Threat

12/11

5 Ways Behavioral Analytics is Revolutionizing Incident Response

13 essential enterprise security tools — and 10 nice-to-haves

4,800 phishing incidents monthly in India's banks

A cyberattack on payment systems blocked cards readers across stores and gas stations in Israel

Accused Ticketmaster hacker Connor Moucka facing extradition and decades in jail

Ahold Delhaize Confirms Cyber Breach – Food Lion, Stop & Shop, Hannaford Among Affected Brands

Ahold Delhaize experienced a cyber incident affecting several of its U.S. brands

AI-enhanced ransomware attacks in the UK necessitate ERP security

Alleged Data Leak of Equis Financial Exposes Detailed Client Information

Alleged Data Leak of Michelin-Starred Restaurant in Singapore Exposes Customer Information

Almost 500 million Instagram users had their data scraped, hackers claim

Amazon Confirms Employee Data Breach Via Third-party Vendor

Amazon confirms employee data compromised amid 2023 MOVEit breach claims – but the hacker behind the leak says a host of other big tech names are also implicated

Amazon Confirms MOVEit Data Breach Exposes Employee Data

Ambitious cybersecurity regulations leave companies in compliance chaos

Apple indeed added a feature called “inactivity reboot” in iOS 18.1 that reboots locked devices

Apple introduces new feature that helps in the hunt for lost luggage

BBS Financial Confirms Data Breach Following January 2024 Ransomware Attack

Brightline reaches $7 million settlement over 2023 data breach

Business Bank Accounts from Major Platforms Allegedly Listed for Sale, Raising Financial Security Concerns

CISA’s VDP is going gangbusters but could still be improved

CISOs Turn to Indemnity Insurance as Breach Pressure Mounts

Communication after a cyber-attack

Court filings reveal inner workings of alleged hackers accused of the ShinyHunters data breach

Critical Veeam CVE targeted by new ransomware variant

Cyber Attack on UK Train Station WiFi Sparks Safety Concerns

Cyble and Digit Solutions Join Forces to Tackle Cyber Threats Across Middle East and Africa

D-Link won’t fix critical bug in 60,000 exposed EoL modems

Dell Enterprise SONiC Vulnerabilities Let Attackers Compromise The System

Dell India Vendor Portal Allegedly Compromised, Exposing Sensitive User Data

Devastating email compromise scheme robs home buyers of life’s savings

Employee data from Canada Post, Amazon and more revealed in data breach

Energy Giant Halliburton Reveals $35m Ransomware Loss

Evaluating your organization’s application risk management journey

Ex-funcionário é autor de ataque hacker à Embaixada da Alemanha, conclui polícia

FBI, CISA, and NSA reveal most exploited vulnerabilities of 2023

From Amazon to McDonald’s: what do we know about the latest major data leak?

GIGA investor loses $6M to phishing scam via fake Zoom link

Google Chrome Users at Risk: CERT-In Advises Urgent Update to Fix Security Flaws

Hacker Leaks BBVA Bank Data, Including User Details

Hackers Leveraging Microsoft Visio Files & SharePoint For Two-Step Phishing Attack

Harnessing Chisel for Covert Operations: Unpacking a Multi-Stage PowerShell Campaign

Hot Topic breach: Has your credit card info been compromised?

Hot Topic Data Breach: A Massive Leak Exposes Millions of Customer Records

How cyber hacks might change under Trump's presidency

HPE Issues Urgent Patches for Critical Vulnerabilities in Aruba Networking Access Points

Important lessons to be learned from PSNI Data Breach

Insurance Firm Introduces Liability Coverage for CISOs

Major Hot Topic Data Breach Affects 57 Million Customers

Malicious Python Package Index steals Amazon Web Services credentials

Massive troves of Amazon, HSBC employee data leaked

Met. Department’s website being restored after cyber attack

Microsoft Exchange adds warning to emails abusing spoofing flaw

Microsoft fixes actively exploited zero-days (CVE-2024-43451, CVE-2024-49039)

Microsoft November 2024 Patch Tuesday fixes 4 zero-days, 91 flaws

Microsoft Visio files used to carry out dangerous phishing attacks

MOVEit Data Leak Exposes Employee Data of Amazon, HSBC & More – What You Need to Know

New Android Malware SpyAgent Taking Screenshots Of Users’ Devices

New Citrix Zero-Day Vulnerability Allows Remote Code Execution

New England Grocery Stores and Pharmacies Hit Hard by Devastating Cyber Attack

New Flaws in Citrix Virtual Apps Enable RCE Attacks via MSMQ Misconfiguration

New GitLoker-Linked GoIssue Tool Targets GitHub Users for Phishing

New iOS security feature may reboot your iPhone if it gets stolen

New MOVEit exploit hits Amazon, HP and McDonald’s

New Phishing Campaign Delivers Advanced Remcos RAT Variant

New Phishing Tool GoIssue Targets GitHub Developers in Bulk Email Campaigns

New Ymir Ransomware Exploits Memory for Stealthy Attacks; Targets Corporate Networks

