3/30/2023 March 30, 2023March 30, 2023 ~ The Cyber Beat ~ Leave a comment The U.S. Is Sending Money to Countries Devastated by CyberattacksWinter Vivern Hackers Exploit Zimbra Flaw to Steal NATO EmailsLeaked Documents Offer Fascinating Insights Into Russian Cyber WarfareFDA Will Refuse New Medical Devices for Cybersecurity Reasons on Oct. 1Huge Microsoft Azure Exploit Allowed Users to Manipulate Bing Search Results and Access Outlook Email AccountsOver 70% of Employees Keep Work Passwords on Personal DevicesU.S. Court Sanctions Google in Privacy Case, Company’s Second Legal Setback in DaysUkrainian Cyberpolice Busts Fraud Gang That Stole $4.3 MillionChinese RedGolf Group Targeting Windows and Linux Systems with KEYPLUG BackdoorBright Horizons Notifies Current and Former Employees of Recent Data BreachMajestic Care Files Notice of Data Breach Affecting Current and Former Residents and StaffThe Health Plan of San Mateo (CA) Data Breach Leaked Personal Info of 11,894 IndividualsAlienFox Malware Targets API Keys and Secrets from AWS, Google, and Microsoft Cloud ServicesRealtek and Cacti Flaws Now Actively Exploited by Malware BotnetsCISA Orders Agencies to Patch Bugs Exploited to Drop SpywareMicrosoft OneNote Will Block 120 Dangerous File Extensions
3/29/2023 March 29, 2023March 29, 2023 ~ The Cyber Beat ~ Leave a comment Google Warns Against Commercial Spyware Exploiting Zero-DaysElon Musk and Others Urge AI Pause, Citing ‘Risks to Society’Smart Mobility has a Blindspot When it Comes to API SecurityIn Walmart’s Cyber Risk Formula, Every Bug Has a BackstoryMicrosoft Defender Shoots Down Legit URLs as MaliciousFTX Cryptovillain Sam Bankman-Fried Charged With Bribing Chinese OfficialsMan Behind Hack-for-Hire Campaign That Targeted Environmental Activists Is Keeping His Mouth ShutSafeMoon ‘Burn’ Bug Abused to Drain $8.9 Million From Liquidity PoolUC San Diego Health Data Breach After a Vendor’s Unauthorized Use of Tracking TechnologiesU.S. Wellness (MD) Data Breach Affects 11,459 Patients’ Protected Health InformationData Stolen From Washington County (FL) Sheriff’s Office Leaked by LockBit Ransomware GroupCybersecurity Firms Warn of 3CX Desktop App Supply Chain AttackCybercriminals Set Sights on Critical IBM File Transfer BugQNAP Warns Customers to Patch Linux Sudo Flaw in NAS Devices
3/28/2023 March 29, 2023March 29, 2023 ~ The Cyber Beat ~ Leave a comment Newly Exposed APT43 Hacking Group Targeting U.S. Orgs Since 2018North Korea Is Now Mining Crypto to Launder Its Stolen LootPakistan-Origin SideCopy Linked to New Cyberattack on India’s Ministry of DefenceKrebs: UK Sets Up Fake Booter Sites To Muddy DDoS MarketMicrosoft Security Copilot Is a New GPT-4 AI Assistant for CybersecurityCybersecurity Workers Demand Higher SalariesMillions of Pen Tests Show Companies’ Security Postures Are Getting WorseThe Pervasive Threat Of Ransomware And Its MisconceptionsLatitude Financial Data Breach Now Impacts 14 Million CustomersModesto Hit by Apparent Snatch Ransomware AttackOklahoma City University Notifies Students and Employees of Data BreachCentral National Bank (TX) Data Breach Affects an Unknown Number of CustomersChildren’s Data Feared Stolen in Fortra Ransomware AttackTrojanized Tor Browsers Target Russians With Crypto-Stealing MalwareStealthy DBatLoader Malware Loader Spreading Remcos RAT and Formbook in EuropeWiFi Protocol Flaw Allows Attackers to Hijack Network Traffic
