Month: March 2024

3/29-31/2024

~ The Cyber Beat ~ Leave a comment
U.S. Public and Private Sectors Hold Joint Cyber Drill

CISA Launches New Cyber Incident Reporting Rules for U.S. Defense Contractors

Congress Bans Staff Use of Microsoft’s AI Copilot

Jeffrey Epstein’s Island Visitors Exposed by Data Broker

Krebs: Thread Hijacking: Phishes That Prey on Your Curiosity

Activision: Enable 2FA to Secure Accounts Recently Stolen by Malware

4 Things You Need to Know About Health Care Cyberattacks		AT&T Data Breach: 73 Million of Customers Caught up in Major Dark Web Leak

Florida Memorial University Reportedly Targeted in Ransomware Cyberattack

Vultur Banking Malware for Android Poses as McAfee Security App

Urgent: Secret Backdoor Found in XZ Utils Library, Impacts Major Linux Distros

Hackers Target macOS Users with Malicious Ads Spreading Stealer Malware

You Should Update Apple iOS and Google Chrome ASAP

3/28/2024

~ The Cyber Beat ~ Leave a comment
U.S. Treasury Urges Financial Sector to Address AI Cybersecurity Threats

NIST Unveils New Consortium to Operate its National Vulnerability Database

Australian Government Doubles Down On Cybersecurity in Wake of Major Attacks

Cisco Warns of Password-Spraying Attacks Targeting VPN Services

17 Billion Personal Records Exposed in Data Breaches in 2023

FTX Founder Sam Bankman-Fried Sentenced to 25 Years for Crypto Fraud, to Pay $11 Billion in Forfeiture

Cybersecurity Platform Coro Raises $100 Mln at Valuation of $750 Mln

How the Baltimore Bridge Collapse Spawned a Torrent of Instant Conspiracy Theories		Retail Chain Hot Topic Hit by New Credential Stuffing Attacks

Harvard Pilgrim Health Network Updates 2023 Data Breach Total to Nearly 2.9 Million

Affinity Health Services (IN) Announces Data Breach Affecting Employees and Patients

Linux Version of Multi-Platform DinodasRAT Spotted in Cyber Attacks Across Several Countries

PyPi Suspends New User Registration to Block Malware Campaign

Decade-Old Linux ‘Wall’ Bug Helps Make Fake SUDO Prompts, Steal Passwords

Apple Security Bug Opens iPhone, iPad to RCE

Nvidia’s Newborn ChatRTX Bot Patched for Security Bugs

3/27/2024

~ The Cyber Beat ~ Leave a comment
Chinese Hackers Target ASEAN Entities in Espionage Campaign

Hackers Hit Indian Defense, Energy Sectors with Malware Posing as Air Force Invite

New Darcula Phishing Service Targets iPhone Users via iMessage

Google: Spyware Vendors Behind 50% of Zero-Days Exploited in 2023

U.S. Publishes Draft Federal Rules for Cyber Incident Reporting

U.S. Offers $10 Million Bounty for Info on ‘Blackcat’ Hackers Who Hit UnitedHealth

KuCoin Charged with AML Violations That Let Cybercriminals Launder Billions

UK Law Enforcers Arrest 400 in Major Fraud Crackdown

Study: Majority of Americans Now Use Ad Blockers

Three Emerging Cybersecurity Trends To Follow		‘Malicious Activity’ Hits the University of Cambridge’s Medical School

Hackers Threaten to Publish Huge Cache of UK NHS Data

Dedicated Senior Medical Center Notifies Patients of Recent Data Breach

Town of Huntsville (ON) Says It Was Attacked by Ransomware

Haverford Township (PA) Says Data Breach May Have Exposed Personal Information

Alert: New Phishing Attack Delivers Keylogger Disguised as Bank Payment Notice

Microsoft Edge Bug Could Have Allowed Attackers to Silently Install Malicious Extensions

CISA Warns: Hackers Actively Attacking Microsoft SharePoint Vulnerability

Google Fixes Chrome Zero-Days Exploited at Pwn2Own 2024

3/26/2024

~ The Cyber Beat ~ Leave a comment
New Zealand to World: China Attacked Us, Too!

