Author: The Cyber Beat

6/10/2021

~ The Cyber Beat ~ Leave a comment
U.S. Launches Task Force to Open Government Data for AI Research

Bipartisan Senators Introduce Bill to Protect Small Businesses From Cyberattacks

State Department Urges Nigeria to Reverse Twitter Ban

When Ransomware Strikes, DigitalMint Helps Victims Make Bitcoin Payments

Hacking Bitcoin Wallets With Quantum Computers Could Happen – Cryptographers Hope to Stop

Slilpp, the Largest Stolen Logins Market, Seized by Law Enforcement

The Workforce Shortage in Cybersecurity Is a Myth

Texas to Publish Data Breach Notifications

Amazon Faces Possible $425 Million EU Privacy Fine		Hackers Breach Electronic Arts (EA), Stealing Game Source Code and Tools

Foodservice Supplier Edward Don Hit by a Ransomware Attack

Skinners’ Kent Academy and Skinners’ Kent Primary School Hit With Ransomware

Internal Data From Breach Circulating Online -CD Projekt

Steam Gaming Platform Hosting Malware

New APT ‘BackdoorDiplomacy’ Targets African, Middle East Diplomats

‘Fancy Lazarus’ Cyberattackers Ramp up Ransom DDoS Efforts

Hackers Can Exploit Bugs in Samsung Pre-Installed Apps to Spy on Users

6/9/2021

~ The Cyber Beat ~ Leave a comment
JBS Paid $11 Million to Resolve Ransomware Attack

DarkSide Pwned Colonial With Old VPN Password

Crowdstrike CEO on the Evolution of Ransomware: ‘It’s Become Big Game Hunting’

Ransomware Is Now A National Security Risk

Biden Revokes and Replaces Trump Executive Orders That Banned TikTok & WeChat

Huawei Flings Open the Doors of Its Third Privacy and Security Transparency Centre

Italy to Set Up Cybersecurity Agency Ahead of National Cloud Plan – Draft

FBI Warns of BEC Scammers Impersonating Construction Companies

What Hackers Can Learn About You From Your Social-Media Profile		Spain’s Ministry of Labor and Social Economy Hit by Cyberattack

Russian Spear Phishing Campaign Hits Ukraine

Union Community Schooks (IA) Investigating Cyber Attack, Unauthorized Access to Data

Stealthy Gelsemium Cyberspies Linked to NoxPlayer Supply-Chain Attack

New TLS Attack ‘ALPACA’ Lets Attackers Launch Cross-Protocol Attacks Against Secure Sites

Crypto-Mining Attacks Targeting Kubernetes Clusters via Kubeflow Instances

Google Fixes Sixth Chrome Zero-Day Exploited in the Wild This Year

GitHub Now Scans for Accidentally-Exposed PyPI, RubyGems Secrets

6/8/2021

~ The Cyber Beat ~ Leave a comment
Social Media, News Sites Including CNN, New York Times Hit by Outage

…What Is Fastly and Why Did It Just Take a Bunch of Major Websites Offline?

The FBI Secretly Ran the Anom Messaging Platform, Yielding Hundreds of Arrests in Global Sting

…Trojan Shield: How the FBI Secretly Ran a Phone Network for Criminals

…FBI Sold Phones to Organized Crime and Read 27 Million “Encrypted” Messages

Colonial Pipeline Boss ‘Deeply Sorry’ for Cyber Attack

European Energy Sector Prepares for New Cybersecurity Rules

Krebs: Justice Dept. Claws Back $2.3M Paid by Colonial Pipeline to Ransomware Gang

…The FBI Likely Exploited Sloppy Password Storage to Seize Colonial Pipeline Bitcoin Ransom

IRS Is Investigating Release of Tax Information of Wealthy Americans

Five Key Parts of the Senate’s Sweeping China Competitiveness Bill

Apple’s New Privacy Feature, Designed to Mask Users’ Internet Browsing, Won’t Be Available In China		Computer Memory Maker ADATA Hit by Ragnar Locker Ransomware

Capitol Hill Vendor Hit by Ransomware Attack

County of Lambton (ON) Restoring It Systems Following Cyber Attack

Lewd Phishing Lures Aimed at Business Explode

U.S. Brokerage Firms Warned of Ongoing Phishing With Penalty Threats

Why the Hybrid Workplace Is a Cybersecurity Nightmare

Windows 10 Targeted by PuzzleMaker Hackers Using Chrome Zero-Days

Microsoft Office MSGraph Vulnerability Could Lead to Code Execution

Google Patches Critical Android RCE Bug

Intel Fixes 73 Vulnerabilities in June 2021 Platform Update

Adobe Issues Security Updates for 41 Vulnerabilities in 10 Products

Krebs: Microsoft Patches Six Zero-Day Security Holes

6/7/2021

~ The Cyber Beat ~ Leave a comment
Krebs: Adventures in Contacting the Russian FSB

Biden to Discuss Crypto’s Role in Ransomware Attacks at G-7, Says National Security Adviser

U.S. Recovers Millions in Cryptocurrency Paid to Colonial Pipeline Ransomware Hackers

Colonial Pipeline Contacted Local FBI Offices, Prosecutors After Attack -Company

Hackers Stole $650,000 From Nonprofit and Got Away, Showing Limits to Law Enforcement’s Reach

With Cyberattacks on the Rise, Organizations Are Already Bracing for Devastating Quantum Hacks

Facebook Starts End-to-End Encrypted Audio, Video Calling Trials in Secret Conversations		U.S. Truck Maker Navistar Says Aware Of IT Breach

NYC Law Dept. Hacked, Raising Problems With Legal Docs, Personal Info for Thousands

