8/31/2022 August 31, 2022August 31, 2022 ~ The Cyber Beat ~ Leave a comment FBI Deploys Cyber Team to Montenegro Following Massive CyberattackFinland Plans Cyber Funding For Companies Amid Rising Security ThreatsUK Imposes Tough New Cybersecurity Rules for Telecom ProvidersJapan’s Digital Minister Vows to Rid the Country of Floppy DisksCongress Presses Big Crypto Exchanges for Details on How They’re Fighting ScamsYou’re Not Stringer Bell, but You May Still Need a Burner PhoneLyft Passengers, Drivers Allege Company Fails to Protect Users From AssaultKrebs: Final Thoughts on UbiquitiRagnar Locker Ransomware Claims Attack on Portugal’s Flag AirlineMethodist McKinney Hospital (TX) Announces Data BreachSCA Pharmaceuticals (AR) Announces Data BreachEvil Corp and Conti Linked to Cisco Data Breach, eSentire SuggestsA ‘High Severity’ TikTok Vulnerability Allowed One-Click Account HijackingGoogle Chrome Bug Lets Sites Write to Clipboard Without AskingIf You Have an iPhone 5S or 6, It’s Time for a Rare iOS UpdateAdGuard’s New Ad Blocker Struggles With Google’s Manifest V3 Rules
8/30/2022 August 30, 2022August 30, 2022 ~ The Cyber Beat ~ Leave a comment Krebs: How 1-Time Passcodes Became a Corporate LiabilityHackers Hide Malware in James Webb Telescope ImagesGoogle’s Open-Source Bug Bounty Aims to Clamp Down on Supply Chain AttacksGoogle Play to Ban Android VPN Apps From Interfering With AdsUkraine Takes Down Cybercrime Group Hitting Crypto Fraud VictimsA Huge Chinese Database of Faces and Vehicle License Plates Spilled OnlineEssential Elements Of CybersecurityHow to Support Agile Development Through Cybersecurity Best PracticesSecurity Culture: An OT Survival StoryRussian Streaming Platform START Confirms Data Breach Affecting 7.5M UsersFrance Telco Altice Hit by Hive Hack AttackValex Corporation Announces Data Breach Following Malware AttackCorrectHealth (GA) Data Breach Affects the Personal Info of More than 54kEmergeOrtho (NC) Data Breach Leaked Social Security Numbers of 75kWatering Hole Attacks From TA423 Push ScanBox KeyloggerModernLoader Delivers Stealers, Cryptominers & RATs Via Fake Amazon Gift CardsChrome Extensions With 1.4 Million Installs Steal Browsing Data
8/29/2022 August 29, 2022August 29, 2022 ~ The Cyber Beat ~ Leave a comment The Telegram-Powered News Outlet Waging Guerrilla War on RussiaU.S. Cyber Command and NSA Partner On Defence Efforts For Midterms ElectionsMcDonald’s Security Chief on Building Bonds With Corporate DirectorsNew Cybersecurity Regulations Are Coming: Here’s How to PrepareFBI: Hackers Increasingly Exploit DeFi Bugs to Steal CryptocurrencyCloudflare CDN Clients Caught in Austrian Fight Against Pirate SitesFTC Alleges Data Broker Kochava Exposes Users to Violent Threats by Selling Location DataKiwi Farms Goes Offline amid DDoS Attack and Hosting IssuesNelnet Servicing Breach Exposes Data of 2.5M Student Loan AccountsAxel Royal Confirms Data Breach Impacting Consumers’ Social Security NumbersNortheast Rehabilitation Hospital Network (NH) Files Notice of Data BreachNitrokod Crypto Miner Infected Over 111,000 Users with Copies of Popular SoftwareNew Golang-based ‘Agenda Ransomware’ Can Be Customized For Each VictimLockBit Ransomware Gang Gets Aggressive With Triple-Extortion TacticWindows Malware Delays Coinminer Install by a Month to Evade DetectionCritical Hole in Atlassian Bitbucket Allows Any Miscreant to Hijack Servers
8/26-28/2022 August 28, 2022August 28, 2022 ~ The Cyber Beat ~ Leave a comment NATO Investigates Hacker Sale of MBDA Missile Systems Firm DataIran-Based MuddyWater Targets Log4j 2 Vulnerabilities in SysAid Apps in IsraelMontenegro’s State Infrastructure Hit by Cyber Attack -OfficialsCybercrime Groups Increasingly Adopting Sliver Command-and-Control FrameworkCyberattack Raises Pressure on European Water Providers During DroughtDemocrat Urges Labor Dept To Regulate Tech That Monitors Employees in the WorkplaceDuckDuckGo Opens Its Privacy-Focused Email Service to EveryoneOne Man’s Loss Is Another Man’s Gain! Cybersecurity Works Like ThatDominican Republic Government Hit by Ransomware AttackIndia’s Akasa Air Exposed Sensitive Records of Thousands of CustomersNew Hampshire Lottery Website Returns After Facing Cyber AttackTwilio Breach Let Hackers Gain Access to Authy 2FA Accounts…Twilio Breach Let Hackers See Okta’s One-Time MFA PasswordsBaker & Taylor’s Systems Remain Offline Almost A Week After Ransomware AttackFake ‘Cthulhu World’ P2E Project Used to Push Info-Stealing MalwareCritical Vulnerability Discovered in Atlassian Bitbucket Server and Data Center