Finland Confirms APT31 Hackers Behind 2021 Parliament Breach

Krebs: Recent ‘MFA Bombing’ Attacks Targeting Apple Users

Facebook Snooped on Users’ Snapchat Traffic in Secret Project, Documents Reveal

Portugal Forces Sam Altman’s Worldcoin to Stop Collecting Biometric Data

U.S. Targets Crypto Firms Aiding Russia Sanctions Evasion

SEC Ramps Up Massive-Hack Probe With Focus on Tech, Telecom Companies

Judges Block U.S. Extradition of Wikileaks Founder Julian Assange—for Now

Cyber Leaders Struggle With Heightened Job Expectations, Communicating With Board

…Only 5% of Boards Have Cybersecurity Expertise, Despite Financial Benefits

U.S. Fines Man $9.9 Million for Thousands of Disturbing Robocalls		Panera Bread Experiencing Nationwide IT Outage Since Saturday

Ransomware Gang Attacks the Big Issue, a Street Newspaper Supporting the Homeless

Gilmer County (GA) Hit by Ransomware Attack Just Months After Fulton County Incident

Wyatt Detention Facility (RI) Reports More People Affected by Data Breach

Germany Warns of 17K Vulnerable Microsoft Exchange Servers Exposed Online

Malicious NuGet Package Linked to Industrial Espionage Targets Developers

Hackers Exploit Ray Framework Flaw to Breach Servers, Hijack Resources

TheMoon Malware Infects 6,000 Asus Routers in 72 Hours for Proxy Service

Worldwide Agenda Ransomware Wave Targets VMware ESXi Servers

$700 Cybercrime Software Turns Raspberry Pi Into an Evasive Fraud Tool

3/25/2024

~ The Cyber Beat ~ Leave a comment
U.S. And Britain Accuse China-Linked Hackers of ‘Malicious’ Cyber Campaigns, Announce Sanctions

…Hit Millions of People

…APT31

…Operation That Ran for 14 Years

…Britain Says China Hacked Electoral Watchdog, Targeted Lawmaker Emails

Iran-Linked MuddyWater Deploys Atera for Surveillance in Phishing Attacks

New Tycoon 2FA Phishing Kit Raises Cybersecurity Concerns

Fake Ozempic Deals on the Rise as Experts Warn of Phishing Scams

Key Lesson from Microsoft’s Password Spray Hack: Secure Every Account

CISA Seeks to Curtail ‘Unforgivable’ SQL Injection Defects		Communications Workers Union Confirms Cyberattack Behind IT, Email Outage

St. Cloud Most Recent in String of Florida Cities Hit with Ransomware

GardaWorld Cash Notifies Consumers of 2023 Data Breach

Personal Info May Have Been Compromised in Newton School District (KS) 2023 Data Breach

Hackers Poison Source Code From Largest Discord Bot Platform

‘Far-Reaching’ Hack Stole Information From Python Developers

Hackers Hijack GitHub Accounts in Supply Chain Attack Affecting Top-gg and Others

New ZenHammer Memory Attack Impacts AMD Zen CPUs

GoFetch Security Exploit Can’t Be Disabled on M1 and M2 Apple Chips

3/22-24/2024

~ The Cyber Beat ~ Leave a comment
Chinese Snoops Use F5, ConnectWise Bugs to Sell Access Into Top U.S., UK Networks

N. Korea-linked Kimsuky Shifts to Compiled HTML Help Files in Ongoing Cyberattacks

New AcidPour Wiper Targeting Linux Devices Spotted in Ukraine

Elite Russian Hackers Targeting German Politicians, Google Warns

…‘WINELOADER’

Microsoft to Shut Down 50 Cloud Services for Russian Businesses

AT&T Won’t Say How Its Customers’ Data Spilled Online in 2021

Krebs: Mozilla Drops Onerep After CEO Admits to Running People-Search Networks

EV Charging Firms Rush to Add Cyber Shields to New Products in U.K.

German Police Seize ‘Nemesis Market’ in Major International Darknet Raid		Air Europa Warns Customers of Personal Data Leak

Henry County (IL) Government, Local College Affected by Ransomware Attacks

Tarrant Appraisal District (TX) Says a Criminal Ransomware Attack Shut down Its Website

American Renal Associates Patients Affected by Ransomware Attack

Rhysida Ransomware Lays Claim on MarineMax Compromise

New StrelaStealer Phishing Attacks Hit Over 100 Organizations in E.U. and U.S.

