Author: The Cyber Beat

12/4/2024

~ The Cyber Beat ~ Leave a comment
U.S. Officials Recommend Encrypted Messaging to Evade Hackers in Telecom Networks

‘Large Number’ of Americans’ Metadata Stolen by Chinese Hackers, Senior Official Says

Senators Warn the Pentagon: Get a Handle on China’s Telecom Hacking

White House: Salt Typhoon Hacked Telcos in Dozens of Countries

Trump’s FBI Pick Kash Patel Targeted in Iranian Cyberattack

A New Phone Scanner That Detects Spyware Has Already Found 7 Pegasus Infections

She Was a Russian Socialite and Influencer. Cops Say She’s a Crypto Laundering Kingpin

UK Disrupts Russian Money Laundering Networks Used by Ransomware

Krebs: U.S. Offered $10M for Hacker ‘Wazawaka’ Just Arrested by Russia

Ransomware Costs Manufacturing Sector $17bn in Downtime		Russia-Linked Turla Exploits Pakistani Hackers’ Servers to Target Afghan and Indian Entities

BT Unit Took Servers Offline After Black Basta Ransomware Breach

Liverpool Children’s Hospital Confirms Cyber-Attack

Wirral Hospital Recovery Continues One Week After Cyber Incident

ESHA (NJ) Notifies Over 76k People of Recent Data Breach

New DroidBot Android Malware Targets 77 Banking, Crypto Apps

Researchers Uncover Backdoor in Solana’s Popular Web3.js npm Library

Japan Warns of IO-Data Zero-Day Router Flaws Exploited in Attacks

Critical SailPoint IdentityIQ Vulnerability Exposes Files to Unauthorized Access

Navigating the Changing Landscape of Cybersecurity Regulations

FBI Shares Tips on How to Tackle AI-Powered Fraud Schemes

12/3/2024

~ The Cyber Beat ~ Leave a comment
U.S. Official Fighting Chinese Telecom Intrusions Urges More Encryption

…U.S. Shares Tips to Block Hackers Behind Recent Telecom Breaches

French Mobile Operators Join Forces to Tackle Rising Fraud

Finland Says Latest Fiber-Optic Cable Break Was an Accident, Not Sabotage

Kimsuky Group Adopts New Phishing Tactics to Target Victims

Krebs: Why Phishers Love New TLDs Like .shop, .top and .xyz

Police Shut Down Matrix Encrypted Criminal Hub

Police Seizes Largest German Online Crime Marketplace ‘Crimenetwork’ & Arrests Admin

Data Brokers May Be Banned From Selling Your Social Security Number

Two Data Brokers Banned From Selling ‘Sensitive’ Location Data by the FTC

Cyberattack and Financial Troubles Force Stoli’s U.S. Arm to File for Bankruptcy		Data on 760K Workers From Xerox, Nokia, BofA, Morgan Stanley and More Dumped Online

Ransomware Attack Disrupts Operations at U.S. Contractor ENGlobal

Indian Online ID Verification Firm Signzy Confirms Security Incident

Arthur Center Community Health (MO) Files Notice of Data Breach with Federal Government

Horns&Hooves Campaign Delivers RATs via Fake Emails and JavaScript Payloads

Cloudflare’s Developer Domains Increasingly Abused by Threat Actors

NachoVPN Tool Exploits Flaws in Popular VPN Clients for System Compromise

Exploit Released for Critical WhatsUp Gold RCE Flaw, Patch Now

Veeam Warns of Critical RCE Bug in Service Provider Console

Cisco Warns of Exploitation of Decade-Old ASA WebVPN Vulnerability

12/2/2024

~ The Cyber Beat ~ Leave a comment
France Accuses Azerbaijan of Online Manipulation Campaigns

German Intelligence Launches Task Force to Combat Foreign Election Interference

Chinese Lidar Sensors Pose Hacking Risk to U.S. Defense Equipment, Report Says

The Pressure Is on for Big Tech to Regulate the Broken Digital Advertising Industry

Malicious Ads in Search Results Are Driving New Generations of Scams

INTERPOL Arrests 5,500 in Global Cybercrime Crackdown, Seizes Over $400 Million

Korea Arrests CEO for Adding DDoS Feature to Satellite Receivers

Russia Sentences Hydra Dark Web Market Leader to Life in Prison

SEC Settles With an Industrial and Commercial Bank of China Unit Over Ransomware Attack, Imposes No Fine

Are You Being Tracked by an Airtag? Here’s How to Check		Costa Rica State Energy Company Calls in U.S. Experts to Help With Ransomware Attack

Retail Outages Drag Into Second Week After Blue Yonder Ransomware Attack

$300M Bitcoin Hack Forces Japanese Crypto Exchange DMM Bitcoin to Cease Operations

Clipper DEX Says Recent $450K Hack Wasn’t Caused by Private Key Leak

Crypto.com Launches Massive $2m Bug Bounty Program

Zane Benefits (UT) Sends Data Breach Letters Confirming Leaked SSNs

SmokeLoader Malware Campaign Targets Companies in Taiwan

AWS Launches an Incident Response Service to Combat Cybersecurity Threats

Incident Response Playbooks: Are You Prepared?

Apple Patents System for Identifying People When Facial Scans Aren’t Enough

11/29-12/1/2024

~ The Cyber Beat ~ Leave a comment
Cyber-Attacks Could Impact Romanian Presidential Race, Officials Claim

AI-Powered Fake News Campaign Targets Western Support for Ukraine and U.S. Elections

UN, International Orgs Create Advisory Body for Submarine Cables After Incidents

In the New Space Race, Hackers Are Hitching a Ride Into Orbit

In New Bitcoin Bull Market, It’s Time to Beware of the Same Old Crypto Scams

Met Police Apologises to Honeytrap Victims Over Email

UK Justice System Failing Cybercrime Victims, Cyber Helpline Finds

Wanted Russian Hacker ‘Wazawaka’ Linked to Hive and LockBit Ransomware Arrested

U.S. Citizen Florida Man Sentenced for Spying on Behalf of China’s Intelligence Agency		Uganda Confirms Cyberattack on Central Bank but Minimizes Extent of Breach

INC Ransom Claims Cyber-Attack on UK Children’s Hospital

RansomHub Claims to Net Data Hat-Trick Against Bologna FC

Phishing-as-a-Service “Rockstar 2FA” Targets Microsoft 365 Users with AiTM Attacks

Novel Phising Campaign Uses Corrupted Word Documents to Evade Security

SpyLoan Android Malware on Google Play Installed 8 Million Times

New Windows Server 2012 Zero-Day Gets Free, Unofficial Patches

Tor Needs 200 New Webtunnel Bridges to Fight Censorship

Bulgarians Plead Guilty to Spying for Russia Using ‘Advanced Technology’

11/28/2024

~ The Cyber Beat ~ Leave a comment
Undersea Cable Cuts in the Baltic Sea Are Stoking Geopolitical Tensions — Here’s What’s Going On

Cloned Customer Voice Beats Bank Security Checks

The Only Thing Worse Than Being Fired Is Scammers Fooling You Into Thinking You’re Fired

TfL Faces Independent Investigation Over Cyber-Attack Response

Albanian Drug Smugglers Busted After Cops Decrypt Comms		UK Hospital Network Postpones Procedures After Cyberattack

Crypto Exchange XT.com Suspends Withdrawals After Suspected $1.7M Hack

XMLRPC npm Library Turns Malicious, Steals Data, Deploys Crypto Miner

Critical Vulnerabilities Discovered in Industrial Wireless Access Point

How Learning to Fly Made Me a Better Cybersecurity CEO

11/27/2024

~ The Cyber Beat ~ Leave a comment
T-Mobile Says Salt Typhoon Cyber Attackers Had No Access to Customer Data

…Salt Typhoon Chinese Hackers Breached T-Mobile’s Routers to Scope Out Network

…Salt Typhoon’s Surge Extends Far Beyond U.S. Telcos

British Government Demands Chinese-Owned Company Appoint a Security Chief With UK Clearances

Krebs: Hacker in Snowflake Extortions May Be a U.S. Soldier

Police Bust Pirate Streaming Service Making €250 Million per Month

Appeals Court Overturns Treasury Sanctions Against Crypto Mixer Tornado Cash

Exxon Lobbyist Investigated Over Hack-And-Leak of Environmentalist Emails, Sources Say

Microsoft Is Being Investigated by the FTC Over Antitrust Concerns

FTC Changes Its Telemarketing Rules to Cover Growing ‘Tech Support Scam’ Calls

Akamai Technologies: Bankruptcy Court Approves Bid for Edgio Assets

UK Nuclear Decommissioning Authority Opens Sellafield Cyber Center		BIC, Starbucks, Morrisons Continue Recovery After Blue Yonder Ransomware Attack

Hoboken (NJ) Hit with Ransomware Cyberattack, Officials Say

Data Broker SL Data Services Leaves 600K+ Sensitive Files Exposed Online

Cloudflare Says It Lost 55% of Logs Pushed to Customers for 3.5 Hours

Zello Asks Users to Reset Passwords After Security Incident

Contemporary Information Corp (CA) Provides Notice of Data Breach Following Incident at BackChecked, LLC

Attack Group APT-C-60 Targets Japan Using Trusted Platforms

Hackers Abuse Popular Godot Game Engine to Infect Thousands of PCs

New Bootkit “Bootkitty” Targets Linux Systems via UEFI

Matrix Botnet Exploits IoT Devices in Widespread DDoS Botnet Campaign

Critical Flaw in ProjectSend Under Active Exploitation Against Public-Facing Servers

Microsoft Re-Releases Exchange Updates After Fixing Mail Delivery

11/26/2024

~ The Cyber Beat ~ Leave a comment
Aggressive Chinese APT Group Earth Estries Targets Governments with New Backdoors

Russian RomCom Exploits Zero-Day Firefox and Windows Flaws in Sophisticated Cyberattacks

‘CyberVolk’ Hacktivists Use Ransomware in Support of Russian Interests

Darknet Services Fuel Holiday Scams and E-Commerce Exploits

Emergency Vehicle Lights Can Screw up a Car’s Automated Driving System

My Car Knows My Secrets, and I’m (Mostly) OK With That

CrowdStrike Raises Annual Forecast on Steady Cybersecurity Demand

Over 1,000 Arrested in Massive ‘Serengeti’ Anti-cybercrime Operation		RansomHub Gang Says It Broke Into Networks of Texas City, Minneapolis Agency

NHS Trust Declares Major Incident for “Cybersecurity Reasons”

Canadian Privacy Regulators Publish Details of Medical Testing Company LifeLabs Data Breach

Radiologic Medical Services (IA) Announces Data Breach After Unauthorized Access to Employee Email Account

New DDoS Campaign by ‘Matrix’ Exploits IoT Devices and Server Misconfigurations

New NachoVPN Attack Uses Rogue VPN Servers to Install Malicious Updates

Critical WordPress Anti-Spam Plugin Flaws Expose 200,000+ Sites to Remote Attacks

CISA Urges Agencies to Patch Critical “Array Networks” Flaw Amid Active Attacks

11/25/2024

~ The Cyber Beat ~ Leave a comment
China Has Utterly Pwned ‘Thousands and Thousands’ of Devices at U.S. Telcos

