Cyber Briefing

👉 What are the latest cybersecurity alerts, incidents, and news?

🚨 #CyberAlerts

EncryptHub Expands Operations with Phishing Attacks and EncryptRAT Malware

Source: KrakenLabs

Akira Ransomware Uses Unsecured Webcam to Bypass EDR and Launch Attack

Source: S-RM

Over 1000 WordPress Sites Compromised by Malicious JavaScript Code

Source: Himanshu Anand via c/side

Malicious Campaign Targets Japanese Organizations with Cobalt Strike Exploits

Source: Chetan Raghuprasad via Cisco Talos

Elastic Fixes Critical Kibana Flaw That Could Lead to Arbitrary Code Execution

Source: Elastic

💥 #CyberIncidents

Berkeley Research Group Hit by Cyberattack Amid $700 Million Loan Sale

Source: Bloomberg

Leading Israeli Medical Clinic Targeted by Cyberattack Affecting Emergency Systems

Source: The Jerusalem Post

Mission Texas Mayor Declares Disaster After Cyberattack on City Systems

Source: Brian R Svendsen ValleyCentral

Leeds United Fans Hit by Cyberattack Targeting Club’s Retail Website

Source: Leeds United

FlexCare LLC Reports Data Breach Exposing Consumer Information

Source: Office of the Vermont General Attorney

📢 #CyberNews

House Passes Bill Requiring Federal Contractors to Have Vulnerability Disclosure Policy

Source: US Congress

Financial Organizations Call for CISA to Revise CIRCIA Implementation Plan

Source: BPI

U.S. Secret Service Takes Down Russian Crypto Exchange Garantex

Source: Lorenzo Franceschi-Bicchierai TechCrunch

Microsoft Takes Down GitHub Repositories in Global Malvertising Attack

Source: Microsoft Threat Intelligence

Chinese AI Video Generators Spread Nonconsensual Pornography Across Platforms

Source: Emanuel Maiberg via 404Media

This Cyber Briefing is powered by https://911cyber.app 

Get help from cybersecurity first responders today!

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://911cyber.app/cyber-briefing

#cyberbriefing #informationsecurity #WordPress #Vulnerabilities #Israel #Iran #CISA  #Microsoft #GitHub #AI

👉 What's going on in the cyber world today?

🚨 #CyberAlerts

Silk Typhoon Shifts Tactics to Target IT Supply Chains Using Remote Tools

Source: Microsoft Threat Intelligence

Critical GiveWP Plugin Flaw Exposes 10K WordPress Sites to Remote Code Execution

Source: Wordfence

BADBOX 2.0 Malware Compromises 50000 Android Devices Through Deceptive Apps

Source: HUMAN Security’s Satori Threat Intelligence

New Ransomware Group SecP0 Demands Ransom for Software Vulnerabilities

Source: Prodaft via X

New Desert Dexter Malware Campaign Targets Middle East and North Africa

Source: Klimentiy Galkin and Stanislav Pyzhov via The Positive Technologies Expert Security Center (PT ESC)

💥 #CyberIncidents

Flight Radar 24 Faces DDoS Cyberattack Impacting Global Flight Tracking Services

Source: Flight Radar 24 via Facebook

El Corte Inglés Faces Cyberattack Exposing Personal Data and Payment Information

Source: 20 Minutos

Superior Court of Justice of Brazil Faces DDoS Attack Disrupting Public Access to Data

Source: IT Forum

Cyberattack Disrupts Internal Network at Stadtwerke Schwerte Utility Company

Source: Stadtwerke Schwerte

Cyberattack Disrupts Irún City Hall Website and Other Spanish Local GovernmentsSource: el Diario

📢 #CyberNews

US DOJ to Appeal Court Ruling on Unconstitutional Cell Phone Tower Data Searches

Source: Seamus Hughes & Peter Beck via Court Watch

Rural Hospitals in US Need $70 Million for Cybersecurity Improvements

Source:  Kate Behncken via Microsoft

U.S. Charges 12 Chinese Nationals in Global Hacking Scheme Targeting Government

Source: U.S. Department of Justice (DoJ)

Google Launches AI Scam Detection for Android Users to Enhance Privacy and Security

Source: Google

Rite Aid Settles $6.8 Million Class Action Over 2024 Cyberattack Breach

Source: Rihem Akkouche via USA Herald

This Cyber Briefing is powered by https://911cyber.app 

Get help from cybersecurity first responders today!

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://911cyber.app/cyber-briefing

#cyberbriefing #informationsecurity #China #WordPress #Android #Ransomware #DDoS #ElCorteIngles #AI #RiteAid

👉 What's trending in cybersecurity today?