Hacker Group Gunning for Musk

Novel ‘Victory’ Backdoor Spotted in Chinese APT Campaign

Windows Container Malware ‘Siloscape’ Targets Kubernetes Clusters

Bad Apple: App Store Rife with Fraud, Fleeceware

Hands on With Norton Antivirus Ethereum Mining: The Good and the Bad

Google to Pay $270 Million to Settle Antitrust Charges in France

6/4-6/2021

~ The Cyber Beat ~ Leave a comment
U.S. Officials up Pressure on Firms, Foreign Adversaries over Cyberattacks

…Ex-CIA Chief Panetta: Russian Hackers Behind Cyberattacks Are ‘Terrorists’

…Senate Sergeant at Arms Says Cyberattack More Worrisome Than Repeat of Jan. 6 Insurrection

…Warner: Debate on Making It Illegal to Pay Ransoms ‘Worth Having’

…U.S. Looks Into Cryptocurrency’s Role in Ransomware Hacks

Book Looks at the History of Money and Explains Our Obsession With Cryptocurrency

REvil Ransomware Gang Spill Details on US Attacks

How to Protect Your Files From Ransomware

Phishing Uses Colonial Pipeline Ransomware Lures to Infect Victims

These Online Casino Emails Never Pay What They Promise

The Rise of Cybersecurity Debt

Biden Expands Trump’s Investment Ban on Chinese Firms

Facebook Suspends Donald Trump for at Least Two Years

Facebook Hit With New Antitrust Probes in the UK and EU

Amazon to Share Your Internet With Neighbors on Tuesday – How to Opt Out

More U.S. Kids Warned About Internet Than Unsafe Sex

U.S. Charges Latvian For Helping Develop the Trickbot Malware		Cox Media Group TV News Stations Become Apparent Target in Next Cyberattack

Tokyo Olympic Games Organizers Latest to Be Hit by Data Breach, Info Leak

Cybersecurity Issues Close Des Moines Area Community College

Most Of Sierra College (CA) Systems Back Online After Ransomware Attack

Apache Pizza Warns Customers It Has Suffered Data Breach

Fujifilm Confirms Ransomware Attack Disrupted Business Operations

New Evil Corp Ransomware Mimics PayloadBin Gang to Evade U.S. Sanctions

FreakOut Malware Worms Its Way Into Vulnerable VMware Servers

Attackers Are Scanning for Vulnerable VMware Servers

TikTok Quietly Updated Its Privacy Policy to Collect Users’ Biometric Data

Signal App Safety Numbers Do Not Always Change — Here’s Why

GitHub Updates Policy to Remove Exploit Code When Used in Active Attacks

Google to Let Android Users Opt-Out to Stop Ads From Tracking Them

Google, Microsoft, and Mozilla Work Together on Better Browser Extensions

6/3/2021

~ The Cyber Beat ~ Leave a comment
Meatpacker JBS Says All Facilities Operating After Weekend Cyberattack

White House Pushes for Companies to Take Ransomware More Seriously After High-Profile Cyberattacks

U.S. To Give Ransomware Hacks Similar Priority as Terrorism, Official Says

Hackers Are Making Americans’ Lives Worse, at an Awkward Time for Biden

Ex-SEC Internet Enforcement Chief Says Crypto Investors Are ‘Enabling’ Ransomware Attacks

Online Fraud Attempts Are up 25% In the U.S.—Here’s Why

Biden Steps up Pressure on Russia to Go After Cyber Criminals

New SkinnyBoy Malware Used by Russian Hackers to Breach Sensitive Orgs

Chinese Threat Actors Hacked NYC MTA Using Pulse Secure Zero-Day

Biden Needs to Stick With Huawei Maximum Pressure Campaign

Supreme Court Narrows Computer Fraud and Abuse Act: Misusing Access Not the Same As Breaking In		UF Health Florida Hospitals Back to Pen and Paper After Cyberattack

Scottish Tourism Website Vandalized with X-Rated Ads

Websites Offline After Ransomware Group Claims to Have Hacked St. Clair County (IL)

Google PPC Ads Used to Deliver Infostealers

Necro Python Malware Upgrades With New Exploits and Crypto Mining Capabilities

Researchers Warn of Critical Bugs Affecting Realtek Wi-Fi Module

ARIN Will Take Down Its RPKI for 30 Minutes to Test Your BGP Routes

WordPress Force Installs Jetpack Security Update on 5 Million Sites

Google Chrome Now Warns You of Extensions From Untrusted Devs

Microsoft Teams Calls Are Getting End-to-End Encryption in July

6/2/2021

~ The Cyber Beat ~ Leave a comment
White House Reviewing Ransomware Threat, Biden to Discuss With Putin

…Hacks Force Biden Into More Aggressive Stance on Russia

…REvil Ransomware Ground Down JBS: Sources

Ransomware Scourge Continues as Essential Services Are Hit

…Hacker Group DarkSide Operates in a Similar Way to a Franchise

…Rise in Ransomware Requires Strong Government Response, Executives Say

…Top Cybersecurity Official Warns of More Ransomware Attacks

Breached Companies Facing Higher Interest Rates and Steeper Collateral Requirements

FireEye Selling Its Products Business and Name for $1.2 Billion		Ransomware Attack Will Impact Massachusetts Steamship Authority Into Thursday

NY’s M.T.A. Is Breached by Hackers as Cyberattacks Surge

FujiFilm Shuts Down Network After Suspected Ransomware Attack

Battle for the Galaxy: 6 Million Gamers Hit by Data Leak

Mobile County (AL) Hit by Cyber Attack

Scripps Health Begins Notifying More Than 147,000 People of Ransomware Records Breach