3/27/2023 March 27, 2023March 27, 2023 ~ The Cyber Beat ~ Leave a comment President Joe Biden Says U.S. Can’t Buy Spyware That Other Countries Have Used Against ItTwitter Says Parts of Its Source Code Were Leaked Online…Trying to Find the CulpritThey Posted Porn on Twitter: German Authorities Called the CopsFTC Bans Scammy Companies From ‘Calling About Your Car’s Extended Warranty’Exchange Online to Block Emails From Vulnerable On-Prem ServersThe Integral Role of Human Resources Departments in CybersecurityThis Cybersecurity CTO Shares 5 Tips To Better Protect Your CustomersWhat Automation Means For Cybersecurity—And Your BusinessHackers Earn $1,035,000 for 27 Zero-Days Exploited at Pwn2Own VancouverCrown Resorts Says Ransomware Group Claims Accessing Some of Its Files…Clop Keeps Racking Up Ransomware Victims With GoAnywhere FlawAssociates in Dermatology (VA) Breach Stems from Ransomware Attack at VPN SolutionsSun Pharma (India) Admits Business Affected Due to March 2 Ransomware AttackNCB Management Services (PA) Data Breach Affects Nearly a Half-Million ConsumersAtlantic Dialysis Management Services (NY) Breach of Patient InfoFlorida Medical Clinic Notifies Nearly 95,000 People of Recent Data BreachThree Variants of IcedID Malware DiscoveredNew MacStealer Targets Catalina, Newer MacOS VersionsApple Fixes Recently Disclosed WebKit Zero-Day on Older iPhones
3/24-26/2023 March 26, 2023March 26, 2023 ~ The Cyber Beat ~ Leave a comment CISA Unveils Ransomware Notification InitiativeUK National Crime Agency Sets Up Fake DDoS-For-Hire Sites to Catch CybercriminalsUncle Sam Reveals It Sent Cyber-Soldiers to Albania to Hunt for Iranian Threats‘Bitter’ Espionage Hackers Target Chinese Nuclear Energy OrgsIRS Phishing Emails Used to Distribute EmotetChatGPT’s History Bug May Have Also Exposed Payment Info, Says OpenAI…Open-Source BugAustralian Police Arrest Four BEC Actors Who Stole $1.7 MillionFBI: Business Email Compromise Tactics Used to Defraud U.S. VendorsFBI Confirms Access to Breached Cybercrime Forum DatabaseIndia Shut Down Cell Service for 27 Million During a ManhuntGitHub Swiftly Replaces Exposed RSA SSH Key to Protect Git OperationsThe Strongest Protection for Your Online Accounts? This Little KeyProcter & Gamble Confirms Data Theft via GoAnywhere Zero-DayNew Dark Power Ransomware Claims 10 Victims in Its First MonthKroger Postal Prescription Services Breach Impacts 82,466 ConsumersMaersk Says Posted Data Is Not Current and Not From Attack by HackersWisconsin Court System Affected by DDoS IncidentWashington County (FL) Sheriff’s Office Back to Normal After Cyber AttackRussia’s Rostec Allegedly Can De-Anonymize Telegram UsersInaudible Ultrasound Attack Can Stealthily Control Your Phone, Smart SpeakerMicrosoft Pushes OOB Security Updates for Windows Snipping Tool FlawMicrosoft Teams, Virtualbox, Tesla Zero-Days Exploited at Pwn2OwnWindows, Ubuntu, and VMWare Workstation Hacked on Last Day of Pwn2OwnFortra Told Breached Companies Their Data Was Safe
3/23/2023 March 23, 2023March 23, 2023 ~ The Cyber Beat ~ Leave a comment TikTok Congressional Hearing: CEO Shou Zi Chew Grilled by U.S. LawmakersTikTok Paid for Influencers to Attend the Pro-TikTok Rally in DCAre Chinese Tech Firms a Security Risk?Krebs: Google Suspends Chinese E-Commerce App Pinduoduo Over MalwareStanford Pulls Down ChatGPT Clone After Safety ConcernsJournalist Plugs in Unknown USB Drive Mailed to Him—It Exploded in His FaceWindows 11, Tesla, Ubuntu, and macOS Hacked at Pwn2Own 2023CloudPanel Installations Use the Same SSL Certificate Private KeyNew CISA Tool Detects Hacking Activity in Microsoft Cloud ServicesHow to Use ChatGPT to Write CodeEpidemic of Insecure Storage, Backup Devices Is a Windfall for CybercriminalsMITRE Rolls Out Cloud-Based Prototype for Supply Chain SecurityKids Tech Camp iD Tech Still Silent Weeks After Data BreachCity of Toronto Confirms Data Theft, Clop Claims ResponsibilityAttorneys Say Private Information Exposed to Public in NC Courts OverhaulOttawa County (OH) Officials Working to Restore Network After Ransomware AttackShoreline College (WA) Website Hacked; Officials InvestigatingTri Counties Bank in Chico (CA) Suffers Data Breach After February Cyber AttackChina-Aligned “Operation Tainted Love” Targets Middle East Telecom ProvidersGerman and South Korean Agencies Warn of Kimsuky’s Expanding Cyber Attack TacticsPython Info-Stealing Malware Uses Unicode to Evade DetectionSharePoint Phishing Scam Targets 1600 Across U.S., EuropeBlackGuard Stealer Now Targets 57 Crypto Wallets, ExtensionsExploit Released for Veeam Bug Allowing Cleartext Credential TheftWordPress Force Patching WooCommerce Plugin with 500K InstallsMicrosoft Fixes Acropalypse Privacy Bug in Windows 11 Snipping Tool
