Author: The Cyber Beat

1/28/2025

~ The Cyber Beat ~ Leave a comment
Krebs: A Tumultuous Week for Federal Cybersecurity Efforts

DeepSeek’s Popular AI App Is Explicitly Sending U.S. Data to China

…Apple Researchers Reveal the Secret Sauce Behind DeepSeek AI

Scammers Are Creating Fake News Videos to Blackmail Victims

AI Haters Build Tarpits to Trap and Trick AI Scrapers That Ignore robots.txt

Microsoft Tests Edge Scareware Blocker to Block Tech Support Scams

Google Play Will Now Verify VPNs That Prioritize Privacy and Safety

British Vishing-as-a-Service Trio Sentenced

Prosecutors Say They Can’t Obtain Murder Conviction After Judge Throws Out Evidence From Facial Recognition Match

58% of Ransomware Victims Forced to Shut Down Operations

How Long Does It Take Hackers to Crack Modern Hashing Algorithms?		UK Engineering Firm Smiths Group Hit by Cyber Attack

Texas Utility Firm CenterPoint Energy Investigating Potential Leak of Customer Data Tied to 2023 MOVEit Breach

API Supply Chain Attacks Put Millions of Airline Users at Risk

PowerSchool Starts Sending Breach Notifications, but There Are Still Questions Left to Answer

ENGlobal Cyber-Attack Exposes Sensitive Data

PureCrypter Deploys Agent Tesla and New TorNet Backdoor in Ongoing Cyberattacks

Lynx Ransomware Group Unveiled with Sophisticated Affiliate Program

Hellcat: Baguette Bandits Strike Again With Ransomware and a Side of Mockery

Hackers Exploiting Flaws in SimpleHelp RMM to Breach Networks

New Apple CPU Side-Channel Attacks Steal Data From Browsers

Signal Will Let You Sync Old Messages When Linking New Devices

1/27/2025

~ The Cyber Beat ~ Leave a comment
Silicon Valley Is Raving About a Made-in-China DeepSeek AI Model

…China’s DeepSeek AI App Sends U.S. Tech Stocks Reeling

…DeepSeek’s Top-Ranked AI App Is Restricting Sign-Ups Due to ‘Malicious Attacks’

Hackers Hijack Emergency Sirens in Kindergartens Across Israel

Ukraine Denies Involvement in Cyberattack Against Slovakia

Sweden Seizes Cargo Ship After Another Undersea Cable Hit in Suspected Sabotage

EU Sanctions Russian GRU Hackers for Cyberattacks Against Estonia

MGM Agrees to Pay $45 Million to Settle Data-Breach Lawsuit

Brazil Bans Iris Scan Company Co-Founded by Sam Altman From Paying Citizens for Biometric Data

Democrat Members of U.S. Surveillance Watchdog Fired After Refusing to Resign		Matagorda County (TX) Issues Disaster Declaration Following Cyberattack

Universal Lenders (IL) Sends Data Breach Letters to 19,575 Individuals

Hidden Text Salting Disrupts Brand Name Detection Systems

New Phishing Campaign Targets Mobile Devices with Malicious PDFs

MintsLoader Delivers StealC Malware and BOINC in Targeted Cyber Attacks

Clone2Leak: GitHub Desktop Vulnerability Risks Credential Leaks via Malicious Remote URLs

Apple Fixes This Year’s First Actively Exploited Zero-Day Bug

CISOs Boost Crisis Simulation Budgets Amid High-Profile Cyber-Attacks

Bitwarden Makes It Harder to Hack Password Vaults Without MFA

Microsoft Teams Phishing Attack Alerts Coming to Everyone Next Month

1/24-26/2025

~ The Cyber Beat ~ Leave a comment
Cyber Diplomacy Funding Halted as U.S. Issues Broad Freeze on Foreign Aid

Kristi Noem Confirmed by U.S. Senate as Trump’s Homeland Secretary

UK to Examine Undersea Cable Vulnerability as Russian Spy Ship Spotted in British Waters

UnitedHealth Estimates Change Healthcare Hack Impacted About 190 Million People

Russian Scammers Target Crypto Influencers with Infostealers

Hacker Infects 18,000 “Script Kiddies” With Fake Malware Builder

Can’t Download TikTok? How About a Used iPhone for $3,000

U.S. Privacy Snags a Win as Judge Limits Warrantless FBI Searches

Hackers Get $886,250 For 49 Zero-Days at Pwn2Own Automotive 2025		TalkTalk Investigates Breach After Data for Sale on Hacking Forum

At Least $69 Million Stolen From Crypto Platform Phemex in Suspected Cyberattack

Game Developer Big Cheese Studio Targeted in Cyber Attack, PAP Reports

Ransomware Gang Uses SSH Tunnels for Stealthy VMware ESXi Access

Hackers Use Windows RID Hijacking to Create Hidden Admin Account

Meta’s Llama Framework Flaw Exposes AI Systems to Remote Code Execution Risks

CISA Adds Five-Year-Old jQuery XSS Flaw to Exploited Vulnerabilities List

Microsoft: Outdated Exchange Servers Fail to Auto-Mitigate Security Bugs

Zyxel Warns of Bad Signature Update Causing Firewall Boot Loops

1/23/2025

~ The Cyber Beat ~ Leave a comment
Hackers Imitate Kremlin-Linked Group to Target Russian Entities

FBI: North Korean IT Workers Steal Source Code to Extort Employers

DOJ Indicts Two Americans for Running Laptop Farm Used in North Korea IT Worker Scam

Google Is Giving IT More Control Over Your Chrome Extensions

New GhostGPT AI Chatbot Facilitates Malware Creation and Phishing

Hundreds of Fake Reddit Sites Push Lumma Stealer Malware

Bookmakers Ramp Up Efforts to Combat Arbitrage Betting Fraud

PayPal Fined by New York for Cybersecurity Failures

Texas Probes Four More Car Companies Over How They Collect and Sell Consumer Data

LinkedIn Sued for Allegedly Training AI Models With Private Messages Without Consent

Tesla EV Charger Hacked Twice on Second Day of Pwn2Own Tokyo

CISA: Hackers Still Exploiting Older Ivanti Bugs to Breach Networks

CISOs Dramatically Increase Boardroom Influence but Still Lack Soft Skills

New Android Identity Check Locks Settings Outside Trusted Locations		FortiGate Config Leaks: Victims’ Email Addresses Published Online

RansomHub Lays Claim on American Standard, Grohe Breaches

PFS Investments Inc. (GA) Files Notice of Recent Data Breach Leaking Confidential Information

Experts Find Shared Codebase Linking Morpheus and HellCat Ransomware Payloads

QakBot-Linked BC Malware Adds Enhanced Remote Access and Data Gathering Features

Subaru Security Flaws Exposed Its System for Tracking Millions of Cars

Critical Zero-Days Impact Premium WordPress Real Estate Plugins

QNAP Fixes Six Rsync Vulnerabilities in NAS Backup, Recovery App

Custom Backdoor Exploiting Magic Packet Vulnerability in Juniper Routers

Palo Alto Firewalls Found Vulnerable to Secure Boot Bypass and Firmware Exploits

SonicWall Urges Immediate Patch for Critical CVE-2025-23006 Flaw Amid Likely Exploitation

Cisco Fixes Critical 9.9-Rated, Make-Me-Admin Bug in Meeting Management

The Security Risk of Rampant Shadow AI

1/22/2025

~ The Cyber Beat ~ Leave a comment
Iran and Russia Deepen Cyber Ties With New Agreement

Trump Terminates DHS Advisory Committee Memberships, Disrupting Cybersecurity Review

Trump Admin Tells All Democrats on Intelligence Oversight Board to Resign

Krebs: MasterCard DNS Error Went Unnoticed for Years

What PowerSchool Isn’t Saying About Its ‘Massive’ Student Data Breach

…PowerSchool Hacker Claims They Stole Data of 62 Million Students

Cloudflare CDN Flaw Leaks User Location Data, Even Through Secure Chat Apps

Major Cybersecurity Vendors’ Credentials Found on Dark Web

BreachForums Admin to Be Resentenced After Appeals Court Slams Supervised Release

Israeli Private Eye Wanted in U.S. Over Alleged Hacking for Exxon Lobbyist, Lawyer Says

Trump Frees Silk Road Creator Ross Ulbricht After 11 Years in Prison		Conduent Confirms Cybersecurity Incident Behind Recent Outage

Octagon (CT) Sends Round of Data Breach Letters Following Recent Cybersecurity Incident

PlushDaemon APT Targeted South Korean VPN Software

Telegram CAPTCHA Tricks You Into Running Malicious Powershell Scripts

Tycoon 2FA Phishing Kit Upgraded to Bypass Security Measures

IPany VPN Breached in Supply-Chain Attack to Push Custom Malware

Hackers Exploit Zero-Day in cnPilot Routers to Deploy AIRASHI DDoS Botnet

Cisco Warns of Denial of Service Flaw With PoC Exploit Code

Microsoft Issues Out-Of-Band Fix for Windows Server 2022 NUMA Glitch

Hackers Exploit 16 Zero-Days on First Day of Pwn2Own Automotive 2025

Why CISOs Must Think Clearly Amid Regulatory Chaos

1/21/2025

~ The Cyber Beat ~ Leave a comment
Russian Ransomware Groups Deploy Email Bombing and Teams Vishing

CERT-UA Warns of Cyber Scams Using Fake AnyDesk Requests for Fraudulent Security Audits

Fake Homebrew Google Ads Target Mac Users With Malware

Quad Foreign Ministers Meet in Washington in Signal of Trump’s China Focus

TSA Chief Behind Cyber Directives for Aviation, Pipelines and Rail Ousted by Trump Team

U.S. Department of Homeland Security Firing All Advisory Committee Members, Letter Says

UK’s New Digital IDs Raise Security and Privacy Fears

Disciplinary and Special Ed Records of Toronto Students May Have Leaked in PowerSchool Breach

Cloudflare Mitigated a Record-Breaking 5.6 Tbps DDoS Attack		Russian Telecom Giant Rostelecom Investigates Suspected Cyberattack on Contractor