Huawei Finally Patches USB LTE Stick Flaw

Kali Linux 2021.2 Released With New Tools, Improvements, and Themes

Norton 360 Antivirus Now Lets You Mine Ethereum Cryptocurrency

Cybercriminals Hold $115,000-Prize Contest to Find New Cryptocurrency Hacks

6/1/2021

~ The Cyber Beat ~ Leave a comment
White House Says Cyberattack on Meat Producer JBS Likely From Russia

…Five Facts About Ransomware Attacks

…Cyber-Insurance Fuels Ransomware Payment Surge

DOJ Seizes Domains Used by to Launch Malicious Emails Posing as USAID

…APT 29

Rhode Islander Charged with Phishing Political Candidates

U.S. Convicts “King of Fraud” Aleksandr Zhukov

Cybersecurity Startup Exabeam Raises $200M, Valued at $2.4B		Report: Danish Secret Service Helped NSA Spy On European Politicians

Ransomware Hack Puts Sensitive Azusa (CA) Police Department Documents Online

Malware Can Use This Trick to Bypass Ransomware Defense in Antivirus Solutions

Critical WordPress Plugin Zero-Day Under Active Exploitation

Windows 10’s Package Manager Flooded With Duplicate, Malformed Apps

Microsoft Adds Automatic HTTPS in Edge for Secure Browsing

Firefox Now Blocks Cross-Site Tracking by Default in Private Browsing

5/28-30/2021

~ The Cyber Beat ~ Leave a comment
Russian Hackers Launch Major Cyberattack through U.S. Aid Agency’s Email System, Microsoft Says

New Russian Hacks Spark Calls for Tougher Biden Actions

White House Says No Changes to U.S.-Russia Summit after Latest Cyber Attack

Chinese Cyberspies Are Targeting U.S., EU Orgs With New Malware

Krebs: Using Fake Reviews to Find Dangerous Extensions

Amazon Devices Will Soon Automatically Share Your Internet With Neighbors

Hackers Exploit Post-COVID Return to Offices

After Colonial Attack, Energy Companies Rush to Secure Cyber Insurance

Krebs: Boss of ATM Skimming Syndicate Arrested in Mexico

Interpol Intercepts $83 Million Fighting Financial Cyber Crime

FBI to Share Compromised Passwords With Have I Been Pwned		Ireland’s Health Service Warns Staff Not to Use Work Devices

Mexico Walls off National Lottery Sites After Ransomware DDoS Threat

U.S. Nuclear Weapon Bunker Security Secrets Spill From Online Flashcards Since 2013

St. Petersburg High Student’s Hack Crashed Internet for All 145 Pinellas Schools

Walmart Phishing Attack Says Your Package Was Not Delivered

These Unsubscribe Emails Only Lead to Further Spam

New Epsilon Red Ransomware Hunts Unpatched Microsoft Exchange Servers

Researchers Warn of Facefish Backdoor Spreading Linux Rootkits

SonicWall Urges Customers to ‘Immediately’ Patch NSM On-Prem Bug

5/27/2021

~ The Cyber Beat ~ Leave a comment
Biden-Putin Summit Tensions: Feds Say Russia a Hacker ‘Safe Haven’

U.S. Announces New Security Directives for Pipelines after Hack

…To Require Energy Pipelines Report Computer Hacks or Face Fines

How Biden’s Executive Order Impacts Cybersecurity Players

…Biden’s Cybersecurity Executive Order Puts Emphasis on the Wrong Issues

Uyghurs Targeted by Fake Human Rights Emails

3 GOP Senators Come Out Against Biden Intelligence Nominee Over Huawei Ties

Tech Trade Groups Sue Florida Over New Social Media Law

Cybereason CEO Told the World About DarkSide’s Hacking Techniques From a Bomb Shelter in Israel

Have I Been Pwned Goes Open Source

Let’s Stop Blaming Employees for Our Data Breaches		Fujitsu SaaS Hack Sends Gov’t of Japan Scrambling

FBI: APT Hackers Breached U.S. Local Gov’t by Exploiting Fortinet Bugs

Data Breach at Canada Post

Philly Data Breach That Impacted Health Employee Emails Also Hit Other Departments

Clover Park School District (WA) Investigating Possible Ransomware Attack

Oklahoma City Dental Practice Announces Data Breach

Targeted AnyDesk Ads on Google Served Up Weaponized App

Klarna Mobile App Bug Let Users Log Into Other Customers’ Accounts

Unfixable Apple M1 Chip Bug Enables Cross-Process Chatter, Breaking OS Security Model

HPE Fixes Critical Zero-Day Vulnerability Disclosed in December

5/26/2021

~ The Cyber Beat ~ Leave a comment
Colonial Pipeline Missed Requested Security Review Before Hack

DarkSide Will Be Back, as Russia, China, Iran Create ‘Safe Havens’ for Hackers: Feds

A Peek Inside the Underground Ransomware Economy

‘Privateer’ Threat Actors Emerge from Cybercrime Swamp

Russia’s FSB Reports ‘Unprecedented’ Hacking Campaign Aimed at Government Agencies

EU Pushes for Stronger Disinformation Rules

Influencers Offered Money to Vilify Vaccine

Google Strikes Deal With Hospital Chain to Develop Healthcare Algorithms

WhatsApp Sues Indian Government Over New Internet Regulations

How Are Cyber Insurance Companies Assessing Ransomware Risk?		New Zealand Health Systems Hackers Release Patient Details to the Media

Belgium Interior Ministry Targeted in Cyber Attack

Cyber-criminal Gang Targets Texas Unemployment System

Eastern Hancock Community Schools (IN) Hit With Ransomware Attack

Peloton and Echelon Profile Photo Metadata Exposed Riders’ Real-World Locations

Google Researchers Discover A New Variant of Rowhammer Attack

BazaLoader Masquerades as Movie-Streaming Service

PDF Feature ‘Certified’ Widely Vulnerable to Attack

Google Chrome 91 Released With New Features, Security Improvements

5/25/2021

~ The Cyber Beat ~ Leave a comment
U.S. To Boost Pipeline Cyber Protections in Wake of Colonial Hack

High-Profile Hacks Leave Ransomware Gangs With Unwanted Publicity

Could Less Publicizing of Ransomware Fixes Have Prevented the Colonial Pipeline Attack?