North Korea Hackers Leverage Flutter to Deliver macOS Malware

North Korean hackers create Flutter apps to bypass macOS security

North Korean Hackers Target macOS Using Flutter-Embedded Malware

Only 39% of Indian companies have the ability to withstand a prolonged ransomware event: Sophos

Pakistan Telecommunication Authority (PTA) Report Reveals Surge in Cyber Attacks, APT Threats in Pakistan’s Digital Sector

PAN-OS Access Management RCE Vulnerability, 11k+ Interface IPs Exposed

Phemedrone Stealer V2.3.2 Malware Tool for Sale, Posing Major Security Threat

Phishing Emails Are On the Rise: Spot These Trends

Phishing Tool GoIssue Targets Developers on GitHub

Powerpipe: Open-source dashboards for DevOps

Reported Data Leak at Equis Financial Exposes Extensive Client Information

Reporting Into the Void: Research Suggests Companies Fall Short When It Comes to Addressing Phishing

Samsung update caused audio issues on some Galaxy devices

SAP Security Update: Patch For High Severity Vulnerabilities

SelectBlinds Data Breach, 200,000+ Customers Card Details Skimmed in Cyberattack

Signal introduces convenient "call links" for private group chats

Signal offers an encrypted alternative to Zoom - see how it works

Singapore wants police to stop stubborn victims from sending money to scammers

SlashNext warns of ‘GoIssue’ phishing tool targeting GitHub users

Surge in exploits of zero-day vulnerabilities is ‘new normal’ warns Five Eyes alliance

TA455’s Iranian Dream Job Campaign Targets Aerospace with Malware

The changing face of identity security

The future of cyber-security education

The rise of phishing-resistant MFA and what it means for a passwordless future

The Ultimate Guide to the CGRC

Two major hacking groups are teaming up for dangerous new ransomware attacks

Understanding the Cybercriminal Mindset: Protecting Your School’s Data

Verified Cryptocurrency Exchange Accounts Allegedly for Sale, Raising Security and Fraud Concerns

VMware Workstation & Fusion Now Free For All Users

Volt Typhoon rebuilds malware botnet following FBI disruption

Washington State Court systems face widespread outages following “unauthorized activity” on networks

Watch out, that Excel document could be infected with dangerous malware

Why SEBI’s New Guidelines Make Cyber Threat Intelligence Essential for Security Teams

Windows 10 KB5046613 update released with fixes for printer bugs

Ymir ransomware, a new stealthy ransomware grow in the wild

11/11

1.5 million Americans hit in massive debt relief service data breach — names, addresses, SSNs and more exposed

4 reasons why veterans thrive as cybersecurity professionals

91 Million Mobile and Phone Number Records Allegedly Leaked, Raising Privacy Concerns

2014-2021 Mazdas vulnerable: attackers can take over infotainment system using USB

A new fileless variant of Remcos RAT observed in the wild

A surge in Pro-Russia cyberattacks after decision to monitor North Korean Troops in Ukraine

Alleged Data Breach at Indian Ayurvedic Herbs Online Store Exposes Sensitive Customer Data

Alleged Data Breach at Mr. Winter Wheels Exposes Sensitive Customer Information

Alleged Leak of Updated GTA V Source Code Raises Security Concerns for Rockstar Games

Alleged Scraping of 489 Million Instagram User Records Raises Privacy Concerns

Amazon confirms employee data breach after vendor hack

Anti-Israel hacker claims hack on Ministry of National Security, posts settler IDs online

Are You Googling This? You Could Be Walking Into a Cyber Trap

Authorities arrest alleged Ticketmaster, AT&T hacker

Bitcoin Fog Operator Gets 12.5 Years for Longest-Running Bitcoin Laundering

Chinese threat actor exploits credentials from password spray attacks

CISA Urges Patching of Critical Palo Alto Networks’ Expedition Tool

CISA Warns of Critical Vulnerabilities in Industrial Control Systems Affecting Key Infrastructure Sectors

City of Sheboygan Hit by Cyberattack – Here’s the Latest on the Ransom Threat

Combating the Ransomware Menace: How to Safeguard and Respond Effectively

Crypto Community on Alert: Dormant Hacker Steals and Launders Millions!