Salt Typhoon Hackers Backdoor Telcos With New GhostSpider Malware

Former Verizon Employee Gets Four-Year Sentence for Sharing Cyber Secrets With Chinese Government

UK Minister Criticized Over ‘Hyperbolic’ Speech on Russia’s Cyber Capabilities

America’s Rivals Have a New Favorite Weapon: Criminal Gangs

DOJ: Man Hacked Networks to Pitch Cybersecurity Services

Cyberattacks Cost British Businesses $55 Billion in Past Five Years, Broker Says

New York State Fines Geico and Travelers $11.3 Million for Data Breaches		Starbucks, Others Faces Disruptions Following Ransomware Attack on Software Supplier Blue Yonder

Spring EQ (PA) Notifies Consumers of Data Breach Stemming from Compromised Employee Email Account

PyPI Python Library “aiocpa” Found Exfiltrating Crypto Keys via Telegram Bot

BlackBasta Ransomware Brand Picks up Where Conti Left Off

Cybersecurity Blind Spots in IaC and PaC Tools Expose Cloud Platforms to New Attacks

Researchers Uncover Malware Using BYOVD to Bypass Antivirus Protections

QNAP Addresses Critical Flaws Across NAS, Router Software

Going Way Beyond Secure by Demand

11/22-24/2024

~ The Cyber Beat ~ Leave a comment
Russia’s Ballistic Missile Attack on Ukraine Is an Alarming First

Russia Ready to Wage Cyber War on UK, Minister to Say

Chinese Hackers Preparing for Conflict, U.S. Cyber Official Says

White House Officials Meet with Telecoms Execs on Suspected China Hack

Microsoft President Asks Trump to “Push Harder” Against Russian Hacks

Trump Taps Border Hawk to Head DHS. Will Noem’s ‘Enthusiasm’ Extend to Digital Domain?

The Pentagon’s Battle Inside the U.S. For Control of a New Cyber Force

The U.S. Is Calling Out Foreign Influence Campaigns Faster Than Ever

Google Exposes GLASSBRIDGE: A Pro-China Influence Network of Fake News Sites

Three-Quarters of Black Friday Spam Emails Identified as Scams

Bangkok Busts SMS Blaster Sending 1 Million Scam Texts From a Van

Meta Removes Over 2 Million Accounts Pushing Pig Butchering Scams

Supreme Court Tosses Facebook Appeal in Shareholder Lawsuit Arising From Cambridge Analytica Data Breach

DeliveryHero Subsidiary Fined $5.2 Million for Tracking Drivers’ Geolocation		Andrew Tate’s Site ‘Real World’ Ransacked, Subscriber Data Stolen

Software Company Blue Yonder Providing Services to U.S. and UK Grocery Stores Says It Was Hit by Ransomware Attack

Members Trust Company (FL) Data Breach Following Compromised Email Accounts Affects 11,854 Consumers

Russian Fancy Bear Hackers Breach U.S. Firm Over Wi-Fi From Russia in ‘Nearest Neighbor Attack’

Russian Cyber Spies TAG-110 Target Organizations with HatVibe and CherrySpy Malware

China-Linked TAG-112 Targets Tibetan Media with Cobalt Strike Espionage Campaign

APT-K-47 (aka Mysterious Elephant) Uses Hajj-Themed Lures to Deliver Advanced Asyncshell Malware

North Korean Hackers Sapphire Sleet Steal $10M with AI-Driven Scams and Malware on LinkedIn

PyPI Attack: ChatGPT, Claude Impersonators Deliver JarkaStealer via Python Libraries

Hackers Abuse Avast Anti-Rootkit Driver to Disable Defenses

Microsoft Rolls Out Recall to Windows Insiders With Copilot+ PCs

Microsoft Testing Windows 11 Support for Third-Party Passkeys

Senators Call for Audit of TSA’s Facial Recognition Tech as Use Expands in Airports

11/21/2024

~ The Cyber Beat ~ Leave a comment
Potential Trump Cyber Picks Coalesce — But Insiders Say There Could Be Surprises

China’s Surveillance State Is Selling Citizen Data as a Side Hustle

Chinese Ship Casts Shadow Over Baltic Subsea Cable Snipfest

North Korean Front Companies Impersonate U.S. IT Firms to Fund Missile Programs

The AI Effect: Amazon Sees Nearly 1 Billion Cyber Threats a Day

Google’s AI-Powered OSS-Fuzz Tool Finds 26 Vulnerabilities in Open-Source Projects

Microsoft Disrupts ONNX Phishing-as-a-Service Infrastructure

Fortinet VPN Design Flaw Hides Successful Brute-Force Attacks

A New ‘Ultra-Secure’ Phone Carrier Says It Can Make You Harder to Track

Meta Finally Breaks Its Silence on Pig Butchering

U.S. Seizes PopeyeTools Cybercrime Marketplace, Charges Administrators

Krebs: Feds Charge Five Men in ‘Scattered Spider’ Roundup		Dozens of Central Asian Targets Hit in Recent Russia-Linked Cyber-Espionage Campaign

Cyberattack at French Hospital Exposes Health Data of 750,000 Patients

Stop & Shop Races to Restock Shelves After ‘Cybersecurity Issue’

Gambling and Lottery Giant International Game Technology Disrupted by Cyberattack, Working to Bring Systems Back Online

Over 145,000 Industrial Control Systems Across 175 Countries Found Exposed Online

Now BlueSky Hit with Crypto Scams as It Crosses 20 Million Users

Rockford Gastroenterology Associates (IL) Notifies 147,253 of 2023 Data Breach

Linux Malware WolfsBane and FireWood Linked to Gelsemium APT

Vietnam’s Infostealer Crackdown Reveals VietCredCare and DuckTail

NodeStealer Malware Targets Facebook Ad Accounts, Harvesting Credit Card Data

Warning: Over 2,000 Palo Alto Networks Devices Hacked in Ongoing Attack Campaign

11/20/2024

~ The Cyber Beat ~ Leave a comment
Chinese APT Group Targets Telecom Firms Linked to Belt and Road Initiative

Inside the Booming ‘AI Pimping’ Industry

Amazon and Audible Flooded With ‘Forex Trading’ and Warez Listings

60% of Emails with QR Codes Classified as Spam or Malicious

U.S. Charges Five in ‘Scattered Spider’ Hacking Scheme

Two Brothers Indicted for Operating Illegal Sports Streaming Service That Netted $7 Million

MITRE Shares 2024’s Top 25 Most Dangerous Software Weaknesses		Krebs: Fintech Giant Finastra Investigating Data Breach

Norfolk Sheriff’s Office (VA) Says They Were the ‘Victim of a Cybersecurity Event’

Wexford County (MI) Computer Systems Returning After Cyberattack Forced Shutdown

FBI Says BianLian Based in Russia, Moving From Ransomware Attacks to Extortion

Ghost Tap: Hackers Exploiting NFCGate to Steal Funds via Mobile Payments

Five Privilege Escalation Flaws Found in Ubuntu Needrestart

11/19/2024

~ The Cyber Beat ~ Leave a comment
Data Privacy Experts Predict Some Wins Under Trump 2.0

Hacker Is Said to Have Gained Access to File With Damaging Testimony About Matt Gaetz

Ransomware Gangs on Recruitment Drive for Pen Testers

Leaked Documents Show What Phones Secretive Tech ‘Graykey’ Can Unlock

Microsoft Shares More Details on Windows 11 Admin Protection

Microsoft Announces Its Own Black Hat-Like Hacking Event With Big Rewards for AI Security

Auto Sector Scrambles to Retool Workforce for Electric and Automated Future

TSA Cyber Disclosure Requirements Worry Natural Gas Companies

TSA Not Monitoring Transportation Sector Efforts to Stop Ransomware, Watchdog Says

D-Link Urges Users to Retire VPN Routers Impacted by Unfixed RCE Flaw		Healthcare Org Equinox Notifies 21K Patients and Staff of Data Theft

Aspen Healthcare Services (TX) Announces Data Breach Following Ransomware Attack

AdventHealth (FL) Files Official Notice of Data Breach

Hackers Hijack Unsecured Jupyter Notebooks to Stream Illegal Sports Broadcasts

Spotify Abused to Promote Pirated Software and Game Cheats

Helldown Ransomware Expands to Target VMware and Linux Systems

Ngioweb Botnet Fuels NSOCKS Residential Proxy Network Exploiting IoT Devices

CISA Tags Progress Kemp Loadmaster Flaw as Exploited in Attacks

Apple Fixes Two Zero-Days Used in Attacks on Intel-Based Macs

Oracle Warns of Agile PLM File Disclosure Flaw Exploited in Attacks

11/18/2024

~ The Cyber Beat ~ Leave a comment
Sweden’s ‘Doomsday Prep for Dummies’ Guide Hits Mailboxes Today

North Korean IT Worker Network Tied to BeaverTail Phishing Campaign

Surge in DocuSign Phishing Attacks Target U.S. State Contractors

Many U.S. Water Systems Exposed to ‘High-Risk’ Vulnerabilities, Watchdog Finds

Bipartisan Effort to Clean up Cyber Regulations Gets a Boost in House, but Calendar Is Tight

Fake Donald Trump Assassination Story Used in Phishing Scam

Microsoft 365 Admin Portal Abused to Send Sextortion Emails

Heather ‘Razzlekhan’ Morgan Sentenced to 18 Months in Prison, Ending Bitfinex Saga

U.S. Charges Phobos Ransomware Admin After South Korea Extradition

Cybersecurity At A Crossroads As Global Threats Hit Record Highs

Why the Demand for Cybersecurity Innovation Is Surging

Brave on iOS Adds New “Shred” Button to Wipe Site-Specific Data

Gmail’s New Shielded Email Feature Lets Users Create Aliases for Email Privacy

Apple Still Blocking Access to News Apps and Podcasts at Moscow’s Request		U.S. Space Tech Giant Maxar Discloses Employee Data Breach

British Software Company Microlise Confirms Hackers Compromised Corporate Data

Rockport Mortgage Notifies Individuals of Recent Data Breach Leaking Their Personal Information

Great Plains Regional Medical Center (OK) Notifies Patients of Data Breach Following Ransomware Attack

AI Company iLearningEngines Tells SEC That $250,000 Stolen in Cyberattack

Ford ‘Actively Investigating’ After Employee Data Allegedly Parked on Leak Site

Akira Ransomware Racks Up 30+ Victims in a Single Day

‘ClickFix’ Cyber-Attacks for Malware Deployment on the Rise

Fake Bitwarden Ads on Facebook Push Info-Stealing Chrome Extension

Fake Discount Sites Exploit Black Friday to Hijack Shopper Information

New Stealthy BabbleLoader Malware Spotted Delivering WhiteSnake and Meduza Stealers

Critical 9.8-Rated VMware vCenter RCE Bug Exploited After Patch Fumble

Palo Alto Networks Patches Two Firewall Zero-Days Used in Attacks

11/15-17/2024

~ The Cyber Beat ~ Leave a comment
Library of Congress Email Systems Hacked Earlier This Year by ‘Foreign Adversary’

Iranian Hackers Deploy WezRat Malware in Attacks Targeting Israeli Organizations

Vietnamese Hacker Group Deploys New PXA Stealer Targeting Europe and Asia

Chinese ‘SilkSpecter’ Fraud Network Uses 4,700 Fake Shopping Sites to Steal Credit Cards

T-Mobile Confirms It Was Hacked in Recent Wave of Telecom Breaches

New Apple Security Feature Reboots iPhones After 3 Days, Researchers Confirm

NSO Group Used Another WhatsApp Zero-Day After Being Sued, Court Docs Say

Cyber Schemes Among Projects Getting £20M Windfall

Bitfinex Hacker Ilya Lichtenstein Sentenced to 5 Years, Guilty of Laundering $10.5 Billion in Bitcoin

Ohio Man Behind Helix Cryptocurrency Mixer Gets 3-Year Sentence

Krebs: An Interview With the Target & Home Depot Hacker

Will Passkeys Ever Replace Passwords? Can They?