🚨 #CyberAlerts

Malicious Go Packages Found Targeting Linux and macOS with Loader Malware Threat

Source: Kirill Boychenko via Socket

Scammers Sent Fake Ransom Notes to US Companies Impersonating BianLian Group

Source: Grayson North, Stephen Brzozowski, and Hermes Bojaxhi via Guidepoint Security

Iran-Linked Hackers Target UAE Organizations with New Sosano Malware Campaign

Source: Joshua Miller, Kyle Cucci via Proofpoint

GrassCall Malware Campaign Targets Job Seekers and Steals Sensitive Information

Source: Broadcom

Broadcom Warns VMware Customers About Three Zero-Day Vulnerabilities

Source: Broadcom

💥 #CyberIncidents

NBA X Account Hacked to Promote Fake $NBA Coin Cryptocurrency Scam

Source: Colin Salao via Front Office Sports 

NASCAR Social Media Accounts Targeted in Latest Crypto Scam Attack

Source: Daniel Bates via The Spun

Whitman Hospital and Medical Clinics Faces Ongoing Disruption Due to Cyberattack

Source: Whitman Hospital & Medical Clinics

LRT Fends Off Cyberattack Targeting Lithuanian News Website Disrupting Operations

Source: LRT

NTT Communications Reports Data Breach Affecting Corporate Customers

Source: NTT Communications

📢 #CyberNews

US Lawmakers Reintroduce COPPA 2.0 Bill to Safeguard Children’s Online Privacy

Source: Senators Ed Markey and Bill Cassidy

FTC Freezes Assets in Crackdown on Nationwide Phantom Debt Collection Scam

Source: US Federal Trade Commission (FTC)

Court Orders Indictment of Former NSO Group Executives Over Spyware Abuse

Source: Iridia

Jamf Acquires Identity Automation for $215 Million to Enhance Security Solutions

Source: Jamf

iGaming Sector Faces Over €5bn Losses Annually Due to Fraud and AI Threats

Source: Gambling News

This Cyber Briefing is powered by https://911cyber.app 

Get help from cybersecurity first responders today!

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://911cyber.app/cyber-briefing

#cyberbriefing #informationsecurity #Linux #Apple #Scams #NBA #Nascar #AI #Spyware #Gaming

👉 What's the latest in the cyber world today?

🚨 #CyberAlerts

Researchers Find Surge in AES Encryption Use by Threat Actors to Evade Detection

Source: Lee Wei Yeong via Palo Alto Network’s Unit 42

Phishing Campaign Uses ClickFix to Deliver Havoc C2 via SharePoint and PowerShell

Source: Yurren Wan via Fortinet

Internet Service Providers IPs Targeted in Brute Force Attacks to Deploy Infostealers

Source: Splunk Threat Research Team

Hackers Exploit AWS Misconfigurations to Launch Phishing Campaigns

Source: Margaret Kelley via Palo Alto Network’s Unit 42

CISA Warns of Exploited Windows Win32k Flaw Allowing Kernel Mode Code Execution

Source: CISA

💥 #CyberIncidents

Missouri Department of Conservation Investigates Cyberattack on Its Data Servers

Source: Missouri Department of Conservation

Beeline Hit by Major Cyberattack Disrupting Internet Services for Millions in Russia

Source: Interfax

Ransomware Attack Disrupts Penn-Harris-Madison School in Indiana

Source: Raelynn Lee via WSBT

Qualinet Group Reports Data Theft Following Cyberattack During Early Winter Months

Source: Diane Tremblay via Le Journal de Quebec

Adval Tech Faces Cyberattack Impacting Operations and Production

Source: FuW

📢 #CyberNews

CISA Refutes Claims of Shifting Focus on Russian Cyber Threats to the United States

Source: CISA

UK' ICO Investigates TikTok Reddit and Imgur Over Children Data Use

Source: U.K.'s Information Commissioner's Office (ICO)

AWS Introduces Ocelot Quantum Chip to Improve Scalability and Reliability

Source: Amazon

Vodafone Trials Quantum Safe Technology to Protect Smartphone Users

Source: Vodafone

SolarWinds Acquires Squadcast to Enhance Incident Management

Source: Squadcast

This Cyber Briefing is powered by https://911cyber.app 

Get help from cybersecurity first responders today!

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://911cyber.app/cyber-briefing

#cyberbriefing #informationsecurity  #AWS #CISA #Windows #Quantum #TikTok #Reddit #Vodafone #SolarWinds

👉 What's happening in cybersecurity today?