Threat Actor ‘Agrius’ Emerges to Launch Wiper Attacks Against Israeli Targets

Snowden Was Right, Rules Human Rights Court as It Declares UK Spy Laws Broke ECHR

Lawmakers Request Investigation Into Postal Service’s Covert Operations Program

Activists Join Call for Facebook to Drop ‘Tone-Deaf’ Instagram for Kids Plan		Bose Admits Ransomware Hit: Employee Data Accessed

Domino’s India Discloses Data Breach After Hackers Sell Data Online

Harper County Community Hospital (OK) Targeted With Ransomware

Marietta City Schools (OH) Email Hack

Rockland Public Schools (MA) Hit With Ransomware Attack

Trend Micro Bugs Threaten Home Network Security

New High-Severity Vulnerability Advisory Released for Pulse Connect Secure VPN

VMware Warns of Critical Bug Affecting All vCenter Server Installs

5/24/2021

~ The Cyber Beat ~ Leave a comment
Huawei to Move Toward Software Development in Wake of U.S. Restrictions

Researchers Link CryptoCore Attacks On Cryptocurrency Exchanges to North Korea

Indonesian Gov’t Blocks Access to RaidForums Hacking Forum After Data Leak

Florida Gov DeSantis Signs Bill to Fine Tech Companies for Banning Politicians

An NTSB for Cyber Attacks? Critics Grapple With Biden’s Cybersecurity Safety Review Board Plan

Crime App Citizen Exposed Users’ COVID Data

Michigan Man ‘TheDearthStar’ aka ‘Dearthy Star’ Admits Selling University of Pittsburgh Medical Center Employee Data

Police Make Arrests in Crackdown on Scam Text Messages		Japan’s Biggest Dating App Omiai Hack Exposes Two Million Accounts

Zeppelin Ransomware Comes Back to Life With Updated Versions

Details Disclosed On Critical Flaws Affecting Nagios IT Monitoring Software

Zocdoc Says ‘Programming Errors’ Exposed Access to Patients’ Data

Bluetooth Flaws Allow Attackers to Impersonate Legitimate Devices

Mozilla Thunderbird Was Saving OpenPGP Keys in Plaintext After Encryption Snafu But Is Now Patched

WordPress Restaurant Reservation Plugin ReDi Patches Easy-to-Exploit XSS Bug

Apple Patches macOS Flaw Exploited by Malware to Secretly Snap Screenshots

5/21-23/2021

~ The Cyber Beat ~ Leave a comment
When Will the Irish Health Service Get a Resolution?

FBI Says Conti Ransomware Gang Has Hit 16 U.S. Health and Emergency Networks

German Cyber Security Chief Fears Hackers Could Target Hospitals

Cybersecurity Pros Are Split on Banning Ransomware Payments

Krebs: How to Tell a Job Offer from an ID Theft Trap

China Internet Watchdog Cites 105 Apps for Improper Data Collection

Defying U.S. Sanctions, Russian Cybersecurity Firm Aims for 2022 IPO

Indonesia Summons State Health Insurer Over Alleged Data Leak

DarkSide Getting Taken to ‘Hackers’ Court’ For Not Paying Affiliates

AMEX Fined £90,000 for Sending 4 Million Spam Emails in a Year

FBI Analyst Charged With Stealing Counterterrorism and Cyber Threat Info		Air India Hack Exposes Credit Card and Passport Info of 4.5 Million Passengers

E-Commerce Giant Mercari Suffers Major Data Breach in Codecov Incident

Bizarro Banking Malware Targets 70 Banks in Europe and South America

LittleBigPlanet Servers Taken Down Again Thanks To Cyber Attack

QNAP Confirms Qlocker Ransomware Used HBS Backdoor Account

Email Campaign Spreads StrRAT Fake-Ransomware RAT

Ransomware-Spreading Phorpiex Malware Botnet Just Won’t Go Away

WP Statistics Bug Allows Attackers to Lift Data from WordPress Sites

Wormable Windows HTTP Vulnerability Also Affects WinRM Servers

Microsoft Exchange Admin Portal Blocked by Expired SSL Certificate

5/20/2021

~ The Cyber Beat ~ Leave a comment
Colonial Pipeline CEO to Testify on Capitol Hill in June Following Cyberattack

U.S. Government Denies Disrupting Russian Ransomware Ring That Hacked Colonial Pipeline

Conti Ransomware Gives HSE Ireland Free Decryptor, Still Selling Data

…Irish High Court Issues Injunction to Prevent HSE Data Leak

U.S. Insurer CNA Paid $40 Million Ransom After March Cyber Attack

Ransomware Boom Forces More Companies to Cut Deals With Criminals

U.S. Has Almost 500,000 Job Openings in Cybersecurity

The Gig Economy Creates Novel Data-Security Risks

USPS Reportedly Uses Clearview AI to Spy on Americans

Twitter Rolls Out New Verification Process to Get Your “Blue Check”		100M Android Users Hit By Rampant Cloud Leaks

