NEWS: Dezembro (19/12 - 25/12) - 51 Semana de 2021
Cyber Security and Information Security News - Daily Updates !!
25/12
AvosLocker Ransomware Uses AnyDesk in Safe Mode to Launch - The Headlines of Today
Cert-In discovered a new Ransomware virus disseminated via e-mail - The Digital Hacker
Deep Web vs Dark Web: Understanding the Differences - The Teal Mango
French IT Services Firm Hit by Ransomware Attack - Gov Info Security
Online Threat! Hackers are sending more and more SMS - Spark Chronicles
There's no such thing as sensitive data - Data Center Dynamics
24/12
Albania: Worries grow over personal data breach, as second leaked document distributed - Tirana Times
Albania's Prime Minister Issues Data Leak Apology - InfoSecurity Magazine
Android banking trojan spreads via fake Google Play Store page - Bleeping Computer
Blackmagic fixes critical DaVinci Resolve code execution flaws - Bleeping Computer
Cybersecurity Considerations When Powering Retail IT Systems - Retail Touch Points
Five Eyes intelligence agencies warns millions at risk as hackers exploit mutating Log4Shell bug - 7News
Global IT services provider Inetum hit by ransomware attack - Bleeping Computer
Hellmann Warns Customers They Could Face Malicious Communications Following Attack - InfoSecurity Magazine
How AI-powered fraud and aggressive ransomware could dominate 2022 - Information Age
New BLISTER Malware Using Code Signing Certificates to Evade Detection - The Hacker News
New Ransomware Variants Flourish Amid Law Enforcement Actions - The Hacker News
NVIDIA apps affected by Log4j vulnerability - Bryt Fm online
Rook ransomware is yet another spawn of the leaked Babuk code - Bleeping Computer
Singapore: OCBC Bank cautions public about SMS phishing scams after customers lose $140,000 in 10 days - The Business Times
Ubisoft Data breach hits Just Dance Players - Pro Privacy
Unique Cyber-Attacks Fall for First Time Since 2018 - InfoSecurity Magazine
23/12
A flaw in Microsoft Azure App Service exposes customer source code - Security Affairs
Alibaba Suffers Government Crackdown Over Log4j - InfoSecurity Magazine
APWG’s eCrime 2021 Symposium Shows Cybercrime Evolving - Security Boulevard
Best of 2021 – Combating COMB: 3.2 billion credentials leaked in breach compilation - Security Boulevard
CISA Releases Free Scanner to Spot Log4j Exposure - InfoSecurity Magazine
Consumers Warned of Surging Delivery Text Scams Ahead of Christmas - InfoSecurity Magazine
Correios viram alvo de hackers e site está fora do ar - Tudo Celular
Could passwordless be the solution to poor shopping sign-up processes? - Help Net Security
Five cybersecurity predictions for 2022 and beyond - Help Net Security
If Your Disclosure of a Data Breach Was “Late,” You May Have to Litigate - Data Breaches Net
IoT SAFE — An Innovative Way to Secure IoT - The Hacker News
Log4Shell is a dumpster fire that should have been avoided - Help Net Security
Pain and Suffering for a Data Breach? German Court Issues First Decision of Its Kind in Europe - Data Breaches Net
PCI SSC updates its device security standard for HSMs - Help Net Security
Three trivial bugs in Microsoft Teams Software remain unpatched - Security Affairs
Up to 120,000 Cops May Have Legal Claim Over 2019 Breach - InfoSecurity Magazine
Watch out for Christmas 2021 credential stuffing attacks! - Help Net Security
22/12
A new version of the Abcbot bot targets Chinese cloud providers - Security Affairs
Attackers bypass Microsoft patch to deliver Formbook malware - Help Net Security
China suspends deal with Alibaba for not sharing Log4j 0-day first with the government - The Hacker News
CISA releases Apache Log4j scanner to find vulnerable apps - Bleeping Computer
Cybercriminals shifting focus: IT sector most targeted in 2021 - Help Net Security
Dridex malware trolls employees with fake job termination emails - Bleeping Computer
How confident can organizations be in their managed services security? - Help Net Security
Meta warns 50,000 users about ‘surveillance-for-hire’ firms targeting them - The Digital Hacker