Govtech Giant Conduent Won’t Rule Out Cyberattack as Outage Drags On

IntraSystems Data Breach Hits Home Care Patients at Allegheny Health Network

PNGPlug Loader Delivers ValleyRAT Malware Through Fake Software Installers

13,000 MikroTik Routers Hijacked by Botnet for Malspam and Cyberattacks

New Mirai Malware Variant Targets AVTECH Cameras, Huawei Routers

Oracle To Address 320 Vulnerabilities in January Patch Update

7-Zip Fixes Bug That Bypasses Windows MoTW Security Warnings, Patch Now

Patch Procrastination Leaves 50,000 Fortinet Firewalls Vulnerable to Zero-Day

1/17-20/2025

~ The Cyber Beat ~ Leave a comment
Ukraine’s State Registers Restored Following Cyber-Attack

Indian APT Group DONOT Misuses App for Intelligence Gathering

U.S. Treasury Department Imposes Sanctions on Chinese Company Over Salt Typhoon Hack

FCC Orders Telecoms to Secure Their Networks After Salt Tyhpoon Hacks

Trump Revokes Biden Executive Order on Addressing AI Risks

Homeland Security Nominee Kristi Noem Bashes CISA, Says Agency Must Be ‘Smaller, More Nimble’

Tough New EU Cyber Rules Require Banks to Ramp up Security — But Many Aren’t Ready

TikTok Goes Dark in the U.S. as Federal Ban Takes Effect January 19, 2025

…How to Get around the U.S. TikTok Ban

…TikTok Restores Service for U.S. Users Based on Trump’s Promised Executive Order

Canadian IT Company OpenText Corporation Added to Moscow’s List of ‘Undesirable’ Organizations

Former CIA Analyst Pleads Guilty to Sharing Top Secret Files

Philippines Arrests Chinese National Suspected of Spying on Critical Infrastructure		Costa Rica Refinery Cyberattack Was First Deployment for New U.S. Response Program, Ambassador Says

Data on Half a Million Hotel Guests Exposed After Otelier Breach

HPE Launches Investigation After Hacker Claims Data Breach

Medusa Ransomware Group Claims Attack on UK’s Gateshead Council

LifeBridge Health (MD) Posts Notice of 2024 Data Breach Affecting Patient SSNs and Medical Info

Edw. C. Levy Co. (MI) Announces Data Breach Following Ransomware Attack

Hackers Deploy Malicious npm Packages to Steal Solana Wallet Keys via Gmail SMTP

Python-Based Bots Exploiting PHP Servers Fuel Gambling Platform Proliferation

Malicious PyPi Package Steals Discord Auth Tokens From Devs

Critical Flaws in WGS-804HPT Switches Enable RCE and Network Exploitation

Strategic Approaches to Threat Detection, Investigation & Response

FTC Orders GM to Stop Collecting and Selling Driver’s Data

FTC Cracks Down on Genshin Impact Gacha Loot Box Practices

1/16/2025

~ The Cyber Beat ~ Leave a comment
Biden’s Cyber Ambassador Urges Trump Not to Cede Ground to Russia and China in Global Tech Fight

Krebs: Chinese Innovations Spawn Wave of Toll Phishing Via SMS

Russian Star Blizzard Shifts Tactics to Exploit WhatsApp QR Codes for Credential Harvesting

Biden Issues 11th-Hour Cyber Executive Order

Trump’s Truth Social Users Targeted by Rampant Scams Online

GitHub’s Deepfake Porn Crackdown Still Isn’t Working

Middle Eastern Real Estate Fraud Grows with Online Listings

Enzo Biochem Settles Lawsuit Over 2023 Ransomware Attack for $7.5m

GDPR Complaints Filed Against TikTok, Temu for Sending User Data to China

U.S. Cracks Down on North Korean IT Worker Army With More Sanctions

Microsoft Expands Testing of Windows 11 Admin Protection Feature		Wolf Haldenstein Law Firm Says 3.5 Million Impacted by Data Breach

Carruth Compliance Consulting (OR) Sends Out Data Breach Letters Following December 2024 Cyberattack

Clop Ransomware Gang Names Dozens of Victims Hit by Cleo Mass-Hack, but Several Firms Dispute Breaches

Hackers Hide Malware in Images to Deploy VIP Keylogger and 0bj3ctivity Stealer

Python-Based Malware Powers RansomHub Ransomware to Exploit Network Flaws

Researcher Uncovers Critical Flaws in Multiple Versions of Ivanti Endpoint Manager

Researchers Find Exploit Allowing NTLMv1 Despite Active Directory Restrictions

W3 Total Cache Plugin Flaw Exposes 1 Million WordPress Sites to Attacks

New UEFI Secure Boot Vulnerability Could Allow Attackers to Load Malicious Bootkits

1/15/2025

~ The Cyber Beat ~ Leave a comment
Russian Espionage and Financial Theft Campaigns Have Ramped Up, Ukraine Cyber Agency Says

China’s Salt Typhoon Spies Spotted on U.S. Gov’t Networks Before Telcos, CISA Boss Says

North Korean IT Worker Fraud Linked to 2016 Crowdfunding Scam and Fake Domains

Lazarus Group Targets Web3 Developers with Fake LinkedIn Profiles in Operation 99

UN Security Council Members Meet on Spyware for First Time

No New Funding in EU Plan to Tackle Ransomware Attacks Against Hospitals

Section 702 Surveillance Powers Remain ‘Indispensable,’ CIA Pick Ratcliffe Says

Federal Court Orders Massive Return of $9.3b in Bitcoin Stolen From Bitfinex in 2016 Hack

FTC Cracks Down on GoDaddy for Cybersecurity Failings

From Gmail to Word, Your Privacy Settings and AI Are Entering Into a New Relationship

DJI Loosens Flight Restrictions, Decides to Trust Operators to Follow FAA Rules

CISA Shares Guidance for Microsoft Expanded Logging Capabilities		Suspected Ukrainian Hackers Impersonating Russian Ministries to Spy on Industry

UnitedHealth Hid Its Change Healthcare Data Breach Notice for Months

Label Giant Avery Says Website Hacked to Steal Credit Cards

University of Oklahoma Isolates Systems After ‘Unusual Activity’ on IT Network

E-Benefit Solution Notifies Consumers of Recent Data Breach

EncompassCare (OH) Files Notice of Data Breach Affecting Consumers’ Social Security Numbers

Google Ads Users Targeted in Malvertising Scam Stealing Credentials and 2FA Codes

MikroTik Botnet Uses Misconfigured SPF DNS Records to Spread Malware

Critical SimpleHelp Flaws Allow File Theft, Privilege Escalation, and RCE Attacks

Google Cloud Researchers Uncover Flaws in Rsync File Synchronization Tool

SAP Fixes Critical Vulnerabilities in NetWeaver Application Servers

Microsoft: Happy 2025. Here’s 161 Security Updates (Krebs)

1/14/2025

~ The Cyber Beat ~ Leave a comment
North Korea Linked to Crypto Heists of Over $650 Million in 2024 Alone

U.S. Issues Final Rule Barring Chinese, Russian Connected Car Tech

Hegseth Says Debate Over Cyber Command, NSA Leadership Would Reach ‘Conclusion’

FBI Hacked Thousands of Computers to Make PlugX Malware Used by China Uninstall Itself

Biden Opens Federal Land for AI Data Centers, Sets Rules for Developers

The UK Wants to Do Its ‘Own Thing’ on AI Regulation, Suggesting a Divergence From U.S. And EU

UK Floats Ransomware Payout Ban for Public Sector

Wyze Cameras Will Use AI to Describe What They See

The ‘Largest Illicit Online Marketplace’ Ever Huione Guarantee Is Growing at an Alarming Rate, Report Says

Asset Manager Ashford Settles SEC Allegations It Failed to Disclose Extent of Hack		Russia’s Largest Platform for State Procurement Hit by Cyberattack From Pro-Ukraine Group

Connecticut City of West Haven Assessing Impact of Cyberattack

Tennessee-Based Mortgage Lender Confirms December Cyberattack

WP3.XYZ Malware Attacks Add Rogue Admins to 5,000+ WordPress Sites

Google OAuth Vulnerability Exposes Millions via Failed Startup Domains

Hackers Use FastHTTP in New High-Speed Microsoft 365 Password Attacks

Zero-Day Vulnerability Suspected in Attacks on Fortinet Firewalls with Exposed Interfaces

Microsoft January 2025 Patch Tuesday Fixes 8 Zero-Days, 159 Flaws

Snyk Appears to Deploy ‘Malicious’ Packages Targeting Cursor for Unknown Reason

New Startups Focus on Deepfakes, Data-in-Motion & Model Security

1/13/2025

~ The Cyber Beat ~ Leave a comment
Russian Malware Campaign Hits Kazakhstan and Central Asian Diplomatic Files

Turks and Caicos Recovering From Pre-Christmas Ransomware Attack

CISA Orders Agencies to Patch BeyondTrust Bug Exploited in Attacks

Poland Uncovers Russia-Linked Disinformation Campaign Targeting Upcoming Presidential Election

Rep. Don Bacon on Cyber Deterrence: ‘Speak Softly and Carry a Big-@$$ Stick’

Expired Domains Allowed Control Over 4,000 Backdoors on Compromised Systems

The Criminal Question in the Coming Wave of Pro-Crypto Legislation

Inside the Black Box of Predictive Travel Surveillance

Texas Sues Allstate, Alleging It Violated Data Privacy Rights of 45 Million Americans

WEF Warns of Growing Cyber Inequity Amid Escalating Complexities in Cyberspace		A Breach of Gravy Analytics’ Huge Trove of Location Data Threatens the Privacy of Millions

UK Domain Registry Nominet Confirms Breach via Ivanti Zero-Day

Cyberattack Forces Eindhoven University of Technology to Cancel Lectures

HCF Management (OH) Sends Data Breach Letters to Victims Following September 2024 Cyberattack

OneBlood Confirms Personal Data Stolen in July Ransomware Attack

Stolen Path of Exile 2 Admin Account Used to Hack Player Accounts

Hackers Exploit Aviatrix Controller Vulnerability to Deploy Backdoors and Crypto Miners