3/22/2023 March 22, 2023March 22, 2023 ~ The Cyber Beat ~ Leave a comment The TikTok CEO’s Face-Off With Congress Is DoomedCyberterrorism Tops List of Threats to U.S. Vital Interests: GallupUnknown Actors Deploy Malware to Steal Data in Occupied Regions of UkraineNorth Korean Hackers Using Chrome Extensions to Steal Gmail EmailsGerman Political Parties Accused of Microtargeting Voters on FacebookFacebook Accounts Hijacked by New Malicious Trojanized Version of ChatGPT Chrome ExtensionChatGPT-Owner OpenAI Fixes ‘Significant Issue’ Exposing User Chat TitlesCISA and NSA Enhance Security Framework With New IAM GuideBeloved Hacking Veteran Kelly ‘Aloria’ Lum Passes Away at 41Dole Discloses Employee Data Breach After Ransomware AttackConvergent Outsourcing (WA) Files Notice of Data Breach That Leaked Consumers’ SSNsSunland Asphalt and Construction (AZ) Data Breach Affects 7,884 Individuals’ Personal Info$36M BEC Fraud Attempt Narrowly Thwarted by AI TechnologyHackers Inject Credit Card Stealers Into Payment Processing ModulesNew Android Banking Trojan ‘Nexus’ Promoted As MaaSNAPLISTENER: New Malware in REF2924 Group’s Arsenal for Bypassing DetectionScarCruft’s Evolving Arsenal: Researchers Reveal New Malware Distribution TechniquesPoC Exploits Released for Netgear Orbi Router Vulnerabilities
3/21/2023 March 21, 2023March 21, 2023 ~ The Cyber Beat ~ Leave a comment Putin to Staffers: Throw Out Your iPhones, or ‘Give It to the Kids’ and Use Russian or Chinese Tech InsteadGoogle Suspends Top Chinese Shopping App PinduoduoCommonMagic Targets Entities in Russo-Ukrainian Conflict ZoneThe Scorched-Earth Tactics of Iran’s Cyber ArmyMeta Security Manager Was Reportedly Hacked by Greek Intelligence AgencyChatGPT Bug Temporarily Exposes AI Chat Histories to Other UsersWindows’ Screenshot Tool May Be Saving Stuff You Cropped Out, TooAdobe Launches Firefly Generative A.I., Which Lets Users Type to Edit ImagesEuropean Ports Brace for Cybersecurity RegulationBreached Hacking Forum Shuts Down, Fears It’s Not ‘Safe’ From FBIDemocratic Rep: At Least 17 Current and Former Members Had Personal Data Exposed in DC Health Link BreachClop Ransomware Claims Saks Fifth Avenue, Retailer Says Mock Data StolenLockBit Ransomware Gang Now Also Claims City of Oakland BreachExpert Speaks Out After City of Allen Park (MI) Hit With Ransomware AttackOver 2400 Fake Pages Found Targeting Job Seekers in Middle East, AfricaNew ShellBot DDoS Malware Variants Targeting Poorly Managed Linux ServersCoinbase Wallet ‘Red Pill’ Flaw Allowed Attacks to Evade DetectionMicrosoft: Defender Update Behind Windows LSA Protection WarningsFrom Ransomware to Cyber Espionage: 55 Zero-Day Vulnerabilities Weaponized in 2022
3/20/2023 March 20, 2023March 20, 2023 ~ The Cyber Beat ~ Leave a comment Vessels Claiming to Be Chinese Warships Are Messing With Passenger PlanesOnline Sleuths Untangle the Mystery of the Nord Stream SabotageChatGPT Helped Win a Hackathon…OpenAI CEO Sam Altman Says He’s a ‘Little Bit Scared’ of A.I.Researchers Shed Light on CatB Ransomware’s Evasion TechniquesHackers Mostly Targeted Microsoft, Google, Apple Zero-Days in 2022The Top Five Cybersecurity ConcernsKrebs: Why You Should Opt Out of Sharing Data With Your Mobile ProviderFerrari Reports Cyber Incident With Ransom Demand; No Impact to OperationsMispadu Trojan Steals 90,000+ Banking Credentials From Latin American VictimsGeneral Bytes Bitcoin ATMs Hacked Using Zero-Day, $1.5M StolenTexas Medical Liability Trust Data Breach Leaked SSNs and Other Sensitive DataKillNet Group Uses DDoS Attacks Against Azure-Based Healthcare AppsNew DotRunpeX Malware Delivers Multiple Malware Families via Malicious AdsHackers Target .NET Developers with Malicious NuGet Packages