8/25/2022 August 25, 2022August 25, 2022 ~ The Cyber Beat ~ Leave a comment U.S., Israel Formalize Bilateral Cyber PartnershipThe U.S. Government Got Caught Using Social Media Sock Puppets to Spread PropagandaHow ‘Kimsuky’ Hackers Ensure Their Malware Only Reach Valid TargetsScammers Create ‘AI Hologram’ of C-Suite Crypto ExecScans of Students’ Homes During Tests Are Deemed UnconstitutionalHackers Abuse Genshin Impact Anti-cheat System to Disable AntivirusLastPass Source Code, Blueprints Stolen by IntruderTo Bring PLG to Cybersecurity, Let’s Change Our Hiring HabitsPyPI Packages Hijacked After Developers Fall For Phishing EmailsThe O․MG Elite Cable Is a Scarily Stealthy Hacker ToolOkta Hackers ‘0ktapus’ Behind Twilio and Cloudflare Breach Hit Over 130 Organizations…DoorDashMicrosoft Attributes New Post-Compromise Capability to Nobelium (aka APT29)Hackers Adopt Sliver Toolkit as a Cobalt Strike AlternativeCybercriminals Are Selling Access to Chinese Surveillance Hikvision CamerasRansomware Attacks Rose 47 Percent in July
8/24/2022 August 24, 2022August 24, 2022 ~ The Cyber Beat ~ Leave a comment Cyber Agency Highlights Emerging Threats From Quantum ComputingQuantum Ransomware Attack Disrupts Gov’t Agency in Dominican RepublicWar in Ukraine Has Pushed Two-Thirds of Businesses to Change Cyber StrategyEU Outlines Critical Cyber Response to Ukraine WarThe Privacy Flaw Threatening U.S. DemocracySephora Agrees to $1.2 Million Settlement of Data Privacy ChargesAn Anatomy of Crypto-Enabled Cyber CrimeNearly 3 Years Later, SolarWinds CISO Shares 3 Lessons From the Infamous AttackU.S. Healthcare Sector Breaches 342M+ Records Since 2009Plex Breach Exposes Usernames, Emails, and Encrypted PasswordsRansomEXX Claims Ransomware Attack on Sea-Doo, Ski-Doo MakerLionel Holdings (NC) Report Data Breach After Ransomware AttackCalcium Products (IA) Confirms Recent Data BreachFake Chrome Extension ‘Internet Download Manager’ Has 200,000 InstallsHackers Use AiTM Attack to Monitor Microsoft 365 Accounts for BEC ScamsCrypto Miners Using Tox P2P Messenger as Command and Control ServerGitLab ‘Strongly Recommends’ Patching Critical RCE Vulnerability
8/23/2022 August 24, 2022August 24, 2022 ~ The Cyber Beat ~ Leave a comment Agency Identified 700-Plus Pages of Classified Records at Trump’s Home…Biden Stays Silent on Mar-a-Lago SearchSuspected Iranian Hackers UNC3890 Targeted Several Israeli Organizations for Espionage Since 2020Ex-Twitter Exec Blows the Whistle, Alleging Reckless and Negligent Cybersecurity Policies…‘Egregious Deficiencies,’ Bots, and Foreign Agents…Congress Is Investigating Twitter Whistleblower Claims…Security Pros Are Rallying to Defend the Twitter WhistleblowerInitiative Aims to Tackle Cyber Threats as Self-Driving Cars Gain TractionPirated 3DMark Benchmark Tool Delivering Info-Stealer MalwareRansomware: Most Attacks Exploit These Common Cybersecurity Mistakes – Fix Them Now: MicrosoftVMware Carbon Black Endpoint Security Solution Causing BSOD Crashes on WindowsFrench Hospital Hit by $10M Ransomware Attack, Sends Patients ElsewhereGoogle Uncovers Tool Used by Iranian Hackers ‘Charming Kitten’ to Steal Data from Email AccountsNew ‘Donut Leaks’ Extortion Gang Linked to Recent Ransomware AttacksMansfield ISD (TX) Experiencing Cyber Attack, Phones & Internet DownService By Medallion (CA) Reports Data Breach Following Compromised Employee Email AccountClark Patterson Lee (NY) Reports Data Breach Following “Encryption” EventPhishing Attacks Abusing SAAS Platforms See a Massive 1,100% GrowthAir-Gap Attack Exploits Gyroscope Ultrasonic Covert Channel to Leak Data…ETHERLED: Air-Gapped Systems Leak Data via Network Card LedsMicrosoft Finds Critical Hole in Operating System That for Once Isn’t Windows