Ransomware Abuses Amazon AWS Feature to Encrypt S3 Buckets

WordPress Skimmers Evade Detection by Injecting Themselves into Database Tables

Microsoft: macOS Bug Lets Hackers Install Malicious Kernel Drivers

Microsoft 365 MFA Outage Fixed

1/10-12/2025

~ The Cyber Beat ~ Leave a comment
As China Hacking Threat Builds, Biden to Order Tougher Cybersecurity Standards

Silk Typhoon Treasury Hackers Also Breached Us Foreign Investments Review Office

Chinese Cyber-Spies Peek Over Shoulder of Officials Probing Real-Estate Deals Near American Military Bases

Phishing Texts Trick Apple iMessage Users Into Disabling Protection

Secret Phone Surveillance Tech Was Likely Deployed at 2024 DNC

Microsoft Sues Hacking Group Exploiting Azure AI for Harmful Content Creation

Pastor Who Saw Crypto Project in His “Dream” Indicted for Fraud

New York Sues to Recover $2 Million in Crypto Stolen in Remote Job Scams

DoJ Indicts Three Russians for Operating Crypto Mixers Used in Cybercrime Laundering

NSO Ruling Is a Victory for WhatsApp, but Could Have a Small Impact on Spyware Industry		Slovakia Hit by Historic Cyber-Attack on Land Registry

STIIIZY Data Breach Exposes Cannabis Buyers’ IDs and Purchases

Telefónica Confirms Internal Ticketing System Breach After Data Leak

The North Los Angeles County Regional Center Files Notice of Data Breach Following Apparent Ransomware Attack

Laramie County (WY) Library System Hit by Cyberattack

AI-Driven Ransomware FunkSec Targets 85 Victims Using Double Extortion Tactics

Fake PoC Exploit Targets Security Researchers with Infostealer

New Web3 Attack Exploits Transaction Simulations to Steal Crypto

Google Project Zero Researcher Uncovers Zero-Click Exploit Targeting Samsung Devices

Docker Desktop Blocked on Macs Due to False Malware Alert

Scammers File First — Get Your IRS Identity Protection PIN Now

1/9/2025

~ The Cyber Beat ~ Leave a comment
Japan Faces Prolonged Cyber-Attacks Linked to China’s MirrorFace

Ivanti Zero-Day Attacks Infected Devices With Custom Chinese Malware

U.S. Treasury Hack Linked to Silk Typhoon Chinese State Hackers

How the U.S. TikTok Ban Would Actually Work

Google Messages Takes a Step Towards Secure Messaging Across Apps and Platforms (APK Teardown)

Apple Says Siri Isn’t Sending Your Conversations to Advertisers

EU Commission Liable for Breaching EU’s Own Data Protection Rules

New AI Challenges Will Test CISOs & Their Teams in 2025		Hackers Claim Massive Breach Gravy Analytics, the Parent Company of Location Data Giant Venntel, Threaten to Leak Data

Hackers Claim to Breach Russian State Agency Rosreestr Managing Property, Land Records

Largest U.S. Addiction Treatment Provider ​BayMark Health Services Notifies Patients of Data Breach

PowerSchool Says Hackers Stole Students’ Sensitive Data, Including Social Security Numbers, in Data Breach

Some Winston-Salem (NC) City Services Knocked Offline by Cyberattack

Fake CrowdStrike Job Offer Emails Target Devs With Crypto Miners

New Banshee Stealer Variant Bypasses Antivirus with Apple’s XProtect-Inspired Encryption

1/8/2025

~ The Cyber Beat ~ Leave a comment
Cyber Command Overhaul Gets Austin’s Approval, but Plan Faces Uncertain Future

Pall Mall Process to Tackle Commercial Hacking Proliferation Raises More Concerns Than Solutions

Russian ISP Confirms Ukrainian Hackers “Destroyed” Its Network

TikTok’s Fate Divides Trump and Fellow Republicans as Supreme Court Action Looms

Neglected Domains Used in Malspam to Evade SPF and DMARC Security Protections

Fake Government Officials Use Remote Access Tools for Card Fraud

Scammers Exploit Microsoft 365 to Target PayPal Users

Krebs: A Day in the Life of a Prolific Voice Phishing Crew		PowerSchool Hack Exposes Student, Teacher Data From K-12 Districts

Medical Billing Firm Medusind Discloses Breach Affecting 360,000 People

Pediatric Home Service (MN) Files Official Notice of Data Breach

Researchers Expose NonEuclid RAT Using UAC Bypass and AMSI Evasion Techniques

Hackers Exploit KerioControl Firewall Flaw to Steal Admin CSRF Tokens

Unpatched Critical Flaws Impact Fancy Product Designer WordPress Plugin

Ivanti Warns of New Connect Secure Flaw Used in Zero-Day Attacks

SonicWall Urges Admins to Patch Exploitable SSLVPN Bug Immediately

1/7/2025

~ The Cyber Beat ~ Leave a comment
‘We Have to Prioritize Cybersecurity’ Within Federal Budgets, Outgoing Cyber Czar Says

Cybercriminals Don’t Care About National Cyber Policy

Phishing Click Rates Triple in 2024

Finland Finds Russian ‘Spy’ Ship Anchor as Subsea Cable Company Demands Ship’s Seizure for Compensation

Former NSA Cyber Chief Joins Venture Firm DataTribe

U.S. Adds Web and Gaming Giant Tencent to List of Chinese Military Companies

U.S. Cyber Trust Mark Launches as the Energy Star of Smart Home Security

License Plate Readers Are Leaking Real-Time Video Feeds and Vehicle Data

Telegram Hands Over Data on Thousands of Users to U.S. Law Enforcement

UK Government to Ban Creation of Explicit Deepfakes

Washington State Sues T-Mobile Over 2021 Data Breach Security Failures

Meta Ends Fact-Checking on Facebook, Instagram in Free-Speech Pitch		Turbulence at UN Aviation Agency as Probe Into Potential Data Theft Begins

Pittsburgh Regional Transit Employees’, Applicants’ Personal Information Stolen During Ransomware Attack

Green Bay Packers’ Online Store Hacked to Steal Credit Cards

Casio Says Data of 8,500 People Exposed in October Ransomware Attack

Walker County Schools (GA) Alerting Parents, Educators of Student Information System Data Breach

Dragonfly Health (AZ) Files Notice of Data Breach with Federal Regulators

Hyperice (CA) Sends Data Breach Letters Following June 2024 Cyberattack

Teton Orthopaedics (WY) Sends Out Data Breach Letters Following Ransomware Attack

New Mirai Botnet Targets Industrial Routers With Zero-Day Exploits

CISA Warns of Critical Oracle, Mitel Flaws Exploited in Attacks

Researchers Uncover Major Security Flaw in Illumina iSeq 100 DNA Sequencers

1/6/2025

~ The Cyber Beat ~ Leave a comment
U.S. Cyber Watchdog Says No Indication Breach at Treasury Hit Other Federal Agencies

Chinese Hackers Double Cyber-Attacks on Taiwan

Eagerbee Backdoor Deployed Against Middle Eastern Gov’t Orgs, ISPs

Russia Blames Telecom Network Accident for Widespread Internet Outage

India Proposes Digital Data Rules with Tough Penalties and Cybersecurity Requirements

IoT’s Regulatory Reckoning Is Overdue

Pig Butchering (Romance Baiting) Victim Sues Banks for Allowing Scammers to Open Accounts		Hackers Reportedly Compromise Argentina’s Airport Security Payroll System

School Districts in Maine, Tennessee Respond to Holiday Cyberattacks

Pacific Pulmonary Medical Group (CA) October 2024 Announces Data Breach

New Infostealer Campaign Uses Discord Videogame Lure

Cybercriminals Target Ethereum Developers with Fake Hardhat npm Packages

New PhishWP Plugin Enables Sophisticated Payment Page Scams

Vulnerable Moxa Devices Expose Industrial Networks to Attacks

MediaTek Rings in the New Year With a Parade of Chipset Vulns

1/3-5/2025

~ The Cyber Beat ~ Leave a comment
How Chinese Hackers Graduated From Clumsy Corporate Thieves to Military Weapons

U.S. Sanctions Chinese Cybersecurity Firm for Global Botnet Attacks

Cyber Investors Expect More Mergers in 2025

Cybersecurity Firm Tenable’s CEO Amit Yoran Dies After Battle With Cancer

Crypto Boss Extradited to Face $40bn Fraud Charges

Cryptocurrency Wallet Drainers Stole $494 Million in 2024

Apple to Pay Siri Users $20 Per Device in Settlement Over Accidental Siri Privacy Violations

Windows 10 Users Urged to Upgrade to Avoid “Security Fiasco”

Russia Orders Yandex to Scrub Maps and Images of Strategic Oil Refinery		Atos Group Denies Space Bears’ Ransomware Attack Claims

Lexington Diagnostic Center (KY) Announces Recent Data Breach Involving Sensitive Patient Information

Tycon Medical Systems (VA) Sends Data Breach Letters Following Cybersecurity Incident

New FireScam Android Data-Theft Malware Poses as Telegram Premium App

PLAYFULGHOST Delivered via Phishing and SEO Poisoning in Trojanized VPN Apps

Bad Tenable Plugin Updates Take down Nessus Agents Worldwide

LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers

Researchers Uncover Nuclei Vulnerability Enabling Signature Bypass and Code Execution

1/2/2025

~ The Cyber Beat ~ Leave a comment
Treasury’s Sanctions Office Hacked by Chinese Government, Officials Say

…‘Office of Foreign Assets Control’

‘No Definitive Link’ Found Between New Orleans Attack and Las Vegas Cybertruck Explosion, FBI Says

Global Campaign Targets PlugX Malware with Innovative Portal

Tighter Regulations Proposed for Foreign IT in Drones Used in U.S.