3/17-19/2023 March 19, 2023March 19, 2023 ~ The Cyber Beat ~ Leave a comment Wave of Stealthy China Cyberattacks Hits U.S., Private Networks, Google SaysHuawei Has Replaced Thousands of U.S.-Banned Parts in Its Products, Founder SaysGoogle Pixel Exploit Reverses Edited Parts of ScreenshotsGoogle Tells Users of Some Android Phones: Nuke Voice Calling to Avoid InfectionFCC Now Requires Cell Carriers to Block Scam Texts From Sketchy NumbersI Got Investigated by the Secret Service: Here’s How to Not Be MeKrebs: Feds Charge NY Man as BreachForums Boss “Pompompurin”RAT Developer Arrested in Ukraine for Infecting 10,000 PCs With MalwareCIOs Build New Bonds With CISOsNBA Alerts Fans of a Data Breach Exposing Personal InformationHitachi Energy Confirms Data Breach After Clop GoAnywhere AttacksOU Health Confirms Data for 3K Patients Could Have Been Breached After Laptop’s TheftAllCare Plus Pharmacy (MA) Notified Patients of Data Breach Leaking SSNs and PHITelegram, WhatsApp Trojanized to Target Cryptocurrency WalletsNew GoLang-Based HinataBot Exploiting Router and Server Flaws for DDoS AttacksEmotet Malware Now Distributed in Microsoft OneNote Files to Evade DefensesMicrosoft Shares Script to Fix WinRE BitLocker Bypass Flaw
3/16/2023 March 16, 2023March 16, 2023 ~ The Cyber Beat ~ Leave a comment Senator Warner Wants US Spies to Justify a TikTok BanUK Bans TikTok on Government Devices Following U.S. MoveU.S. FTC Asks Social Media, Video Streaming Firms Info on Misleading AdsSnapchat’s New Parental Control Filters Aim to Protect Minors From Sensitive ContentCourts Side With Big Companies Including Amazon and Experian in Privacy AppealsMicrosoft Support ‘Cracks’ Windows for Customer After Activation FailsConti-Based Ransomware ‘Meowcorp’ Gets Free DecryptorChinese SilkLoader Malware Sold to Russian Cyber-CriminalsWinter Vivern APT Hackers Use Fake Antivirus Scans to Install MalwareLatitude Cyberattack Leads to Data Theft at Two Service ProvidersTrinity Health of New England Employee Email Breach Exposed Patients’ Personal DataCryptojacking Group TeamTNT Suspected of Using Decoy Miner to Conceal Data ExfiltrationBianLian Ransomware Pivots From Encryption to Pure Data-Theft ExtortionConvincing Twitter ‘Quote Tweet’ Phone Scam Targets Bank CustomersFortinet Zero-Day Attacks Linked to Suspected Chinese HackersAdobe Acrobat Sign Abused to Push Redline Info-Stealing MalwareGoogle Finds 18 Baseband Zero-Day Bugs in Samsung Exynos ChipsetsGoogle Proposes Reducing TLS Cert Life Span to 90 Days
3/15/2023 March 15, 2023March 16, 2023 ~ The Cyber Beat ~ Leave a comment U.S. Threatens to Ban TikTok if Chinese Founder Doesn’t Sell Ownership StakeChina Sought Control of Submarine Cables to Spy, Says MicronesiaRussian Hackers Preparing New Cyber Assault Against Ukraine – Microsoft ReportThis Is the New Leader of Russia’s Infamous Sandworm Hacking UnitA Spy Wants to Connect With You on LinkedInThe World’s Real ‘Cybercrime’ ProblemFBI: Ransomware Hit 860 Critical Infrastructure Orgs in 2022Authorities Take Down Darknet Cryptocurrency ‘Mixing’ Service ‘ChipMixer’Dangers from Hacks Stretch Beyond Broken Computer SystemsAI-Generated Voice Deepfakes Aren’t Scary Good—YetHumans Still More Effective Than ChatGPT at PhishingKrebs: Two U.S. Men Charged in 2022 Hacking of DEA PortalCancer Patient Sues Hospital After Ransomware Gang Leaks Her Nude Medical PhotosNordVPN Open Sources Its Linux VPN