Fraudsters Employ Amazon ‘Vishing’ Attacks in Fake Order Scams

Apple Exec Calls Level of Mac Malware ‘Unacceptable’

Spammers Flood PYPI With Pirated Movie Links and Bogus Packages

Insurance Firm One Call Finally Admits Cyber Attack as Investigation Deepens

Slack Is Down, Massive Outage Blocks User Logins and Messages

Watering Hole Attack Was Used to Target Florida Water Utilities

Comcast Now Blocks BGP Hijacking Attacks and Route Leaks With RPKI

Microsoft Releases SimuLand, a Test Lab for Simulated Cyberattacks

5/19/2021

~ The Cyber Beat ~ Leave a comment
U.S. Introduces Bills to Secure Critical Infrastructure From Cyber Attacks

Colonial Pipeline CEO Tells Why He Paid Hackers a $4.4 Million Ransom

House Science Panel Requests Briefing With Energy Dept Over Colonial Hack

SolarWinds CEO Says Hackers May Have Struck Months Earlier Than Thought

How Long Hackers Will Hide in Your Network Before Deploying Ransomware or Being Spotted?

Hackers Scan for Vulnerable Devices Minutes After Bug Disclosure

Microsoft, Google Clouds Hijacked for Gobs of Phishing

Can Nanotech Secure IoT Devices From the Inside-Out?

Krebs: Recycle Your Phone, Sure, But Maybe Not Your Number

Automation & Pervasive, Connected Technology to Pose Cyber Threats in 2030		New Zealand Health Service Hit by Cyber Attack

University of South Australia Cyber Attack Hits Staff Email

Ransomware Attack Takes Visalia Unified (CA) Computer Systems Offline

Betenbough Homes (TX) Target of Russian Cyber Attack

Recruiter TeamBMS Cloud Snafu Exposes 20,000 CVs and ID Documents

Keksec Cybergang Debuts Simps Botnet for Gaming DDoS

Qlocker Ransomware Shuts Down After Extorting Hundreds of QNAP Users

MountLocker Ransomware Uses Windows API to Worm Through Networks

4 Vulnerabilities Under Attack Give Hackers Full Control of Android Devices

Windows PoC Exploit Released for Wormable RCE

5/18/2021

~ The Cyber Beat ~ Leave a comment
Hackers Behind Colonial Pipeline Attack Reportedly Received $90 Million in Bitcoin Before Shutting Down

Colonial Pipeline Servers Experiencing ‘Intermittent Disruptions’ Days After Ransomware Attack

Ransomware Hits Near Pre-Colonial Pipeline Levels, Data Suggests

‘Flattered’ Russian Spy Chief Denies SolarWinds Attack

Biden Proposes Billions for Cybersecurity After Wave of Attacks

Saudi Aramco to Co-Lead Report on Cyber Resilience in Oil Industry

How Apple Gave Chinese Government Access to iCloud Data and Censored Apps

1Password Releases Full-Featured Linux Desktop Application

McDonald’s Franchises Hack McFlurry Machines to Bypass Sanitization Process		Student Health Insurance Carrier Guard.me Suffers a Data Breach

Codecov Hackers Gained Access to Monday.com Source Code

Chelan-Douglas Health District (WA) Targeted in Cyber Attack

Scammers Pose as Meal-Kit Services to Steal Customer Data

Stalkerware Apps Riddled with Security Bugs

Mozilla Starts Rolling Out Site Isolation to All Firefox Channels

Google I/O 2021: Chrome Can Fix Compromised Passwords

5/17/2021

~ The Cyber Beat ~ Leave a comment
Krebs: Try This One Weird Trick Russian Hackers Hate

Elon Musk Impersonators Stole More Than $2 Million in Crypto Scams, Regulator Says

FBI Warns of Scammers Targeting Families of Missing Persons

CISOs Struggle to Cope with Mounting Job Stress

UK Government May Force MSPs to Follow Security Standards

Biden Revokes Trump-Era Order Targeting Shield for Website Operators

Should Encryption Be Curbed to Combat Child Abuse?

Apple Sent My Data to the FBI, Says Boss of Controversial Research Paper Trove Sci-Hub		Irish Health Service May Take Weeks to Recover From Ransomware Attack

…Cost Tens of Millions of Euros

…Conti Ransomware Also Targeted Ireland’s Department of Health

Ransomware Victim Volue Shows Why Transparency in Attacks Matters

FBI Spots Spear-Phishing Posing as Truist Bank Bank to Deliver Malware

Eufycam WI-FI Security Cameras Streamed Video Feeds From Other People’s Homes

Bizarro Banking Trojan Sports Sophisticated Backdoor

Exploit Released for Wormable Windows HTTP Vulnerability

5/14-16/2021

~ The Cyber Beat ~ Leave a comment
Colonial Pipeline Hacker DarkSide Says It Will Shut Operations

…Servers Of Colonial Pipeline Hacker DarkSide Forced Down

…Bitcoin Wallet Used by DarkSide for Ransom Payments ID’d by Elliptic

…Krebs: DarkSide Ransomware Gang Quits After Servers, Bitcoin Stash Seized

Colonial Pipeline Attack Is an Opportunity for Organizations to Shore up Cyber Defenses

…No Cause for Panic

…Underscores Concerns Over Paying Hackers

More Ransomware Websites Disappear in Aftermath of Colonial Pipeline Hack

Russian-Language Cybercriminal Forum ‘XSS’ Bans DarkSide and Other Ransomware Groups