Apple Offers to Settle ‘Snooping Siri’ Lawsuit for an Utterly Incredible $95M

Crypto Hacks, Scam Losses Reach $29M in December, Lowest in 2024		Japan’s Largest Mobile Carrier Says Cyberattack Disrupted Some Services

Hackers Leak Rhode Island Citizens’ Data on Dark Web

Crown Mortgage Company (IL) Sends Data Breach Letters Following Recent Cybersecurity Incident

Over 3 Million Mail Servers Without Encryption Exposed to Sniffing Attacks

Malicious Obfuscated NPM Package Disguised as an Ethereum Tool Deploys Quasar RAT

Severe Security Flaws Patched in Microsoft Dynamics 365 and Power Apps Web API

12/31/2024-1/1/2025

~ The Cyber Beat ~ Leave a comment
What to Know about String of U.S. Hacks Blamed on China

U.S. Sanctions Russian & Iranian Groups Over AI-Generated Election Disinformation

Finland Identifies Seven Suspects Among Crew of Alleged Russian ‘Spy’ Tanker

Krebs: U.S. Army Soldier Arrested in AT&T, Verizon Extortions

Hey, Maybe It’s Time to Delete Some Old Chat Histories

Over 3.1 Million Fake “Stars” on GitHub Projects Used to Boost Rankings		Indiana University Health Announces Data Breach Following Compromised Email Account

New “DoubleClickjacking” Exploit Bypasses Clickjacking Protections on Major Websites

Misconfigured Kubernetes RBAC in Azure Airflow Could Expose Entire Cluster to Exploitation

New Details Reveal How Hackers Hijacked 35 Google Chrome Extensions

The Biggest Cybersecurity and Cyberattack Stories of 2024

These Were the Badly Handled Data Breaches of 2024

12/30/2024

~ The Cyber Beat ~ Leave a comment
China Hacked Treasury Dept. in ‘Major’ Breach, U.S. Says

AT&T and Verizon Say Networks Secure After Salt Typhoon Breach

Finland Seizes Suspected Russian Spy Ship and Questions Crew Following Cable Breaks

Germany Charges Three Suspected Russian Spies Accused of Surveilling Military Sites

Telegram Blocks Russian State Media Channels in Several EU Countries

Italian Websites Subjected to Pro-Russian DDoS Attack Campaign		…U.S. Treasury Says Chinese Hackers Stole Documents in ‘Major Incident’

…U.S. Treasury Department Breached Through Remote Support Platform

Atos Says Space Bears Ransomware Group Claims It Compromised a Database

In-Home Attendant Services (TX) Files Official Notice of Data Breach

Ransomware Is 35 Years Old and Now a Billion-Dollar Problem. Here’s How It Could Evolve

Happy 15th Anniversary, KrebsOnSecurity!

12/27-29/2024

~ The Cyber Beat ~ Leave a comment
White House: Salt Typhoon Hacks Possible Because Telecoms Lacked Basic Security Measures

…U.S. Adds 9th Telcom to List of Companies Hacked by Chinese-Backed Salt Typhoon Cyberespionage

The U.S. Proposes Rules to Make Healthcare Data More Secure

Biden Administration Finalizes Rule to Block Sale of Americans’ Bulk Data to Adversaries

The Paper Passport Is Dying

CISA’s 2024 Review Highlights Major Efforts in Cybersecurity Industry Collaboration

Record-Breaking Ransoms and Breaches: A Timeline of Ransomware in 2024

How Cops Taking Down LockBit, ALPHV Led to RansomHub’s Meteoric Rise

It’s Only a Matter of Time Before LLMs Jump Start Supply-Chain Attacks		Hackers Steal ZAGG Customers’ Credit Cards in Third-Party Breach

Customer Data From 800,000 Electric Cars and Owners Exposed Online

Blue Yonder Says November Ransomware Attack Not Connected to Cleo Vulnerability

Hackers Hijacked Legitimate Chrome Extensions to Try to Steal Data

Cloud Atlas Deploys VBCloud Malware: Over 80% of Targets Found in Russia

FICORA and Kaiten Botnets Exploit Old D-Link Vulnerabilities for Global Attacks

15,000+ Four-Faith Routers Exposed to New Exploit Due to Default Credentials

Palo Alto Releases Patch for PAN-OS DoS Flaw — Update Immediately

Too Much ‘Trust,’ Not Enough ‘Verify’

12/26/2024

~ The Cyber Beat ~ Leave a comment
Cyberattack on Ukraine’s State Registers Disrupts Marriage Registration, Real Estate Deals

A Weird Windows 11 Bug Won’t Let Some People Install Any Security Updates

The Worst Hacks of 2024

Brazilian Hacker Charged for Extorting $3.2M in Bitcoin After Breaching 300,000 Accounts

UN General Assembly Approves Cybercrime Treaty Despite Industry Backlash		Japan Airlines Systems Back to Normal After Cyberattack Delayed Flight

Nearly Half a Million People Had Data Stolen After Cyberattack on American Addiction Centers

New ‘OtterCookie’ Malware Used to Backdoor Devs in Fake Job Offers

Infostealers Dominate as Lumma Stealer Detections Soar by Almost 400%

Apache Warns of Critical Flaws in MINA, HugeGraph, Traffic Control

12/24-25/2024

~ The Cyber Beat ~ Leave a comment
U.S. and Japan Blame North Korea for $308m DMM Bitcoin Crypto Heist

Iran’s Charming Kitten Deploys BellaCPP: A New C++ Variant of BellaCiao Malware

European Space Agency’s Official Store Hacked to Steal Payment Cards

American Airlines Resumes Flights After Brief Grounding Ahead of Busy Christmas Travel

Former NSA Cyberspy’s Not-So-Secret Hobby: Hacking Christmas Lights

You Need to Create a Secret Password With Your Family

Major Biometric Data Farming Operation Uncovered

Inside Operation Destabilise: How a Ransomware Investigation Linked Russian Money Laundering and Street-Level Drug Dealing		Ruijie Networks’ Cloud Platform Flaws Could Expose 50,000 Devices to Remote Attacks

Pittsburgh Regional Transit Attributes Recent Service Disruptions to Ransomware Attack

Colonial Surety Company (NJ) Announces Data Breach Stemming from May Cybersecurity Incident

Clop Ransomware Is Now Extorting 66 Cleo Data-Theft Victims

How Androxgh0st Rose From Mozi’s Ashes to Become ‘Most Prevalent Malware’

New Botnet Exploits Vulnerabilities in NVRs, TP-Link Routers

CISA Adds Acclaim USAHERDS Vulnerability to KEV Catalog Amid Active Exploitation

Critical SQL Injection Vulnerability in Apache Traffic Control Rated 9.9 CVSS — Patch Now

12/23/2024

~ The Cyber Beat ~ Leave a comment
Inside The Invisible Russia-Ukraine Battlefield

France Extends Olympics Security Measures to Christmas Market

Interpol Identifies Over 140 Human Traffickers in New Innovative Initiative

AI Could Generate 10,000 Malware Variants, Evading Detection in 88% of Case

MFA: Shun This Basic Cybersecurity Tactic and Become a Target for Hackers

FTC Orders Marriott and Starwood to Implement Strict Data Security		Classified Fighter Jet Specs Leaked on War Thunder – Again

Alta Resources Corporation (WI) Provides Notice of Data Breach Affecting Over 37k People

Critical Vulns Found in WordPress Plugins WPLMS and VibeBP

Adobe Warns of Critical ColdFusion Bug with PoC Exploit Code

Apache Fixes Remote Code Execution Bypass in Tomcat Web Server

Non-Human Identities Gain Momentum, Requires Both Management & Security

12/20-22/2024

~ The Cyber Beat ~ Leave a comment
FAA Banning Drone Flights Over New Jersey, New York Sites

Ukraine’s State Registers Hit with One of Russia’s Largest Cyberattacks, Officials Say

Russia Security Threat Is Far Reaching, Italy’s Prime Minister Warns

Lazarus Group Spotted Targeting Nuclear Engineers with CookiePlus Malware

…North Korean Hackers Stole $1.3 Billion Worth of Crypto This Year

Italy’s Data Protection Watchdog Issues €15m Fine to OpenAI Over ChatGPT Probe

Pegasus Spyware Maker NSO Group Is Liable for Attacks on 1,400 WhatsApp Users

Ransomware Attackers Target Industries with Low Downtime Tolerance

U.S. Unseals Complaint Against Russian-Israeli Accused of Working for LockBit

Romanian Netwalker Ransomware Affiliate Sentenced to 20 Years in Prison

Massive Live Sports Piracy Ring With 812 Million Yearly Visits Taken Offline

Three of the Biggest U.S. Banks Are Facing a Lawsuit for ‘Widespread Fraud’ on Zelle: Bank of America, JPMorgan Chase, and Wells Fargo

What Google’s Quantum Computing Breakthrough Willow Means for the Future of Bitcoin and Other Cryptos		Ascension: Health Data of 5.6 Million Stolen in Ransomware Attack

Duke Energy Reports Data Breach Potentially Impacting Over 8 Million Customers

PS Logistics Announces Data Breach Stemming from February 2024 Cyberattack

SRP Federal Credit Union (SC) Data Breach—240,000 Members Exposed in Attacked Claimed by Nitrogen Ransomware Group

Wood County (OH) Agencies Continue Investigating Ransomware Attack

Krispy Kreme Breach, Data Theft Claimed by Play Ransomware Gang

LockBit Admins Tease a New Ransomware Version: LockBit 4.0

New FlowerStorm Microsoft Phishing Service Fills Void Left by Rockstar2FA

Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack

Hackers Exploiting Critical Fortinet EMS Vulnerability to Deploy Remote Access Tools

Sophos Issues Hotfixes for Critical Firewall Flaws: Update to Prevent Exploitation

How Not To Become A Botnet Victim: A Practical Guide For Everyone

Infosec Experts Divided on Ai’s Potential to Assist Red Teams

12/19/2024

~ The Cyber Beat ~ Leave a comment
UAC-0125 Abuses Cloudflare Workers to Distribute Malware Disguised as Army+ App

Krebs: Web Hacking Service ‘Araneida’ Tied to Turkish IT Firm

This VPN Lets Anyone Use Your Internet Connection. What Could Go Wrong?