FTC Reports 50% Drop In Unwanted Call Complaints Since 2021		Otsego Public Schools (MI) Hacked; Personal Info Exposed

Fake AI Video Generators Infect Windows, macOS With Infostealers

Phishing Emails Increasingly Use SVG Attachments to Evade Detection

Ransomware Groups Use Cloud Services For Data Exfiltration

Researchers Warn of Privilege Escalation Risks in Google’s Vertex AI ML Platform

Warning: DEEPDATA Malware Exploiting Unpatched Fortinet Flaw to Steal VPN Credentials

PAN-OS Firewall Vulnerability Under Active Exploitation – IoCs Released

Botnet Exploits GeoVision Zero-Day to Install Mirai Malware

watchTowr Finds New Zero-Day Vulnerability in Fortinet Products

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

Security Plugin Flaw in Millions of WordPress Sites Gives Admin Access

Microsoft Pulls Exchange Security Updates Over Mail Delivery Issues

The Vendor’s Role in Combating Alert Fatigue

Top Ukrainian Cyber Official Resigns a Year After Taking Office

11/14/2024

~ The Cyber Beat ~ Leave a comment
Trump’s Second Term Is Expected to Bring Big Change to Top U.S. Cyber Agency

…More Spyware, Fewer Rules: What Trump’s Return Means for U.S. Cybersecurity

…Washington’s Cybersecurity Storm of Complacency

Sitting Ducks DNS Attacks Put Global Domains at Risk

Google Warns of Rising Cloaking Scams, AI-Driven Fraud, and Crypto Schemes

Bank of England U-turns on Vulnerability Disclosure Rules

Cybercriminal Devoid of Boundaries Gets 10-Year Prison Sentence

Teen Behind Hundreds of Swatting Attacks Pleads Guilty to Federal Charges

Malware Being Delivered by Mail, Warns Swiss Cyber Agency		Hungary Confirms Hack of Defense Procurement Agency

Kids’ Shoemaker Start-Rite Trips Over Security Again, Spilling Customer Card Info

Microsoft Power Pages Misconfiguration Leads to Data Exposure

New Glove Infostealer Malware Bypasses Chrome’s Cookie Encryption

Russian Hackers Exploit New NTLM Flaw to Deploy RAT Malware via Phishing Emails

New RustyAttr Malware Targets macOS Through Extended Attribute Abuse

CISA Warns of More Palo Alto Networks Bugs Exploited in Attacks

ChatGPT Allows Access to Underlying Sandbox OS, “Playbook” Data

11/13/2024

~ The Cyber Beat ~ Leave a comment
China-Linked Hackers Stole Surveillance Data From Telecom Companies, U.S. Says

Hamas-Affiliated WIRTE Employs SameCoin Wiper in Disruptive Attacks Against Israel

Trump’s Second Term Is Expected to Bring Big Change to Top U.S. Cyber Agency

…Top White House Cyber Official Urges Trump to Focus on Ransomware, China

These Are the Passwords You Definitely Shouldn’t Be Using

Leaked Info of 122 Million Linked to B2B Data Aggregator Breach

Data Broker Amasses 100M+ Records on People – Then Someone Snatches, Sells It

These Guys Hacked AirPods to Give Their Grandmas Hearing Aids

Amazon MOVEit Leaker Claims to Be Ethical Hacker

Chinese National Faces 20 Years in U.S. Prison for Laundering Pig-Butchering Proceeds		China-Linked Group Hacked Tibetan Media and University Sites to Distribute Cobalt Strike Payload

Embargo Ransomware Fiends Boast They’ve Stolen 1.4TB From U.S. Pharmacy Network

Wisconsin City of Sheboygan Says Ransom Demanded After Cyberattack

ASM Global (CA) Notifies Affected Individuals of Recent Data Breach

Hive0145 Targets Europe with Advanced Strela Stealer Campaigns

New ShrinkLocker Ransomware Decryptor Recovers Bitlocker Password

Critical Bug in EoL D-Link NAS Devices Now Exploited in Attacks

Krebs: Microsoft Patch Tuesday, November 2024 Edition

NIST Says Exploited Vulnerability Backlog Cleared but End-Of-Year Goal for Full List Unlikely

New Google Pixel AI Feature Analyzes Phone Conversations for Scams

11/12/2024

~ The Cyber Beat ~ Leave a comment
German Interior Minister Warns of Cyber Threat Ahead of Elections

Volt Typhoon Rebuilds Malware Botnet Following FBI Disruption

Surge in Exploits of Zero-Day Vulnerabilities Is ‘New Normal’ Warns Five Eyes Alliance

FBI, CISA, and NSA Reveal Most Exploited Vulnerabilities of 2023

Microsoft November 2024 Patch Tuesday Fixes 4 Zero-Days, 91 Flaws

…Two Zero-Day Bugs in Microsoft’s Nov. Update Under Active Exploit

…Windows 10 KB5046613 Update Released with Fixes For Printer Bugs

CISOs Turn to Indemnity Insurance as Breach Pressure Mounts

Signal Introduces Convenient “Call Links” for Private Group Chats

Pentagon Leaker Sentenced to 15 Years in Jail After Sharing Military Secrets Online		Dutch Company Behind Hannaford, Stop & Shop Says Cyber Issue Affecting U.S. Network

Delta, Amazon Confirm Vendor Breach as Dark Web Posts Revive MOVEit Leak Concerns

BBS Financial (MA) Confirms Data Breach Following January 2024 Ransomware Attack

North Korean Hackers Target macOS Using Flutter-Embedded Malware

TA455’s Iranian Dream Job Campaign Targets Aerospace with Malware

Phishing Tool GoIssue Targets Developers on GitHub

New Flaws in Citrix Virtual Apps Enable RCE Attacks via MSMQ Misconfiguration

D-Link Won’t Fix Critical Bug in 60,000 Exposed EoL Modems

How Italy Became an Unexpected Spyware Hub

11/11/2024

~ The Cyber Beat ~ Leave a comment
Credit Cards Readers Across Israeli Stores, Gas Stations Crash in Cyberattack

FBI Issues Warning as Crooks Ramp up Emergency Data Request Scams

WEF Introduces Framework to Strengthen Anti-Cybercrime Partnerships

Security Flaws in Popular ML Toolkits Enable Server Hijacks, Privilege Escalation

The AI Machine Gun of the Future Is Already Here

Halliburton Reports $35 Million Loss After Ransomware Attack

Open Source Security Incidents Aren’t Going Away		Amazon Confirms Employee Data Breach, but Says It’s Limited to Contact Info

HIBP Notifies 57 Million People of Hot Topic Data Breach

Food Lion Acknowledges They Were Hit by Cyberattack

Set Forth, Inc. (IL) Sends Data Breach Letters to 1.5 Million Consumers

English Construction Company (VA) Targeted in Ransomware Attack, Leading to Data Breach Affecting Former Employees

New Remcos RAT Variant Targets Windows Users Via Phishing

New Ymir Ransomware Partners With RustyStealer in Attacks

11/8-10/2024

~ The Cyber Beat ~ Leave a comment
Pro-Russian Hacktivists Target South Korea as North Korea Joins Ukraine War

Authorities Work to Find the Source of Racist Texts Sent to Black People Nationwide After the Election

TSA Wants to Expand Cyber Rules for Pipelines and Railroads

Scattered Spider, BlackCat Claw Their Way Back From Criminal Underground

Scammers Target UK Senior Citizens With Winter Fuel Payment Texts

Google’s Mysterious ‘search.app’ Links Leave Android Users Concerned

A New iOS 18 Security Feature Makes It Harder for Police to Unlock iPhones

FBI: Spike in Hacked Police Emails, Fake Subpoenas (Krebs)

Bitcoin Fog Founder Sentenced to 12 Years for Cryptocurrency Money Laundering		IcePeony and Transparent Tribe Target Indian Entities with Cloud-Based Tools

Malicious NPM Packages Target Roblox Users with Data-Stealing Malware

Malicious PyPI Package with 37,000 Downloads Steals AWS Keys

Hackers Now Use Zip File Concatenation to Evade Detection

Critical Veeam RCE Bug Now Used in Frag Ransomware Attacks

Unpatched Mazda Connect Bugs Let Hackers Install Persistent Malware

Palo Alto Advises Securing PAN-OS Interface Amid Potential RCE Threat Concerns

D-Link Won’t Fix Critical Flaw Affecting 60,000 Older NAS Devices

How the Creator of Zero Trust Developed Today’s Most Robust Cybersecurity Strategy

Russia’s Internet Watchdog Blocks Thousands of Websites That Use Cloudflare’s Privacy Service

11/7/2024

~ The Cyber Beat ~ Leave a comment
U.S. Agency Warns Employees About Phone Use Amid Ongoing China Hack

China-Aligned MirrorFace Hackers Target EU Diplomats with World Expo 2025 Bait

China-Linked Hackers Tasked With Japanese Targets Pursue Them Through Europe

Canada Orders Shutdown of Local TikTok Branch Over Security Concerns

764 Terror Network Member Richard Densmore Sentenced to 30 Years in Prison

Akamai Forecasts Fourth-Quarter Revenue Below Estimates on Weak Client Spending

Cloudflare’s Q4 Revenue Forecast Falls Short as Cybersec Competition Intensifies

Fortinet’s Quarterly Revenue Forecast Disappoints, Shares Fall

Datadog Raises Annual Forecast Betting on AI-Driven Cybersecurity Demand

Defenders Outpace Attackers in AI Adoption		Nokia Says Hackers Leaked Third-Party App Source Code

Texas-Based Oilfield Supplier Newpark Resources Faces Disruptions Following Ransomware Attack

OrthopedicsNY Files Official Notice of 2023 Data Breach Affecting Patient Information

North Korean Hackers Target Crypto Firms with Hidden Risk Malware on macOS

Don’t Open That ‘Copyright Infringement’ Email Attachment – It’s an Infostealer

Androxgh0st Botnet Adopts Mozi Payloads, Expands IoT Reach

Malicious PyPI Package ‘Fabrice’ Found Stealing AWS Keys from Thousands of Developers

CISA Warns of Critical Palo Alto Networks Bug Exploited in Attacks

HPE Warns of Critical Rce Flaws in Aruba Networking Access Points

The Power of Process in Creating a Successful Security Posture

11/6/2024

~ The Cyber Beat ~ Leave a comment
Top U.S. Cyber Official Says ‘No Evidence of Malicious Activity’ Impacting Election

Fact Check: Georgia Voter Fraud Video Labeled Russian Disinformation Uses False Personal Data

