Month: October 2024

10/31/2024

~ The Cyber Beat ~ Leave a comment
Pro-Russia Hackers Claim Council Cyber Attacks, Including Greater Manchester

Suspected Pro-Ukraine Cyberattack Knocks Out Parking Enforcement in Russian City

Canadian Government Data Stolen By Chinese Hackers

Microsoft: Chinese Hackers Use Quad7 Botnet to Steal Credentials

Inside a Firewall Vendor’s 5-Year War With the Chinese Hackers Hijacking Its Devices

The Untold Story of Trump’s Failed Attempt to Overthrow Venezuela’s President

FBI: Iranian Cyber Group Targeted Summer Olympics With Attack on French Display Provider

UK Finance Firms Told to Beef up Buffers Against Crowdstrike-Like Events

Microsoft Wants $30 if You Want to Delay Windows 11 Switch

2024 Looks Set to Be Another Record-Breaking Year for Ransomware — And It’s Likely Going to Get Worse		Over a Thousand Online Shops Hacked to Show Fake Product Listings

Large Peruvian Bank Warns of Data Theft After Dark Web Post Emerges

Blackburn College Still Operating Despite Cyber-Attack

St. Anthony Regional Hospital (IA) Provides Notice of Data Breach

LottieFiles Supply Chain Attack Exposes Users to Malicious Crypto Wallet Drainer

New Xiu Gou Phishing Kit Targets U.S., Other Countries with Mascot

Hackers Target Critical Zero-Day Vulnerability in PTZ Cameras

LiteSpeed Cache WordPress Plugin Bug Lets Hackers Get Admin Access

qBittorrent Fixes Flaw Exposing Users to MitM Attacks for 14 Years

Cybersecurity Job Market Stagnates, Dissatisfaction Abounds

Russia to Ban Cryptocurrency Mining in Some Regions Due to Electricity Shortages

10/30/2024

~ The Cyber Beat ~ Leave a comment
Midnight Blizzard Spearphishing Campaign Targets Thousands with RDP Files

North Korean Group Collaborates with Play Ransomware in Significant Cyber Attack

Beijing Claims It’s Found ‘Underwater Lighthouses’ That Its Foes Use for Espionage

‘We’re a Fortress Now’: The Militarization of U.S. Elections Is Here

Colorado Voting System Partial Passwords Accidentally Posted on Government Website

FBI: Upcoming U.S. General Election Fuel Multiple Fraud Schemes

Fired Disney Staffer Accused of Hacking Menu to Add Profanity, Wingdings, Removes Allergen Info

Krebs: Change Healthcare Breach Hits 100M Americans

…UnitedHealth Hires Cybersecurity Veteran as New CISO

Google’s AI-Fueled Gains in Cloud Bode Well for Amazon, Microsoft

Cyber Vendor Netskope Plans 2025 IPO		Interbank Confirms Data Breach Following Failed Extortion, Data Leak

Starkweather and Shepley Insurance Brokerage (RI) Provides Notice of Recent Data Breach

Hackers Steal 15,000 Cloud Credentials From Exposed Git Config Files

Malware Campaign Expands Its Use of Fake CAPTCHAs

Updated FakeCall Malware Targets Mobile Devices with Vishing

Malvertising Campaign Hijacks Facebook Accounts to Spread SYS01stealer Malware

Researchers Uncover Python Package Targeting Crypto Wallets with Malicious Code

Opera Browser Fixes Big Security Hole That Could Have Exposed Your Information

Apple Rolls Out Major Security Update to Patch macOS and iOS Vulnerabilities

QNAP Patches Second Zero-Day Exploited at Pwn2Own to Get Root

When Cybersecurity Tools Backfire

10/29/2024

~ The Cyber Beat ~ Leave a comment
Trump Family Members and Biden Aides Among China Hack Targets

Merde! Macron’s Bodyguards Reveal His Location by Sharing Strava Data

Russia and China-Linked State Hackers Intensify Attacks on Netherlands, Security Officials Warn

Suspicious Social Media Accounts Deployed Ahead of COP29

Five Eyes Agencies Launch Startup Security Initiative

Six Senators Tell Biden Administration UN Cybercrime Treaty Must Be Changed

NIS2 Compliance Puts Strain on Business Budgets

TSA Silent on CrowdStrike’s Claim Delta Skipped Required Security Update

MoneyGram Replaces CEO Weeks After Massive Customer Data Breach

Russian Charged by U.S. For Creating RedLine Infostealer Malware		The Center for Urban Community Services (NY) Notifies 38,000 People of Recent Data Breach

Chenlun’s Evolving Phishing Tactics Target Trusted Brands

New LightSpy Spyware Targets iOS with Enhanced Capabilities

Massive PSAUX Ransomware Attack Targets 22,000 CyberPanel Instances

New Research Reveals Spectre Vulnerability Persists in Latest AMD and Intel Processors

Researchers Uncover Vulnerabilities in Open-Source AI and ML Models

New Windows Themes Zero-Day Gets Free, Unofficial Patches

QNAP Fixes NAS Backup Software Zero-Day Exploited at Pwn2Own

How to Find the Right CISO

Russia Says It Might Build Its Own Linux Community After Removal of Several Kernel Maintainers

10/28/2024

~ The Cyber Beat ~ Leave a comment
Chinese Hackers Said to Have Collected Audio of American Calls

…Including Trump Advisor

Cybercriminals Pose a Greater Threat of Disruptive U.S. Election Hacks Than Russia or China