Lumen Technologies Launches Sale of Consumer Fiber Unit

U.S. Organizations Still Using Kaspersky Products Despite Ban

Four Smart Questions for Boards Overseeing Cybersecurity

U.S. Seeks Extradition of Alleged LockBit Ransomware Developer From Israel		Bugs in a Major McDonald’s India Delivery System Exposed Sensitive Customer Data

New Malware Can Kill Engineering Processes in ICS Environments

BadBox Malware Botnet Infects 192,000 Android Devices Despite Disruption

Thousands Download Malicious npm Libraries Impersonating Legitimate Tools

Juniper Warns of Mirai Botnet Targeting SSR Devices with Default Passwords

Fortinet Warns of Critical FortiWLM Flaw That Could Lead to Admin Access Exploits

12/18/2024

~ The Cyber Beat ~ Leave a comment
U.S. Targets TP-Link With a Potential Ban on the Chinese Routers

U.S. Government Tells Officials, Politicians to Ditch Regular Calls and Texts

…Chinese National Cyber Centre Says U.S. Hacks Stole Trade Secrets From Tech Firms

Congress Again Fails to Limit Scope of Spy Powers in New Defense Bill

Krebs: How to Lose a Crypto Fortune with Just One Bad Click

Phishing Attacks Double in 2024

Nigeria Cracks Down on Cryptocurrency Investment Fraud and Romance Scams

Raccoon Stealer Malware Operator Gets 5 Years in Prison After Guilty Plea

Dutch Regulator Fines Netflix $5 Million for Data Privacy Violations

Quantum AI Startup SandboxAQ Valued at $5.3 Bln After $300 Mln Fundraising		APT29 Hackers Target High-Value Victims Using Rogue RDP Servers and PyRDP

‘Bitter’ Cyberspies Target Defense Orgs With New MiyaRAT Malware

HubPhish Exploits HubSpot Tools to Target 20,000 European Users for Credential Theft

Brighton Jones Files Official Notice of Data Breach Following Email Phishing Attack

New Fake Ledger Data Breach Emails Try to Steal Crypto Wallets

A Lightweight App Comes With Some Heavy Consequences, Researchers Say

New Attacks Exploit VSCode Extensions and npm Packages

BeyondTrust Issues Urgent Patch for Critical Vulnerability in PRA and RS Products

Microsoft Won’t Let Customers Opt out of Passkey Push

Recorded Future CEO Applauds “Undesirable” Designation by Russia

12/17/2024

~ The Cyber Beat ~ Leave a comment
Intel Officials Warned Police That U.S. Cities Aren’t Ready for Hostile Drones

U.S. Unveils New National Cyber Incident Response Plan

Sophisticated TA397 Malware Targets Turkish Defense Sector

The Mask APT Resurfaces with Sophisticated Multi-Platform Malware Arsenal

Stop Calling Online Scams ‘Pig Butchering,’ Interpol Warns

Drug Dealers Have Moved on to Social Media

Facebook Owner Meta Hit with 251 Million Euros in Fines for 2018 Data Breach

Coder Wrote a Bug So Bad Security Guards Wanted a Word When He Arrived at Work		Positive Behavior Supports Corporation Reports Data Breach Affecting Sensitive Client Information

Hackers Use Microsoft MSC Files to Deploy Obfuscated Backdoor in Pakistan Attacks

Hackers Exploit Webview2 to Deploy CoinLurker Malware and Evade Security Detection

Attackers Exploit Microsoft Teams and AnyDesk to Deploy DarkGate Malware

Cybercriminals Exploit Google Calendar to Spread Malicious Links

Over 25,000 SonicWall VPN Firewalls Exposed to Critical Flaws

Critical Security Hole in Apache Struts Under Exploit

CISA Orders Federal Agencies to Secure Microsoft 365 Tenants

12/16/2024

~ The Cyber Beat ~ Leave a comment
Trump Administration Wants to Go on Cyber Offensive Against China

Federal Money Is Helping States Overhaul Cybersecurity. What Happens if It Dries Up?

Russia Recruits Ukrainian Kids for Sabotage and Reconnaissance

Serbian Authorities Are Reportedly Hacking and Installing Spyware on Activists’ Phones: NoviSpy

YouTube Creators Targeted in Global Phishing Campaign

New Investment Scam Leverages AI, Social Media Ads to Target Victims Worldwide

The Education Industry: Why Its Data Must Be Protected

Hackers Can Jailbreak Digital License Plates to Make Others Pay Their Tolls and Tickets

Israeli Spyware Firm Paragon Acquired by U.S. Investment Group

BlackBerry Offloads Cylance for a Fraction of What It Paid in 2019

Kali Linux 2024.4 Released With 14 New Tools, Deprecates Some Features		Texas Tech University System Data Breach Impacts 1.4 Million Patients

ConnectOnCall Breach Exposes Health Data of Over 910,000 Patients

Hackers Orchestrate Cyberattack Against PIH Health, Claiming Massive Data Breach

Rhode Island Confirms Data Breach After Brain Cipher Ransomware Attack

Cicada3301 Ransomware Claims Attack on French Peugeot Dealership

Namibia’s State Telecom Provider Says Hackers Leaked Data After It Refused to Pay Ransom

FBI Spots HiatusRAT Malware Attacks Targeting Web Cameras, DVRs

DeceptionAds Delivers 1M+ Daily Impressions via 3,000 Sites, Fake CAPTCHA Pages

New Glutton Malware Exploits Popular PHP Frameworks Like Laravel and ThinkPHP

Windows Kernel Bug Now Exploited in Attacks to Gain SYSTEM Privileges

12/13-15/2024

~ The Cyber Beat ~ Leave a comment
Winnti Hackers Target Other Threat Actors With New Glutton PHP Backdoor

Thai Officials Targeted in Yokai Backdoor Campaign Using DLL Side-Loading Techniques

Ukraine Uncovers Russian Spy Network Recruiting Teens for Espionage

“Hazardous Drone Operation” Leads to Two Arrests in Boston

Game-Like ‘Task Scams’ Stole More Than $220 Million in Six Months

The Simple Math Behind Public Key Cryptography

Major Cloud Providers Could Get Key Role in AI Chip Access Outside the U.S., Sources Say

Peak Design Denies Snitching on Luigi Mangione

UnitedHealth’s Optum Left an AI Chatbot, Used by Employees to Ask Questions About Claims, Exposed to the Internet

UK Shoppers Frustrated as Bots Snap Up Popular Christmas Gifts

Germany Disrupts BADBOX Malware on 30,000 Devices Using Sinkhole Action

Russia Blocks Viber in Latest Attempt to Censor Communications		Rhode Island’s Online Benefits System Shuts Down After Cyberattack

SRP Federal Credit Union (SC) Says 240,000 Impacted by Recent Cyberattack

Auto Parts Giant LKQ Says Cyberattack Disrupted Canadian Business Unit

Japanese Game and Anime Publisher Kadokawa Reportedly Pays $3 Million Ransom to Russia-Linked Hackers

Young Life Announces Data Breach Affecting Employees and Volunteers

390,000+ WordPress Credentials Stolen via Malicious GitHub Repository Hosting PoC Exploits

CISA Confirms Critical Cleo Bug Exploitation in Ransomware Attacks

…Clop Ransomware Claims Responsibility for Cleo Data Theft Attacks

Akira and RansomHub Surge as Ransomware Claims Reach All-Time High

Citrix Shares Mitigations for Ongoing Netscaler Password Spray Attacks

CISA Warns Water Facilities to Secure HMI Systems Exposed Online

12/12/2024

~ The Cyber Beat ~ Leave a comment
Gamaredon Deploys Android Spyware “BoneSpy” and “PlainGnome” in Former Soviet States

North Korea’s Fake IT Worker Scam Hauled in at Least $88 Million Over Six Years

…U.S. Offers $5 Million for Info on North Korean IT Worker Farms

Telecoms Haven’t Notified Most Victims of Chinese Phone Data Hacking Campaign, Sources Say

Google Says Its Breakthrough Quantum Chip Can’t Break Modern Cryptography

Police Refer Westminster ‘Honeytrap’ to Prosecutors

Spain Busts Voice Phishing Ring for Defrauding 10,000 Bank Customers

Police Shuts Down Rydox Cybercrime Market, Arrests 3 Admins

Insurance Worker Sentenced After Illegally Accessing Claimants’ Data		Bitcoin ATM Firm Byte Federal Hacked via GitLab Flaw, 58K Users Exposed

Over 300K Prometheus Instances Exposed: Credentials and API Keys Leaking Online

Remcos RAT Malware Evolves with New Techniques

New Stealthy Pumakit Linux Rootkit Malware Spotted in the Wild

New IOCONTROL Malware Used in Critical Infrastructure Attacks

Researchers Uncover Symlink Exploit Allowing TCC Bypass in iOS and macOS

WordPress Hunk Companion Plugin Flaw Exploited to Silently Install Vulnerable Plugins

Security Flaws in WordPress Woffice Theme Prompts Urgent Update

Cleo Patches Critical Zero-Day Exploited in Data Theft Attacks

12/11/2024

~ The Cyber Beat ~ Leave a comment
Researchers Uncover Espionage Tactics of China-Based APT Groups in Southeast Asia

Chinese EagleMsgSpy Spyware Found Exploiting Mobile Devices Since 2017

Secret Blizzard Targets Ukrainian Military with Custom Malware Kazuar Backdoor

The ‘Ghost Gun’ Linked to Luigi Mangione Shows Just How Far 3D-Printed Weapons Have Come

Snowflake Pledges to Make MFA Mandatory

Krebs: How Cryptocurrency Turns to Cash in Russian Banks

U.S. Charges Chinese Hacker for Exploiting Zero-Day in 81,000 Sophos Firewalls

South Korea Takes Down Fraudulent Online Trading Network Used to Extort $6.3M

Operation PowerOFF Takes Down DDoS Boosters		Krispy Kreme Security Hole Leads to Cyberattack, Frosting Orders

Lynx Ransomware Behind Electrica Energy Supplier Cyberattack

Sabre (TX) Sends Data Breach Letter to Employees Announcing Leaked SSNs and More

Sophisticated Scam Targets UAE Residents with Fake Police Fines

ZLoader Malware Returns With DNS Tunneling to Stealthily Mask C2 Comms

New Malware Technique Could Exploit Windows UI Framework to Evade EDR Tools

Microsoft Azure MFA Flaw Allowed Easy Access Bypass

Microsoft MFA AuthQuake Flaw Enabled Unlimited Brute-Force Attempts Without Alerts

Krebs: Patch Tuesday, December 2024 Edition

12/10/2024

~ The Cyber Beat ~ Leave a comment
Wyden Proposes Bill to Secure U.S. Telecoms After Salt Typhoon Hacks