Client and LibrariesMozilla Firefox Gets Built-in Firefox Relay ControlsTick APT Group Hacked East Asian DLP Software FirmHacker Selling Data Allegedly Stolen in U.S. Marshals Service HackU.S. Federal Agency Hacked Using Old Telerik Bug to Steal DataLockBit Ransomware Claims Essendant Attack, Company Says “Network Outage”Latitude Financial Hacked With 328,000 Customer IDs Feared StolenIndependent Living Systems (ILS) Warns 4.2 Million People of Data BreachNorthStar Emergency Medical Services (AR) Data Breach Affects 82,450 IndividualsLansing Community College Suspends Most Classes for ‘Ongoing Cybersecurity Incident’New Cryptojacking Operation Targeting Kubernetes Clusters for Dero Mining“FakeCalls” Android Malware Targets Financial Firms in South KoreaFirst-Known Dero Cryptojacking Operation Seen Targeting KubernetesCISA Warns of Adobe ColdFusion Bug Exploited as a Zero-DayCritical Microsoft Outlook Bug PoC Shows How Easy It Is to ExploitKrebs: Microsoft Patch Tuesday, March 2023 Edition
3/14/2023 March 15, 2023March 15, 2023 ~ The Cyber Beat ~ Leave a comment D.C. Health Link Hacker Exposes Lawmakers’ Personal InformationUK’s National Cyber Security Centre Reviewing TikTok Risks, Minister SaysMI5 Launches New Agency to Tackle State-Backed AttacksYoroTrooper Espionage Campaigns Target CIS, EU CountriesDEV-1101 Updates Open Source Phishing KitFBI Warns of Spike in ‘Pig Butchering’ Crypto Investment SchemesCybercriminals Exploit Silicon Valley Bank (SVB) Collapse to Steal Money and DataGPT-4 Unveiled: ChatGPT’s Next Big Upgrade Is HereHow Businesses Can Get Ready for AI-Powered Security ThreatsRubrik Confirms Data Theft in GoAnywhere Zero-Day AttackBeaver Medical Group Files Notice of Data Breach Leaking Patient’s PHIBone & Joint (WI) “System Outage” Resulted in Data Breach Affecting Patients & EmployeesMerced College (CA) Provides Notice of Data Breach to Students Following Malware AttackRing Won’t Say if It Was Hacked After Ransomware Gang Claims AttackSAP Releases Security Updates Fixing Five Critical VulnerabilitiesMicrosoft March 2023 Patch Tuesday Fixes 2 Zero-Days, 83 Flaws…Microsoft Fixes Outlook Zero-Day Used by Russian Hackers Since April 2022…Microsoft Fixes Windows Zero-Day Exploited in Ransomware Attacks
3/13/2023 March 14, 2023March 14, 2023 ~ The Cyber Beat ~ Leave a comment STALKER 2 Game Developer GSC Game World Hacked by Russian Hacktivists, Data StolenLarge-scale Cyber Attack Hijacks East Asian Websites for Adult Content RedirectsCISA Joins Forces With Women in Cybersecurity to Break up the Boy’s ClubCISA Now Warns Critical Infrastructure of Ransomware-Vulnerable DevicesFortinet: New FortiOS Bug Used as Zero-Day to Attack Gov’t NetworksNordVPN Makes its Meshnet Private Tunnel Free for EveryoneOutlook App to Get Built-In Microsoft 365 MFA on Android, iOSFinal Three Sentenced in £70m Money Laundering CaseZoll Medical Says Intruders Had 1M+ Patient, Staff Records at Their FingertipsLA Housing Authority Discloses Data Breach After Ransomware AttackArizona Department of Economic Security Confirms Data BreachHackers Steal $197 Million in Crypto in Euler Finance AttackLockBit Brags: We’ll Leak Thousands of SpaceX Blueprints Stolen From SupplierCyber Attack Affecting Gloucester Museum’s System One Year OnKali Linux 2023.1 Introduces ‘Purple’ Distro for Defensive SecurityBrand Names in Finance, Telecom, Tech Lead Successful Phishing Lures