Evasive Panda’s CloudScout Toolset Targets Taiwan

Russian Malware Campaign Targets Ukrainian Recruits Via Telegram

Japanese Man Sentenced to 3 Years After Creating Crypto Ransomware With AI

Redline, Meta Infostealer Malware Operations Seized by Police

JPMorgan Chase Sues Scammers Following Viral ‘Infinite Money Glitch’

Delta, CrowdStrike Sue Each Other Over Widespread IT Outage That Caused Thousands of Cancellations

Sinclair Sues Cyber Insurers Over 2021 Hack

Cybersecurity Firm Rapid7 Fields Buyout Interest, Sources Say

Cyber Firm Armis Security Raises $200 Million at $4.3 Billion Valuation		Italian Politicians Express Alarm at Latest Data Breach Allegedly Affecting 800,000 Citizens

Free, France’s Second Largest ISP, Confirms Data Breach After Leak

TEAM Software (NE) Confirms July 2024 Data Breach Impacting Thousands of SSNs

Wichita County (TX) Says 47,000 Had SSNs, Medical Treatment Info Leaked During May Cyberattack

Over 6,500 Patients Affected by Parkland Health in Dallas Possible Data Breach

Cybercriminals Use Webflow to Deceive Users into Sharing Sensitive Login Credentials

New Type of Job Scam Targets Financially Vulnerable Populations

AI-Powered BEC Scams Zero in on Manufacturers

BeaverTail Malware Resurfaces in Malicious npm Packages Targeting Developers

New Tool Bypasses Google Chrome’s New Cookie Encryption System

Mozilla: ChatGPT Can Be Manipulated Using Hex Code

Put End-of-Life Software to Rest

10/25-27/2024

~ The Cyber Beat ~ Leave a comment
Chinese Hackers Are Said to Have Targeted Phones Used by Trump and Vance

…Harris Campaign Too

…U.S. Panel to Probe Cyber Failures in Massive ‘Salt Typhoon’ Chinese Hack of Telecoms

Kremlin-Linked APT29 Hackers Target Ukraine’s State, Military Agencies in New Espionage Campaign

Ukraine Warns of Mass Phishing Campaign Targeting Citizens Data

Senator Accuses Sloppy Domain Registrars of Aiding Russian Disinfo Campaigns

Linux Creator Approves De-Listing of Several Kernel Maintainers Associated With Russia

Claude AI Gets Bored During Coding Demonstration, Starts Perusing Photos of National Parks Instead

Reuters Exposé of Hack-For-Hire World Is Back Online After Indian Court Ruling

Delta Sues CrowdStrike Over Software Update That Prompted Mass Flight Disruptions

Amazon Seizes Domains Used in Rogue Remote Desktop Campaign to Steal Data

Four REvil Ransomware Members Sentenced in Rare Russian Cybercrime Convictions		Henry Schein Discloses Data Breach a Year After Ransomware Attack

RansomHub Gang Allegedly Behind Attack on Mexican Airport Operator

Chimienti & Associates (CA) Experiences Data Breach Following Compromised Email Account

Community Dental (ME) Files Official Notice of Data Breach After Cyberattack Exposed Patients’ Sensitive Info

Black Basta Ransomware Poses as IT Support on Microsoft Teams to Breach Networks

Notorious Hacker Group TeamTNT Launches New Cloud Attacks for Crypto Mining

Fog Ransomware Targets SonicWall VPNs to Breach Corporate Networks

Researchers Discover Command Injection Flaw in Wi-Fi Alliance’s Test Suite

New Windows Driver Signature Bypass Allows Kernel Rootkit Installs

New Cisco ASA and FTD Features Block VPN Brute-Force Password Attacks

QNAP, Synology, Lexmark Devices Hacked on Pwn2Own Day 3

…Over 70 Zero-Day Flaws Get Hackers $1 Million at Pwn2Own Ireland

10/24/2024

~ The Cyber Beat ~ Leave a comment
White House Issues AI National Security Memo

Cybersecurity Teams Largely Ignored in AI Policy Development

Voice-Enabled AI Agents Can Automate Everything, Even Your Phone Scams

Apple Will Pay Security Researchers up to $1 Million to Hack Its Private AI Cloud

Meet ZachXBT, the Masked Vigilante Tracking down Billions in Crypto Scams and Thefts

Courts Side With Auto Suppliers in Clash With Carmakers Over Vehicle Data Access

Ireland Fines LinkedIn €310 Million Over Targeted Advertising

CFPB Warns Industry Against ‘Deeply Invasive’ Workplace Digital Surveillance		UnitedHealth Says Change Healthcare Hack Affects Over 100 Million, the Largest Ever U.S. Healthcare Data Breach

…How the Ransomware Attack at Change Healthcare Went Down: A Timeline

Insurance Admin Landmark Says Data Breach Impacts 800,000 People

New Qilin.B Ransomware Variant Emerges with Improved Encryption and Evasion Tactics

Mandiant Says New Fortinet Flaw Has Been Exploited Since June

Cisco Issues Urgent Fix for ASA and FTD Software Vulnerability Under Active Attack

Samsung Galaxy S24 and Sonos Era Hacked on Pwn2Own Ireland Day 2

Why Cybersecurity Acumen Matters in the C-Suite

10/23/2024

~ The Cyber Beat ~ Leave a comment
Microsoft Warns Foreign Disinformation Is Hitting the U.S. Election From All Directions

Georgia Election Official Says Battleground State Fended off Cyberattack Likely From a Foreign Country

Former British PM Cameron Calls for Tech Engagement with China Despite Cyber Threats