New GoFetch Attack on Apple Silicon CPUs Can Steal Crypto Keys

AWS Patches Critical ‘FlowFixation’ Bug in Airflow Service to Prevent Session Hijacking

Mozilla Fixes Two Firefox Zero-Day Bugs Exploited at Pwn2Own

Hackers Earn $1,132,500 for 29 Zero-Days at Pwn2Own Vancouver

3/21/2024

~ The Cyber Beat ~ Leave a comment
Cyber Warfare: Understanding New Frontiers in Global Conflicts

Congress Votes Unanimously to Ban Brokers Selling American Data to Enemies

Microsoft Faces Bipartisan Criticism for Alleged Censorship on Bing in China

U.S. Sues Apple, Alleges Tech Giant Exploits Illegal Monopoly

…Apple’s Imessage Encryption Puts Its Security Practices in the DOJ’s Crosshairs

U.S. Department of Transportation Opens Review Into How Largest U.S. Airlines Use Personal Information

Hackers Found a Way to Open Any of 3 Million Hotel Keycard Locks in Seconds

Krebs: The Not-so-True People-Search Network from China

Fake Obituary Sites Send Grievers to Porn and Scareware Pages		Russia Hackers Using TinyTurla-NG to Breach European NGO’s Systems

Evasive Sign1 Malware Campaign Infects 39,000 WordPress Sites

Researchers Find Over 800 npm Packages with Discrepancies, 18 Exploitable to ‘Manifest Confusion’

AndroxGh0st Malware Targets Laravel Apps to Steal Cloud Credentials

KDE Advises Extreme Caution After Theme Wipes Linux User’s Files

Exploit Released for Fortinet RCE Bug Used in Attacks, patch Now

Atlassian Releases Fixes for Over 2 Dozen Flaws, Including Critical Bamboo Bug

Security Researchers Win Second Tesla At Pwn2Own

The New CISO: Rethinking the Role to Protect From Attacks

3/20/2024

~ The Cyber Beat ~ Leave a comment
U.S. EPA Forms Task Force to Protect Water Systems from Cyberattacks

U.S. Levels New Sanctions Over Russian Disinformation Campaign

UnitedHealth Says Unit Change Has Restored and Rebuilt Functions Handled by Amazon

Companies Take a Closer Look at Supply Chains After Recent Cyberattacks

Some of the Most Popular Websites Share Your Data With Over 1,500 Companies

Glassdoor Wants to Know Your Real Name

London Clinic Probes Claim Staffer Tried to Peek at Princess Kate’s Records

Here’s Why Twitter Sends You to a Different Site Than What You Clicked

Flipper Zero Makers Respond to Canada’s ‘Harmful’ Ban Proposal		Spa Grand Prix Email Account Hacked to Phish Banking Info From Fans

Apex Legends Hacker Said He Hacked Tournament Games ‘For Fun’

It’s Tax Season, and Scammers Are a Step Ahead of Filers, Microsoft Says

New BunnyLoader Malware Variant Surfaces with Modular Attack Features

New ‘Loop DoS’ Attack Impacts Hundreds of Thousands of Systems

TeamCity Flaw Leads to Surge in Ransomware, Cryptomining, and RAT Attacks

Ivanti Fixes Critical Standalone Sentry Bug Reported by NATO

GitHub’s New AI-Powered Tool Auto-Fixes Vulnerabilities in Your Code

3/19/2024

~ The Cyber Beat ~ Leave a comment
White House and EPA Warn of Hackers Breaching Water Systems

CISA Shares Critical Infrastructure Defense Tips Against Chinese Hackers

APIs Drive the Majority of Internet Traffic and Cybercriminals are Taking Advantage

Crypto Scams More Costly to the U.S. Than Ransomware, Feds Say

Researchers Uncover New “Conversation Overflow” Tactics

We’re One Step Closer to a Global Cybersecurity Standard for Smart Home Devices

From Deepfakes to Malware: AI’s Expanding Role in Cyber Attacks

U.S. DOJ to Target Pre-IPO Artificial Intelligence Frauds, Top Attorney Says		FTC Warns Scammers Are Impersonating Its Employees to Steal Money

Ultra Intelligence & Communications Notifies Consumers of November 2023 Data Breach