…Ransomware Ads Now Also Banned on Exploit Cybercrime Forum

Facebook Loses Bid to Block Ruling on EU-U.S. Data Flows

How to Get into the Bug-Bounty Biz: The Good, Bad and Ugly		Toshiba Business Unit Says It Has Been Attacked by Hacking Group DarkSide

Axa Division in Asia Hit by Ransomware Cyber Attack

Ransomware Cyber Attack Shuts Down Irish Health Service

…Hospitals Cancel Outpatient Appointments

Echelon Exposed Riders’ Account Data, Thanks to a Leaky API

Student Names, Vendor Bank Account Info Exposed in Buffalo Schools Cyber Attack

Lemonade Denies “Unforgivably Negligent” Security Gaffe

FIN7 Backdoor Masquerades as Ethical Hacking Tool

Magecart Hackers Now hide PHP-Based Backdoor In Website Favicons

QNAP Warns of eCh0raix Ransomware Attacks, Roon Server Zero-Day

‘Scheme Flooding’ Allows Websites to Track Users Across Browsers

5/13/2021

~ The Cyber Beat ~ Leave a comment
Colonial Pipeline Said to Pay $5 Million Ransom to Hackers Who Caused Shutdown

Biden Says Colonial Pipeline Hackers Based in Russia, but Not Government-Backed

Former NSA Hacker Argues Russian Government Connected to Colonial Pipeline Attack

TSA Pipeline Oversight Faces Scrutiny After Colonial Hack

Colonial Pipeline Was Looking to Hire Cybersecurity Manager Before Ransomware Attack

Biden Cybersecurity Order Mandates New Rules for Gov’t Software

Rapid7 Source Code, Credentials Accessed in Codecov Supply-Chain Attack

Ransomware Going for $4K on the Cyber-Underground

Meet Lorenz — A New Ransomware Gang Targeting the Enterprise		Chemical Distributor Brenntag Pays $4.4 Million to DarkSide Ransomware

Insurance Giant CNA Fully Restores Systems After Ransomware Attack

Gary, Indiana Targeted by Ransomware Attack

CC Info Stolen From College Seniors in Breach of Commencement Attire Vendor Herff Jones

Manchester: Thousands of Number Plates Exposed in Parking Ticket Spreadsheet

Short Seller Says Lemonade Website Bug Exposed Insurance Customers’ Account Data

Crypto.com Exchange Glitch Causes Duplicate Purchases, Delayed Credits

Microsoft Build Tool Abused to Deliver Password-Stealing Malware

Cisco Fixes 6-Month-Old AnyConnect VPN Zero-Day With Exploit Code

5/12/2021

~ The Cyber Beat ~ Leave a comment
Colonial Pipeline Restarts Operations After Cyberattack

…No Plans to Pay Ransom for Files

Biden Signs Executive Order to Strengthen U.S. Cybersecurity Defenses after Pipeline Hack

Hacker Group DarkSide Claims It Has Three New Victims

…Researchers Track Down Five Affiliates of DarkSide Ransomware Service

UK Foreign Secretary Issues Warning to Russia on Ransomware

Global Cybersecurity Leaders Say They Feel Unprepared For Attack

As Ransomware Proliferates, Insuring for It Becomes Costly and Questioned

Researchers Flag e-Voting Security Flaws

Telegram Fraudsters Ramp Up Forged COVID-19 Vaccine Card Sales		Microsoft: Threat Actors Target Aviation Orgs With New Malware

Trust Wallet, MetaMask Crypto Wallets Targeted by New Support Scam

BabyChakra Data Vulnerability: Personal Information of Millions of Parents Exposed

Alaska Courts Restore Email, Lack Answers on Cyber Attack

Apple’s Find My Network Can Be Abused to Leak Secrets to the via Passing Devices

‘FragAttacks’: Wi-Fi Bugs Affect Millions of Devices

Microsoft Fixes WSUS Bug Blocking May Windows Security Updates

Microsoft’s New Project Ports Linux eBPF to Windows 10, Server

5/11/2021

~ The Cyber Beat ~ Leave a comment
Colonial Pipeline Temporarily Resumes Line 4 Operations Following Ransomware Attack

Colonial Pipeline Attack: Everything You Need to Know

Colonial Pipeline Cyber Attack and the High Stakes for Biden, Business World Relationship

…Feds Eye More Oversight of Pipelines After Colonial Attack

…Government Says Colonial Pipeline Has Not Shared Data on Hack

…White House Urges Americans Not to Hoard Gas

Krebs: A Closer Look at the DarkSide Ransomware Gang

Ransomware: Don’t Pay up, It Just Shows Cyber Criminals That Attacks Work, Warns Home Secretary

Ransomware Gang Leaks Data From D.C. Police Department

U.S. Intelligence Agencies Warn About 5G Network Weaknesses

UK NHS App Gets Go-Ahead for Vaccine Passport Use Despite Protest From Privacy Groups

Germany Bans Facebook from Processing WhatsApp Data		Energy Tech Firm Volue Hit in Ransomware Attack

Japanese Manufacturer Yamabiko Targeted by Babuk Ransomware

200K Veterans’ Medical Records May Have Been Stolen by Ransomware Gang

University of Houston Seniors Affected by Data Breach at Cap and Gown Company

Fake Chrome App Anchors Rapidly Worming ‘Smish’ Cyberattack

Experts Warn of a New Android Banking Trojan ‘TeaBot’ Stealing Users’ Credentials