U.S. Energy Sector Vulnerable to Supply Chain Attacks

U.S. Government Pledges to Cyber Threat Sharing Via TLP Protocol

Google to Let Businesses Create Curated Chrome Web Stores for Extensions

WhatsApp Now Encrypts Contact Databases for Privacy-Preserving Synching

Krebs: The Global Surveillance Free-for-All in Mobile Ad Data

UK Government Weighs Review of Computer Misuse Act to Combat Cybercrime

UK Court Says Dissident Can Sue the Saudi Government for Targeting Him With Spyware

Nigeria Drops Charges Against Tigran Gambaryan, Jailed Binance Exec and Former IRS Agent		Russia Says ‘Unprecedented’ Cyber Attack Hits Foreign Ministry Amid BRICS Summit

Rhysida Ransomware Group Targets Prominent Nonprofit for Disabled People Easterseals

Data Breach at Autobell Car Wash Impacts 52,714 Individuals

Embargo Ransomware Gang Deploys Customized Defense Evasion Tools

New Grandoreiro Banking Malware Variants Emerge with Advanced Tactics to Evade Detection

Ransomware Gangs Use LockBit’s Fame to Intimidate Victims in Latest Attacks

Researchers Reveal ‘Deceptive Delight’ Method to Jailbreak AI Models

Lazarus Hackers Used Fake DeFi Game to Exploit Google Chrome Zero-Day

CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)

Fortinet Warns of New Critical FortiManager Flaw Used in Zero-Day Attacks

Hackers Exploit 52 Zero-Days on the First Day of Pwn2Own Ireland

10/22/2024

~ The Cyber Beat ~ Leave a comment
TSMC Blows Whistle on Potential Sanctions-Busting Shenanigans From Huawei

Prigozhin Links, Kremlin Funding Put Another Russian Media Company on U.S. List

Foreign Influence Operations Will Expand Before Election and Linger Afterward, U.S. Agencies Say

Exposed United Nations Database Left Sensitive Information Accessible Online

75% of US Senate Campaign Websites Fail to Implement DMARC

The Shitposting Cartoon Dogs Sending Trucks, Drones, and Weapons to Ukraine’s Front Lines

Senators Seek Biden Administration Review of Undersea Cable Vulnerabilities

LLMjacking and Open-Source Tool Abuse Surge in 2024 Cloud Attacks

AWS, Azure Auth Keys Found in Android and iOS Apps Used by Millions

Meta Brings Back Face Scanning to Combat Scams and Account Hacking

Think Tanks Urge Action to Curb Misuse of Spyware and Hack-for-Hire

SEC Charges Tech Firms Over Misleading SolarWinds Hack Disclosures

CISA Proposes New Security Requirements to Protect Gov’t, Personal Data		Gophish Framework Used in Phishing Campaigns to Deploy Remote Access Trojans

Bumblebee and Latrodectus Malware Return with Sophisticated Phishing Strategies

Akira Ransomware Is Encrypting Victims Again Following Pure Extortion Fling

Malicious npm Packages Target Developers’ Ethereum Wallets with SSH Backdoor

Cybercriminals Exploiting Docker API Servers for SRBMiner Crypto Mining Attacks

Zendesk Helped Internet Archive Secure Account After Hacker Breached Email System

Schreck Financial Group (KS) Experiences Email-Related Data Breach

Exploit Released for New Windows Server “WinReg” NTLM Relay Attack

FortiGate Admins Report Active Exploitation 0-Day. Vendor Isn’t Talking.

Security Flaw in Styra’s OPA Exposes NTLM Hashes to Remote Attackers

CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack

VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability

The Struggle for Software Liability: Inside a ‘Very, Very, Very Hard Problem’

10/21/2024

~ The Cyber Beat ~ Leave a comment
Hezbollah Cyberattack Targets Haifa Hospitals After Beirut Hospital Bombing

Cyprus’ Critical Infrastructure Targeted by Coordinated Cyberattacks Linked to Pro-Palestine Groups

‘Unprecedented’ Interference Targets Moldova’s Elections

China’s Spamouflage Disinformation Campaign Testing Techniques on Sen. Marco Rubio

Chinese Nation-State Hackers APT41 Hit Gambling Sector for Financial Gain

U.S. Government Says Relying on Chinese Lithium Batteries Is Too Risky

Biden Administration Proposes New Rules Governing Data Transfers to Adversarial Nations

ICE’s $2 Million Contract With a Spyware Vendor Is Under White House Review

Sophos Buys Secureworks for $859 Mln to Beef up Cybersecurity Portfolio		Japanese Watchmaker Casio Warns of Delivery Delays After Ransomware Attack

Crypto Payment Services Firm Transak Says More Than 92,000 Affected by Data Breach

Spate of Ransomware Attacks on German-Speaking Schools Hits Another in Switzerland

Netskope Reports Possible Bumblebee Loader Resurgence

Over 6,000 WordPress Hacked to Install Plugins Pushing Infostealers

Researchers Discover Severe Security Flaws in Major E2EE Cloud Storage Providers

Half of Organizations Have Unmanaged Long-Lived Cloud Credentials

The Billionaire Behind Trump’s ‘Unhackable’ Phone Is on a Mission to Fight Tesla’s FSD

Australia’s Privacy Watchdog Publishes Guidance on Commercial AI Products

10/18-20/2024

~ The Cyber Beat ~ Leave a comment
ESET Partner Breached to Send Data Wipers to Israeli Orgs