New Phishing Attack Uses Clever Microsoft Office Trick to Deploy NetSupport RAT

Suspected Russian Data-Wiping ‘AcidPour’ Malware Targeting Linux x86 Devices

Oracle Warns That macOS 14.4 Update Breaks Java on Apple CPUs

Airbus Calls Off Planned Acquisition of Atos Cybersecurity Group

Ukraine Arrests Hackers Trying to Sell 100 Million Stolen Accounts

…France to Shield Atos Cybersecurity Assets After Airbus Abandons Deal

3/18/2024

~ The Cyber Beat ~ Leave a comment
APT28 Hacker Group Targeting Europe, Americas, Asia in Widespread Phishing Scheme

Chinese Earth Krahang Hackers Breach 70 Orgs in 23 Countries

UnitedHealth Group Has Paid More Than $2 Billion to Providers Following Cyberattack

…UnitedHealth Unit Hack May Hit Pharmacies, Providers’ Credit Profiles, Fitch Says

…UnitedHealth Begins Testing Restored Change Healthcare Claims Platform

Over 50,000 Vulnerabilities Discovered in DoD Systems Through Bug Bounty Program

Don’t Be Like These 900+ Websites and Expose Millions of Passwords via Firebase

Apex Legends Postpones Competition Amid Hacking Concerns

Microsoft Announces Deprecation of 1024-Bit RSA Keys in Windows		Fujitsu Reveals Malware Installed on Internal Systems, Risk of Customer Data Spill

South African Government Pension Data Leak Fears Spark Probe

AT&T Says Leaked Data of 70 Million People Is Not From Its Systems

Nations Direct Mortgage Alerts 83,000 to Personal Data Leaks From December Cyberattack

Scranton School District (PA) Reports Ransomware Attack

Cyberattack Knocks Out Pensacola (FL) City Government Phone Lines

New DEEP#GOSU Malware Campaign Targets Windows Users with Advanced Tactics

Three New Critical Vulnerabilities Uncovered in Argo

WordPress Admins Urged to Remove miniOrange Plugins Due to Critical Flaw

Fortra Patches Critical RCE Vulnerability in FileCatalyst Transfer Tool

3/15-17/2024

~ The Cyber Beat ~ Leave a comment
White House Urges Senate to ‘Move Swiftly’ on TikTok Bill as Lawmakers Drag Their Heels

Krebs: CEO of Data Privacy Company Onerep.com Founded Dozens of People-Search Firms

Security News This Week: Automakers Are Telling Your Insurance Company How You Really Drive

Former Telecom Manager Admits to Doing SIM Swaps for $1,000

As if Working at Helpdesk Weren’t Bad Enough, IT Helpers Now Targeted by Cybercrims

Third-Party ChatGPT Plugins Could Lead to Account Takeovers

Some McDonald’s Outlets Back Online After Tech Outage in Several Countries

…“Configuration Change”

Admin of Major Stolen Account Marketplace Gets 42 Months in Prison		International Monetary Fund Email Accounts Hacked in Cyberattack

Scottish Health Service Says ‘Focused and Ongoing Cyber Attack’ May Disrupt Services

District of North Vancouver (BC) Victim of ‘Attempted’ Ransomware Attack

Network Outages in Birmingham (AL) Persist as City Officials Stay Tight-Lipped

Malicious Ads Targeting Chinese Users with Fake Notepad++ and VNote Installers

Hackers Using Cracked Software on GitHub to Spread RisePro Info Stealer

GhostRace – New Data Leak Vulnerability Affects Modern CPUs

Hackers Exploit Aiohttp Bug to Find Vulnerable Networks

New Acoustic Attack Demonstration by Researchers Determines Keystrokes From Typing Patterns

3/14/2024

~ The Cyber Beat ~ Leave a comment
Russian RedCurl Cybercrime Group Abuses Windows PCA Tool for Corporate Espionage

TikTok Ban Raises Data Security, Control Questions

Keep China out of America’s nascent AI industry

Cloud Account Attacks Surged 16-Fold in 2023

New Report Suggests Surge in SaaS Assets, Employee Data Sharing

Tech Support Firms Restoro, Reimage Fined $26 Million for Scare Tactics

Google Gooses Safe Browsing With Real-Time Protection That Doesn’t Leak to Ad Giant		Alabama Under DDoS Cyberattack by Russian-Backed Hacktivists

French Employment Agency Data Breach Could Affect 43 Million People

Irish Gov’t Website Bug That Exposed COVID-19 Vaccination Records Took 2 Years to Disclose

SIM Swappers Hijacking Phone Numbers in eSIM Attacks

Ande Loader Malware Targets Manufacturing Sector in North America

StopCrypt: Most Widely Distributed Ransomware Now Evades Detection

Researchers Detail Kubernetes Vulnerability That Enables Windows Node Takeover

3/13/2024

~ The Cyber Beat ~ Leave a comment
House Passes Bill That Could Ban TikTok

There Are Dark Corners of the Internet. Then There’s 764.