'Cyber attack' council working to ease backlog

Cyberattack Cost Oil Giant Halliburton $35 Million

Cyberattack Disrupts Israel’s Gas Stations and Payment Systems—Here’s What We Know

Cybercriminals Use Excel Exploit to Spread Fileless Remcos RAT Malware

D-Link to Not Fix Critical Bug Found in End-of-Life NAS Devices

English Construction Company Targeted in Ransomware Attack, Leading to Data Breach Affecting Former Employees

EU Ramps Up Cyber Resilience with Major Crisis Simulation Exercise

For the first time, Telegram hands criminal user data to Dutch authorities

Gmail's worldwide warning 'over large-scale phishing campaign' - urges users to delete scam emails

Hackers Exploiting Veeam RCE Flaw to Deploy New Frag Ransomware

Hackers use Visio files to spread phishing links

Halliburton reports $35 million loss after ransomware attack

Health and Human Services (HHS) Inks $90K Settlement Linked to Ransomware Hack

Hot Topic’s Approximately 57 Million Breached Accounts Added to Have I Been Pwned (HIBP)

How Crypto Whales Become Phishing Targets

How Data Breach Laws Impact Loan Terms for Businesses: A Study from UWA

How human ingenuity continues to outpace automated security tools

HPE Issues Critical Security Patches for Aruba Access Point Vulnerabilities

Kaspersky identifies new stealthy ransomware

Layering Defences to Safeguard Sensitive Data Within AI Systems

Man gets 10 years for stealing $20M in nest eggs from 400 US home buyers

Man Gets 12.5 Years for Running Bitcoin Fog Crypto Mixer

Mass Telegram account hijacking via supply-chain phishing campaign

Massive data breach: American debt relief service exposes 1.5 million

Microsoft Bookings Flaw Enables Account Hijacking and Impersonation

Microsoft Visio Files Used in Sophisticated Phishing Attacks

MOVEit fallout: hackers leak employee data from Amazon, MetLife, HSBC, and other major companies

New GootLoader Campaign Targets Users Searching for Bengal Cat Laws in Australia

New Remcos RAT Variant Targets Windows Users Via Phishing

Newpark Resources discloses October ransomware attack

Nokia Security Breach Leaks Source Code, Login Credentials, Keys and More; Hacker Sells Data To Special Buyers

November 2024 Patch Tuesday forecast: New servers arrive early

OpenText reveals 2024 nastiest malware, LockBit leads list

Orthopedics Rhode Island Confirms September 2024 Data Breach Compromised Sensitive Patient Information

Pensioners Warned Over Winter Fuel Payment Scam Texts

Philippines GCash hit by major phishing attack

Phishing attack targets Massachusetts employee emails

Planned Parenthood of Montana Confirms August 2024 Data Breach Leaking Sensitive Patient Information

Radwan Cyber Pal Hacker Group Alleges Access to Sensitive Data of Israeli Soldiers and Settlers

Scattered Spider and BlackCat reemerge after takedown

Security Flaws in Popular ML Toolkits Enable Server Hijacks, Privilege Escalation

Set Forth, Inc. Sends Data Breach Letters to 1.5 Million Consumers

Setting a security standard: From vulnerability to exposure management

Standard Bank data breach: How to check if you’ve been impacted

Strategies for CISOs navigating hybrid and multi-cloud security

The Importance of Effective Incident Response

The ROI of Security Investments: How Cybersecurity Leaders Prove It

This Crafty Excel Phishing Campaign Is Spreading Dangerous Fileless Malware

This mysterious iPhone upgrade protects your data from thieves

UK pensioners targeted with fake Winter Fuel Payment scam

UK Urges International Collaboration to Battle Ransomware Surge

US oilfield service provider disrupted by ransomware attack

White House Slams Russia Over Ransomware's Healthcare Hits

World Economic Forum (WEF) Introduces Framework to Strengthen Anti-Cybercrime Partnerships

World Health Organization (WHO), 50 countries warn UN of rising ransomware attacks on hospitals

10/11

200,000 SelectBlinds Customers Exposed In Card-Skimming Data Breach

ACSC’s OT Cyber Security Principles: Call to action for critical infrastructure providers to boost cyber resilience

Alleged Data Breach at Justice.fr Exposes Sensitive Judicial Information

Call of Duty hacker claims exploit let them falsely ban thousands of Warzone & MW3 players

Cybercriminals impersonate OpenAI in large-scale phishing attack: Barracuda

Hackers now use ZIP file concatenation to evade detection

Halloween hacker caught by Kraken in an attempt to impersonate the customer

North Korean Hacker Group Uses macOS Malware to Steal Crypto

Phishing attacks surge in 2024 as cybercriminals adopt AI tools and multi-channel tactics

Quishing is the new QR code scam you need to watch out for – here's how to stay safe

Ransomware Epidemic: Healthcare Under Siege as Attacks Soar

Why Cyber Security is a Key Pillar of Business Resilience

Daily News - Novembro (03/11 - 09/11) - 45 Semana de 2024