IRISSCON: Organizations Still Falling Victim to Predictable Cyber-Attacks

Cybercrooks Are Targeting Bengal Cat Lovers in Australia for Some Reason

People Urged to Update Some Internet Routers

Germany Drafts Law to Protect Researchers Who Find Security Flaws

Major Ukrainian University Bans Telegram to Reduce Cyberthreats

UK Orders Chinese Owners to Relinquish Control of Scottish Semiconductor Business

Massive Nigerian Cybercrime Bust Sees 130 Arrested		Washington Courts’ Systems Offline Following Weekend Cyberattack

Cyber-Attack on Microlise Disrupts DHL and Serco Tracking Services

Cyberattack Disables Tracking Systems and Panic Alarms on British Prison Vans

SelectBlinds Says 200,000 Customers Impacted After Hackers Embed Malware on Site

Nokia: No Evidence So Far That Hackers Breached Company Data

Winos4.0 Malware Found in Game Apps, Targets Windows Users

New SteelFox Malware Hijacks Windows PCs Using Vulnerable Driver

VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware

Cisco Bug Lets Hackers Run Commands as Root on UWRB Access Points

11/5/2024

~ The Cyber Beat ~ Leave a comment
The FBI Says Russian Emails Are Sending Fake Bomb Threats to Polling Stations

…Russia Is Going All Out on Election Day Interference

U.S. Warns of Last-Minute Iranian and Russian Election Influence Ops

…Officials Warn Against Fake U.S. Election Videos, but See Little Disruption

ClickFix Exploits Users with Fake Errors and Malicious Code

Interpol Disrupts Cybercrime Activity on 22,000 IP Addresses, Arrests 41

Krebs: Canadian Man Arrested in Snowflake Data Extortions

A Kansas Pig Butchering: CEO Who Defrauded Bank, Church, Friends Gets 24 Years

FBI Seeks Public Help to Identify Chinese Hackers Behind Global Cyber Intrusions

Meta Found to Have Exposed Info on North Korean Defectors to Advertisers

Ukraine Accuses Google of Revealing Locations of Its Military Systems		Georgia Hospital Unable to Access Record System After Ransomware Attack

Schneider Electric Ransomware Crew Demands $125K Paid in Baguettes

Chinese Group Accused of Hacking Singtel in Telecom Attacks

Chinese Air Fryers May Be Spying on Consumers, Which? Warns

ToxicPanda Malware Targets Banking Apps on Android Devices

Pakistani Hackers Targeted High-Profile Indian Entities using Custom ElizaRAT

Malware Campaign Uses Ethereum Smart Contracts to Control npm Typosquat Packages

Synology Urges Patch for Critical Zero-Click RCE Flaw Affecting Millions of NAS Devices

Google Warns of Actively Exploited CVE-2024-43093 Vulnerability in Android System

Google Cloud to Make MFA Mandatory by the End of 2025

How to Win at Cyber by Influencing People

11/4/2024

~ The Cyber Beat ~ Leave a comment
U.S. Cybersecurity Chief Says Disinformation Surge Hasn’t Impacted Election

…In Final Check-in Before Election Day, CISA Cites Low-Level Threats, and Not Much Else

Nakasone Says All the News About Influence Campaigns Ahead of Election Day Is Actually ‘A Sign of Success’

Rep. Yvette Clarke on AI-Fueled Disinformation: ‘We Have Not Protected Ourselves in Time for This Election Cycle’

U.S. Says Russia Behind Fake Haitian Voters Video

Moldova Elects Pro-West President Maia Sandu Despite Russian Interference

Custom “Pygmy Goat” Malware Used in Sophos Firewall Hack on Gov’t Network

Inside the Massive Crime Industry That’s Hacking Billion-Dollar Companies

Northern Minnesota Man Cost Former Employer $45K in Cryptojacking Scheme, Charges Say

Nigerian Handed 26-Year Sentence for Real Estate Phishing Scam

Google Researchers Claim First Vulnerability Found Using AI		Schneider Electric Confirms Dev Platform Breach After Hacker Steals Data

Nokia Investigates Breach After Hacker Claims to Steal Source Code

Cisco Says DevHub Site Leak Won’t Enable Future Breaches

Columbus (OH) Ransomware Attack Exposes Data of 500,000 Residents

Middlesbrough Council Targeted in Second Cyber Attack in a Week

Houston Housing Authority Was Victim of a Ransomware Attack, Agency Says

Kemlon Products & Development Group (TX) Files Official Notice of Data Breach

Meet Interlock — The New Ransomware Targeting FreeBSD Servers

Windows Infected With Backdoored Linux VMs in New Phishing Attacks

Cybercriminals Exploit DocuSign APIs to Send Fake Invoices

Supply Chain Attack Uses Smart Contracts for C2 Ops

Critical Flaws in Ollama AI Framework Could Enable DoS, Model Theft, and Poisoning

11/1-3/2024

~ The Cyber Beat ~ Leave a comment
Georgia Says U.S., Election Disinformation Likely Coming From Russian Troll Farms

U.S. Blames Russia Over Video Falsely Alleging Fraudulent Voting in State of Georgia

China’s Typhoon Hacks Ahead of U.S. Election Spurred by Elite Competition

Cyber Threats and the Election: What You Need to Know

Sophos Warns Chinese Hackers Are Becoming Stealthier

Microsoft Warns of Chinese Botnet Exploiting Router Flaws for Credential Theft

U.S. and Israel Warn of Iranian Threat Actor’s New Tradecraft

Krebs: Booking.com Phishers May Leave You With Reservations

They’re Giving Scammers All Their Money. The Kids Can’t Stop Them.

6 IT Contractors Arrested for Defrauding Uncle Sam Out of Millions

DDoS Site Dstat.cc Seized and Two Suspects Arrested in Germany

Florida Man Accused of Hacking Disney World Menus, Changing Font to Wingdings

Hack Nintendo’s Alarm Clock to Show Cat Pics? Let’s-A-Go!

ChatGPT-4o Can Be Used for Autonomous Voice-Based Scams

OpenAI’s New ChatGPT Search Chrome Extension Feels Like a Search Hijacker		LA Housing Authority Confirms Breach Claimed by Cactus Ransomware

San Joaquin County Superior Court (CA) Suffering From Tech Outages After Cyberattack

Ransomware Attack Hits German Pharmaceutical Wholesaler AEP, Disrupts Medicine Supplies

Young People’s Data Feared Stolen in Cyberattack on French Government Contractor

Saint Xavier University Notifies Over 200k People of Recent Data Breach

Middlesbrough Council Website Restored After Online Attack

A Devon School ‘Blackmailed’ by Hackers in Cyber-Attack

LastPass Warns of Fake Support Centers Trying to Steal Customer Data

An Okta Login Bug Bypassed Checking Passwords on Some Long Usernames

Microsoft SharePoint RCE Bug Exploited to Breach Corporate Network

Zero-Click Flaw Exposes Potentially Millions of Popular Storage Devices to Attack

CISA Warns of Critical Software Vulnerabilities in Industrial Devices

Microsoft Delays Windows Copilot+ Recall Release Over Privacy Concerns

Federal Agency Investigating How Meta Uses Consumer Financial Data for Advertising

10/31/2024

~ The Cyber Beat ~ Leave a comment
Pro-Russia Hackers Claim Council Cyber Attacks, Including Greater Manchester

Suspected Pro-Ukraine Cyberattack Knocks Out Parking Enforcement in Russian City

Canadian Government Data Stolen By Chinese Hackers

Microsoft: Chinese Hackers Use Quad7 Botnet to Steal Credentials

Inside a Firewall Vendor’s 5-Year War With the Chinese Hackers Hijacking Its Devices

The Untold Story of Trump’s Failed Attempt to Overthrow Venezuela’s President

FBI: Iranian Cyber Group Targeted Summer Olympics With Attack on French Display Provider

UK Finance Firms Told to Beef up Buffers Against Crowdstrike-Like Events

Microsoft Wants $30 if You Want to Delay Windows 11 Switch

2024 Looks Set to Be Another Record-Breaking Year for Ransomware — And It’s Likely Going to Get Worse		Over a Thousand Online Shops Hacked to Show Fake Product Listings

Large Peruvian Bank Warns of Data Theft After Dark Web Post Emerges

Blackburn College Still Operating Despite Cyber-Attack

St. Anthony Regional Hospital (IA) Provides Notice of Data Breach

LottieFiles Supply Chain Attack Exposes Users to Malicious Crypto Wallet Drainer

New Xiu Gou Phishing Kit Targets U.S., Other Countries with Mascot

Hackers Target Critical Zero-Day Vulnerability in PTZ Cameras

LiteSpeed Cache WordPress Plugin Bug Lets Hackers Get Admin Access

qBittorrent Fixes Flaw Exposing Users to MitM Attacks for 14 Years

Cybersecurity Job Market Stagnates, Dissatisfaction Abounds

Russia to Ban Cryptocurrency Mining in Some Regions Due to Electricity Shortages

10/30/2024

~ The Cyber Beat ~ Leave a comment
Midnight Blizzard Spearphishing Campaign Targets Thousands with RDP Files

North Korean Group Collaborates with Play Ransomware in Significant Cyber Attack

Beijing Claims It’s Found ‘Underwater Lighthouses’ That Its Foes Use for Espionage

‘We’re a Fortress Now’: The Militarization of U.S. Elections Is Here

Colorado Voting System Partial Passwords Accidentally Posted on Government Website

FBI: Upcoming U.S. General Election Fuel Multiple Fraud Schemes

Fired Disney Staffer Accused of Hacking Menu to Add Profanity, Wingdings, Removes Allergen Info

Krebs: Change Healthcare Breach Hits 100M Americans

…UnitedHealth Hires Cybersecurity Veteran as New CISO

Google’s AI-Fueled Gains in Cloud Bode Well for Amazon, Microsoft

Cyber Vendor Netskope Plans 2025 IPO		Interbank Confirms Data Breach Following Failed Extortion, Data Leak

Starkweather and Shepley Insurance Brokerage (RI) Provides Notice of Recent Data Breach

Hackers Steal 15,000 Cloud Credentials From Exposed Git Config Files

Malware Campaign Expands Its Use of Fake CAPTCHAs

Updated FakeCall Malware Targets Mobile Devices with Vishing

Malvertising Campaign Hijacks Facebook Accounts to Spread SYS01stealer Malware

Researchers Uncover Python Package Targeting Crypto Wallets with Malicious Code

Opera Browser Fixes Big Security Hole That Could Have Exposed Your Information

Apple Rolls Out Major Security Update to Patch macOS and iOS Vulnerabilities

QNAP Patches Second Zero-Day Exploited at Pwn2Own to Get Root

When Cybersecurity Tools Backfire

10/29/2024

~ The Cyber Beat ~ Leave a comment
Trump Family Members and Biden Aides Among China Hack Targets

Merde! Macron’s Bodyguards Reveal His Location by Sharing Strava Data

Russia and China-Linked State Hackers Intensify Attacks on Netherlands, Security Officials Warn