Hackers Leverage Adobe Zero-Day Bug Impacting Acrobat Reader

Adobe Fixes Reader Zero-Day Vulnerability Exploited in the Wild

Krebs: Microsoft Patch Tuesday, May 2021 Edition

Microsoft Defender ATP Now Secures Networked Linux, macOS Devices

3 Cybersecurity Myths to Bust

5/10/2021

~ The Cyber Beat ~ Leave a comment
U.S. Blames Criminal Group DarkSide in Colonial Pipeline Hack

DarkSide Ransomware Will Now ‘Vet’ Targets After Pipeline Cyberattack

Colonial Pipeline Aims to Restore Operations by End of the Week After Cyberattack

White House Downplays Any Supply Challenge From Pipeline Attack

5 Takeaways From Attack on Colonial Pipeline

5 Facts About Ransomware Attacks

Cloudflare CEO Seeing Uptick in Cyber Incidents as Hackers Try ‘Unleashing Everything,’

West Midlands Railway Sent Staff Fake Bonus Email in Cyber-Security Test

More Than 40 Attorneys General Ask Facebook to Abandon Plans to Build Instagram for Kids		NatWest Bank Scheduled Payments Bug May Have Cost You Money

Chicago Mayor Lightfoot Refuses to Answer Questions on Exposed Emails, Says Hackers Demanded Ransom

Identity Theft Spike in KS Could Be Connected to KDOL Data Breach

U.S. and Australia Warn of Escalating Avaddon Ransomware Attacks

Lemon Duck Hacking Group Adopts Microsoft Exchange Server Vulnerabilities in New Attacks

GitHub Now Supports Security Keys When Using Git Over SSH

Krebs: Fintech Startup Offers $500 for Payroll Passwords

AXA Pledges to Stop Reimbursing Ransom Payments for French Ransomware Victims

5/7-9/2021

~ The Cyber Beat ~ Leave a comment
U.S. Pipeline Cyberattack Forces Closure

…The Colonial Pipeline Hack Is a New Extreme for Ransomware

…Exposes Cyber Threat to Energy Sector

…Major National Security Incident

U.S., UK Authorities Say Russian State-Sponsored Hackers Exploited Microsoft Vulnerabilities

iPhone Hack Allegedly Used to Spy on China’s Uyghurs

Facebook Will Limit Your WhatsApp Features For Not Accepting Privacy Policy

Twitter Tip Jar May Expose PayPal Address, Sparks Privacy Concerns

State Data Privacy Bills Stumble

Krebs: Investment Scammer John Davies Reinvents Himself?

Three Marylanders Indicted Over BEC Scam

Bulletproof Hosting Admins Plead Guilty to Running Cybercrime Safe Haven		Russian State Hackers Switch Targets After U.S. Joint Advisories

Twitter Scammers Impersonate SNL in Elon Musk Cryptocurrency Scams

City of Tulsa Experiencing Difficulties Due to Ransomware Attack

Three Affiliated Tribes Hit by Ransomware Attack, Holding Tribal Information Hostage

Cyberattack Knocks Out Rensselaer Polytechnic Institute’s (RPI) Computer Systems

Data Breach by Former Employee Exposes 1,500+ in University of Florida Health Shands System

San Diego Family Care Center Discloses Possible Data Breach

Microsoft: Business Email Compromise Attack Targeted Dozens of Orgs

Cuba Ransomware Partners With Hancitor for Spam-Fueled Attacks

Foxit Reader Bug Lets Attackers Run Malicious Code via PDFs

5/6/2021

~ The Cyber Beat ~ Leave a comment
NHS COVID Jab Website Security Flaw Allows Users to See Another Person’s Vaccine Status

Broadband Companies Funded ‘Fake’ Net Neutrality Comments, Investigation Finds

Data Leak Implicates Over 200,000 People in Amazon Fake Product Review Scam

Data Scraping in EU Regulators’ Sights As Spain Orders Equifax to Delete Information

Ryuk Ransomware Attack Sprung by Frugal Student At a European Biomolecular Research Institute

Millions of Older Broadband Routers Have These Security Flaws, Warn Researcher

Google Wants to Enable Multi-Factor Authentication by Default

Security Researchers Hack A Tesla From A Drone

Securing the Internet of Things in the Age of Quantum Computing		Hackers Encrypt New York Orthopedic Practice’s It Systems, Remove Patient Files

CaptureRx Data Breach Impacts Other Healthcare Providers

Scripps Health Cyberattack Delaying Critical Care for Some Patients, Workers Say

Bridgwater and Taunton College Students’ Details Posted on Dark Web After Cyber Attack

New Moriya Rootkit Used in the Wild to Backdoor Windows Systems

New TsuNAME DNS Bug Allows Attackers to DDoS Authoritative DNS Servers

New Spectre Flaws in Intel and AMD CPUs Affect Billions of Computers

Qualcomm Chip Bug Opens 40% of Android Phones to Eavesdropping

…Fix for Critical Qualcomm Chip Flaw Is Making Its Way to Android Devices

5/5/2021

~ The Cyber Beat ~ Leave a comment
Biden Administration, Congress Unite in Effort to Tackle Ransomware Attacks

Trump’s Ban From Facebook Is Upheld, but Panel Orders Review

Republicans Float Support for Big Tech Antitrust Reform After Trump Facebook Ban Upheld

Dubious Covid-19 Shots, Fake Vaccination Certificates Proliferate on Dark Web

Krebs: Malicious Office 365 Apps Are the Ultimate Insiders

New Study Warns of Security Threats Linked to Recycled Phone Numbers

Shoppers Choose Guest Checkouts Over Security Fears

Americans Turn to VPNs to Prevent Online Fraud and Hacking

Sweden’s Knowit Buys Cybercom in Digital Consultancy Merger

IBM Adds Zero Trust Capabilities to Cloud Pak for Security		Peloton’s Leaky API Spilled Riders’ Private Data