North Korean IT Workers in Western Firms Now Demanding Ransom for Stolen Data

The Disinformation Warning Coming From the Edge of Europe

U.S. Cybersecurity Chief Says Election Systems Have ‘Never Been More Secure’

What the U.S. Army’s 1959 ‘Soldier of Tomorrow’ Got Right About the Future of Warfare

Google Scholar Has a ‘Verified Email’ for Sir Isaac Newton

Microsoft Creates Fake Azure Tenants to Pull Phishers Into Honeypots

The Government Is Getting Fed up With Ransomware Payments Fueling Endless Cycle of Cyberattacks

Krebs: Brazil Arrests ‘USDoD,’ Hacker in FBI Infragard Breach

Tech CEO Charged With Fraud Over Security, Reliability Claims

After Rejecting Google Takeover, Cyber Firm Wiz Says It Will IPO ‘When the Stars Align’

Instagram Rolls Out New Sextortion Protection Measures

Europe Launches ‘Gait Recognition’ Pilot Program to Monitor Border Crossings		Tech Giant Nidec Confirms Data Breach Following Ransomware Attack

Cisco Takes DevHub Portal Offline After Hacker Publishes Stolen Data

Crypto Platform Radiant Capital Says $50 Million in Digital Coins Stolen Following Account Compromises

The Internet Archive Hackers Still Have Access to Its Internal Emailing Tools

Boston Children’s Health Physicians Confirms September Data Breach

Crypt Ghouls Targets Russian Firms with LockBit 3.0 and Babuk Ransomware Attacks

Hackers Exploit Roundcube Webmail XSS Vulnerability to Steal Login Credentials

CISA Confirms Veeam Vulnerability Is Being Used in Ransomware Attacks

Intel, AMD CPUs on Linux Impacted by Newly Disclosed Spectre Bypass

macOS Vulnerability Could Expose User Data, Microsoft Warns

Jetpack Fixes 8-Year-Old Flaw Affecting Millions of WordPress Sites

Open Source LLM Tool Primed to Sniff out Python Zero-Days

CISOs: Throwing Cash at Tools Isn’t Helping Detect Breaches

10/17/2024

~ The Cyber Beat ~ Leave a comment
Hamas Leader Yahya Sinwar Killed in Gaza, Israeli Military Says

Intel China Responds to Accusations of Security Issues From Chinese Cyber Association

Undercover North Korean IT Workers Now Steal Data, Extort Employers

Two-thirds of Attributable Malware Linked to Nation States

GPS Jamming Is Screwing With Norwegian Planes

This Prompt Can Make an AI Chatbot Identify and Extract Personal Details From Your Chats

Activision Says It’s Fixed an Anti-cheat Hack in Modern Warfare III and Call of Duty: Warzone

Uncle Sam Puts $10M Bounty on Russian Troll Farm Rybar

More Than 5,000 Arrested, Thousands of Websites Disrupted in Crackdown on Illegal Gambling During Euro Tournament

FBI Arrests Alabama Man Suspected of Hacking SEC’s X Account

Krebs: Sudanese Brothers Arrested in ‘AnonSudan’ Takedown

Ukraine Tracks Emailed Bomb Threats to Russia-Linked Group

A Tough New EU Cyber Law Is off to a Messy Start, With Many Countries Failing to Adopt the Rules

Kroger’s Facial Recognition Plans Draw Increasing Concern From Lawmakers		Japan’s Ruling Political Party Hit by Cyberattack From Alleged Pro-Russian Hackers

Independent Russian News Site Rides Out a Week of DDoS Incidents

Microsoft Warns It Lost Some Customer’s Security Logs for a Month

Troubled U.S. Insurance Giant Globe Life Hit by Extortion After Data Leak

Casio Says ‘No Prospect of Recovery Yet’ After Ransomware Attack

Internet Archive Slowly Revives After DDoS Barrage

BianLian Ransomware Claims Attack on Boston Children’s Health Physicians

Georgetown University Says Group of Students Accessed Sensitive, Academic Information

Russian RomCom Attacks Target Ukrainian Government with New SingleCamper RAT Variant

Fake Google Meet Conference Errors Push Infostealing Malware

Cicada3301 Ransomware Targets Critical Sectors in US and UK

RansomHub Overtakes LockBit as Most Prolific Ransomware Group

WeChat Devs Introduced Security Flaws When They Modded TLS, Say Researchers

CISA Seeks Feedback on Upcoming Product Security Flaws Guidance

What Cybersecurity Leaders Can Learn From the Game of Golf

10/16/2024

~ The Cyber Beat ~ Leave a comment
China’s New Focus in U.S. Elections Interference Is Not Harris-Trump Presidential Race

Chinese Cyber Association Calls for Review of Intel Products Sold in China

China Says Unidentified Foreign Company Conducted Illegal Mapping Services

Firm Hacked After Accidentally Hiring North Korean Cyber Criminal

Iranian Hackers Act as Brokers Selling Critical Infrastructure Access

Mystery Drones Swarmed a U.S. Military Base for 17 Days. The Pentagon Is Stumped.