3/10-12/2023 March 13, 2023March 13, 2023 ~ The Cyber Beat ~ Leave a comment KamiKakaBot Malware Used in Latest Dark Pink APT Attacks on Southeast Asian TargetsNorth Korean UNC2970 Hackers Expands Operations with New Malware FamiliesRansomware Attacks Have Entered a ‘Heinous’ New PhaseInvestment Fraud is Now Biggest Cybercrime EarnerFake ChatGPT Chrome Extension Hijacking Facebook Accounts for Malicious AdvertisingSecurity Researchers Targeted With New Malware via Job Offers on LinkedInAI-Generated YouTube Video Tutorials Spreading Infostealer MalwareTikTok Users Shrug at China Fears: ‘It’s Hard to Care’Cerebral Admits to Sharing Patient Data With Meta, TikTok, and GoogleFBI Once Bought Mobile-Phone Data for Warrantless Tracking: Other Agencies Still DoBrazil Seizing Flipper Zero Shipments to Prevent Use in CrimeCasper Attack Steals Data Using Air-Gapped Computer’s Internal SpeakerMicrosoft OneNote to Get Enhanced Security After Recent Malware AbuseBlackbaud to Pay $3M for Misleading Ransomware Attack DisclosureKey Takeaways From The National Cybersecurity StrategyMental Health Provider Cerebral Alerts 3.1M People of Data BreachPeopleGrove Security Lapse Exposed Users’ Personal InformationCodman Square Health Center (MA) Reports Data Breach Following Ransomware Attack56,000 Affected by DC Health Link Data BreachStaples-Owned Essendant Facing Multi-Day “Outage,” Orders FrozenBATLOADER Malware Uses Google Ads to Deliver Vidar Stealer and Ursnif PayloadsMedusa Ransomware Gang Picks up Steam as It Targets Companies WorldwideNew Version of Prometei Botnet Infects Over 10,000 Systems WorldwideXenomorph Android Banking Trojan Returns with a New and More Powerful VariantNew GoBruteforcer Malware Targets phpMyAdmin, MySQL, FTP, PostgresClop Ransomware Gang Begins Extorting GoAnywhere Zero-Day VictimsUnpatched Zero-Day Bugs in Akuvox Smart Intercoms Allow Remote EavesdroppingCISA Warns of Actively Exploited Plex Bug After LastPass BreachCISA Warns of Critical VMware RCE Flaw Exploited in Attacks
3/9/2023 March 9, 2023March 9, 2023 ~ The Cyber Beat ~ Leave a comment U.S. Congressman Darin LaHood Says the FBI Unlawfully Targeted HimFifth of Government Workers Don’t Care if Employer is HackedTehran Targets Female Activists in Espionage CampaignRubio Takes Aim At Planned Ford U.S. Battery Plant Using Chinese TechnologyPentagon Unveils Cyber Workforce Strategy to Tackle Labor ShortageKrebs: Who’s Behind the NetWire Remote Access Trojan?Google Trashes the Chrome Cleanup ToolFBI Warns of Cryptocurrency Theft via “Play-To-Earn” GamesTikTok Initiates Project Clover Amid European Data Security ConcernsInadvertent Data Destruction After a Cyberattack Can Violate EU Privacy RulesScammers Are Using AI to Impersonate Your Loved Ones: Here’s What to Watch Out ForRemcos Trojan Returns to Most Wanted Malware List After Ukraine AttacksAT&T Blames Marketing Bods for Exposing 9M Subscriber Account RecordsMicrosoft: Business Email Compromise Attacks Can Take Just HoursAkamai Mitigates Record-Breaking 900Gbps DDoS Attack in AsiaIceFire Ransomware Now Encrypts Both Linux and Windows Systems8220 Gang Behind ScrubCrypt Attack Targeting Oracle Weblogic ServerHackers Exploiting Remote Desktop Software Flaws to Deploy PlugX MalwareSuspected Chinese Cyber Spies Target Unpatched SonicWall DevicesGitHub Makes 2FA Mandatory Next Week for Active DevelopersHow to Jump-Start Your Cybersecurity Career
3/8/2023 March 9, 2023March 9, 2023 ~ The Cyber Beat ~ Leave a comment FBI Investigates Data Breach Impacting U.S. House Members and StaffThe FBI Just Admitted It Bought U.S. Location DataThe U.S. Air Force Is Moving Fast on AI-Piloted Fighter JetsBoeing Signs off Anti-Jamming Tech That Keeps Satellites OnlineChina Says It’s ‘Puzzled’ After Report Germany Might Ban Huawei From Parts of 5G Mobile NetworkDutch Responds to U.S. China Policy With a Plan to Curb Semiconductor Tech ExportsAustralia Demands Russia Crack Down on Cyber CriminalsDuckDuckGo Launches AI-Powered Search Query Answering ToolMicrosoft Enables LSA Protection by Default in Windows Canary BuildEurovision 2023: Hotel Phishing Scam Targets Song Contest FansKrebs: Sued by Meta, Freenom Halts Domain RegistrationsLazarus Group Targets South Korean Finance Firm Via