Suspicious Social Media Accounts Deployed Ahead of COP29

Five Eyes Agencies Launch Startup Security Initiative

Six Senators Tell Biden Administration UN Cybercrime Treaty Must Be Changed

NIS2 Compliance Puts Strain on Business Budgets

TSA Silent on CrowdStrike’s Claim Delta Skipped Required Security Update

MoneyGram Replaces CEO Weeks After Massive Customer Data Breach

Russian Charged by U.S. For Creating RedLine Infostealer Malware		The Center for Urban Community Services (NY) Notifies 38,000 People of Recent Data Breach

Chenlun’s Evolving Phishing Tactics Target Trusted Brands

New LightSpy Spyware Targets iOS with Enhanced Capabilities

Massive PSAUX Ransomware Attack Targets 22,000 CyberPanel Instances

New Research Reveals Spectre Vulnerability Persists in Latest AMD and Intel Processors

Researchers Uncover Vulnerabilities in Open-Source AI and ML Models

New Windows Themes Zero-Day Gets Free, Unofficial Patches

QNAP Fixes NAS Backup Software Zero-Day Exploited at Pwn2Own

How to Find the Right CISO

Russia Says It Might Build Its Own Linux Community After Removal of Several Kernel Maintainers

10/28/2024

~ The Cyber Beat ~ Leave a comment
Chinese Hackers Said to Have Collected Audio of American Calls

…Including Trump Advisor

Cybercriminals Pose a Greater Threat of Disruptive U.S. Election Hacks Than Russia or China

Evasive Panda’s CloudScout Toolset Targets Taiwan

Russian Malware Campaign Targets Ukrainian Recruits Via Telegram

Japanese Man Sentenced to 3 Years After Creating Crypto Ransomware With AI

Redline, Meta Infostealer Malware Operations Seized by Police

JPMorgan Chase Sues Scammers Following Viral ‘Infinite Money Glitch’

Delta, CrowdStrike Sue Each Other Over Widespread IT Outage That Caused Thousands of Cancellations

Sinclair Sues Cyber Insurers Over 2021 Hack

Cybersecurity Firm Rapid7 Fields Buyout Interest, Sources Say

Cyber Firm Armis Security Raises $200 Million at $4.3 Billion Valuation		Italian Politicians Express Alarm at Latest Data Breach Allegedly Affecting 800,000 Citizens

Free, France’s Second Largest ISP, Confirms Data Breach After Leak

TEAM Software (NE) Confirms July 2024 Data Breach Impacting Thousands of SSNs

Wichita County (TX) Says 47,000 Had SSNs, Medical Treatment Info Leaked During May Cyberattack

Over 6,500 Patients Affected by Parkland Health in Dallas Possible Data Breach

Cybercriminals Use Webflow to Deceive Users into Sharing Sensitive Login Credentials

New Type of Job Scam Targets Financially Vulnerable Populations

AI-Powered BEC Scams Zero in on Manufacturers

BeaverTail Malware Resurfaces in Malicious npm Packages Targeting Developers

New Tool Bypasses Google Chrome’s New Cookie Encryption System

Mozilla: ChatGPT Can Be Manipulated Using Hex Code

Put End-of-Life Software to Rest

10/25-27/2024

~ The Cyber Beat ~ Leave a comment
Chinese Hackers Are Said to Have Targeted Phones Used by Trump and Vance

…Harris Campaign Too

…U.S. Panel to Probe Cyber Failures in Massive ‘Salt Typhoon’ Chinese Hack of Telecoms

Kremlin-Linked APT29 Hackers Target Ukraine’s State, Military Agencies in New Espionage Campaign

Ukraine Warns of Mass Phishing Campaign Targeting Citizens Data

Senator Accuses Sloppy Domain Registrars of Aiding Russian Disinfo Campaigns

Linux Creator Approves De-Listing of Several Kernel Maintainers Associated With Russia

Claude AI Gets Bored During Coding Demonstration, Starts Perusing Photos of National Parks Instead

Reuters Exposé of Hack-For-Hire World Is Back Online After Indian Court Ruling

Delta Sues CrowdStrike Over Software Update That Prompted Mass Flight Disruptions

Amazon Seizes Domains Used in Rogue Remote Desktop Campaign to Steal Data

Four REvil Ransomware Members Sentenced in Rare Russian Cybercrime Convictions		Henry Schein Discloses Data Breach a Year After Ransomware Attack

RansomHub Gang Allegedly Behind Attack on Mexican Airport Operator

Chimienti & Associates (CA) Experiences Data Breach Following Compromised Email Account

Community Dental (ME) Files Official Notice of Data Breach After Cyberattack Exposed Patients’ Sensitive Info

Black Basta Ransomware Poses as IT Support on Microsoft Teams to Breach Networks

Notorious Hacker Group TeamTNT Launches New Cloud Attacks for Crypto Mining

Fog Ransomware Targets SonicWall VPNs to Breach Corporate Networks

Researchers Discover Command Injection Flaw in Wi-Fi Alliance’s Test Suite

New Windows Driver Signature Bypass Allows Kernel Rootkit Installs

New Cisco ASA and FTD Features Block VPN Brute-Force Password Attacks

QNAP, Synology, Lexmark Devices Hacked on Pwn2Own Day 3

…Over 70 Zero-Day Flaws Get Hackers $1 Million at Pwn2Own Ireland

10/24/2024

~ The Cyber Beat ~ Leave a comment
White House Issues AI National Security Memo

Cybersecurity Teams Largely Ignored in AI Policy Development

Voice-Enabled AI Agents Can Automate Everything, Even Your Phone Scams

Apple Will Pay Security Researchers up to $1 Million to Hack Its Private AI Cloud

Meet ZachXBT, the Masked Vigilante Tracking down Billions in Crypto Scams and Thefts

Courts Side With Auto Suppliers in Clash With Carmakers Over Vehicle Data Access

Ireland Fines LinkedIn €310 Million Over Targeted Advertising

CFPB Warns Industry Against ‘Deeply Invasive’ Workplace Digital Surveillance		UnitedHealth Says Change Healthcare Hack Affects Over 100 Million, the Largest Ever U.S. Healthcare Data Breach

…How the Ransomware Attack at Change Healthcare Went Down: A Timeline

Insurance Admin Landmark Says Data Breach Impacts 800,000 People

New Qilin.B Ransomware Variant Emerges with Improved Encryption and Evasion Tactics

Mandiant Says New Fortinet Flaw Has Been Exploited Since June

Cisco Issues Urgent Fix for ASA and FTD Software Vulnerability Under Active Attack

Samsung Galaxy S24 and Sonos Era Hacked on Pwn2Own Ireland Day 2

Why Cybersecurity Acumen Matters in the C-Suite

10/23/2024

~ The Cyber Beat ~ Leave a comment
Microsoft Warns Foreign Disinformation Is Hitting the U.S. Election From All Directions

Georgia Election Official Says Battleground State Fended off Cyberattack Likely From a Foreign Country

Former British PM Cameron Calls for Tech Engagement with China Despite Cyber Threats

U.S. Energy Sector Vulnerable to Supply Chain Attacks

U.S. Government Pledges to Cyber Threat Sharing Via TLP Protocol

Google to Let Businesses Create Curated Chrome Web Stores for Extensions

WhatsApp Now Encrypts Contact Databases for Privacy-Preserving Synching

Krebs: The Global Surveillance Free-for-All in Mobile Ad Data

UK Government Weighs Review of Computer Misuse Act to Combat Cybercrime

UK Court Says Dissident Can Sue the Saudi Government for Targeting Him With Spyware

Nigeria Drops Charges Against Tigran Gambaryan, Jailed Binance Exec and Former IRS Agent		Russia Says ‘Unprecedented’ Cyber Attack Hits Foreign Ministry Amid BRICS Summit

Rhysida Ransomware Group Targets Prominent Nonprofit for Disabled People Easterseals

Data Breach at Autobell Car Wash Impacts 52,714 Individuals

Embargo Ransomware Gang Deploys Customized Defense Evasion Tools

New Grandoreiro Banking Malware Variants Emerge with Advanced Tactics to Evade Detection

Ransomware Gangs Use LockBit’s Fame to Intimidate Victims in Latest Attacks

Researchers Reveal ‘Deceptive Delight’ Method to Jailbreak AI Models

Lazarus Hackers Used Fake DeFi Game to Exploit Google Chrome Zero-Day

CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)

Fortinet Warns of New Critical FortiManager Flaw Used in Zero-Day Attacks

Hackers Exploit 52 Zero-Days on the First Day of Pwn2Own Ireland

10/22/2024

~ The Cyber Beat ~ Leave a comment
TSMC Blows Whistle on Potential Sanctions-Busting Shenanigans From Huawei

Prigozhin Links, Kremlin Funding Put Another Russian Media Company on U.S. List

Foreign Influence Operations Will Expand Before Election and Linger Afterward, U.S. Agencies Say

Exposed United Nations Database Left Sensitive Information Accessible Online

75% of US Senate Campaign Websites Fail to Implement DMARC

The Shitposting Cartoon Dogs Sending Trucks, Drones, and Weapons to Ukraine’s Front Lines

Senators Seek Biden Administration Review of Undersea Cable Vulnerabilities

LLMjacking and Open-Source Tool Abuse Surge in 2024 Cloud Attacks

AWS, Azure Auth Keys Found in Android and iOS Apps Used by Millions

Meta Brings Back Face Scanning to Combat Scams and Account Hacking

Think Tanks Urge Action to Curb Misuse of Spyware and Hack-for-Hire

SEC Charges Tech Firms Over Misleading SolarWinds Hack Disclosures

CISA Proposes New Security Requirements to Protect Gov’t, Personal Data		Gophish Framework Used in Phishing Campaigns to Deploy Remote Access Trojans

Bumblebee and Latrodectus Malware Return with Sophisticated Phishing Strategies

Akira Ransomware Is Encrypting Victims Again Following Pure Extortion Fling

Malicious npm Packages Target Developers’ Ethereum Wallets with SSH Backdoor

Cybercriminals Exploiting Docker API Servers for SRBMiner Crypto Mining Attacks

Zendesk Helped Internet Archive Secure Account After Hacker Breached Email System

Schreck Financial Group (KS) Experiences Email-Related Data Breach

Exploit Released for New Windows Server “WinReg” NTLM Relay Attack

FortiGate Admins Report Active Exploitation 0-Day. Vendor Isn’t Talking.