Hacker Charged With Seeking to Kill Using Cyberattacks on Hospitals

USDoD Hacker Behind National Public Data Breach Arrested in Brazil

Russia’s Case Against REvil Hackers Proceeds as Government Recommends 6.5-Year Sentence

For Some Companies, the Real Cost of a Cyberattack Is Telling Everyone About It

Financial Firms Need to Focus on Cyber Risks Posed by AI, New York Regulator Says

EU AI Act Checker Reveals Big Tech’s Compliance Pitfalls

Ethical Hackers Embrace AI Tools Amid Rising Cyber Threats

UK Government Launches AI Safety Scheme to Tackle Deepfakes

Experts Play Down Significance of Chinese Quantum “Hack”

BlackBerry Exploring Options for Cylance Business		More Than Two Dozen Countries Have Used Internet Outages to Sway Elections

Volkswagen Monitoring Data Dump Threat From 8Base Ransomware Crew

Billboards Reportedly Hacked, Displayed Antisemitic Messages in Chicago Suburb

Texas Tech Health Network Cyber Attack Disrupts Patient Care in El Paso

Hackers Target Ukraine’s Potential Conscripts With MeduzaStealer Malware

North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware

Sidewinder Casts Wide Geographic Net in Latest Attack Spree

Astaroth Banking Malware Resurfaces in Brazil via Spear-Phishing Attack

CISA Warns of Active Exploitation in SolarWinds Help Desk Software Vulnerability

Critical Default Credential Bug in Kubernetes Image Builder Allows SSH Root Access

GitHub Patches Critical Flaw in Enterprise Server Allowing Unauthorized Instance Access

Google: 70% of Exploited Flaws Disclosed in 2023 Were Zero-Days

CISA Urges Improvements in U.S. Software Supply Chain Transparency

FIDO Alliance Drafts New Protocol to Simplify Passkey Transfers Across Different Platforms

Amazon Says 175 Million Customers Now Use Passkeys to Log In

10/15/2024

~ The Cyber Beat ~ Leave a comment
Microsoft: Nation-States Team Up with Cybercriminals for Attacks

China Accuses U.S. of Fabricating Volt Typhoon to Hide Its Own Hacking Campaigns

British Intelligence Services to Protect All UK Schools From Ransomware Attacks

Nearly 400 U.S. Healthcare Institutions Hit with Ransomware Over Last Year, Microsoft Says

Password Manager Makers Want to Let You Securely Transfer Passkeys

Millions of People Are Using Abusive AI ‘Nudify’ Bots on Telegram

This AI Tool Helped Convict People of Murder. Then Someone Took a Closer Look

AI Amplifies Systemic Risk to Financial Sector, Says India’s Reserve Bank Boss

Gmail Users, Beware of New AI Scam That Looks Very Authentic

This Influencer Was Scammed Out of Thousands in Crypto — And Has a Tip to Help You Avoid Fraud

Hong Kong Police Bust Fraud Ring That Used Face-Swapping Tech for Romance Scams

Finland Seizes Servers of ‘Sipultie’ Dark Web Drugs Market

Darknet Activity Increases Ahead of 2024 Presidential Vote		Cisco Investigates Breach After Stolen Data for Sale on Hacking Forum

Calgary Public Library Forced to Limit Services After Cyberattack

Gryphon Healthcare (TX) Admits up to 400,000 People’s Personal Info Was Snatched

Varsity Brands (TX) Notifies 65,669 of May 2024 Data Breach

EDRSilencer Red Team Tool Used in Attacks to Bypass Security

Cerberus Android Banking Trojan Deployed in New Multi-Stage Malicious Campaign

New Malware Campaign Uses PureCrypter Loader to Deliver DarkVision RAT

New Linux Variant of FASTCash Malware Targets Payment Switches in ATM Heists

Eight Million Users Install 200+ Malicious Apps from Google Play

Researchers Uncover Hijack Loader Malware Using Stolen Code-Signing Certificates

WordPress Plugin Jetpack Patches Major Vulnerability Affecting 27 Million Sites

The Cybersecurity Burnout Crisis Is Reaching The Breaking Point

LLMs Are a New Type of Insider Adversary

10/14/2024

~ The Cyber Beat ~ Leave a comment
Microsoft: Schools Grapple With Thousands of Cyberattacks Weekly

Nation-State Attackers Exploiting Ivanti CSA Flaws for Network Infiltration

U.S. DoD Tightens Cybersecurity Standards for Defense Contractors

The War on Passwords Is One Step Closer to Being Over

Crypto-Apocalypse Soon? Chinese Researchers Find a Potential Quantum Attack on Classical Encryption

The Biggest Data Breaches in 2024: 1 Billion Stolen Records and Rising

ConfusedPilot Attack Can Manipulate RAG-Based AI Systems

Jetpack Fixes Critical Information Disclosure Flaw Existing Since 2016

Intesa Under Investigation After Former Employee Spied on Account Data

The Internet Archive Is Back as a Read-Only Service After Cyberattacks

Pokemon Dev Game Freak Confirms Breach After Stolen Data Leaks Online

miCare Health Center (MT) Sends Data Breach Letters Following Compromised Email Accounts

Telekopye Scammers Target Booking.com and Airbnb Users

TrickMo Malware Steals Android PINs Using Fake Lock Screen

Recently-Patched Firefox Bug Exploited Against Tor Browser Users

10/11-13/2024

~ The Cyber Beat ~ Leave a comment
Russian Court Websites Down After Breach Claimed by Pro-Ukraine Hackers

U.S. Lawmakers Seek Answers From Telecoms on Chinese Hacking Report

Philippines Calls for Urgency From China, ASEAN in Negotiating South China Sea Code