8/22/2022 August 22, 2022August 22, 2022 ~ The Cyber Beat ~ Leave a comment Experts Nervously Eye Cyber Threats From ChinaMidterm Elections to Put Misinformation Policies to the TestInside the World’s Biggest Hacker RickrollFake Reservation Links Prey on Weary TravelersResearchers Find Counterfeit Phones with Backdoor to Hack WhatsApp AccountsFBI Warns of Residential Proxies Used in Credential Stuffing AttacksGoogle AI Flagged Parents’ Accounts for Potential Abuse Over Nude Photos of Their Sick KidsCEO Shalev Hulio of Blacklisted Israeli Spyware Maker NSO Group Steps DownPerspectives on Model Risk Management of Cybersecurity Solutions in BankingSophos Identifies Potential Tag-Team Ransomware ActivityFake DDoS-Protection Pages on WordPress Sites Serve Up MalwareWarning Over Java Libraries and Deserialization Security WeaknessesHoldcroft Motor Group Car Dealership Hit by Major Ransomware AttackGreek Natural Gas Operator DESFA Suffers Ransomware-Related Data BreachData on California Prisons’ Visitors, Staff, Inmates ExposedIndonesia Investigating Alleged Data Breaches at State-Owned FirmsTextile Company Sferra Discloses Data Breach Involving Personal InfoFriedrich Air Conditioning Announces Data BreachHanesBrands Reports Data Breach Following Ransomware AttackLockBit Gang Hit by DDoS Attack After Threatening to Leak Entrust Ransomware DataMeet Borat RAT, a New Unique Triple ThreatOver 80,000 Exploitable Hikvision Cameras Exposed OnlineCISA Is Warning of High-Severity PAN-OS DDoS Flaw Used in Attacks
8/19-21/2022 August 21, 2022August 21, 2022 ~ The Cyber Beat ~ Leave a comment Russia’s ‘Oculus’ to Use AI to Scan Sites for Banned InformationThe Head of GCHQ Says Vladimir Putin Is Losing the Information War in UkraineU.S. Deployed Cyber ‘Hunt Forward’ Team to CroatiaBusinesses Found to Neglect Cybersecurity Until it is Too LateDemocrats Press Social Media Platforms Over FBI ThreatsCourt Records Expose Name & Address of Women Who Accused Serial Groper, Despite Privacy LawsThe Low Threshold for Face Recognition in New Delhi: 80% Accuracy for MatchThe Persona Illusion: Do You Actually Exist on Social Media?Twitter Tests a Special Tag to Highlight Phone Number-Verified AccountsBanks Nearing $1 Billion Settlement Over Traders’ Use of Banned Messaging AppsNew Tool Checks if a Mobile App’s Browser Is a Privacy RiskAn Encrypted Zip File Can Have Two Correct Passwords — Here’s WhyDebit Card Fraud Leaves Ally Bank Customers, Small Stores ReelingHackers Steal Crypto From Bitcoin ATMs by Exploiting Zero-Day BugRussian APT29 Hackers Abuse Azure Services to Hack Microsoft 365 UsersWordPress Sites Hacked With Fake Cloudflare DDoS Alerts Pushing MalwareWhitworth University Still Recovering from Ransomware AttackPractice Resources Data Breach Impacts 924,138 PatientsBrasseler USA Announces Data BreachLee County EMS (FL) Notifies Patients of Data BreachNew Grandoreiro Banking Malware Campaign Targeting Spanish & Mexican Manufacturers241 NPM and PyPI Packages Caught Dropping Linux CryptominersCISA Adds 7 New Actively Exploited Vulnerabilities to CatalogHackers May Have Exploited Security Flaws – Apple
8/18/2022 August 19, 2022August 19, 2022 ~ The Cyber Beat ~ Leave a comment Estonia Thwarts Cyberattack Following Removal of Soviet MonumentLawmakers Push for Improved Cybersecurity in Health Sector Amid Growing Cyber ThreatsKrebs: PayPal Phishing Scam Uses Invoices Sent Via PayPalSpyware Hunters Are Expanding Their ToolsetGoogle Blocks Largest HTTPS DDoS Attack ‘Reported to Date’What Is Cybersecurity, And Why Does It Matter?How to Upskill Tech Staff to Meet Cybersecurity NeedsJanet Jackson Music Video Declared a Cybersecurity ExploitDef Con Banned a Social Engineering Star — Now He’s SuingLloyd’s to Exclude Catastrophic Nation-Backed Cyberattacks From Insurance CoverageU.S. Extradited Russian Accused of Money-Laundering Tied to Ryuk Ransomware GangWEB3 Is in Chaos and Metaverses Are in Their Own Walled Gardens, Says Randi ZuckerbergChina-Backed APT41 Hackers Targeted 13 Organisations Worldwide Last YearLockBit Claims Ransomware Attack on Security Giant EntrustFremont County (CO) Offices Close After Cyber AttackBlackByte Ransomware Gang Is Back With New Extortion TacticsWinnti Hackers Split Cobalt Strike Into 154 Pieces to Evade DetectionHackers Deploy Bumblebee Loader to Breach Target NetworksResearchers Detail Evasive DarkTortilla Crypter Used to Deliver MalwareAndroid Malware Apps With 2 Million Installs Found on Google PlayAmazon Fixes Ring Android App Flaw Exposing Camera RecordingsGoogle, Apple Squash Multiple Exploitable Browser Bugs