Zero-Day FlawCommonwealth Bank of Australia’s Indonesian Arm Hit by Cyber AttackRansomware Gang Posts Video of Data Stolen From Minneapolis SchoolsCity of Waynesboro (VA) Targeted in Cyber AttackNortheast Surgical Group (MI) Notifies 15K Patients of Data BreachJenkins Security Alert: New Security Flaws Could Allow Code Execution AttacksBitwarden Flaw Can Let Hackers Steal Passwords Using iframesFortinet Warns of New Critical Unauthenticated RCE VulnerabilityVeeam Fixes Bug That Lets Hackers Breach Backup InfrastructureCISA’s KEV Catalog Updated with 3 New Flaws Threatening IT Management Systems
3/7/2023 March 8, 2023March 8, 2023 ~ The Cyber Beat ~ Leave a comment Cyber Command Chief: Election Interference Is Not Going AwayWatchdog Says U.S. Cyber Agency Lacks a Plan for Communicating During Major HacksRussia’s Cyber Tactics in Ukraine Shift to Focus on EspionageRussian Disinformation Campaign Records High-Profile Individuals on CameraHow to Tell if Your Laptop Camera Has Been Hacked and Someone Is Spying on YouWhite House Backs Senate Bill to Boost U.S. Ability to Ban TikTokShein App Accessed Clipboard Data on Android DevicesThe Daring Ruse That Exposed China’s Campaign to Steal American SecretsHow Denmark’s Welfare State Became a Surveillance NightmareTwitter Just Let Its Privacy- And Security-Protecting Tor Service ExpireNext-Gen Mobile Internet — 6G — Will Launch in 2030, Telecom Bosses Say, Even as 5G Adoption Remains LowLastPass Hack: Engineer’s Failure to Update Plex Software Led to Massive Data BreachPro-Putin Scammers Trick Politicians and Celebrities Into Low-Tech Hoax Video CallsThe Rise of Zero-Trust Cybersecurity in a Multicloud WorldSharp Panda Target Southeast Asia in Espionage Campaign Expansion: ‘Radio Silence’ Mode to Evade DetectionAcer Confirms Breach After 160GB of Data for Sale on Hacking ForumBrazilian Conglomerate Andrade Gutierrez Suffers 3TB Data BreachRansomware Attack Against Barcelona Hospital Disrupts OperationsHouston Healthcare (GA) Falls Victim to Cybersecurity AttackMinneapolis Public Schools Says Hackers Behind Alleged Attack Posted Some Data OnlineNorthern Essex Community College (MA) Closed for 5th Day Due to Cyberattack1st Franklin Financial Corporation (GA) Notifies Customers of Recent Data BreachTransparent Tribe Hackers Distribute CapraRAT via Trojanized Messaging AppsSYS01stealer: New Threat Using Facebook Ads to Target Critical Infrastructure FirmsEmotet Malware Attacks Return After Three-Month BreakAndroid March 2023 Update Fixes Two Critical Code Execution FlawsMicrosoft Excel Now Blocking Untrusted XLL Add-Ins by Default
3/6/2023 March 7, 2023March 7, 2023 ~ The Cyber Beat ~ Leave a comment U.S. Government to Explore Cyber Insurance BackstopNew Class of Lawmakers Look To Dig In on CybersecurityFaced With Likelihood of Ransomware Attacks, Businesses Still Choosing to Pay UpWhere Are the Women in Cyber Security? On the Dark Side, Study SuggestsCybersecurity Trends & Statistics For 2023: Attack Surface And Hacker Capabilities GrowNIST’s Quantum-Proof Algorithm Has a Bug, Analysts SayRotterdam: This Algorithm Could Ruin Your Life…Inside the Suspicion MachineGerman and Ukrainian Police Raid Alleged Cybercrime ‘DoppelPaymer’ Gang With Help From FBIVice Society Ransomware Group Claims Hamburg University of Applied Sciences as Latest VictimDenver Public Schools Data Breach Includes SSNs, Bank InfoHenrico Doctors’ Hospital (VA) Notifies Patients of Data BreachAcer Data Breach? Hacker Claims to Sell 160GB Trove of Stolen DataSandbox Blockchain Game Breached to Send Emails Linking to MalwareNew HiatusRAT Malware Targets Business-Grade Routers to Covertly Spy on VictimsOld Windows ‘Mock Folders’ UAC Bypass Used to Drop MalwareProof-of-Concept Released for Critical Microsoft Word RCE Bug