Trump Campaign Turns to Secure Hardware After Hacking Incident

Group With Close Ties to Trump Transition Says It Was Targeted in Cyber Attack

Hackers Took Over Robovacs to Chase Pets and Yell Slurs

The FBI Made a Crypto Coin Just to Catch Fraudsters

‘Email Scam’ Was Training Exercise, Says Regulator

What Internet Data Brokers Have On You — And How You Can Start to Get It Back

How to Stop Your Data From Being Used to Train AI

OpenAI Confirms Threat Actors Use ChatGPT to Write Malware

U.S. Border Agency Under Fire for App’s Handling of Personal Data

National Public Data Files for Bankruptcy, Citing Fallout From Cyberattack

Italy’s Intesa Sanpaolo Apologises for Security Breach Involving PM Meloni

Cyberattack Targets Healthcare Nonprofit Overseeing 13 Colorado Facilities

Huge Game Freak Hack Leaks Next Pokémon Game

The Internet Archive Is Still Down but Will Return in ‘Days, Not Weeks’

Casio Confirms Customer Data Stolen in a Ransomware Attack

Omni Family Health (CA) Breach Affects Personal Info of Current and Former Patients

OilRig Exploits Windows Kernel Flaw in Espionage Campaign Targeting UAE and Gulf

INC Ransomware Rebrands to Lynx – Same Code, New Name, Still up to No Good

GitHub, Telegram Bots, and ASCII QR Codes Abused in New Wave of Phishing Attacks

CISA: Hackers Abuse F5 BIG-IP Cookies to Map Internal Servers

Google Warns uBlock Origin and Other Extensions May Be Disabled Soon

Microsoft Deprecates PPTP and L2TP VPN Protocols in Windows Server

10/10/2024

~ The Cyber Beat ~ Leave a comment
U.S., UK Warn of Russian APT29 Hackers Targeting Zimbra, TeamCity Servers

NSA Cyber Chief: Espionage Is Now Russia’s Focus for Cyberattacks on Ukraine

Ukraine Arrests Rogue VPN Operator Providing Access to Runet

Russian Cyber Firm Dr.Web Denies Data Leak by Pro-Ukraine Hackers

‘Q Day’ Is Coming. It’s Time to Worry About Quantum Security.

Meet the Team Paid to Break Into Top-Secret Bases

OpenAI Blocks 20 Global Malicious Campaigns Using AI for Cybercrime and Disinformation

Former RAC Employees Get Suspended Sentence for Data Theft

New Law in Australia Will Require Mandatory Reporting of Ransomware Payments

Over 10m Conversations Exposed in AI Call Center Hack

Fore-Get About Privacy, Golf Tech Biz Trackman Leaves 32M Data Records on the Fairway

Crooks Stole Personal Info of 77K Fidelity Investments Customers

Shoe Show (NC) Data Breach Affects an Estimated 12,856 Individuals

Underground Ransomware Claims Attack on Casio, Leaks Stolen Data

Cybercriminals Use Unicode to Hide Mongolian Skimmer in E-Commerce Platforms

Akira and Fog Ransomware Now Exploit Critical Veeam RCE Flaw

Researchers Uncover Major Security Vulnerabilities in Industrial MMS Protocol Libraries

GitLab Warns of Critical Arbitrary Branch Pipeline Execution Flaw

10/9/2024

~ The Cyber Beat ~ Leave a comment
National Cyber Director Warns of Ransomware, Chinese Infrastructure Attacks and Cyber Supply Chain Concerns

FTC, CISA Warn of Hurricane-Related Scams as Milton Nears Florida

Recent Dr.Web Cyberattack Claimed by Pro-Ukrainian Hacktivists

Russia and Turkey Ban Discord Messaging App

Former Uber Security Chief Appeals Conviction in ‘Bug-Bounty’ Case

Krebs: Lamborghini Carjackers Lured by $243M Cyberheist

69,000 Bitcoins Are Headed for the U.S. Treasury

Mexico Faces Over Half of Latin American Cybercrimes Due Largely to U.S. Ties

Australia Introduces First Standalone Cybersecurity Law

New EU ‘Appeals Centre Europe’ to Centralize Complaints Against Facebook, TikTok, YouTube

Apple’s iPhone Mirroring Flaw Exposes Employee Privacy Risks

Smart TVs Are Spying on Everyone

Marriott Settles for a Piddly $52M After Series of Breaches Affecting Millions

Dutch Police Arrest Admin of ‘Bohemia/Cannabia’ Dark Web Market

Ukraine Sentences Two Hackers From Russia-Linked Armageddon Group

The Internet Archive Is Under Attack, With a Breach Revealing Information for 31 Million Accounts

California Superior Court Claimed to Be Attacked by Meow Ransomware

Crypto-Stealing Malware Campaign Infects 28,000 People

New BeaverTail Malware Targets Job Seekers via Fake Recruiters

N. Korean Hackers Use Fake Interviews to Infect Developers with Cross-Platform Malware

New Generation of Malicious QR Codes Uncovered by Researchers

Hackers Hide Remcos RAT in GitHub Repository Comments

Siemens Device PIN Susceptible to Remote Brute-Force in Older Model

Mozilla Fixes Firefox Zero-Day Actively Exploited in Attacks

CISA Says Critical Fortinet RCE Flaw Now Exploited in Attacks

Palo Alto Networks Warns of Firewall Hijack Bugs With Public Exploit

Krebs: Patch Tuesday, October 2024 Edition

Google Joins Forces with GASA and DNS RF to Tackle Online Scams at Scale

Cloud, AI Talent Gaps Plague Cybersecurity Teams

10/8/2024

~ The Cyber Beat ~ Leave a comment
U.S. Warns of Foreign Interference in Congressional Races Ahead of Election

…U.S. Expecting Foreign Actors to Question Validity of Election

EU Condemns Russia After Detecting ‘Increasing Number’ of Hybrid Activities

Ukraine’s Defense Ministry Launches Military CERT to Counter Russian Cyberattacks

31 New Ransomware Groups Join the Ecosystem in 12 Months

New Mamba 2FA Bypass Service Targets Microsoft 365 Accounts

What Google’s U-Turn on Third-Party Cookies Means for Chrome Privacy

Cyber Providers See Strong Demand, but Few Feel Confident Enough to List

Could You Switch Careers Into Cyber-Security?