8/17/2022 August 17, 2022August 17, 2022 ~ The Cyber Beat ~ Leave a comment DOE Invests $45 Million in Cyber Technology That Protects Power SectorMeta Rolls Out Plan for Midterms, Pledges to Remove MisinformationTikTok Wants Your Trust Around U.S. Midterm Elections DataGermany Offers Model for Space-Industry Cybersecurity StandardsSoftware Developer Cracks Hyundai Car Security After Simple Google Search to Find Public KeysText Messages, Once a Bulwark of Security, Now Seen as VulnerableThe Android 13 Privacy Settings You Should Update NowStudents Want to Learn to Code, but the School System Is a BarrierThoma Bravo Closes $6.9B Acquisition of Identity-Security Vendor SailPointiOS VPNs Have Leaked Traffic for More Than 2 Years, Researcher ClaimsNorth Korean Hackers Use Signed macOS Malware to Target IT Job SeekersResearchers Link Multi-Year Mass Credential Theft Campaign to Chinese ‘RedAlpha’ HackersAtlantic Dialysis Management (NY) Data Breach Possibly Stemming from Ransomware AttackMalicious PyPi Packages Turn Discord Into Password-Stealing MalwareCybercriminals Developing BugDrop Malware to Bypass Android Security FeaturesNew Google Chrome Zero-Day Vulnerability Being Exploited in the WildExploit Out for Critical Realtek Flaw Affecting Many Networking DevicesRansomware Is Still on the Rise
8/16/2022 August 16, 2022August 16, 2022 ~ The Cyber Beat ~ Leave a comment U.S. Approves Nearly All Tech Exports to China, Data ShowsHow Geopolitical Tension Creates Opportunities for Cyber-Criminals‘Worrying Precedent’ as Ransomware Hackers Target South Staffs WaterLessons From the Cybersecurity TrenchesCISO Salaries Balloon 15% This Year, Likely Spurred by DemandThe New USB Rubber Ducky Is More Dangerous Than EverMalicious Browser Extensions Targeted Almost 7 Million PeopleKrebs: When Efforts to Contain a Data Breach BackfireTrump’s Passports Returned After Mar-A-Lago Search, DOJ Official SaysU.S. SEC Charges Three People With Insider Trading Tied to August 2017 Hack of EquifaxCS:GO Trading Site Hacked to Steal $6 Million Worth of SkinsNew MailChimp Breach Exposed DigitalOcean Customer Email AddressesIndia Shipping Logistics Giant Shipyaari Exposed Customer DataConifer Hack Compromises Patient Data From 6 HospitalsThomas More University (KY) Hacked in Multiple Ways After Facebook Account AttackCedar Rapids School District Confirms Ransom Payment After July Cyber AttackTexas Meter & Device Company Announces Data BreachNew Evil PLC Attack Weaponizes PLCs to Breach OT and Enterprise NetworksRTLS Systems Vulnerable to MiTM Attacks, Location ManipulationÆPIC and SQUIP Vulns in Intel and AMD Processors
8/15/2022 August 16, 2022August 16, 2022 ~ The Cyber Beat ~ Leave a comment Russian Hackers Target Ukraine With Default Word Template HijackerMicrosoft Disrupts Russian Hackers’ Operation on NATO TargetsChinese Tech Giants Share Details of Their Prized Algorithms With Top Regulator in Unprecedented MoveCIA Accused of Illegally Spying on Americans Visiting Assange in EmbassyFBI Threats Spark Calls for Reduced RhetoricBlack Hat and DEF CON RoundupNew Study Reveals Serious Cyber Insurance ShortfallsThree Extradited from UK to U.S. on $5m BEC ChargesNew York Becomes First State to Require CLE in Cybersecurity, Privacy and Data ProtectionArgentina’s Judiciary of Córdoba Hit by PLAY Ransomware AttackSignal Alerts 1,900 Messaging Users to a Security Threat From Twilio HackersLamoille Health (MT) Experiences Ransomware Attack Leading to Data Breach Involving Patient InfoUnited Health Centers of the San Joaquin Valley (CA) Data Breach Stemming From Possible Ransomware AttackMalicious PyPi Packages Aim DDoS Attacks at Counter-Strike ServersCallback Phishing Attacks See Massive 625% Growth Since Q1 2021Most Q2 Attacks Targeted Old Microsoft VulnerabilitiesMonero Planned Hard Fork Event on Saturday Makes Hackers’ Favorite Coin Even More Private