🚨 #CyberAlerts

Phishing Campaign Delivers Lumma Stealer Malware via Fake CAPTCHA Images

Source: Jan Michael Alcantara via Netskope

Ransomware Gangs Exploit Paragon Partition Flaws to Gain System Privileges

Source: Carnegie Mellon University, Software Engineering Institute

Trigon Exploit Reveals Critical Flaw in Apple Kernel Bypassing Security Protections

Source: Alfie CG

Njrat Malware Exploits Microsoft Dev Tunnels for Covert C2 Communications

Source: Xavier Mertens via SANS Technology Institute

Google Ads and PayPal Checkout Exploited in Fraudulent Payment Scheme

Source: Jérôme Segura via Malwarebytes

💥 #CyberIncidents

Angel One Reports Data Breach Impacting Client Data Stored in AWS Account

Source: Reuters

Polish Space Agency Hit by Cyberattack Detected by Cybersecurity Services

Source: Reuters

Hacker Gains Access to Email Account of Swiss Cantonal Administration Treasurer

Source: Cantonal Administration of Appenzell Innerrhoden, Switzerland

Cyberattack Targets Bain-de-Bretagne with Russian Origin Suspected

Source: Romain Lecompte via Ouest-France

HomeTeamNS Reports Ransomware Attack on Servers Affecting Employee Data

Source: Channel News Asia

📢 #CyberNews

U.S. Authorities Recover $31 Million Stolen in 2021 Uranium Finance Hack

Source: TRM Labs

Meta Fires Around 20 Employees for Leaking Confidential Information

Source: Alex Heath via The Verge

California Orders Data Broker to Shut Down for Failing to Register

Source: California Privacy Protection Agency (CPPA)

Third-Party Cyberattacks Lead to Significant Financial Losses in 2024

Source: Resilience

Mass Exploitation Surge Drives Cyberattacks Targeting Legacy Systems

Source: GreyNoise

This Cyber Briefing is powered by https://911cyber.app 

Get help from cybersecurity first responders today!

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://911cyber.app/cyber-briefing

#cyberbriefing #informationsecurity

👉 What are the latest cybersecurity alerts, incidents, and news?

🚨 #CyberAlerts

New nRootTag Attack Exposes 1.5 Billion Apple Devices to Tracking Risks

Source: Junming Chen, Xiaoyue Ma, Lannan Luo, Qiang Zeng from George Mason University via GitHub

Lotus Blossom Hacker Group Uses Cloud Services for Espionage Campaigns

Source: Joey Chen via Cisco Talos

Vo1d Malware Botnet Grows to 1.6 Million Infected Devices Across 226 Countries

Source: XLab

Winos 4.0 Malware Targets Taiwanese Firms with Phishing Campaign

Source: Pei Han Liao via Fortinet

Exposed Access Management Systems Put Security at Risk in Multiple Countries

Source: Modat

💥 #CyberIncidents

Belgium Investigates Chinese Hack of Intelligence Service VSSE Email Servers

Source: Le Soir

Meta Error Leads to Flood of Violent and Graphic Content on Instagram Reels

Source: Dylan Butts via CNBC

DeepSeek Leak Reveals 12,000 Exposed API Keys and Passwords

Source: Joe Leon via Truffle Security 

Philippine Army Confirms Cyberattack and Leak of Data by Exodus Security

Source: Radyo Pilipinas on X

Oral Roberts University Reports Data Breach Exposing Personal Information

Source: Office of the Attorney General of Massachusetts

📢 #CyberNews

LockBit Gang Warns FBI Director Kash Patel in New Attack Strategy

Source: Davey Winder via Forbes

France Proposes Laws to Backdoor Encryption and Restrict VPN Use

Source: Tuta

Report Reveals 89% of Enterprise GenAI Usage Is Invisible to IT

Source: Layer

Average Fix Time for Software Vulnerabilities Increases by 47% in 5 Years

Source: Veracode

Archipelo Raises $12M to Secure AI Developer Coding and Prevent Vulnerabilities

Source: Mike Butcher via TechCrunch

This Cyber Briefing is powered by https://911cyber.app 

Get help from cybersecurity first responders today!

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://911cyber.app/cyber-briefing

#cyberbriefing #informationsecurity #Apple #Espionage #Phishing #Belgium #DeepSeek #AI #FBI #Meta

👉 What's going on in the cyber world today?