East London Council Blurts Thousands of Residents’ Email Addresses

Cyber-Attack on Belgian Parliament

U.S. Agency for Global Media Data Breach Caused by a Phishing Attack

NRG/Lanctôt Latest Victim of Ransomware Attack

Illinois AG’s Office Still Locked Out of Computer Systems Nearly Month After Ransomware Hack

New Crypto-Stealer ‘Panda’ Spread via Discord

Anti-Spam WordPress Plugin Could Expose Website User Data

Cisco Bugs Allow Creating Admin Accounts, Executing Commands as Root

Raft of Exim Security Holes Allow Linux Mail Server Takeovers

VMware Fixes Critical RCE Bug in vRealize Business for Cloud

5/4/2021

~ The Cyber Beat ~ Leave a comment
Bait Boost: Phishers Delivering Increasingly Convincing Lures

4,700 Amazon Employees Had Unauthorized Access to Private Seller Data

Krebs: The Wages of Password Re-use: Your Money or Your Life

They Told Their Therapists Everything: Hackers Leaked It All

It’s Time to Ditch Celebrity Cybersecurity

Trump Launches New Communications Tool After Social Media Ban

Fake Vaccine Domain Seized

European Authorities Scrutinize Data Flows to U.S.

DOD Expands Bug Disclosure Program to All Publicly Accessible Systems

Google Chrome Adopts Windows 10 Exploit Protection Feature		Spanish Delivery Startup Glovo Hit by Cyber Attack

Twilio Discloses Impact From Codecov Supply-Chain Attack

Melbourne-Based Schepisi Hit by Cyber Attack as Hackers Claim Sim Card Info Stolen

Rochester Community Technical College Student Birthdates Released in Data Breach

Cyber Breach at Centennial School District (OR) Keeps Computer Systems Down

Gifford Health Care (VT) Says Vendor CaptureRX Had Data Breach

Scripps Health (CA) Remains Plagued by Weekend Cyberattack

Global Phishing Attacks Spawn 3 New Malware Strains Doubledrag, Doubledrop & Doubleback

New ‘Pingback’ Malware Using ICMP Tunneling to Evade C&C Detection

Critical 21Nails Exim Bugs Expose Millions of Servers to Attacks

Hundreds of Millions of Dell Users at Risk from Kernel-Privilege Bugs

5/3/2021

~ The Cyber Beat ~ Leave a comment
The Hack of Small Tech Vendor Accellion Casts a Wide Net

PoC Exploit Released for Microsoft Exchange Bug Discovered by NSA

Deepfake Attacks Are About to Surge, Experts Warn

N3TW0RM Ransomware Emerges in Wave of Cyberattacks in Israel

Researchers Uncover Iranian State-Sponsored ‘Project Signal’ Ransomware Operation

Microsoft Reveals Final Plan to Remove Flash Player in Windows 10

Decision on Donald Trump’s Facebook Ban Is Coming on Wednesday

Apple and Fortnite Maker Epic Trade Blows as Antitrust Court Battle Begins

Online Child Abuse Platform Boystown with 400k Users Taken Down		Alaska Court System Forced Offline by Cyberattack

Ransomware Attack On Midwest Transplant Network Affects More Than 17,000

Madison City Schools (AL) Faces Cybersecurity Threat

New Buer Malware Downloader Rewritten in E-Z Rust Language

Over 40 Apps With More Than 100 Million Installs Found Leaking AWS Keys

Hewlett Packard Enterprise Plugs Critical Bug in Edge Platform Tool

Apple Fixes 2 iOS Zero-Day Vulnerabilities Actively Used in Attacks

Pulse Secure Fixes VPN Zero-Day Used to Hack High-Value Targets

4/30-5/2/2021

~ The Cyber Beat ~ Leave a comment
Justice Department to Undertake 120 Day Review of Cybersecurity Challenges

More U.S. Agencies Potentially Hacked, This Time With Pulse Secure Exploits

PortDoor Espionage Malware Takes Aim at Russian Defense Sector

China Calls Out 33 Apps for Collecting More User Data Than Deemed Necessary

Brazil’s Rio Grande Do Sul Court System Hit by REvil Ransomware

DC Police Personnel Files Obtained by Hackers in Recent Ransomware Attack

Ransomware Victims Urged to Go to Police

Ransomware Reality Shock: 92% Who Pay Don’t Get Their Data Back

Codecov Starts Notifying Customers Affected by Supply-Chain Attack

How to Stop Windows 10 Defender From Uploading Files to Microsoft

British Prime Minister’s Cell Phone Number Exposed

SAP SE Self-Reports Illegal Exports		Hotbit Cryptocurrency Exchange Down After Hackers Targeted Wallets

Your Stolen ParkMobile Data Is Now Free for Wannabe Scammers

Transportation Research Board (TRB) Registration Database Hacked in Ransomware Attack

Ransomware Gang Leaks Glasgow Homeless Firm Aspire’s Data After Refusal to Pay

Contact Tracing Data Breach Impacts 72,000 Pennsylvanians

Scripps Health (CA) Targeted by Cyber Attack

Patient Info Exposed in St. John’s Well Child and Family Center (CA) Data Breach

Virgin Active Cyber Attack Results in Freeze of Online Systems

Babuk Quits Ransomware Encryption, Focuses on Data-Theft Extortion

WeSteal: A Cryptocurrency-Stealing Tool That Does Just That

Python Also Impacted by Critical IP Address Validation Vulnerability

Office 365 Security Baseline Adds Macro Signing, JScript Protection