Microsoft Teams bug allowing phishing unpatched since March - Bleeping Computer
Monongalia Health System notifies patients and employees of data breach - Data Breaches Net
NIST Password Guidelines 2021: Challenging Traditional Password Management - Security Boulevard
NVIDIA discloses applications impacted by Log4j vulnerability - Bleeping Computer
Open-source software holds the key to solving Log4Shell-like problems - Help Net Security
PYSA ransomware gang is the most active group in November - Security Affairs
Ransomware Empire: Who might blackmail your company? - Help Net Security
Russian Cyber Exec Extradited After Alleged Trading Conspiracy - InfoSecurity Management
Salesforce CTO talks e-commerce cybersecurity threat trends for 2022 - Help Net Security
Security Operations Center (SOC) Performance Falling Short - Security Boulevard
Site da Prefeitura de Brumadinho é invadido por hackers, que deixam vídeo com ameaças a mineradora - G1
The gift that keeps on giving: 7 tips to avoid cyber security threats - Security Boulevard
Ubisoft Reveals Player Data Breach Came from User Error - InfoSecurity Management
US Returns $150m to Sony After Employee BEC Attack - InfoSecurity Management
21/12
5 Application Security Standards You Should Know - Security Boulevard
6 top cybersecurity trends from 2021 and their impact on 2022 - Help Net Security
Belgian defense ministry admits attackers accessed its computer network by exploiting Log4j vulnerability - Data Breaches Net
Best of 2021 – 10 Major Cyber Attacks Witnessed Globally in Q1 2021 - Security Boulevard
Best of 2021 – Leaked Data of Domino’s India Available on Search Engine - Security Boulevard
Ca: Big White issues data breach alert - Data Breaches Net
Combating identity fraud: The key is to avoid stagnation - Help Net Security
Cyber insurance trends: Insurers and insurees must adapt equally to growing threats - Help Net Security
Cybersecurity budgets surge, as skills gap wreaks havoc on 2022 plans - Help Net Security
Data breaches reported so far this year have surpassed full-year 2020 - Data Breaches Net
F-Secure uses flaw in at-home COVID-19 test to fake results - Tech Republic
Garrett walk-through metal detectors can be remotely manipulated - Bleeping Computer
Hackers invadem sites do governo e vendem senhas de servidores de órgãos públicos - Agora Notícias Brasil
How familiar are consumers with data protection best practices? - Help Net Security
HSE given stolen data, including medical records, taken by criminals during cyber attack in May - Data Breaches Net
Log4j Vulnerability Aftermath - Security Affairs
Log4Shell enumeration, mitigation and attack detection tool - Help Net Security
Meta Sues to Disrupt Prolific Phishing Campaign - InfoSecurity Magazine
More than 35,000 Java packages impacted by Log4j flaw, Google warns - Security Affairs
Police found 225 million stolen passwords hidden on a hacked cloud server. Is yours one of them? - ZDNet
Police National Computer not pwned by Clop ransomware crims, insists Home Office - Data Breaches Net
Rethinking cybersecurity becomes imperative as devices and apps move away from physical offices - Help Net Security
Russian hackers made millions by stealing SEC earning reports - Bleeping Computer
Scam Phishing Network Costs Victims $80m Per Month - InfoSecurity Magazine
Secret Backdoors Found in German-made Auerswald VoIP System - The Hacker News
The Analyst Prompt #42: Ransomware Attacks Not Letting Up as 2021 Draws to a Close - Security Boulevard
Top 7 common Cybersecurity Myths — Busted - The Hacker News
Tropic Trooper Cyber Espionage Hackers Targeting Transportation Sector - The Hacker News
UK British Council Struck by Two Ransomware Attacks in Five Years - InfoSecurity Magazine
UK Cyber Cops Share 225 Million Passwords with Breach Site - InfoSecurity Magazine
US returns $154 Million in bitcoins stolen by Sony employee - Bleeping Computer
Why the updated OWASP Top 10 list can’t be addressed by WAF? - Help Net Security
Windows 10 21H2 adds ransomware protection to security baseline - Bleeping Computer
20/12
4 Ways Cybercriminals Exploit Remote Teams - HackRead