Investment Scams Grow, 13,000 Domains Detected in January 2024

At 35, the Web Is Broken, but Its Inventor Hasn’t Given Up Hope of Fixing It Yet

Microsoft Expands Availability of Its AI-Powered Cybersecurity Assistant

Nozomi Networks Raises $100 Million in Series E

As Boards Focus More on Cybersecurity, Are They Missing One of the Biggest Threats?

Bitcoin Fog Mixer Operator Convicted for Laundering $400 Million

LockBit Ransomware Affiliate Gets Four Years in Jail, to Pay $860K		HHS Opens Probe Into UnitedHealth’s Cybersecurity as Hack Fallout Continues

Nissan Oceania Breached; 100K People Affected Down Under

Billion-Dollar Boat Seller MarineMax Reports Cyberattack to SEC

PixPirate Android Banking Trojan Using New Evasion Tactic to Target Brazilian Users

Cybercriminals Deploying VCURMS and STRRAT Trojans via AWS and GitHub

Hackers Exploit Windows SmartScreen Flaw to Drop DarkGate Malware

Meta’s Quest VR Vulnerable to ‘Inception-Style’ Hack That Lets Crooks Take Control of Headsets

Fortinet Warns of Critical RCE Bug in Endpoint Management Software

Krebs: Patch Tuesday, March 2024 Edition

3/12/2024

~ The Cyber Beat ~ Leave a comment
Russian Independent Media Outlet Meduza Faces ‘Most Intense Cyber Campaign’ Ever

Biden’s Budget Proposal Boosts CISA Funding to $3B

Lawmakers Slam UK Government’s “Ostrich Strategy” for Cybersecurity

Change Healthcare Rival Onboards Hundreds of Thousands of Customers During Hack Crisis

…White House Meets with UnitedHealth CEO Over Hack

Over 12 Million Auth Secrets and Keys Leaked on GitHub in 2023

Binance’s Top Crypto Crime Investigator Is Being Detained in Nigeria

South Korean Citizen Detained in Russia on Cyber Espionage Charges

Meta Sues Ex Infra VP for Allegedly Stealing Top-Secret Datacenter Blueprints

We Cannot Escape the Tyranny of Technology		Stanford: Personal Data of 27,000 People Stolen in September Ransomware Attack

Acer Confirms Philippines Employee Data Leaked on Hacking Forum

Cyberattack Targets Regulator Database in South Africa

Town of Huntsville (ON) Scrambling After Weekend Cyber Attack

Security Breach at Eastern Radiologists (NC) Compromises Patient Data

New Cloud Attack Targets Crypto CDN Meson Ahead of Launch

Watch Out: These PyPI Python Packages Can Drain Your Crypto Wallets

Sophisticated Active Vishing Campaigns Take World by Storm

Google Paid $10 Million in Bug Bounty Rewards Last Year

3/11/2024

~ The Cyber Beat ~ Leave a comment
Kremlin Accuses America of Plotting Cyberattack on Russian Voting Systems

Midjourney Bans All Stability AI Employees Over Alleged Data Scraping

The Cybercrime Underworld Has Removed All the Guardrails on the AI Frontier, but the Good Guys Are Catching Them There

Krebs: Incognito Darknet Market Mass-Extorts Buyers, Sellers

Airbnb Is Banning Indoor Security Cameras

One Reason School Cyberattacks Are on the Rise? Schools Are Easy Targets for Hackers

Researchers Expose Microsoft SCCM Misconfigs Usable in Cyberattacks

The 4 Big Questions the Pentagon’s New UFO Report Fails to Answer

Tuta Mail Adds New Quantum-Resistant Encryption to Protect Email

NSA Launches Top 10 Cloud Security Mitigation Strategies

Telemedicine Business Owner Faces 20 Years For $136m Fraud		French State Hit by Cyberattacks of “Unprecedented Intensity”

New York-Based EquiLend Holdings Warns Employees Their Data Was Stolen by Ransomware Gang in January