Security Flaw in Styra’s OPA Exposes NTLM Hashes to Remote Attackers

CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack

VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability

The Struggle for Software Liability: Inside a ‘Very, Very, Very Hard Problem’

10/21/2024

~ The Cyber Beat ~ Leave a comment
Hezbollah Cyberattack Targets Haifa Hospitals After Beirut Hospital Bombing

Cyprus’ Critical Infrastructure Targeted by Coordinated Cyberattacks Linked to Pro-Palestine Groups

‘Unprecedented’ Interference Targets Moldova’s Elections

China’s Spamouflage Disinformation Campaign Testing Techniques on Sen. Marco Rubio

Chinese Nation-State Hackers APT41 Hit Gambling Sector for Financial Gain

U.S. Government Says Relying on Chinese Lithium Batteries Is Too Risky

Biden Administration Proposes New Rules Governing Data Transfers to Adversarial Nations

ICE’s $2 Million Contract With a Spyware Vendor Is Under White House Review

Sophos Buys Secureworks for $859 Mln to Beef up Cybersecurity Portfolio		Japanese Watchmaker Casio Warns of Delivery Delays After Ransomware Attack

Crypto Payment Services Firm Transak Says More Than 92,000 Affected by Data Breach

Spate of Ransomware Attacks on German-Speaking Schools Hits Another in Switzerland

Netskope Reports Possible Bumblebee Loader Resurgence

Over 6,000 WordPress Hacked to Install Plugins Pushing Infostealers

Researchers Discover Severe Security Flaws in Major E2EE Cloud Storage Providers

Half of Organizations Have Unmanaged Long-Lived Cloud Credentials

The Billionaire Behind Trump’s ‘Unhackable’ Phone Is on a Mission to Fight Tesla’s FSD

Australia’s Privacy Watchdog Publishes Guidance on Commercial AI Products

10/18-20/2024

~ The Cyber Beat ~ Leave a comment
ESET Partner Breached to Send Data Wipers to Israeli Orgs

North Korean IT Workers in Western Firms Now Demanding Ransom for Stolen Data

The Disinformation Warning Coming From the Edge of Europe

U.S. Cybersecurity Chief Says Election Systems Have ‘Never Been More Secure’

What the U.S. Army’s 1959 ‘Soldier of Tomorrow’ Got Right About the Future of Warfare

Google Scholar Has a ‘Verified Email’ for Sir Isaac Newton

Microsoft Creates Fake Azure Tenants to Pull Phishers Into Honeypots

The Government Is Getting Fed up With Ransomware Payments Fueling Endless Cycle of Cyberattacks

Krebs: Brazil Arrests ‘USDoD,’ Hacker in FBI Infragard Breach

Tech CEO Charged With Fraud Over Security, Reliability Claims

After Rejecting Google Takeover, Cyber Firm Wiz Says It Will IPO ‘When the Stars Align’

Instagram Rolls Out New Sextortion Protection Measures

Europe Launches ‘Gait Recognition’ Pilot Program to Monitor Border Crossings		Tech Giant Nidec Confirms Data Breach Following Ransomware Attack

Cisco Takes DevHub Portal Offline After Hacker Publishes Stolen Data

Crypto Platform Radiant Capital Says $50 Million in Digital Coins Stolen Following Account Compromises

The Internet Archive Hackers Still Have Access to Its Internal Emailing Tools

Boston Children’s Health Physicians Confirms September Data Breach

Crypt Ghouls Targets Russian Firms with LockBit 3.0 and Babuk Ransomware Attacks

Hackers Exploit Roundcube Webmail XSS Vulnerability to Steal Login Credentials

CISA Confirms Veeam Vulnerability Is Being Used in Ransomware Attacks

Intel, AMD CPUs on Linux Impacted by Newly Disclosed Spectre Bypass

macOS Vulnerability Could Expose User Data, Microsoft Warns

Jetpack Fixes 8-Year-Old Flaw Affecting Millions of WordPress Sites

Open Source LLM Tool Primed to Sniff out Python Zero-Days

CISOs: Throwing Cash at Tools Isn’t Helping Detect Breaches

10/17/2024

~ The Cyber Beat ~ Leave a comment
Hamas Leader Yahya Sinwar Killed in Gaza, Israeli Military Says

Intel China Responds to Accusations of Security Issues From Chinese Cyber Association

Undercover North Korean IT Workers Now Steal Data, Extort Employers

Two-thirds of Attributable Malware Linked to Nation States

GPS Jamming Is Screwing With Norwegian Planes

This Prompt Can Make an AI Chatbot Identify and Extract Personal Details From Your Chats

Activision Says It’s Fixed an Anti-cheat Hack in Modern Warfare III and Call of Duty: Warzone

Uncle Sam Puts $10M Bounty on Russian Troll Farm Rybar

More Than 5,000 Arrested, Thousands of Websites Disrupted in Crackdown on Illegal Gambling During Euro Tournament

FBI Arrests Alabama Man Suspected of Hacking SEC’s X Account

Krebs: Sudanese Brothers Arrested in ‘AnonSudan’ Takedown

Ukraine Tracks Emailed Bomb Threats to Russia-Linked Group

A Tough New EU Cyber Law Is off to a Messy Start, With Many Countries Failing to Adopt the Rules

Kroger’s Facial Recognition Plans Draw Increasing Concern From Lawmakers		Japan’s Ruling Political Party Hit by Cyberattack From Alleged Pro-Russian Hackers

Independent Russian News Site Rides Out a Week of DDoS Incidents

Microsoft Warns It Lost Some Customer’s Security Logs for a Month

Troubled U.S. Insurance Giant Globe Life Hit by Extortion After Data Leak

Casio Says ‘No Prospect of Recovery Yet’ After Ransomware Attack

Internet Archive Slowly Revives After DDoS Barrage

BianLian Ransomware Claims Attack on Boston Children’s Health Physicians

Georgetown University Says Group of Students Accessed Sensitive, Academic Information

Russian RomCom Attacks Target Ukrainian Government with New SingleCamper RAT Variant

Fake Google Meet Conference Errors Push Infostealing Malware

Cicada3301 Ransomware Targets Critical Sectors in US and UK

RansomHub Overtakes LockBit as Most Prolific Ransomware Group

WeChat Devs Introduced Security Flaws When They Modded TLS, Say Researchers

CISA Seeks Feedback on Upcoming Product Security Flaws Guidance

What Cybersecurity Leaders Can Learn From the Game of Golf

10/16/2024

~ The Cyber Beat ~ Leave a comment
China’s New Focus in U.S. Elections Interference Is Not Harris-Trump Presidential Race

Chinese Cyber Association Calls for Review of Intel Products Sold in China

China Says Unidentified Foreign Company Conducted Illegal Mapping Services

Firm Hacked After Accidentally Hiring North Korean Cyber Criminal

Iranian Hackers Act as Brokers Selling Critical Infrastructure Access

Mystery Drones Swarmed a U.S. Military Base for 17 Days. The Pentagon Is Stumped.

Hacker Charged With Seeking to Kill Using Cyberattacks on Hospitals

USDoD Hacker Behind National Public Data Breach Arrested in Brazil

Russia’s Case Against REvil Hackers Proceeds as Government Recommends 6.5-Year Sentence

For Some Companies, the Real Cost of a Cyberattack Is Telling Everyone About It

Financial Firms Need to Focus on Cyber Risks Posed by AI, New York Regulator Says

EU AI Act Checker Reveals Big Tech’s Compliance Pitfalls

Ethical Hackers Embrace AI Tools Amid Rising Cyber Threats

UK Government Launches AI Safety Scheme to Tackle Deepfakes

Experts Play Down Significance of Chinese Quantum “Hack”

BlackBerry Exploring Options for Cylance Business		More Than Two Dozen Countries Have Used Internet Outages to Sway Elections

Volkswagen Monitoring Data Dump Threat From 8Base Ransomware Crew

Billboards Reportedly Hacked, Displayed Antisemitic Messages in Chicago Suburb

Texas Tech Health Network Cyber Attack Disrupts Patient Care in El Paso

Hackers Target Ukraine’s Potential Conscripts With MeduzaStealer Malware

North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware

Sidewinder Casts Wide Geographic Net in Latest Attack Spree

Astaroth Banking Malware Resurfaces in Brazil via Spear-Phishing Attack

CISA Warns of Active Exploitation in SolarWinds Help Desk Software Vulnerability

Critical Default Credential Bug in Kubernetes Image Builder Allows SSH Root Access

GitHub Patches Critical Flaw in Enterprise Server Allowing Unauthorized Instance Access

Google: 70% of Exploited Flaws Disclosed in 2023 Were Zero-Days

CISA Urges Improvements in U.S. Software Supply Chain Transparency

FIDO Alliance Drafts New Protocol to Simplify Passkey Transfers Across Different Platforms

Amazon Says 175 Million Customers Now Use Passkeys to Log In

10/15/2024

~ The Cyber Beat ~ Leave a comment
Microsoft: Nation-States Team Up with Cybercriminals for Attacks

China Accuses U.S. of Fabricating Volt Typhoon to Hide Its Own Hacking Campaigns

British Intelligence Services to Protect All UK Schools From Ransomware Attacks

Nearly 400 U.S. Healthcare Institutions Hit with Ransomware Over Last Year, Microsoft Says

Password Manager Makers Want to Let You Securely Transfer Passkeys

Millions of People Are Using Abusive AI ‘Nudify’ Bots on Telegram

This AI Tool Helped Convict People of Murder. Then Someone Took a Closer Look

AI Amplifies Systemic Risk to Financial Sector, Says India’s Reserve Bank Boss

Gmail Users, Beware of New AI Scam That Looks Very Authentic

This Influencer Was Scammed Out of Thousands in Crypto — And Has a Tip to Help You Avoid Fraud

Hong Kong Police Bust Fraud Ring That Used Face-Swapping Tech for Romance Scams

Finland Seizes Servers of ‘Sipultie’ Dark Web Drugs Market

Darknet Activity Increases Ahead of 2024 Presidential Vote		Cisco Investigates Breach After Stolen Data for Sale on Hacking Forum

Calgary Public Library Forced to Limit Services After Cyberattack

Gryphon Healthcare (TX) Admits up to 400,000 People’s Personal Info Was Snatched

Varsity Brands (TX) Notifies 65,669 of May 2024 Data Breach

EDRSilencer Red Team Tool Used in Attacks to Bypass Security

Cerberus Android Banking Trojan Deployed in New Multi-Stage Malicious Campaign

New Malware Campaign Uses PureCrypter Loader to Deliver DarkVision RAT

New Linux Variant of FASTCash Malware Targets Payment Switches in ATM Heists

Eight Million Users Install 200+ Malicious Apps from Google Play

Researchers Uncover Hijack Loader Malware Using Stolen Code-Signing Certificates

WordPress Plugin Jetpack Patches Major Vulnerability Affecting 27 Million Sites

The Cybersecurity Burnout Crisis Is Reaching The Breaking Point

LLMs Are a New Type of Insider Adversary

10/14/2024

~ The Cyber Beat ~ Leave a comment
Microsoft: Schools Grapple With Thousands of Cyberattacks Weekly

Nation-State Attackers Exploiting Ivanti CSA Flaws for Network Infiltration

U.S. DoD Tightens Cybersecurity Standards for Defense Contractors

The War on Passwords Is One Step Closer to Being Over

Crypto-Apocalypse Soon? Chinese Researchers Find a Potential Quantum Attack on Classical Encryption

The Biggest Data Breaches in 2024: 1 Billion Stolen Records and Rising

ConfusedPilot Attack Can Manipulate RAG-Based AI Systems

Jetpack Fixes Critical Information Disclosure Flaw Existing Since 2016

Intesa Under Investigation After Former Employee Spied on Account Data

The Internet Archive Is Back as a Read-Only Service After Cyberattacks

Pokemon Dev Game Freak Confirms Breach After Stolen Data Leaks Online

miCare Health Center (MT) Sends Data Breach Letters Following Compromised Email Accounts

Telekopye Scammers Target Booking.com and Airbnb Users

TrickMo Malware Steals Android PINs Using Fake Lock Screen

Recently-Patched Firefox Bug Exploited Against Tor Browser Users

10/11-13/2024

~ The Cyber Beat ~ Leave a comment
Russian Court Websites Down After Breach Claimed by Pro-Ukraine Hackers