8/12-14/2022 August 15, 2022August 15, 2022 ~ The Cyber Beat ~ Leave a comment Ukraine Cyber Chief Victor Zhora Pays Surprise Visit to ‘Black Hat’ Hacker Meeting in Las VegasWhite House Cyber Director: ‘Defense is the New Offense’ for CyberKrebs: It Might Be Our Data, But It’s Not Our BreachKrebs: Sounding the Alarm on Emergency Alert System FlawsHow to Create a Secure Folder on Your PhoneWhy It’s Taking So Long to Encrypt Facebook MessengerFacebook’s In-app Browser on iOS Tracks ‘Anything You Do on Any Website’Google Fined $43M by Australian Court for Misleading Users Over DataCrypto Community Split on Treasury’s Tornado Cash SanctionsTornado Cash Developer Arrested After U.S. Sanctions the Cryptocurrency MixerA New Jailbreak for John Deere Tractors Rides the Right-to-Repair WaveWhy Twitter Anons Are Sending Crypto to CelebritiesAnonymous Poop Gifting Site ‘ShitExpress’ Hacked, Customers ExposedNovant (NC) Warns Patients of Data Breach; 1.3 Million Notification Letters MailedTwilio: 125 Customers Affected by Data Breach, No Passwords StolenOver 9,000 VNC Servers Exposed Online Without a PasswordZeppelin Ransomware Resurfaces with New Compromise, Encryption TacticsChinese ‘Lucky Mouse’ Hackers Backdoored MiMi Chat App to Target Windows, Linux, macOS UsersPalo Alto Bug Used for DDoS Attacks and There’s No Fix YetXiaomi Smartphone Vulnerabilities Could Lead to Forged PaymentsThe Zoom Installer Let a Researcher Hack His Way to Root Access on macOSZoom’s Latest Update on Mac Includes a Fix for a Dangerous Security FlawMicrosoft Blocks UEFI Bootloaders Enabling Windows Secure Boot Bypass
8/11/2022 August 11, 2022August 11, 2022 ~ The Cyber Beat ~ Leave a comment Russian Invasion of Ukraine Has Dangerously Destabilized International Cyber Security NormsAccess to Hacked Corporate Networks Still Strong but Sales FallSloppy Software Patches Are a ‘Disturbing Trend’This Mac Hacker’s Code Is So Good, Corporations Keep Stealing ItThe U.S. Offers a $10M Bounty for Intel on Conti Ransomware GangNew Hacker Forum ‘DUMPS’ Takes Pro-Ukraine StanceFacebook Testing Encrypted Chat BackupsSuspected $3M Romance Scammer Extradited to JapanUK NHS Service Recovery May Take a Month After MSP Ransomware AttackAtlas MedStaff (NE) Confirms Recent Data Breach Following “Sophisticated Cyberattack”Zimbra Auth Bypass Bug Exploited to Breach Over 1,000 ServersAndroid Banking Trojan SOVA Returns With New Features Including RansomwareCritical Flaws Disclosed in Device42 IT Asset Management SoftwareGitHub’s New Privacy Policy Sparks Backlash Over Tracking CookiesLooking Back at 25 Years of Black Hat
8/10/2022 August 10, 2022August 10, 2022 ~ The Cyber Beat ~ Leave a comment Finland’s Parliament Hit With Cyberattack Following U.S. Move to Admit the Country to NATOHackers and Fraudsters Used Crypto Bridge RenBridge to Launder $540 MillionHackers Have Stolen $1.4 Billion This Year Using Crypto Bridges: Here’s WhyNew Dark Web Markets Claim Association With Criminal CartelsEx-CISA Chief Chris Krebs Calls for Us to Get Serious on SecurityCISA Releases Cybersecurity Toolkit to Protect U.S. ElectionsTech, Cyber Companies Launch Security Standard to Monitor Hacking AttemptsThe Hacking of Starlink Terminals Has BegunGoogle’s Android Red Team Had a Full Pixel 6 Pwn Before LaunchLong-Awaited IoT Reverse Engineering Tool Finally HereKrebs: The Security Pros and Cons of Using Email AliasesMusk Teases X.com Social Media PlatformFacebook Profits From Ads on Searches for Hate Group PagesFormer Twitter Employee Found Guilty of Spying for Saudi ArabiaEU Court Expands Definition of Sensitive Data, Prompting Legal Concerns for CompaniesCisco Hacked by Yanluowang Ransomware Gang, 2.8GB Allegedly StolenMarymount Manhattan College (NY) Data Breach Following Unauthorized Access to NetworkZenith