HAQ.NEWS

2024-02-14 : Daily : Gracie Folkins


Listen Later

I'm Gracie Folkins, today is February 14th, 2024, and you are listening to Hack News Daily.

First up, there's a new vulnerability that was used by hackers to sneak past Microsoft Defender SmartScreen. This vulnerability was exploited to distribute a harmful malware called DarkMe, targeting financial traders. But don't worry, this has been patched, and if you're using Trend Micro solutions, you're already protected against it.

For Bank of America customers, there's an important update. A third-party provider, Infosys McCamish Systems, was hacked, and personal information like names, Social Security numbers, and financial details were accessed. It's a good reminder to monitor your credit information regularly for any suspicious activity.

Canada's Trans-Northern Pipelines might be in trouble as the ALPHV/BlackCat ransomware group claims to have stolen critical data. Authorities are investigating, but it shows how critical infrastructure can be targeted by cybercriminals.

A huge data breach has affected roughly 2.4 million patients of Integris Health. Cyber attackers accessed sensitive information, which could lead to scams and identity theft. Always be vigilant about unexpected communications asking for personal information.

Microsoft's recent Patch Tuesday addressed 80 vulnerabilities, with some being critical and actively exploited. It's essential to keep your software updated to protect against these vulnerabilities.

Ivanti's VPN appliances have been found to have multiple critical vulnerabilities. This situation has led to cyberattacks and a directive to disconnect affected products, highlighting the importance of timely patching and security practices.

An interesting case of vulnerability was found in Ghost CMS, where a Stored XSS vulnerability could allow attackers to take over an instance. It's a reminder of the importance of web security and keeping systems updated.

Zoom users, make sure to update your software. Critical security issues, including a high-risk privilege escalation vulnerability, have been fixed in the latest versions.

For gamers, a security flaw allowed hackers to mint and steal $290 million in PLA tokens from PlayDapp's blockchain gaming platform. This incident led to a suspension of token trading and withdrawals as the company worked to mitigate the breach.

Lastly, let's touch on Bitcoin mining. The economics of Bitcoin mining are facing challenges due to the upcoming halving event, which might decrease miner revenue and increase energy costs. It's a situation that highlights the complexities of cryptocurrency mining and sustainability concerns.

That wraps up today's cyber news. Remember, staying informed and vigilant is the key to staying safe online. Come back tomorrow for more Hack News Daily for the latest updates. You can find links to all the cyber news, red team tradecraft tooling, and more at HACK.NEWS. Gracie Folkins out.

...more
View all episodesView all episodes
Download on the App Store

HAQ.NEWSBy Jared Folkins