The Perils of Ignoring Cybersecurity Basics

Cyberattack Group ‘Awaken Likho’ Targets Russian Government with Advanced Tools

Home Security Firm ADT Inc Reports Unauthorized Activity on Its Network

MoneyGram Confirms Hackers Stole Customer Data in Cyberattack

Casio Reports IT Systems Failure After Weekend Network Breach

Vermilion Parish Schools (LA) Investigating Cyber Attack

Accounting Firm Dohman, Akerlund & Eddy (NE) Files Notice of Recent Data Breach

Gamers Tricked Into Downloading Lua-Based Malware via Fake Cheating Script Engines

New Scanner Finds Linux, UNIX Servers Exposed to CUPS RCE Attacks

Zero-Day Alert: Three Critical Ivanti CSA Vulnerabilities Actively Exploited

Microsoft October 2024 Patch Tuesday Fixes 5 Zero-Days, 118 Flaws

10/7/2024

~ The Cyber Beat ~ Leave a comment
Advanced Threat Group GoldenJackal Exploits Air-Gapped Systems

Vulnerable APIs and Bot Attacks Costing Businesses Up to $186 Billion Annually

Board-CISO Mismatch on Cyber Responsibility, NCSC Research Finds

Get Safe Online Launches New Scam Detector

Ukrainian Pleads Guilty to Operating Raccoon Stealer Malware

Telegram App Hosts ‘Underground Markets’ for Southeast Asian Crime Gangs, UN Says

Cops Love Facial Recognition, and Withholding Info on Its Use From the Courts

EU Court Limits Meta’s Use of Personal Facebook Data for Targeted Ads

UN Cybercrime Treaty Lead Negotiator: U.S. Will Suffer if It Doesn’t Vote Yes

Hacker Attack Disrupts Russian State Media on Putin’s Birthday

American Water Shuts Down Online Services After Cyberattack

Universal Music Group Admits Data Breach

Western & Southern Life Files Notice of Data Breach

New Gorilla Botnet Launches Over 300,000 DDoS Attacks Across 100 Countries

Recently Spotted Trinity Ransomware Spurs Federal Warning to Healthcare Industry

Google Blocks Unsafe Android App Sideloading in India for Improved Fraud Protection

Critical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications

Qualcomm Patches High-Severity Zero-Day Exploited in Attacks

Cybersecurity Is Serious — But It Doesn’t Have to Be Boring

10/4-6/2024

~ The Cyber Beat ~ Leave a comment
U.S. Wiretap Systems Targeted in China-Linked Hack

Hospitals at Risk for Cyber Attacks

Hotels and Travel Firms Battle AI Phone Scams

Tech Platforms Urged to Tackle Hamas’ and Hezbollah’s Online Propaganda

This Teenage Hacker Became a Legend Attacking Companies. Then His Rivals Attacked Him.

Ryanair Faces GDPR Turbulence Over Customer ID Checks

Harvard Duo Hacks Meta Ray-Bans to Dox Strangers on Sight in Seconds

How Confidence Between Teams Impacts Cyber Incident Outcomes

Google Removes Kaspersky’s Antivirus Software From Play Store

Russia Arrests U.S.-Sanctioned Cryptex Founder, 95 Other Linked Suspects

Indiana Man Pleads Guilty to Stealing $37 Million in Crypto From 571 Victims

White House Official Says Insurance Companies Must Stop Funding Ransomware Payments

Criminals Are Testing Their Ransomware Campaigns in Africa

Lego’s Website Was Hacked to Promote a Crypto Scam

About a Quarter Million Comcast Subscribers Had Their Data Stolen From Debt Collector

…Comcast and Truist Bank Customers Caught up in FBCS Data Breach

Ward Transport Sends Data Breach Letters Following “Data Security Incident”

Outlast Game Development Delayed After Red Barrels Cyberattack

Highline Public Schools Confirms Ransomware Behind Shutdown

MoneyGram: No Evidence Ransomware Is Behind Recent Cyberattack

New MedusaLocker Ransomware Variant Deployed by Threat Actor

Recently Patched CUPS Flaw Can be Used to Amplify DDoS Attacks

Apple Releases Critical iOS and iPadOS Updates to Fix VoiceOver Password Vulnerability

A New Android Feature Locks Your Screen if Your Phone Is Stolen

Google Is Testing Verified Checkmarks in Search

Google Pay Alarms Users With Accidental ‘New Card’ Added Emails

10/3/2024

~ The Cyber Beat ~ Leave a comment
Microsoft and U.S. Government Disrupt Russian Star Blizzard Operations

North Korean Hackers Using New VeilShell Backdoor in Stealthy Cyber Attacks

TikTok More Dangerous to Ukraine Than Telegram for Propaganda, Say Local Disinformation Experts

Unable to Penetrate Systems, Hackers Spread Lies About Vulnerabilities

Crypto-Doubling Scams Surge Following Presidential Debate

License Plate Readers Are Creating a U.S.-Wide Database of More Than Just Cars

What Is the Market Impact of the SEC’s Cyber Disclosure Rules? Not Much.