American Solutions (FL) Data Breach Impacts Sound Health and Wellness TrustAmerican Wholesale Furniture Company (IN) Announces Data BreachAutomotive Supplier Breached by 3 Ransomware Gangs in 2 Weeks7-Eleven Denmark Confirms Ransomware Attack Behind Store ClosuresConti Extortion Gangs Behind Surge of BazarCall Phishing AttacksDeathStalker’s VileRAT Continues to Target Foreign and Crypto Exchanges‘Tropical Scorpius’ Hacker Uses New RAT Malware in Cuba Ransomware AttacksPhishing Attack Abuses Microsoft Azure, Google Sites to Steal CryptoCISA Issues Warning on Active Exploitation of UnRAR Software for Linux SystemsCisco Fixes Bug Allowing RSA Private Key Theft on ASA, FTD DevicesKrebs: Microsoft Patch Tuesday, August 2022 EditionGoogle Now Blocks Workspace Account Hijacking Attempts Automatically
8/9/2022 August 9, 2022August 9, 2022 ~ The Cyber Beat ~ Leave a comment Maui Ransomware Operation Linked to North Korean ‘Andariel’ HackersNorth Korean-Sponsored Crypto Hacks on the Rise, Experts WarnDozens of Whole Foods Stores Will Soon Let You Pay With Just a Scan of Your PalmBurger King Just Emailed Everyone a Blank Receipt in a Whopper of a MistakeHow Hackers Are Stealing Credit Cards From Classifieds SitesWill Europe Force a Facebook Blackout?Chinese Scammers Target Kids With Promise of Extra Gaming Hours1Password 8 Arrives on Android and iOS With a Big Redesign and Personalized HomeKali Linux 2022.3 Adds 5 New Tools, Updates Linux Kernel, and MoreCybrary Unveils Next-Gen Interactive Training Experience for Cybersecurity ProfessionalsSpin Technology Raises $16M to Protect SaaS Apps Against AttacksRussia-Ukraine Conflict Holds Cyberwar LessonsCloudflare Employees Also Hit by Hackers Behind Twilio BreachBRP Was Target of Cybersecurity Attack MondayQuebec Farmers Union Under Ransomware CyberattackGibson Overseas (CA) Announces Data BreachCenterstone (TN) Announces Data Breach‘Bitter APT’ Hackers Install ‘Dracarys’ Android Malware Using Modified Signal App10 Malicious Python Packages Exposed in Latest Repository AttackAPIC fail: Intel ‘Sunny Cove’ Chips With SGX Spill SecretsMicrosoft August 2022 Patch Tuesday Fixes Exploited Zero-Day, 121 Flaws…Patch Tuesday: Yet Another Microsoft RCE Bug Under Active Exploit…‘DogWalk’Microsoft’s Fix for ‘Data Damage’ Risk Hits PC PerformanceMicrosoft: Exchange ‘Extended Protection’ Needed to Fully Patch New Bugs
8/8/2022 August 8, 2022August 8, 2022 ~ The Cyber Beat ~ Leave a comment Chinese Hackers TA428 May Be Behind Attacks Targeting Eastern Europe and AfghanistandeBridge Finance Crypto Platform Targeted by Lazarus HackersCameo’s CEO Steven Galanis Fell Victim to the Latest Bored Ape NFT HeistA Phone Carrier That Doesn’t Track Your Browsing or LocationNew Orchard Botnet Uses Bitcoin Founder’s Account Info to Generate Malicious DomainsTreasury Sanctions Crypto ‘Mixer’ Tornado Cash for Aiding Hackers Laundering Illicit FundsBuying Cyber Insurance Gets Trickier as Attacks Proliferate, Costs RiseTwilio Suffers Data Breach After Its Employees Were Targeted by a Phishing Campaign7-Eleven Stores in Denmark Closed Due to a CyberattackEmail Marketing Firm Hacked to Steal Crypto-Focused Mailing ListsAllegheny Health Network (PA) Data Breach Impacting 8,000 People After Phishing AttackGage Brothers Concrete Products (SD) Data BreachPhishers Swim Around 2FA in Coinbase Account HeistsResearchers Uncover Classiscam Scam-as-a-Service Operations in SingaporeHow to Find Out if You Are Involved in a Data Breach — And What to Do Next