Third-Party Breach and Missing MFA Contributed to British Library Cyber-Attack

Bradford-Scott Data Sends Data Breach Letters to Customers of Wellness Federal Credit Union and Others

Okta Says Data Leaked on Hacking Forum Not From Its Systems

Over 15,000 Hacked Roku Accounts Sold for 50¢ Each to Buy Hardware

Fake Leather Wallet App on Apple App Store Is a Crypto Drainer

BianLian Threat Actor Shifts Focus to Extortion-Only Tactics

New Banking Trojan CHAVECLOAK Targets Brazilian Users via Phishing Tactics

Proof-of-Concept Exploit Released for Progress Software OpenEdge Vulnerability

3/8-10/2024

~ The Cyber Beat ~ Leave a comment
CISA Forced to Take Two Systems Offline Last Month After Ivanti Compromise

Espionage Probe Finds Communications Device on Chinese Cranes at U.S. Ports

…Shanghai Zhenhua Denies Posing Cybersecurity Risk to U.S. Ports

Russian Hackers Stole Microsoft Source Code—and the Attack Isn’t Over

…Microsoft Says a Russian Hacking Group Is Still Trying to Crack Into Its Systems

Airlines Train Pilots to Manage GPS Tampering

Krebs: A Close Up Look at the Consumer Data Broker Radaris

Florida Teens Arrested for Creating ‘Deepfake’ AI Nude Images of Classmates

Your Personal Data All Over the Web – Is There a Better Way?		UnitedHealth Could Take Months to Fully Recover From Hack

As the Change Healthcare Outage Drags On, Fears Grow That Patient Data Could Spill Online

Dropbox Used to Steal Credentials and Bypass MFA in Novel Phishing Campaign

Cybercrime Crew Magnet Goblin Bursts Onto the Scene Exploiting Ivanti Holes

Hackers Exploit WordPress Plugin Flaw to Infect 3,300 Sites With Malware

CISA Warns of Actively Exploited JetBrains TeamCity Vulnerability

QNAP Warns of Critical Auth Bypass Flaw in Its NAS Devices

Critical Fortinet Flaw May Impact 150,000 Exposed Devices

Cisco Issues Patch for High-Severity VPN Hijacking Bug in Secure Client

3/7/2024

~ The Cyber Beat ~ Leave a comment
Evasive Panda (aka Daggerfly) Targets Tibetans Widely With Trojanized Software

Flipper Zero WiFi Phishing Attack Can Unlock and Steal Tesla Cars

Governments Eye Disclosure Requirements for AI Development Labs

FBI: U.S. Lost Record $12.5 Billion to Online Crime in 2023		Play Ransomware Attackers Leak Sensitive Swiss Government Documents, Login Credentials

New Python-Based Snake Info Stealer Spreading Through Facebook Messages

RATs Spread Via Fake Skype, Zoom, Google Meet Sites

AnyCubic Fixes Exploited 3D Printer Zero Day Flaw With New Firmware

3/6/2024

~ The Cyber Beat ~ Leave a comment
TA4903 Phishing Campaigns Evolve, Targets U.S. Government

New APT Group ‘Lotus Bane’ Behind Recent Attacks on Vietnam’s Financial Entities

What Caused the Facebook, Instagram Outages?

Meta Abandons Hacking Victims, Draining Law Enforcement Resources, Officials Say

Krebs: BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare

Tesla Says German Plant Power Outage to Continue Until End of Next Week

Banks Face ‘Hacktivist’ Cyberattacks

Cyber Defense Company Claroty Secures $100 Million in Funding

Cyber Pros Turn to Cybercrime as Salaries Stagnate

Chinese Chap Charged With Stealing Google’s AI Datacenter Secrets

NSA Shares Zero-Trust Guidance to Limit Adversaries on the Network		Patients Struggle to Get Lifesaving Medication After Cyberattack on Change Healthcare

Duvel Says It Has “More Than Enough” Beer After Ransomware Attack

PetSmart Warns of Credential Stuffing Attacks Trying to Hack Accounts

NewGen Administrative Services Experiences Data Breach Affecting 105,425 Individuals

Canadian City of Hamilton Says Timeline for Recovery From Ransomware Attack ‘Unknown’

Skype, Google Meet, and Zoom Used in New Trojan Scam Campaign

Linux Malware Targets Docker, Apache Hadoop, Redis and Confluence

Hacked WordPress Sites Use Visitors’ Browsers to Hack Other Sites

TeamCity Auth Bypass Bug Exploited to Mass-Generate Admin Accounts

VMware Issues Security Patches for ESXi, Workstation, and Fusion Flaws

3/5/2024

~ The Cyber Beat ~ Leave a comment
U.S. Health Department Intervenes in Change Healthcare Hack Crisis

…BlackCat Ransomware Shuts Down in Exit Scam, Blames the “Feds”

U.S. Bans Intellexa, Maker of Predator Spyware Used to Target Government Officials, Journalists

The Secrets Factory: Registered Agents Inc.