U.S. Lawmakers Seek Answers From Telecoms on Chinese Hacking Report

Philippines Calls for Urgency From China, ASEAN in Negotiating South China Sea Code

Trump Campaign Turns to Secure Hardware After Hacking Incident

Group With Close Ties to Trump Transition Says It Was Targeted in Cyber Attack

Hackers Took Over Robovacs to Chase Pets and Yell Slurs

The FBI Made a Crypto Coin Just to Catch Fraudsters

‘Email Scam’ Was Training Exercise, Says Regulator

What Internet Data Brokers Have On You — And How You Can Start to Get It Back

How to Stop Your Data From Being Used to Train AI

OpenAI Confirms Threat Actors Use ChatGPT to Write Malware

U.S. Border Agency Under Fire for App’s Handling of Personal Data

National Public Data Files for Bankruptcy, Citing Fallout From Cyberattack

Italy’s Intesa Sanpaolo Apologises for Security Breach Involving PM Meloni

Cyberattack Targets Healthcare Nonprofit Overseeing 13 Colorado Facilities

Huge Game Freak Hack Leaks Next Pokémon Game

The Internet Archive Is Still Down but Will Return in ‘Days, Not Weeks’

Casio Confirms Customer Data Stolen in a Ransomware Attack

Omni Family Health (CA) Breach Affects Personal Info of Current and Former Patients

OilRig Exploits Windows Kernel Flaw in Espionage Campaign Targeting UAE and Gulf

INC Ransomware Rebrands to Lynx – Same Code, New Name, Still up to No Good

GitHub, Telegram Bots, and ASCII QR Codes Abused in New Wave of Phishing Attacks

CISA: Hackers Abuse F5 BIG-IP Cookies to Map Internal Servers

Google Warns uBlock Origin and Other Extensions May Be Disabled Soon

Microsoft Deprecates PPTP and L2TP VPN Protocols in Windows Server

10/10/2024

~ The Cyber Beat ~ Leave a comment
U.S., UK Warn of Russian APT29 Hackers Targeting Zimbra, TeamCity Servers

NSA Cyber Chief: Espionage Is Now Russia’s Focus for Cyberattacks on Ukraine

Ukraine Arrests Rogue VPN Operator Providing Access to Runet

Russian Cyber Firm Dr.Web Denies Data Leak by Pro-Ukraine Hackers

‘Q Day’ Is Coming. It’s Time to Worry About Quantum Security.

Meet the Team Paid to Break Into Top-Secret Bases

OpenAI Blocks 20 Global Malicious Campaigns Using AI for Cybercrime and Disinformation

Former RAC Employees Get Suspended Sentence for Data Theft

New Law in Australia Will Require Mandatory Reporting of Ransomware Payments

Over 10m Conversations Exposed in AI Call Center Hack

Fore-Get About Privacy, Golf Tech Biz Trackman Leaves 32M Data Records on the Fairway

Crooks Stole Personal Info of 77K Fidelity Investments Customers

Shoe Show (NC) Data Breach Affects an Estimated 12,856 Individuals

Underground Ransomware Claims Attack on Casio, Leaks Stolen Data

Cybercriminals Use Unicode to Hide Mongolian Skimmer in E-Commerce Platforms

Akira and Fog Ransomware Now Exploit Critical Veeam RCE Flaw

Researchers Uncover Major Security Vulnerabilities in Industrial MMS Protocol Libraries

GitLab Warns of Critical Arbitrary Branch Pipeline Execution Flaw

10/9/2024

~ The Cyber Beat ~ Leave a comment
National Cyber Director Warns of Ransomware, Chinese Infrastructure Attacks and Cyber Supply Chain Concerns

FTC, CISA Warn of Hurricane-Related Scams as Milton Nears Florida

Recent Dr.Web Cyberattack Claimed by Pro-Ukrainian Hacktivists

Russia and Turkey Ban Discord Messaging App

Former Uber Security Chief Appeals Conviction in ‘Bug-Bounty’ Case

Krebs: Lamborghini Carjackers Lured by $243M Cyberheist

69,000 Bitcoins Are Headed for the U.S. Treasury

Mexico Faces Over Half of Latin American Cybercrimes Due Largely to U.S. Ties

Australia Introduces First Standalone Cybersecurity Law

New EU ‘Appeals Centre Europe’ to Centralize Complaints Against Facebook, TikTok, YouTube

Apple’s iPhone Mirroring Flaw Exposes Employee Privacy Risks

Smart TVs Are Spying on Everyone

Marriott Settles for a Piddly $52M After Series of Breaches Affecting Millions

Dutch Police Arrest Admin of ‘Bohemia/Cannabia’ Dark Web Market

Ukraine Sentences Two Hackers From Russia-Linked Armageddon Group

The Internet Archive Is Under Attack, With a Breach Revealing Information for 31 Million Accounts

California Superior Court Claimed to Be Attacked by Meow Ransomware

Crypto-Stealing Malware Campaign Infects 28,000 People

New BeaverTail Malware Targets Job Seekers via Fake Recruiters

N. Korean Hackers Use Fake Interviews to Infect Developers with Cross-Platform Malware

New Generation of Malicious QR Codes Uncovered by Researchers

Hackers Hide Remcos RAT in GitHub Repository Comments

Siemens Device PIN Susceptible to Remote Brute-Force in Older Model

Mozilla Fixes Firefox Zero-Day Actively Exploited in Attacks

CISA Says Critical Fortinet RCE Flaw Now Exploited in Attacks

Palo Alto Networks Warns of Firewall Hijack Bugs With Public Exploit

Krebs: Patch Tuesday, October 2024 Edition

Google Joins Forces with GASA and DNS RF to Tackle Online Scams at Scale

Cloud, AI Talent Gaps Plague Cybersecurity Teams

10/8/2024

~ The Cyber Beat ~ Leave a comment
U.S. Warns of Foreign Interference in Congressional Races Ahead of Election

…U.S. Expecting Foreign Actors to Question Validity of Election

EU Condemns Russia After Detecting ‘Increasing Number’ of Hybrid Activities

Ukraine’s Defense Ministry Launches Military CERT to Counter Russian Cyberattacks

31 New Ransomware Groups Join the Ecosystem in 12 Months

New Mamba 2FA Bypass Service Targets Microsoft 365 Accounts

What Google’s U-Turn on Third-Party Cookies Means for Chrome Privacy

Cyber Providers See Strong Demand, but Few Feel Confident Enough to List

Could You Switch Careers Into Cyber-Security?

The Perils of Ignoring Cybersecurity Basics

Cyberattack Group ‘Awaken Likho’ Targets Russian Government with Advanced Tools

Home Security Firm ADT Inc Reports Unauthorized Activity on Its Network

MoneyGram Confirms Hackers Stole Customer Data in Cyberattack

Casio Reports IT Systems Failure After Weekend Network Breach

Vermilion Parish Schools (LA) Investigating Cyber Attack

Accounting Firm Dohman, Akerlund & Eddy (NE) Files Notice of Recent Data Breach

Gamers Tricked Into Downloading Lua-Based Malware via Fake Cheating Script Engines

New Scanner Finds Linux, UNIX Servers Exposed to CUPS RCE Attacks

Zero-Day Alert: Three Critical Ivanti CSA Vulnerabilities Actively Exploited

Microsoft October 2024 Patch Tuesday Fixes 5 Zero-Days, 118 Flaws

10/7/2024

~ The Cyber Beat ~ Leave a comment
Advanced Threat Group GoldenJackal Exploits Air-Gapped Systems

Vulnerable APIs and Bot Attacks Costing Businesses Up to $186 Billion Annually

Board-CISO Mismatch on Cyber Responsibility, NCSC Research Finds

Get Safe Online Launches New Scam Detector

Ukrainian Pleads Guilty to Operating Raccoon Stealer Malware

Telegram App Hosts ‘Underground Markets’ for Southeast Asian Crime Gangs, UN Says

Cops Love Facial Recognition, and Withholding Info on Its Use From the Courts

EU Court Limits Meta’s Use of Personal Facebook Data for Targeted Ads

UN Cybercrime Treaty Lead Negotiator: U.S. Will Suffer if It Doesn’t Vote Yes

Hacker Attack Disrupts Russian State Media on Putin’s Birthday

American Water Shuts Down Online Services After Cyberattack

Universal Music Group Admits Data Breach

Western & Southern Life Files Notice of Data Breach

New Gorilla Botnet Launches Over 300,000 DDoS Attacks Across 100 Countries

Recently Spotted Trinity Ransomware Spurs Federal Warning to Healthcare Industry

Google Blocks Unsafe Android App Sideloading in India for Improved Fraud Protection

Critical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications

Qualcomm Patches High-Severity Zero-Day Exploited in Attacks

Cybersecurity Is Serious — But It Doesn’t Have to Be Boring

10/4-6/2024

~ The Cyber Beat ~ Leave a comment
U.S. Wiretap Systems Targeted in China-Linked Hack

Hospitals at Risk for Cyber Attacks

Hotels and Travel Firms Battle AI Phone Scams

Tech Platforms Urged to Tackle Hamas’ and Hezbollah’s Online Propaganda

This Teenage Hacker Became a Legend Attacking Companies. Then His Rivals Attacked Him.

Ryanair Faces GDPR Turbulence Over Customer ID Checks

Harvard Duo Hacks Meta Ray-Bans to Dox Strangers on Sight in Seconds

How Confidence Between Teams Impacts Cyber Incident Outcomes

Google Removes Kaspersky’s Antivirus Software From Play Store

Russia Arrests U.S.-Sanctioned Cryptex Founder, 95 Other Linked Suspects

Indiana Man Pleads Guilty to Stealing $37 Million in Crypto From 571 Victims

White House Official Says Insurance Companies Must Stop Funding Ransomware Payments

Criminals Are Testing Their Ransomware Campaigns in Africa

Lego’s Website Was Hacked to Promote a Crypto Scam

About a Quarter Million Comcast Subscribers Had Their Data Stolen From Debt Collector

…Comcast and Truist Bank Customers Caught up in FBCS Data Breach

Ward Transport Sends Data Breach Letters Following “Data Security Incident”

Outlast Game Development Delayed After Red Barrels Cyberattack

Highline Public Schools Confirms Ransomware Behind Shutdown

MoneyGram: No Evidence Ransomware Is Behind Recent Cyberattack

New MedusaLocker Ransomware Variant Deployed by Threat Actor

Recently Patched CUPS Flaw Can be Used to Amplify DDoS Attacks

Apple Releases Critical iOS and iPadOS Updates to Fix VoiceOver Password Vulnerability

A New Android Feature Locks Your Screen if Your Phone Is Stolen

Google Is Testing Verified Checkmarks in Search

Google Pay Alarms Users With Accidental ‘New Card’ Added Emails

10/3/2024

~ The Cyber Beat ~ Leave a comment
Microsoft and U.S. Government Disrupt Russian Star Blizzard Operations

North Korean Hackers Using New VeilShell Backdoor in Stealthy Cyber Attacks

TikTok More Dangerous to Ukraine Than Telegram for Propaganda, Say Local Disinformation Experts

Unable to Penetrate Systems, Hackers Spread Lies About Vulnerabilities

Crypto-Doubling Scams Surge Following Presidential Debate

License Plate Readers Are Creating a U.S.-Wide Database of More Than Just Cars

What Is the Market Impact of the SEC’s Cyber Disclosure Rules? Not Much.