8/5-7/2022 August 7, 2022August 7, 2022 ~ The Cyber Beat ~ Leave a comment Cybercrime a Key Revenue Stream For North Korea’s Weapons ProgramNorth Korean ‘Lazarus’ Hackers Target Crypto Experts With Fake Coinbase Job OffersChinese Info Ops Campaign ‘HaiEnergy’ Tied to PR Firm Shanghai Haixun TechnologyMeta Took Down Russian Troll Farm That Supported Country’s Invasion of UkraineHackers Might Have Figured Out Your Secret Twitter Accounts… Twitter Confirms BreachHow to Use Lockdown Mode in iOS 16 to Make Your Phone More SecureReminder: Passkeys Are Not Just From AppleDuckDuckGo Says Okay, Okay, No to Those Microsoft Trackers After Web RevoltNew Traffic Light Protocol Standard Released After Five YearsHi, I’ll Be Your Ransomware Negotiator Today – But Don’t Tell the Crooks ThatA Ransomware Explosion Fosters Thriving Dark Web EcosystemHacked Crypto Startup Nomad Offers a 10% Bounty for Return of Funds After $190 Million AttackCanada Jury Convicts Dutch Man of Sexually Extorting Canadian TeenOpen Redirect Flaw Snags Amex, Snapchat User DataUK NHS Suffers Outage After Cyberattack on Managed Service ProviderSheppard Robson Asked to Pay Ransom After Cyber-AttackJacksonville Sheriff’s Office Disables Computers After “Detected Suspicious Activity”First Choice Community Healthcare (NM) Confirms Data Breach Impacting Patient Health InfoGaedeke Group (TX) Confirms Compromised Email Account Led to Recent Data BreachGwisinLocker Ransomware Targets Linux Systems in South KoreaSlack Resets Passwords After a Bug Exposed Hashed Passwords for Some UsersFacebook Finds New Android Malware Used by APT36 (aka ‘Bitter APT’)Hackers Are Actively Exploiting Password-Stealing Flaw in ZimbraMicrosoft Edge Gets Better Security Defaults on Less Popular SitesThe Cybersecurity Funding Bubble Hasn’t Burst — But It’s Starting to DeflateKrebs: Class Action Targets Experian Over Account Security
8/4/2022 August 4, 2022August 4, 2022 ~ The Cyber Beat ~ Leave a comment Taiwan Defence Ministry: Website Hit by Cyber Attacks Amid Rising China TensionsFrom 7-11s to Train Stations, Cyber Attacks Plague Taiwan Over Pelosi VisitAn Attack on Albanian Government Suggests New Iranian AggressionUK Parliament Bins Its TikTok Account Over China Surveillance FearsCybersecurity Agencies Reveal Last Year’s Top Malware StrainsCyberattackers Increasingly Target Cloud IAM as a Weak LinkThousands of Hackers Flock to ‘Dark Utilities’ C2-As-A-ServiceKrebs: Scammers Sent Uber to Take Elderly Lady to the BankExperts Warn of Fake Football (aka Soccer) Ticket ScamsStudent Crashes Cloudflare Beta Party, Redirects Email, Bags a Bug BountyIndia Scraps Data Protection Law in Favor of Better Law Coming … SometimeGerman Chambers of Industry and Commerce Hit by ‘Massive’ CyberattackLouisville Zoo Informs of Possible Cyberattack Leaking Customer DataMore Than 21,000 Affected in HealthBack (OK) Data BreachAria Retirement Solutions (CA) Breach After Unauthorized Access to Employee’s EmailWisan Smith Racker & Prescott (UT) Breach: Clients Report Fraudulent Tax FilingsMultimillion-Dollar Solana Crypto Theft Linked to Slope Mobile WalletHackers Try to Extort Survey Firm QuestionPro After Alleged Data TheftNew Linux Malware Brute-Forces SSH Servers to Breach NetworksHackers Exploited Atlassian Confluence Bug to Deploy Ljl Backdoor for EspionageCritical RCE Bug Could Let Hackers Remotely Take Over DrayTek Vigor RoutersDHS Warns of Critical Flaws in Emergency Alert System Devices
8/3/2022 August 3, 2022August 3, 2022 ~ The Cyber Beat ~ Leave a comment Tory Leadership Vote Delayed After GCHQ Hacking AlertUkraine Takes Down 1,000,000 Bots Used for DisinformationTaiwan Expects Increased ‘Psychological Warfare’ After Pelosi VisitSpanish Research Agency Still Recovering After Ransomware AttackPortman Warns Against Overlap in Government Cyber LeadershipYou Can’t Choose When You’ll Be Hit by Ransomware, but You Can Choose How You PrepareCode Dark: Children’s Hospital Strives to Minimize Impact of HacksRansomware Attacks Taking Toll on Security ProfessionalsThe Microsoft Team Racing to Catch Bugs Before They Happen5 Ways Chess Can Inspire Strategic Cybersecurity ThinkingA New Attack Easily Knocked Out a Potential Encryption AlgorithmCorporate Lobbying Could Imperil Sweeping Data Privacy BillMitigating Cybersecurity Risks For Hybrid Work EnvironmentsRussian Organizations Attacked With New Woody RAT MalwareThousands of Solana Wallets Drained in Attack Using Unknown Exploit35,000 Code Repos Not Hacked—but Clones Flood Github to Serve MalwareSchool Kid Uploads Ransomware Scripts to PyPI Repository as ‘Fun’ ProjectCommunity Surgical Supply (NJ) Breach: Attacker Encrypts Sensitive Consumer InfoThe North Highland Company (GA) Data Breach Affects Current and Former EmployeesLeaked Image Shows Ransomware Attack Hit Linn-Mar School District (IA)Cloned Atomic Wallet Website Is Pushing Mars Stealer MalwareMicrosoft Accounts Targeted With New MFA-Bypassing Phishing KitResearchers Warns of Large-Scale AiTM Attacks Targeting Enterprise UsersCisco Fixes Critical Remote Code Exec VPN Router BugWindows 11 Smart App Control Blocks Files Used to Push Malware