U.S. Sanctions Chinese Firm Sichuan Silence Information Technology Company Over Potentially Deadly Ransomware Attack

Nvidia Probed in China Over Possible Antimonopoly Violations

Chinese Hackers Use Visual Studio Code Tunnels for Remote Access

Poker Cheaters Allegedly Use Tiny Hidden Cameras to Spot Dealt Cards

New Jersey Mayors Pen Letter Demanding Action on Mysterious Drone Sightings

AI Safety Is Hard to Steer With Science in Flux, U.S. Official Says

Avast Antivirus Owner Gen Digital Acquires MoneyLion in $1 Bln Deal

FTC Distributes $72 Million in Fortnite Refunds From Epic Games

Next Congress Likely to Tussle Over Cyber Oversight		Nemesis and ShinyHunters Hackers Exploit AWS Misconfigurations in Massive Data Breach

Highgate Hotels Sends Out Data Breach Letters Following Cyberattack

Fake Recruiters Distribute Banking Trojan via Malicious Apps in Phishing Scam

New AppLite Malware Targets Banking Apps in Phishing Campaign

Cleo File Transfer Vulnerability Under Exploitation – Patch Pending, Mitigation Urged

BadRAM: $10 Security Flaw in Amd Could Allow Hackers to Access Cloud Computing Secrets

WPForms Bug Allows Stripe Refunds on Millions of WordPress Sites

Ivanti Warns of Maximum Severity CSA Auth Bypass Vulnerability

Microsoft December 2024 Patch Tuesday Fixes 1 Exploited Zero-Day, 71 Flaws

12/9/2024

~ The Cyber Beat ~ Leave a comment
China’s Salt Typhoon Recorded Top American Officials’ Calls, Says White House

…U.S. Agencies to Brief House on Chinese Salt Typhoon Telecom Hacking

Phishing Scam Targets Ukrainian Defense Companies

Radiant Links $50 Million Crypto Heist to North Korean Hackers

Police Arrest UHC CEO Shooting Suspect, App Developer Luigi Mangione

Cybercrime Gang Arrested After Turning Airbnbs Into Fraud Centers

Federal Appeals Court Upholds Law Threatening U.S. TikTok Ban

Proposal for Cyber Force Study Is Watered down in Final Defense Bill

…The Case For and Against Creating a Military Cyber Force

Russia Disrupts Internet Access in Multiple Regions to Test ‘Sovereign Internet’		Romanian Energy Supplier Electrica Hit by Ransomware Attack

U.S. Subsidiaries of Japanese Water Treatment Company, Green Tea Maker Kurita Water Industries Hit with Ransomware

Ransomware Attack Hits Leading Heart Surgery Device Maker ​Artivion

Amergis Healthcare Staffing (MD) Reports Data Breach Stemming from Compromised Email Accounts

Black Basta Ransomware Evolves with Email Bombing, QR Codes, and Social Engineering

Socks5Systemz Botnet Powers Illegal Proxy Service with 85,000+ Hacked Devices

OpenWrt Sysupgrade Flaw Let Hackers Push Malicious Firmware Images

Researchers Uncover Prompt Injection Vulnerabilities in DeepSeek and Claude AI

Large-Scale Incidents & the Art of Vulnerability Prioritization

12/6-8/2024

~ The Cyber Beat ~ Leave a comment
FCC Chair Proposes Cybersecurity Rules in Response to China’s Salt Typhoon Telecom Hack

How Chinese Insiders Are Stealing Data Scooped up by President XI’s National Surveillance System

Romania Exposes TikTok Propaganda Campaign Supporting Pro-Russian Candidate

…Romania Cancels Presidential Election Results After Alleged Russian Meddling on TikTok

UK Cybersecurity Agency Unconcerned About Changes to Cisa Under Trump

Hackers Using Fake Video Conferencing Apps to Steal Web3 Professionals’ Data

QR Codes Bypass Browser Isolation for Malicious C2 Communication

The Weight-Loss Drug Boom Has Become One of the Internet’s Biggest Scams

Why SOC Roles Need to Evolve to Attract a New Generation		Pirated Corporate Software Infects Russian Businesses With Info-Stealing Malware

Deloitte Denies Breach, Claims Cyber-Attack Targeted Single Client

Anna Jaques Hospital (MA) Ransomware Breach Exposed Data of 300K Patients

Blue Yonder SaaS Giant Breached by Termite Ransomware Gang

Cardano Foundation X Account Hacked, Scam Links Posted, Then Removed

Ultralytics AI Model Hijacked to Infect Thousands With Cryptominer

More_eggs MaaS Expands Operations with RevC2 Backdoor and Venom Loader

Researchers Uncover Flaws in Popular Open-Source Machine Learning Frameworks

New Windows Zero-Day Exposes NTLM Credentials, Gets Unofficial Patch

12/5/2024

~ The Cyber Beat ~ Leave a comment
U.S. Phone Companies Could Face Fines for Weak Security Under a Proposed New Rule

Researchers Uncover 4-Month Cyberattack on U.S. Firm Linked to Chinese Hackers

Hackers Target Uyghurs and Tibetans with MOONSHINE Exploit and DarkNimbus Backdoor

New Android Spyware Found on Phone Seized by Russian FSB

U.S. Arrests Scattered Spider Suspect Linked to Telecom Hacks

Nebraska Man Pleads Guilty to Dumb Cryptojacking Operation

Europol Shuts Down Manson Market Fraud Marketplace, Seizes 50 Servers

Texas Accuses Four Companies of Sharing Sensitive User Data Without Proper Notice and Consent

She Escaped an Abusive Marriage—Now She Helps Women Battle Cyber Harassment		Romania’s Election Systems Targeted in Over 85,000 Cyberattacks

Ransomware Hackers Target NHS Hospitals With New Cyberattacks

Major USAID Contractor Chemonics Says 263,000 Affected by 2023 Data Breach

Hoboken Government Recovering From Ransomware Attack as Conti-Linked Gang Takes Credit

PointClickCare Data Breach Affects Residents of Multiple Long-Term Care Facilities

ANEL and NOOPDOOR Backdoors Weaponized in New MirrorFace Campaign Against Japan

Pro-Russian Hacktivist Group ‘Noname’ Claims 6600 Attacks Targeting Europe

Mitel MiCollab Zero-Day Flaw Gets Proof-of-Concept Exploit

Vulnerability Management Challenges in IoT & OT Environments

12/4/2024

~ The Cyber Beat ~ Leave a comment
U.S. Officials Recommend Encrypted Messaging to Evade Hackers in Telecom Networks

‘Large Number’ of Americans’ Metadata Stolen by Chinese Hackers, Senior Official Says

Senators Warn the Pentagon: Get a Handle on China’s Telecom Hacking

White House: Salt Typhoon Hacked Telcos in Dozens of Countries

Trump’s FBI Pick Kash Patel Targeted in Iranian Cyberattack

A New Phone Scanner That Detects Spyware Has Already Found 7 Pegasus Infections

She Was a Russian Socialite and Influencer. Cops Say She’s a Crypto Laundering Kingpin

UK Disrupts Russian Money Laundering Networks Used by Ransomware

Krebs: U.S. Offered $10M for Hacker ‘Wazawaka’ Just Arrested by Russia

Ransomware Costs Manufacturing Sector $17bn in Downtime		Russia-Linked Turla Exploits Pakistani Hackers’ Servers to Target Afghan and Indian Entities

BT Unit Took Servers Offline After Black Basta Ransomware Breach

Liverpool Children’s Hospital Confirms Cyber-Attack

Wirral Hospital Recovery Continues One Week After Cyber Incident

ESHA (NJ) Notifies Over 76k People of Recent Data Breach

New DroidBot Android Malware Targets 77 Banking, Crypto Apps

Researchers Uncover Backdoor in Solana’s Popular Web3.js npm Library

Japan Warns of IO-Data Zero-Day Router Flaws Exploited in Attacks

Critical SailPoint IdentityIQ Vulnerability Exposes Files to Unauthorized Access

Navigating the Changing Landscape of Cybersecurity Regulations

FBI Shares Tips on How to Tackle AI-Powered Fraud Schemes

12/3/2024

~ The Cyber Beat ~ Leave a comment
U.S. Official Fighting Chinese Telecom Intrusions Urges More Encryption

…U.S. Shares Tips to Block Hackers Behind Recent Telecom Breaches

French Mobile Operators Join Forces to Tackle Rising Fraud

Finland Says Latest Fiber-Optic Cable Break Was an Accident, Not Sabotage

Kimsuky Group Adopts New Phishing Tactics to Target Victims

Krebs: Why Phishers Love New TLDs Like .shop, .top and .xyz

Police Shut Down Matrix Encrypted Criminal Hub

Police Seizes Largest German Online Crime Marketplace ‘Crimenetwork’ & Arrests Admin

Data Brokers May Be Banned From Selling Your Social Security Number

Two Data Brokers Banned From Selling ‘Sensitive’ Location Data by the FTC

Cyberattack and Financial Troubles Force Stoli’s U.S. Arm to File for Bankruptcy		Data on 760K Workers From Xerox, Nokia, BofA, Morgan Stanley and More Dumped Online

Ransomware Attack Disrupts Operations at U.S. Contractor ENGlobal

Indian Online ID Verification Firm Signzy Confirms Security Incident

Arthur Center Community Health (MO) Files Notice of Data Breach with Federal Government

Horns&Hooves Campaign Delivers RATs via Fake Emails and JavaScript Payloads

Cloudflare’s Developer Domains Increasingly Abused by Threat Actors

NachoVPN Tool Exploits Flaws in Popular VPN Clients for System Compromise

Exploit Released for Critical WhatsUp Gold RCE Flaw, Patch Now

Veeam Warns of Critical RCE Bug in Service Provider Console

Cisco Warns of Exploitation of Decade-Old ASA WebVPN Vulnerability

12/2/2024

~ The Cyber Beat ~ Leave a comment
France Accuses Azerbaijan of Online Manipulation Campaigns

German Intelligence Launches Task Force to Combat Foreign Election Interference

Chinese Lidar Sensors Pose Hacking Risk to U.S. Defense Equipment, Report Says

The Pressure Is on for Big Tech to Regulate the Broken Digital Advertising Industry

Malicious Ads in Search Results Are Driving New Generations of Scams

INTERPOL Arrests 5,500 in Global Cybercrime Crackdown, Seizes Over $400 Million

Korea Arrests CEO for Adding DDoS Feature to Satellite Receivers

Russia Sentences Hydra Dark Web Market Leader to Life in Prison

SEC Settles With an Industrial and Commercial Bank of China Unit Over Ransomware Attack, Imposes No Fine

Are You Being Tracked by an Airtag? Here’s How to Check		Costa Rica State Energy Company Calls in U.S. Experts to Help With Ransomware Attack

Retail Outages Drag Into Second Week After Blue Yonder Ransomware Attack

$300M Bitcoin Hack Forces Japanese Crypto Exchange DMM Bitcoin to Cease Operations

Clipper DEX Says Recent $450K Hack Wasn’t Caused by Private Key Leak

Crypto.com Launches Massive $2m Bug Bounty Program

Zane Benefits (UT) Sends Data Breach Letters Confirming Leaked SSNs

SmokeLoader Malware Campaign Targets Companies in Taiwan

AWS Launches an Incident Response Service to Combat Cybersecurity Threats

Incident Response Playbooks: Are You Prepared?