Cybersecurity Spending on the Rise, But Security Leaders Still Feel Vulnerable

Average North American CISO Pay Now $565K, Mainly Thanks to One Weird Trick

Brits Hate How Big Tech Handles Their Data, but Can’t Be Bothered to Do Much About It

Fraudsters Imprisoned for Scamming Apple Out of 6,000 iPhones

23andMe is On the Brink. What Happens to All Its DNA Data?

Dutch Police: ‘State Actor’ Likely Behind Recent Data Breach

Detroit-Area Government Services Impacted by Cyberattack

Find Great People (SC) Data Breach Affects Personal Information of 12,205 Individuals

New Perfctl Malware Targets Linux Servers for Cryptocurrency Mining and Proxyjacking

Cloudflare Blocks Largest Recorded DDoS Attack Peaking at 3.8Tbps

Krebs: A Single Cloud Compromise Can Feed an Army of AI Sex Bots

The Secret Weakness Execs Are Overlooking: Non-Human Identities

Email Phishing Attacks Surge as Attackers Bypass Security Controls

‘Pig Butchering’ Trading Apps Found on Google Play, App Store

Litespeed Cache Plugin Flaw Allows XSS Attack, Update Now

Google Adds New Pixel Security Features to Block 2G Exploits and Baseband Attacks

As Ransomware Attacks Surge, UK Privacy Regulator Investigating Fewer Incidents Than Ever

Northern Ireland Police Fined for Data Breach Exposing Secret Identities of Officers

10/2/2024

~ The Cyber Beat ~ Leave a comment
Cybersecurity Head Says There’s No Chance a Foreign Adversary Can Change U.S. Election Results, Not Even Russia

China-Linked CeranaKeeper Targeting Southeast Asia with Data Exfiltration

Lazarus: Andariel Hacking Group Shifts Focus to Financial Attacks on U.S. Organizations

How North Korea Infiltrated the Crypto Industry

UK’s Nuclear Waste Unit Sellafield Fined for Cybersecurity Failings

The Feds Still Can’t Get into Eric Adams’ Phone

FCC Is Offering $200 Million to Protect Schools and Libraries From Hackers

Pay Rises for Cyber Chiefs as Hacks, Regulatory Pressure Increase

Share of Women in UK Cyber Roles Now Just 17%

Meta Teams Up with Banks to Target Fraudsters

Telegram Has Disclosed Criminal Data to Authorities for Years, Durov Says

FIN7 Hackers Launch Deepfake Nude “Generator” Sites to Spread Malware

Fake Browser Updates Spread Updated WarmCookie Malware

International Police Dismantle Cybercrime Group in West Africa

TIAA Latest Big Firm to Report Data Breach and Hack

Empereon Constar Announces Data Breach Following Incident at Partner Company

Hackers Pose as British Postal Carrier to Deliver Prince Ransomware in Destructive Campaign

Fake Job Applications Deliver Dangerous More_eggs Malware to HR Professionals

PyPI Repository Found Hosting Fake Crypto Wallet Recovery Tools That Steal User Data

Fake Trading Apps Target Victims Globally via Apple App Store and Google Play

Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit

Critical Ivanti RCE Flaw With Public Exploit Now Used in Attacks

Researchers Warn of Ongoing Attacks Exploiting Critical Zimbra Postjournal Flaw

Alert: Over 700,000 DrayTek Routers Exposed to Hacking via 14 New Vulnerabilities

Experts Warn of DDoS Attacks Using Linux Printing Vulnerability

Two Simple Give-Me-Control Security Bugs Found in Optigo Network Switches Used in Critical Manufacturing

10/1/2024

~ The Cyber Beat ~ Leave a comment
Iran Fires at Least 180 Missiles Into Israel as Regionwide Conflict Grows

U.S. Accuses Iran of Hacking Former Ambassador to Israel and State Dept. Official

Notorious Evil Corp Hackers Targeted NATO Allies for Russian Intelligence

ICE Signs $2 Million Contract With Spyware Maker Paragon Solutions

Krebs: Crooked Cops, Stolen Laptops & the Ghost of UGNazi

Euro Cops Arrest 4 Including Suspected LockBit Dev Chilling on Holiday

NCA Unmasks Man It Suspects Is Both ‘Evil Corp Kingpin’ and LockBit Affiliate

British Hacker Charged in the U.S. For $3.75m Insider Trading Scheme

Cambodia Arrests Journalist Known for Exposing Cyber Scams and Human Trafficking

California Passes Car Data Privacy Law to Protect Domestic Abuse Survivors

Cybersecurity Firm Proofpoint Considers Pre-IPO Funding as It Plots a Return to Public Markets

Rackspace Monitoring Data Stolen in ScienceLogic Zero-Day Attack

Australian e-Tailer digiDirect Customers’ Info Allegedly Stolen and dDumped Online

Community Clinic of Maui Says 123,000 Affected by May Cyberattack

Global Wafers Subsidiary, MEMC, Confirms Recent Data Breach

Ransomware Attack Forces UMC Health System to Divert Some Patients

The Playstation Network Is Down in a Global Outage

Free Sniper Dz Phishing Tools Fuel 140,000+ Cyber Attacks Targeting User Credentials

AI-Powered Rhadamanthys Stealer Targets Crypto Wallets with Image Recognition

New Cryptojacking Attack Targets Docker API to Create Malicious Swarm Botnet

Arc Browser Launches Bug Bounty Program After Fixing RCE Bug

Microsoft Overhauls Security for Publishing Edge Extensions