8/2/2022 August 2, 2022August 2, 2022 ~ The Cyber Beat ~ Leave a comment Taiwan Presidential Office Website Hit by Cyberattack Ahead of Pelosi Visit…Attacks on Taiwan Websites Likely Work of Chinese ‘Hacktivists’Russia Accuses U.S. of Direct Role in Ukraine War…U.S. Sanctions More Russian Oligarchs; Senate Moves Toward Vote to Admit Sweden and Finland Into NATOHow Cyber Chiefs Cut Through Marketing NoiseWolf in Sheep’s Clothing: How Malware Tricks Users and AntivirusReported Ransomware Attacks Are Just the Tip of the Iceberg: That’s a Problem for EveryoneKrebs: No SOCKS, No Shoes, No Malware Proxy Services!Mobile Store Owner Hacked T-Mobile Employees to Unlock PhonesCybersecurity Could Offer a Way for Underrepresented Groups to Break Into TechNomad Crypto Bridge Loses $200 Million in ‘Chaotic’ HackEU Missile Maker MBDA Confirms Data Theft Extortion, Denies BreachSemiconductor Manufacturer Semikron Hit by LV Ransomware AttackGatto, Pope & Walrick (CA) Files Notice of Data Breach Following Reports of Potential Tax Return FraudChinese Hackers Using New Manjusaka Hacking Framework in GoLang Similar to Silver and Cobalt StrikeNew ‘ParseThru’ Parameter Smuggling Vulnerability Affects Golang-based ApplicationsGoogle Patches Critical Android Bluetooth Flaw in August Security BulletinVMware Urges Admins to Patch Critical Auth Bypass Bug ImmediatelyMicrosoft Announces New External Attack Surface Audit Tool
8/1/2022 August 1, 2022August 1, 2022 ~ The Cyber Beat ~ Leave a comment Russia Is Starting to Beat Ukraine at Electronic Warfare, Analysts SayNancy Pelosi to Visit Taiwan Despite Warnings From ChinaWhite House Warns China Not to Overreact to Potential Pelosi Visit to TaiwanMany Dems Voted to Limit TikTok. Now They’re Using It.White House Cyber Hire Highlights Diversity Challenges in Tech WorkforceSteam, PayPal Blocked as Indonesia Enforces New Internet RegulationProbe Finds Israel Police Did Not Unlawfully Hack Phones of Politicians, ActivistsBlackCat Ransomware Claims Attack on European Gas PipelineOneTouchpPoint Confirms Breach Potentially Impacting Dozens of Other BusinessesCentral Maine Medical Center Files Notice of Recent Data Breach With Federal Gov’tCredential Stealer Malware Raccoon Updated to Obtain Passwords More EfficientlyResearchers Discover Nearly 3,200 Mobile Apps Leaking Twitter API KeysMicrosoft Defender Experts for Hunting Now AvailableTim Hortons Offers Free Coffee and Donut to Settle Data Privacy Invasion Claims
7/29-31/2022 August 1, 2022August 1, 2022 ~ The Cyber Beat ~ Leave a comment Justice Department Investigating Data Breach of Federal Court SystemCongress Takes Aggressive Stance Against Foreign SpywareYou Pay More When Companies Get HackedSecurity Teams Overwhelmed With Bugs, Bitten by Patch PrioritizationJust Because You Don’t See Hackers, Doesn’t Mean They’re Not In Your NetworkU.S. Gov’t Warns Americans of Escalating Sms Phishing AttacksKrebs: 911 Proxy Service Implodes After Disclosing BreachSpyware Developer of Imminent Monitor RAT Charged by Australian Police After 14,500 SalesMeta, U.S. Hospitals Sued for Using Healthcare Data to Target AdsBromford Housing Association Targeted by Cyber AttackIsrael’s Sapir College Targeted by Cyber Attack; Students’ Data Held for Ransom by HackersMicrosoft Links Raspberry Robin USB Worm to Russian Evil Corp HackersHuge Network of 11,000 Fake Investment Sites Targets EuropeFacebook Ads Push Android Adware With 7 Million Installs on Google PlayLockBit Ransomware Abuses Windows Defender to Load Cobalt StrikeCISA Warns of Atlassian Confluence Hard-Coded Credential Bug Exploited in AttacksApple Just Patched 37 iPhone Security BugsBig Questions Remain Around Massive Shanghai Police Data Breach