Apple Patents System for Identifying People When Facial Scans Aren’t Enough

11/29-12/1/2024

~ The Cyber Beat ~ Leave a comment
Cyber-Attacks Could Impact Romanian Presidential Race, Officials Claim

AI-Powered Fake News Campaign Targets Western Support for Ukraine and U.S. Elections

UN, International Orgs Create Advisory Body for Submarine Cables After Incidents

In the New Space Race, Hackers Are Hitching a Ride Into Orbit

In New Bitcoin Bull Market, It’s Time to Beware of the Same Old Crypto Scams

Met Police Apologises to Honeytrap Victims Over Email

UK Justice System Failing Cybercrime Victims, Cyber Helpline Finds

Wanted Russian Hacker ‘Wazawaka’ Linked to Hive and LockBit Ransomware Arrested

U.S. Citizen Florida Man Sentenced for Spying on Behalf of China’s Intelligence Agency		Uganda Confirms Cyberattack on Central Bank but Minimizes Extent of Breach

INC Ransom Claims Cyber-Attack on UK Children’s Hospital

RansomHub Claims to Net Data Hat-Trick Against Bologna FC

Phishing-as-a-Service “Rockstar 2FA” Targets Microsoft 365 Users with AiTM Attacks

Novel Phising Campaign Uses Corrupted Word Documents to Evade Security

SpyLoan Android Malware on Google Play Installed 8 Million Times

New Windows Server 2012 Zero-Day Gets Free, Unofficial Patches

Tor Needs 200 New Webtunnel Bridges to Fight Censorship

Bulgarians Plead Guilty to Spying for Russia Using ‘Advanced Technology’

11/28/2024

~ The Cyber Beat ~ Leave a comment
Undersea Cable Cuts in the Baltic Sea Are Stoking Geopolitical Tensions — Here’s What’s Going On

Cloned Customer Voice Beats Bank Security Checks

The Only Thing Worse Than Being Fired Is Scammers Fooling You Into Thinking You’re Fired

TfL Faces Independent Investigation Over Cyber-Attack Response

Albanian Drug Smugglers Busted After Cops Decrypt Comms		UK Hospital Network Postpones Procedures After Cyberattack

Crypto Exchange XT.com Suspends Withdrawals After Suspected $1.7M Hack

XMLRPC npm Library Turns Malicious, Steals Data, Deploys Crypto Miner

Critical Vulnerabilities Discovered in Industrial Wireless Access Point

How Learning to Fly Made Me a Better Cybersecurity CEO

11/27/2024

~ The Cyber Beat ~ Leave a comment
T-Mobile Says Salt Typhoon Cyber Attackers Had No Access to Customer Data

…Salt Typhoon Chinese Hackers Breached T-Mobile’s Routers to Scope Out Network

…Salt Typhoon’s Surge Extends Far Beyond U.S. Telcos

British Government Demands Chinese-Owned Company Appoint a Security Chief With UK Clearances

Krebs: Hacker in Snowflake Extortions May Be a U.S. Soldier

Police Bust Pirate Streaming Service Making €250 Million per Month

Appeals Court Overturns Treasury Sanctions Against Crypto Mixer Tornado Cash

Exxon Lobbyist Investigated Over Hack-And-Leak of Environmentalist Emails, Sources Say

Microsoft Is Being Investigated by the FTC Over Antitrust Concerns

FTC Changes Its Telemarketing Rules to Cover Growing ‘Tech Support Scam’ Calls

Akamai Technologies: Bankruptcy Court Approves Bid for Edgio Assets

UK Nuclear Decommissioning Authority Opens Sellafield Cyber Center		BIC, Starbucks, Morrisons Continue Recovery After Blue Yonder Ransomware Attack

Hoboken (NJ) Hit with Ransomware Cyberattack, Officials Say

Data Broker SL Data Services Leaves 600K+ Sensitive Files Exposed Online

Cloudflare Says It Lost 55% of Logs Pushed to Customers for 3.5 Hours

Zello Asks Users to Reset Passwords After Security Incident

Contemporary Information Corp (CA) Provides Notice of Data Breach Following Incident at BackChecked, LLC

Attack Group APT-C-60 Targets Japan Using Trusted Platforms

Hackers Abuse Popular Godot Game Engine to Infect Thousands of PCs

New Bootkit “Bootkitty” Targets Linux Systems via UEFI

Matrix Botnet Exploits IoT Devices in Widespread DDoS Botnet Campaign

Critical Flaw in ProjectSend Under Active Exploitation Against Public-Facing Servers

Microsoft Re-Releases Exchange Updates After Fixing Mail Delivery

11/26/2024

~ The Cyber Beat ~ Leave a comment
Aggressive Chinese APT Group Earth Estries Targets Governments with New Backdoors

Russian RomCom Exploits Zero-Day Firefox and Windows Flaws in Sophisticated Cyberattacks

‘CyberVolk’ Hacktivists Use Ransomware in Support of Russian Interests

Darknet Services Fuel Holiday Scams and E-Commerce Exploits

Emergency Vehicle Lights Can Screw up a Car’s Automated Driving System

My Car Knows My Secrets, and I’m (Mostly) OK With That

CrowdStrike Raises Annual Forecast on Steady Cybersecurity Demand

Over 1,000 Arrested in Massive ‘Serengeti’ Anti-cybercrime Operation		RansomHub Gang Says It Broke Into Networks of Texas City, Minneapolis Agency

NHS Trust Declares Major Incident for “Cybersecurity Reasons”

Canadian Privacy Regulators Publish Details of Medical Testing Company LifeLabs Data Breach

Radiologic Medical Services (IA) Announces Data Breach After Unauthorized Access to Employee Email Account

New DDoS Campaign by ‘Matrix’ Exploits IoT Devices and Server Misconfigurations

New NachoVPN Attack Uses Rogue VPN Servers to Install Malicious Updates

Critical WordPress Anti-Spam Plugin Flaws Expose 200,000+ Sites to Remote Attacks

CISA Urges Agencies to Patch Critical “Array Networks” Flaw Amid Active Attacks

11/25/2024

~ The Cyber Beat ~ Leave a comment
China Has Utterly Pwned ‘Thousands and Thousands’ of Devices at U.S. Telcos

Salt Typhoon Hackers Backdoor Telcos With New GhostSpider Malware

Former Verizon Employee Gets Four-Year Sentence for Sharing Cyber Secrets With Chinese Government

UK Minister Criticized Over ‘Hyperbolic’ Speech on Russia’s Cyber Capabilities

America’s Rivals Have a New Favorite Weapon: Criminal Gangs

DOJ: Man Hacked Networks to Pitch Cybersecurity Services

Cyberattacks Cost British Businesses $55 Billion in Past Five Years, Broker Says

New York State Fines Geico and Travelers $11.3 Million for Data Breaches		Starbucks, Others Faces Disruptions Following Ransomware Attack on Software Supplier Blue Yonder

Spring EQ (PA) Notifies Consumers of Data Breach Stemming from Compromised Employee Email Account

PyPI Python Library “aiocpa” Found Exfiltrating Crypto Keys via Telegram Bot

BlackBasta Ransomware Brand Picks up Where Conti Left Off

Cybersecurity Blind Spots in IaC and PaC Tools Expose Cloud Platforms to New Attacks

Researchers Uncover Malware Using BYOVD to Bypass Antivirus Protections

QNAP Addresses Critical Flaws Across NAS, Router Software

Going Way Beyond Secure by Demand

11/22-24/2024

~ The Cyber Beat ~ Leave a comment
Russia’s Ballistic Missile Attack on Ukraine Is an Alarming First

Russia Ready to Wage Cyber War on UK, Minister to Say

Chinese Hackers Preparing for Conflict, U.S. Cyber Official Says

White House Officials Meet with Telecoms Execs on Suspected China Hack

Microsoft President Asks Trump to “Push Harder” Against Russian Hacks

Trump Taps Border Hawk to Head DHS. Will Noem’s ‘Enthusiasm’ Extend to Digital Domain?