Cybersecurity Spending on the Rise, But Security Leaders Still Feel Vulnerable

Average North American CISO Pay Now $565K, Mainly Thanks to One Weird Trick

Brits Hate How Big Tech Handles Their Data, but Can’t Be Bothered to Do Much About It

Fraudsters Imprisoned for Scamming Apple Out of 6,000 iPhones

23andMe is On the Brink. What Happens to All Its DNA Data?

Dutch Police: ‘State Actor’ Likely Behind Recent Data Breach

Detroit-Area Government Services Impacted by Cyberattack

Find Great People (SC) Data Breach Affects Personal Information of 12,205 Individuals

New Perfctl Malware Targets Linux Servers for Cryptocurrency Mining and Proxyjacking

Cloudflare Blocks Largest Recorded DDoS Attack Peaking at 3.8Tbps

Krebs: A Single Cloud Compromise Can Feed an Army of AI Sex Bots

The Secret Weakness Execs Are Overlooking: Non-Human Identities

Email Phishing Attacks Surge as Attackers Bypass Security Controls

‘Pig Butchering’ Trading Apps Found on Google Play, App Store

Litespeed Cache Plugin Flaw Allows XSS Attack, Update Now

Google Adds New Pixel Security Features to Block 2G Exploits and Baseband Attacks

As Ransomware Attacks Surge, UK Privacy Regulator Investigating Fewer Incidents Than Ever

Northern Ireland Police Fined for Data Breach Exposing Secret Identities of Officers

10/2/2024

~ The Cyber Beat ~ Leave a comment
Cybersecurity Head Says There’s No Chance a Foreign Adversary Can Change U.S. Election Results, Not Even Russia

China-Linked CeranaKeeper Targeting Southeast Asia with Data Exfiltration

Lazarus: Andariel Hacking Group Shifts Focus to Financial Attacks on U.S. Organizations

How North Korea Infiltrated the Crypto Industry

UK’s Nuclear Waste Unit Sellafield Fined for Cybersecurity Failings

The Feds Still Can’t Get into Eric Adams’ Phone

FCC Is Offering $200 Million to Protect Schools and Libraries From Hackers

Pay Rises for Cyber Chiefs as Hacks, Regulatory Pressure Increase

Share of Women in UK Cyber Roles Now Just 17%

Meta Teams Up with Banks to Target Fraudsters

Telegram Has Disclosed Criminal Data to Authorities for Years, Durov Says

FIN7 Hackers Launch Deepfake Nude “Generator” Sites to Spread Malware

Fake Browser Updates Spread Updated WarmCookie Malware

International Police Dismantle Cybercrime Group in West Africa

TIAA Latest Big Firm to Report Data Breach and Hack

Empereon Constar Announces Data Breach Following Incident at Partner Company

Hackers Pose as British Postal Carrier to Deliver Prince Ransomware in Destructive Campaign

Fake Job Applications Deliver Dangerous More_eggs Malware to HR Professionals

PyPI Repository Found Hosting Fake Crypto Wallet Recovery Tools That Steal User Data

Fake Trading Apps Target Victims Globally via Apple App Store and Google Play

Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit

Critical Ivanti RCE Flaw With Public Exploit Now Used in Attacks

Researchers Warn of Ongoing Attacks Exploiting Critical Zimbra Postjournal Flaw

Alert: Over 700,000 DrayTek Routers Exposed to Hacking via 14 New Vulnerabilities

Experts Warn of DDoS Attacks Using Linux Printing Vulnerability

Two Simple Give-Me-Control Security Bugs Found in Optigo Network Switches Used in Critical Manufacturing

10/1/2024

~ The Cyber Beat ~ Leave a comment
Iran Fires at Least 180 Missiles Into Israel as Regionwide Conflict Grows

U.S. Accuses Iran of Hacking Former Ambassador to Israel and State Dept. Official

Notorious Evil Corp Hackers Targeted NATO Allies for Russian Intelligence

ICE Signs $2 Million Contract With Spyware Maker Paragon Solutions

Krebs: Crooked Cops, Stolen Laptops & the Ghost of UGNazi

Euro Cops Arrest 4 Including Suspected LockBit Dev Chilling on Holiday

NCA Unmasks Man It Suspects Is Both ‘Evil Corp Kingpin’ and LockBit Affiliate

British Hacker Charged in the U.S. For $3.75m Insider Trading Scheme

Cambodia Arrests Journalist Known for Exposing Cyber Scams and Human Trafficking

California Passes Car Data Privacy Law to Protect Domestic Abuse Survivors

Cybersecurity Firm Proofpoint Considers Pre-IPO Funding as It Plots a Return to Public Markets

Rackspace Monitoring Data Stolen in ScienceLogic Zero-Day Attack

Australian e-Tailer digiDirect Customers’ Info Allegedly Stolen and dDumped Online

Community Clinic of Maui Says 123,000 Affected by May Cyberattack

Global Wafers Subsidiary, MEMC, Confirms Recent Data Breach

Ransomware Attack Forces UMC Health System to Divert Some Patients

The Playstation Network Is Down in a Global Outage

Free Sniper Dz Phishing Tools Fuel 140,000+ Cyber Attacks Targeting User Credentials

AI-Powered Rhadamanthys Stealer Targets Crypto Wallets with Image Recognition

New Cryptojacking Attack Targets Docker API to Create Malicious Swarm Botnet

Arc Browser Launches Bug Bounty Program After Fixing RCE Bug

Microsoft Overhauls Security for Publishing Edge Extensions

9/30/2024

~ The Cyber Beat ~ Leave a comment
Watch Out for Hurricane Helene Donation Scams

UK and U.S. Warn of Growing Iranian Spear Phishing Threat

U.S. Sets New Rule That Could Spur AI Chip Shipments to the Middle East

U.S. State CISOs Struggling With Insufficient Cybersecurity Funding

…Systems Used by Courts and Governments Across the U.S. Riddled With Vulnerabilities

The Pig Butchering Invasion Has Begun

U.S. Reaches $31.5 Million Settlement With T-Mobile Over Data Breaches

Man Charged for Selling Forged License Keys for Network Switches

Remote ID Verification Tech Is Often Biased, Bungling, and No Good on Its Own

Media Giant AFP Hit by Cyberattack Impacting News Delivery Services

CF Medical Data Breach Stems from Incident at Financial Business and Consumer Solutions

Verizon Outage Impacts 100,000 Plus Users Across U.S.

Sloppy Entra ID Credentials Attract Hybrid Cloud Ransomware

Critical Flaws in Tank Gauge Systems Expose Gas Stations to Remote Attacks

Critical RCE Vulnerabilities Found in Common Unix Printing System

Microsoft Defender Adds Detection of Unsecure Wi-Fi Networks

JPCERT Shares Windows Event Log Tips to Detect Ransomware Attacks

Here’s What to Expect From the Counter Ransomware Initiative Meeting This Week

9/27-29/2024

~ The Cyber Beat ~ Leave a comment
As Hezbollah Threat Loomed, Israel Built up Its Spy Agencies

Pentagon Gives Thumbs-Down to Cyber Service Proposal in Defense Bills

Tesla’s Cybertruck Goes, Inevitably, to War

Governments Urge Improved Security and Resilience for Undersea Cables

Why It’s Time to Take Warnings About Using Public Wi-Fi, in Places Like Airports, Seriously

Watch: Can BBC Reporter’s AI Clone Fool His Colleagues?

How Pen and Paper Comes to the Rescue in an IT Crisis

The U.S. Government Wants to Cut out Some of Its Weirdest Password Rules

Irish Data Protection Commission Fines Meta $102 Million for Storing Passwords in Plain Text

UK National Hacked Public Companies for Stock Trading Intel, DOJ Says

All Dutch Police Officers’ Contact Details Stolen in Cyberattack

Richmond Community Schools (IN) Suffers Ransomware Attack

Ransomware Attack Continues at UMC Hospital in Lubbock (TX)

Amgen (CA) Announces Third-party Data Breach from Incident at Sirva Relocation

Microsoft Identifies Storm-0501 as Major Threat in Hybrid Cloud Ransomware Attacks

New HTML Smuggling Campaign Delivers DCRat Malware to Russian-Speaking Users

Progress Urges Admins to Patch Critical Whatsup Gold Bugs ASAP

Microsoft: Windows Recall Now Can Be Removed, Is More Secure

How Should CISOs Navigate the SEC Cybersecurity and Disclosure Rules?

Red Team Hacker on How She ‘Breaks Into Buildings and Pretends to Be the Bad Guy’

9/26/2024

~ The Cyber Beat ~ Leave a comment
Hurricane Helene Prompts CISA Fraud Warning

Russia-Backed Gamaredon Still ‘Most Engaged’ Hacker Group in Ukraine

N. Korean Hackers Deploy New KLogEXE and FPSpy Malware in Targeted Attacks

Cloudflare Warns of India-Linked Hackers Targeting South and East Asian Entities

Watering Hole Attack on Kurdish Sites Distributing Malicious APKs and Spyware

Israeli Military Chief Says Troops Are Preparing for Ground War in Lebanon

…Amid Air Strikes and Rockets, an SMS From the Enemy

Fears of Weakness in Water Cybersecurity Grow After Kansas Attack

Iranians Indicted in Connection With Trump Campaign Hack

Krebs: U.S. Indicts 2 Top Russian Hackers, Sanctions Cryptex

York Mayor Eric Adams Is Indicted After Years-Long Federal Corruption Investigation Into Bribery and Fraud

…Told FBI He Forgot His Phone’s Passcode

…Don’t Ever Hand Your Phone to the Cops

Over a Third of Employees Secretly Sharing Work Info with AI

NIST Scraps Passwords Complexity and Mandatory Changes in New Guidelines

Chicago Stops Using Controversial ShotSpotter Gunshot Detection System

Kuwait Health Ministry Restoring Systems After Cyberattack Takes Down Hospitals, Healthcare App

Data Breach at MC2 Data Leaves 100 Million at Risk of Fraud

58K Patients Have Health Info Possibly Exposed in Michigan Medicine Breach

Ross, Anglim, Angelini & Co. (NJ) Breach Compromises an Unknown Number of Social Security Numbers

Cybercriminals Hack UK Rail Network Wi-Fi

…Man Arrested After ‘Islamophobic’ Cyber Attack Hits London Stations Wi-Fi

MoneyGram Services Restored but Questions Remain About Cyber Incident

Richardson (TX) Working With FBI to Address Attempted Ransomware Attack

First Mobile Crypto Drainer ‘WalletConnect’ Found on Google Play

Malicious Ads Hide Infostealer in League of Legends ‘Download’

Automattic Blocks WP Engine’s Access to WordPress Resources

CUPS Flaws Enable Linux Remote Code Execution, but There’s a Catch

Millions of Kia Vehicles Could Be Hacked and Tracked Due to a Simple Website Bug

Patch Now: Critical Nvidia Bug Allows Container Escape, Complete Host Takeover

HPE Patches Three Critical Security Holes in Aruba Papi

Tails OS Merges With Tor Project for Better Privacy, Security