14 cybersecurity predictions for 2022 and beyond - MIT Technology Review
CISA Issues Emergency Directive on Log4j - Security Boulevard
Conveyancing IT crash - company slammed for ‘wall of silence’ - Estate Agent Today
Cyber-Attack Impacts Aussie Companies - InfoSecurity Magazine
Cybercriminals exploit Spiderman: No Way Home popularity to spread malware, push phishing scams: Report - The Hindu Business Line
DarkWatchman RAT uses Windows Registry fileless storage mechanism - Security Affairs
Execs Get 16+ Years After SBA Fraud Scheme - InfoSecurity Magazine
Experts Discover Backdoor Deployed on the U.S. Federal Agency's Network - The Hacker News
FBI: State hackers exploiting new Zoho zero-day since October - Bleeping Computer
GoTestWAF: Open-source project for evaluating web application security solutions - Help Net Security
Hackers, bogus charities and ‘phishing’ emails among Christmas scams reported in Warwickshire - Rugby Observer
Hackers são condenados por falsificação de documento em sistema processual - Consultor Juridico
Healthcare provider Texas ENT alerts 535,000 patients to data breach - The Daily Swig
How can AI be made more secure and trustworthy? - Help Net Security
How likely are employees to fall prey to a phishing attack? - Help Net Security
Insider Threats: Protecting from Within - InfoSecurity Magazine
Introducing ‘killware’ — malware designed to contaminate, disrupt critical services - The Last Watchdog
Log4j vulnerability now used to install Dridex banking malware - Bleeping Computer
Microsoft warns of easy Windows domain takeover via Active Directory bugs - Bleeping Computer
New DarkWatchman malware spread through phishing emails on Windows machines: What we know so far - India Today
New Log4j Patch Released to Fix DoS Flaw - InfoSecurity Magazine
Over 300 victims lose $760,000 to phishing scams related to delivery firms - The Straits Times
Phishing Attacks Getting Sneakier - Ericom Blog
Ransomware attack on Kronos impacts paychecks, log-in timesheets of employees of several firms - India Today
Ransomware Gang Publish Confidential Police Data on the Dark Web - InfoSecurity Magazine
Shifting security further left: DevSecOps becoming SecDevOps - Help Net Security
Synthetic identity fraud: What is it, and why is it harmful? - Tech Republic
The cybersecurity executive order is not all it’s cracked up to be - Help Net Security
The Log4j saga: New vulnerabilities and attack vectors discovered - Help Net Security
Tech Companies to Protect Data on Undersea Cable - InfoSecurity Magazine
UK govt shares 585 million passwords with Have I Been Pwned - Bleeping Computer
Ukrainian War Games Test Electricity Grid - InfoSecurity Magazine
Zero trust isn’t just for IT, it can also protect targeted critical infrastructure - Help Net Security
19/12
2021 Cyber Review: The Year Ransomware Disrupted Infrastructure - Government Technology
Blackmail group Conti uses “Log4Shell” vulnerability for its ransomware - Market Research Telecast
Caution: Log4j and TellYouThePass ransomware are attacking your servers! - Best Gaming Pro
Crypto Security in 2022: Prepare for More DeFi Hacks, Exchange Outages, and Noob Mistakes - Crypto News
Crypto Users Should Prepare For More Security Threats In 2022 - Bankless Times
Difficult to determine full blast radius of Internet bugs: Google - The Siasat Daily
Hackensack Healthcare Providers Settle Investigation with OAG Following Two Data Breaches - Tap into Hackensack
Hive: A terribly lively ransomware franchise - Tech Gaming Report
NASA: Mars helicopter Ingenuity does not use Log4j - Market Research Telecast
New cyberespionage campaign discovered, possibly linked to Iran - Israel Defense
New stealthy DarkWatchman malware hides in the Windows Registry - Bleeping Computer
Pro Wrestling Tees Suffers Security Breach, Statement Released - EWrestling News
Return of Emotet lights up warning of new ransomware attacks - Play Crazy Game
Russian hackers leak confidential UK police data on the 'dark web' after their ransom was rejected - Mail Online
The biggest cyber hacks of 2021 - Coin Rivet