CrowdStrike Shares Surge on Earnings Beat, Strong Full-Year Guidance

Over 225,000 Compromised ChatGPT Credentials Up for Sale on Dark Web Markets

Passwords Are Costing Your Organization Money – How to Minimize Those Costs		Cyberattack Forces Canada’s Financial Intelligence Agency to Take Systems Offline

Whitley Penn (TX) Announces Data Breach Following a Compromised Employee Email Account

GhostSec Evolves With Website Compromise Tools

Cybercriminals Using Novel DNS Hijacking Technique for Investment Scams

Hackers Abuse QEMU to Covertly Tunnel Network Traffic in Cyberattacks

New WogRAT Malware Abuses Online Notepad Service to Store Malware

Apple Fixes Two New iOS Zero-Days Exploited in Attacks on iPhones

3/4/2024

~ The Cyber Beat ~ Leave a comment
Ukraine Claims It Hacked Russian Ministry of Defense Servers

Phobos Ransomware Aggressively Targeting U.S. Critical Infrastructure

German Defense Chat Overheard by Russian Eavesdroppers on Cisco’s WebEx

Seoul Accuses North Korea of Stealing Southern Chipmakers’ Designs

Hacktivist Collective NoName057 Strikes European Targets

Predator Spyware Targeted Mobile Phones in New Countries

‘Cyber-Physical Attacks’ Fueled by AI Are a Growing Threat, Experts Say

How Cybercriminals are Exploiting India’s UPI for Money Laundering Operations: XHelper Application

Middle East Leads in Deployment of DMARC Email Security

What Cybersecurity Chiefs Need From Their CEOs		Hackers Behind the Change Healthcare Ransomware Attack Just Received a $22 Million Payment

…BlackCat Ransomware Turns off Servers Amid Claim They Stole $22 Million Ransom

…Physician Group Asks U.S. to Make Funds Available to Doctors Hurt by Change Hack

American Express Admits Card Data Exposed and Blames Third Party

Western National (MN) Notifies Consumers of June 2023 Data Breach

Fake Ransomware Gang Admits It Made Up Epic Games Hack

TA577 Exploits NTLM Authentication Vulnerability

ScreenConnect Flaws Exploited to Drop New ToddleShark Malware

Exploit Available for New Critical TeamCity Auth Bypass Bug, Patch Now

3/1-3/2024

~ The Cyber Beat ~ Leave a comment
News Farm Impersonates 60+ Major Outlets: BBC, CNN, CNBC, Guardian…

Krebs: Fulton County, Security Experts Call LockBit’s Bluff

Researchers Create New AI Worms That Can Spread From One System to Another to Steal Data and Deploy Malware

Musk Sues OpenAI, CEO Sam Altman

U.S. Court Orders NSO Group to Hand Over Pegasus Spyware Code to WhatsApp

Germany Takes Down Cybercrime Market With Over 180,000 Users

UK Home Office Breached Data Protection Law with Electronic Migrant Tracking Program, ICO Finds

The Privacy Danger Lurking in Push Notifications

Microsoft Pulls Edge Update Causing ‘Out of Memory’ Crashes		Change Healthcare Sets up New Electronic Prescription Service, Funding Program as Cyberattack Drags

…Medical Providers Fight to Survive After Change Healthcare Hack

Golden Corral Restaurant Chain Data Breach Impacts 183,000 People

Kansas’ Conrade Insurance Group Discloses Data Breach

New BIFROSE Linux Malware Variant Using Deceptive VMware Domain for Evasion

Stealthy GTPDOOR Linux Malware Targets Mobile Operator Networks

New CryptoChameleon Phishing Kit Leverages SMS, Voice Calls to Target Cryptocurrency Users

CISA Warns of Microsoft Streaming Bug Exploited in Malware Attacks

Windows Kernel Bug Fixed Last Month Exploited as Zero-Day Since August