3/3-5/2023 March 5, 2023March 5, 2023 ~ The Cyber Beat ~ Leave a comment EPA to Make States Evaluate Public Water Systems’ CybersecurityU.S. Cybersecurity Agency Raises Alarm Over Royal Ransomware’s Deadly CapabilitiesKrebs: Highlights from the New U.S. Cybersecurity StrategyBidenCash Market Leaks Over 2 Million Stolen Credit Cards for FreeTPM 2.0 Library Vulnerabilities May Affect Billions of IoT DevicesBrave Search Launches AI-Powered Summarizer in Search ResultsA Privacy Hero’s Final Wish: An Institute to Redirect AI’s FutureFTC to Ban BetterHelp From Sharing Mental Health Data With AdvertisersSecret Service, ICE Break the Law Over and Over With Fake Cell Tower SpyingPlay Ransomware Claims Disruptive Attack on City of Oakland…Play Ransomware Gang Leaks Data Stolen From City of OaklandPersonal Data Exposed in Cyber Attack on Modesto (CA) PDIndigo Books Refuses LockBit Ransomware DemandIndian Startup Yes Madam Exposed Sensitive Data of Customers and Gig WorkersAloha Nursing Rehab Centre Reports 2022 Data Breach Affecting More Than 20k PatientsVeris Residential (NJ) Notifies Victims of Recent Data BreachNew FiXS ATM Malware Targeting Mexican BanksMicrosoft Releases Windows Security Updates for Intel CPU FlawsHow to Prevent Microsoft OneNote Files From Infecting Windows With Malware
3/2/2023 March 2, 2023March 2, 2023 ~ The Cyber Beat ~ Leave a comment Biden Administration Unveils Long-Awaited National Cyber Strategy…Aims to Shift Cybersecurity Burden From Individuals and Small Businesses to Tech ProvidersCisco Chief Says Tech Products Must Be Made More SecureCISA Releases Free ‘Decider’ Tool to Help with MITRE ATT&CK MappingDashlane to Support New Third-Party Passkey Sync Feature in Android 14Stop Using Your 4-Digit iPhone Passcode in Public. Do This InsteadForget ChatGPT, the Most Overhyped Security Tool Is Technology Itself, Wiz WarnsAustralian Woman Arrested for Email Bombing a Government OfficeWH Smith Discloses Cyber-Attack, Company Data TheftChick-Fil-A Confirms Accounts Hacked in Months-Long “Automated” AttackHackers Steal Gun Owners’ Data From Firearm Auction Website GunAuction.comChinese ‘Mustang Panda’ Hackers Use New Custom Backdoor to Evade DetectionLucky Mouse: SysUpdate Malware Strikes Again with Linux Version and New Evasion TacticsExperts Identify ‘Colour-Blind’ Fully-Featured Info Stealer and Trojan in Python Package on PyPIAPI Security Flaw Found in Booking.com Allowed Full Account TakeoverThis Hacker Tool Can Pinpoint a DJI Drone Operator’s Location
3/1/2023 March 2, 2023March 2, 2023 ~ The Cyber Beat ~ Leave a comment Russia Bans Foreign Messaging Apps in Government OrganizationsCybercriminals Targeting Law Firms with GootLoader and FakeUpdates MalwareParallax RAT Targeting Cryptocurrency Firms with Sophisticated Injection TechniquesBudweiser Maker Simplifies How It Assesses Privacy and Cyber RisksGitHub’s Secret Scanning Alerts Now Available for All Public ReposMicrosoft Exchange Online Outage Blocks Access to Mailboxes WorldwideChatGPT: What the New York Times and Others Are Getting Terribly Wrong About ItHacked Washington Law Firm Covington & Burling Fights SEC Subpoena in Effort to Protect Attorney-Client PrivilegeWhy Overcoming The Cybersecurity Labor Shortage Matters To Company SuccessWest Virginia University Alerted of Data Breach, Involves ‘Limited’ Amount of Personal Information AvailableSoutheastern Louisiana University ‘Likely’ Suffered Cyber AttackHatch Bank Announces Third-Party Data Breach at Cybersecurity Firm, FortraCrystal Bay Casino Notifies 86,291 Individuals of Recent Data BreachTrezor Warns of Massive Crypto Wallet Phishing CampaignIron Tiger Hackers Create Linux Version of Their Custom MalwareBlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11Cisco Patches Critical Web UI RCE Flaw in Multiple IP PhonesAruba Networks Fixes Six Critical Vulnerabilities in ArubaOS