The Pentagon’s Battle Inside the U.S. For Control of a New Cyber Force

The U.S. Is Calling Out Foreign Influence Campaigns Faster Than Ever

Google Exposes GLASSBRIDGE: A Pro-China Influence Network of Fake News Sites

Three-Quarters of Black Friday Spam Emails Identified as Scams

Bangkok Busts SMS Blaster Sending 1 Million Scam Texts From a Van

Meta Removes Over 2 Million Accounts Pushing Pig Butchering Scams

Supreme Court Tosses Facebook Appeal in Shareholder Lawsuit Arising From Cambridge Analytica Data Breach

DeliveryHero Subsidiary Fined $5.2 Million for Tracking Drivers’ Geolocation		Andrew Tate’s Site ‘Real World’ Ransacked, Subscriber Data Stolen

Software Company Blue Yonder Providing Services to U.S. and UK Grocery Stores Says It Was Hit by Ransomware Attack

Members Trust Company (FL) Data Breach Following Compromised Email Accounts Affects 11,854 Consumers

Russian Fancy Bear Hackers Breach U.S. Firm Over Wi-Fi From Russia in ‘Nearest Neighbor Attack’

Russian Cyber Spies TAG-110 Target Organizations with HatVibe and CherrySpy Malware

China-Linked TAG-112 Targets Tibetan Media with Cobalt Strike Espionage Campaign

APT-K-47 (aka Mysterious Elephant) Uses Hajj-Themed Lures to Deliver Advanced Asyncshell Malware

North Korean Hackers Sapphire Sleet Steal $10M with AI-Driven Scams and Malware on LinkedIn

PyPI Attack: ChatGPT, Claude Impersonators Deliver JarkaStealer via Python Libraries

Hackers Abuse Avast Anti-Rootkit Driver to Disable Defenses

Microsoft Rolls Out Recall to Windows Insiders With Copilot+ PCs

Microsoft Testing Windows 11 Support for Third-Party Passkeys

Senators Call for Audit of TSA’s Facial Recognition Tech as Use Expands in Airports

11/21/2024

~ The Cyber Beat ~ Leave a comment
Potential Trump Cyber Picks Coalesce — But Insiders Say There Could Be Surprises

China’s Surveillance State Is Selling Citizen Data as a Side Hustle

Chinese Ship Casts Shadow Over Baltic Subsea Cable Snipfest

North Korean Front Companies Impersonate U.S. IT Firms to Fund Missile Programs

The AI Effect: Amazon Sees Nearly 1 Billion Cyber Threats a Day

Google’s AI-Powered OSS-Fuzz Tool Finds 26 Vulnerabilities in Open-Source Projects

Microsoft Disrupts ONNX Phishing-as-a-Service Infrastructure

Fortinet VPN Design Flaw Hides Successful Brute-Force Attacks

A New ‘Ultra-Secure’ Phone Carrier Says It Can Make You Harder to Track

Meta Finally Breaks Its Silence on Pig Butchering

U.S. Seizes PopeyeTools Cybercrime Marketplace, Charges Administrators

Krebs: Feds Charge Five Men in ‘Scattered Spider’ Roundup		Dozens of Central Asian Targets Hit in Recent Russia-Linked Cyber-Espionage Campaign

Cyberattack at French Hospital Exposes Health Data of 750,000 Patients

Stop & Shop Races to Restock Shelves After ‘Cybersecurity Issue’

Gambling and Lottery Giant International Game Technology Disrupted by Cyberattack, Working to Bring Systems Back Online

Over 145,000 Industrial Control Systems Across 175 Countries Found Exposed Online

Now BlueSky Hit with Crypto Scams as It Crosses 20 Million Users

Rockford Gastroenterology Associates (IL) Notifies 147,253 of 2023 Data Breach

Linux Malware WolfsBane and FireWood Linked to Gelsemium APT

Vietnam’s Infostealer Crackdown Reveals VietCredCare and DuckTail

NodeStealer Malware Targets Facebook Ad Accounts, Harvesting Credit Card Data

Warning: Over 2,000 Palo Alto Networks Devices Hacked in Ongoing Attack Campaign

11/20/2024

~ The Cyber Beat ~ Leave a comment
Chinese APT Group Targets Telecom Firms Linked to Belt and Road Initiative

Inside the Booming ‘AI Pimping’ Industry

Amazon and Audible Flooded With ‘Forex Trading’ and Warez Listings

60% of Emails with QR Codes Classified as Spam or Malicious

U.S. Charges Five in ‘Scattered Spider’ Hacking Scheme

Two Brothers Indicted for Operating Illegal Sports Streaming Service That Netted $7 Million

MITRE Shares 2024’s Top 25 Most Dangerous Software Weaknesses		Krebs: Fintech Giant Finastra Investigating Data Breach

Norfolk Sheriff’s Office (VA) Says They Were the ‘Victim of a Cybersecurity Event’

Wexford County (MI) Computer Systems Returning After Cyberattack Forced Shutdown

FBI Says BianLian Based in Russia, Moving From Ransomware Attacks to Extortion

Ghost Tap: Hackers Exploiting NFCGate to Steal Funds via Mobile Payments

Five Privilege Escalation Flaws Found in Ubuntu Needrestart

11/19/2024

~ The Cyber Beat ~ Leave a comment
Data Privacy Experts Predict Some Wins Under Trump 2.0

Hacker Is Said to Have Gained Access to File With Damaging Testimony About Matt Gaetz

Ransomware Gangs on Recruitment Drive for Pen Testers

Leaked Documents Show What Phones Secretive Tech ‘Graykey’ Can Unlock

Microsoft Shares More Details on Windows 11 Admin Protection

Microsoft Announces Its Own Black Hat-Like Hacking Event With Big Rewards for AI Security

Auto Sector Scrambles to Retool Workforce for Electric and Automated Future

TSA Cyber Disclosure Requirements Worry Natural Gas Companies

TSA Not Monitoring Transportation Sector Efforts to Stop Ransomware, Watchdog Says

D-Link Urges Users to Retire VPN Routers Impacted by Unfixed RCE Flaw		Healthcare Org Equinox Notifies 21K Patients and Staff of Data Theft

Aspen Healthcare Services (TX) Announces Data Breach Following Ransomware Attack

AdventHealth (FL) Files Official Notice of Data Breach

Hackers Hijack Unsecured Jupyter Notebooks to Stream Illegal Sports Broadcasts

Spotify Abused to Promote Pirated Software and Game Cheats

Helldown Ransomware Expands to Target VMware and Linux Systems

Ngioweb Botnet Fuels NSOCKS Residential Proxy Network Exploiting IoT Devices

CISA Tags Progress Kemp Loadmaster Flaw as Exploited in Attacks

Apple Fixes Two Zero-Days Used in Attacks on Intel-Based Macs

Oracle Warns of Agile PLM File Disclosure Flaw Exploited in Attacks

11/18/2024

~ The Cyber Beat ~ Leave a comment
Sweden’s ‘Doomsday Prep for Dummies’ Guide Hits Mailboxes Today

North Korean IT Worker Network Tied to BeaverTail Phishing Campaign

Surge in DocuSign Phishing Attacks Target U.S. State Contractors

Many U.S. Water Systems Exposed to ‘High-Risk’ Vulnerabilities, Watchdog Finds

Bipartisan Effort to Clean up Cyber Regulations Gets a Boost in House, but Calendar Is Tight

Fake Donald Trump Assassination Story Used in Phishing Scam

Microsoft 365 Admin Portal Abused to Send Sextortion Emails

Heather ‘Razzlekhan’ Morgan Sentenced to 18 Months in Prison, Ending Bitfinex Saga

U.S. Charges Phobos Ransomware Admin After South Korea Extradition

Cybersecurity At A Crossroads As Global Threats Hit Record Highs

Why the Demand for Cybersecurity Innovation Is Surging

Brave on iOS Adds New “Shred” Button to Wipe Site-Specific Data

Gmail’s New Shielded Email Feature Lets Users Create Aliases for Email Privacy

Apple Still Blocking Access to News Apps and Podcasts at Moscow’s Request		U.S. Space Tech Giant Maxar Discloses Employee Data Breach

British Software Company Microlise Confirms Hackers Compromised Corporate Data

Rockport Mortgage Notifies Individuals of Recent Data Breach Leaking Their Personal Information

Great Plains Regional Medical Center (OK) Notifies Patients of Data Breach Following Ransomware Attack

AI Company iLearningEngines Tells SEC That $250,000 Stolen in Cyberattack

Ford ‘Actively Investigating’ After Employee Data Allegedly Parked on Leak Site

Akira Ransomware Racks Up 30+ Victims in a Single Day

‘ClickFix’ Cyber-Attacks for Malware Deployment on the Rise

Fake Bitwarden Ads on Facebook Push Info-Stealing Chrome Extension

Fake Discount Sites Exploit Black Friday to Hijack Shopper Information

New Stealthy BabbleLoader Malware Spotted Delivering WhiteSnake and Meduza Stealers

Critical 9.8-Rated VMware vCenter RCE Bug Exploited After Patch Fumble

Palo Alto Networks Patches Two Firewall Zero-Days Used in Attacks

11/15-17/2024

~ The Cyber Beat ~ Leave a comment
Library of Congress Email Systems Hacked Earlier This Year by ‘Foreign Adversary’

Iranian Hackers Deploy WezRat Malware in Attacks Targeting Israeli Organizations

Vietnamese Hacker Group Deploys New PXA Stealer Targeting Europe and Asia

Chinese ‘SilkSpecter’ Fraud Network Uses 4,700 Fake Shopping Sites to Steal Credit Cards

T-Mobile Confirms It Was Hacked in Recent Wave of Telecom Breaches

New Apple Security Feature Reboots iPhones After 3 Days, Researchers Confirm

NSO Group Used Another WhatsApp Zero-Day After Being Sued, Court Docs Say

Cyber Schemes Among Projects Getting £20M Windfall

Bitfinex Hacker Ilya Lichtenstein Sentenced to 5 Years, Guilty of Laundering $10.5 Billion in Bitcoin

Ohio Man Behind Helix Cryptocurrency Mixer Gets 3-Year Sentence

Krebs: An Interview With the Target & Home Depot Hacker

Will Passkeys Ever Replace Passwords? Can They?

FTC Reports 50% Drop In Unwanted Call Complaints Since 2021		Otsego Public Schools (MI) Hacked; Personal Info Exposed

Fake AI Video Generators Infect Windows, macOS With Infostealers

Phishing Emails Increasingly Use SVG Attachments to Evade Detection

Ransomware Groups Use Cloud Services For Data Exfiltration

Researchers Warn of Privilege Escalation Risks in Google’s Vertex AI ML Platform

Warning: DEEPDATA Malware Exploiting Unpatched Fortinet Flaw to Steal VPN Credentials

PAN-OS Firewall Vulnerability Under Active Exploitation – IoCs Released

Botnet Exploits GeoVision Zero-Day to Install Mirai Malware

watchTowr Finds New Zero-Day Vulnerability in Fortinet Products

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

Security Plugin Flaw in Millions of WordPress Sites Gives Admin Access

Microsoft Pulls Exchange Security Updates Over Mail Delivery Issues

The Vendor’s Role in Combating Alert Fatigue

Top Ukrainian Cyber Official Resigns a Year After Taking Office