🚨 #CyberAlerts

PolarEdge Botnet Targets Cisco ASUS QNAP and Synology Devices for Cyber Attacks

Source: Jeremy Scion, Felix Aimé via Sekoia

GitLab Warns of High-Risk Cross-Site Scripting Vulnerabilities Exposing User Data

Source: GitLab

Anubis Ransomware Group Emerges With Multiple Data Extortion Models

Source: Kela

Microsoft Removes Popular VSCode Extensions Over Security Risks

Source: Amit Assaraf via ExtensionTotal on Medium

Hackers Exploit Cross-Site Scripting Flaw in Krpano Framework to Inject Spam Ads

Source: Oleg Zaytsev

💥 #CyberIncidents

Hackers Hijack Pump.fun Account to Promote Fake Tokens and Memecoins

Source: Cointelegraph

Cedar Falls Iowa Notifies 3500 Individuals of Data Breach Linked to BlackSuit

Source: Office of the Iowa Attorney General

Azamara Cruises Reports Unauthorized Access to Email Account

Source: Office of the Maine General Attorney

Café Zupas Reports Data Breach Exposing Personal Information of Customers

Source: Office of the Vermont General Attorney

St. Clair Healthcare Reports Data Breach Exposing Personal and Health Information

Source: St. Clair Orthopaedics & Sports Medicine

📢 #CyberNews

Arkansas Sues General Motors Over Deceptive Data Collection and Sales Practices

Source: About Law

Cellebrite Ends Software Sales to Serbia After Abuse of Technology Against Civil Society

Source: Cellebrite

OpenSSF Launches OSPS Baseline to Boost Open Source Security

Source: Open Source Security Foundation (OpenSSF) 

Hacker Arrested for 90 Data Breaches Across 25 Countries Targeting Sensitive Information

Source: Group-IB

Dreadnode Raises 14 Million to Advance Offensive AI Security with New Tools

Source: FinTech Global

This Cyber Briefing is powered by https://911cyber.app 

Get help from cybersecurity first responders today!

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://911cyber.app/cyber-briefing

#cyberbriefing #informationsecurity #Cisco #ASUS #QNAP #Microsoft #Crypto #Memecoins #AI

#GeneralMotors

===================

SEO

PolarEdge Botnet, GitLab, XXS Flaw, Anubis Ransomware, VSCode Extensions, Security Risks, Krpano, Pump.fun, Café Zupas, Arkansas, General Motors, OSPS Baseline

===================

PolarEdge Botnet, Cisco, ASUS, QNAP, Synology, GitLab, Cross-Site Scripting, Vulnerabilities, Anubis Ransomware, Data Extortion, Microsoft, VSCode Extensions, Security Risks, Krpano Framework, Spam Ads, Pump.fun, Fake Tokens, Memecoins, Cedar Falls, Iowa, BlackSuit, Azamara Cruises, Unauthorized Access, Email Account, Café Zupas, St. Clair Orthopaedics & Sports Medicine, Arkansas, General Motors, Deceptive Data Collection, Cellebrite, Spyware, Serbia, OpenSSF, OSPS Baseline, Open Source Security, Hacker Arrested, Data Breaches, Sensitive Information, Dreadnode, Offensive AI Security, Tools

============================

Youtube Link

===================

Separator’s links

https://911cyber.app/

https://cybermaterial.com/report

https://podcasts.apple.com/us/podcast/cyber-briefing/id1663966320

https://open.spotify.com/show/6ZkcwG0WHFM9aO5MrQ2qHj

https://cybermaterial.com

👉 What's trending in cybersecurity today?

🚨 #CyberAlerts

New Auto-Color Linux Backdoor Targets Universities and Governments in North America

Source: Alex Armstrong via Palo Alto Networks' Unit 42

New PicassoLoader Variant Targets Belarusian and Ukrainian Activists and Military

Source: Tom Hegel via SentinelOne

Large-Scale Malware Campaign Uses Vulnerable Truesight Driver to Deliver Gh0st RAT

Source: Check Point

Critical Cross-Site scripting Flaw Found in Essential Addons Plugin for WordPress

Source: Chazz Wolcott via Patchstack 

Rsync Flaws Expose Servers to Remote Code Execution and Data Theft

Source: Google via GitHub

💥 #CyberIncidents

DISA Global Solutions Data Breach Exposes Personal Info of 3.3 Million Individuals

Source: Office of the Maine General Attorney

Have I Been Pwned Reveals ALIEN TXTBASE Leak Exposing 23 Billion Credentials

Source: Have I Been Pwned

Orange Romania Cyberattack Exposes Sensitive Data Including Payment Details

Source: Berry Zwets via Techzine

Northern Caribbean University Hit by Cyberattack Disrupting Online Platforms

Source: Jamaica Observer

Siberia’s Largest Dairy Plant Disrupted by LockBit Ransomware Attack

Source: 19 Rus Info

📢 #CyberNews

Swedish Authorities Push for Backdoors in WhatsApp Signal Encryption

Source: SVT

UK Home Office Vulnerability Reporting Leaves Researchers at Risk of Prosecution

Source: UK Home 

NinjaOne Secures $500M Investment to Expand Endpoint Management and Acquisition

Source: Business Wire

Hackers Deploy New Exploit Code Within 48 Hours of Discovering Vulnerabilities

Source: SonicWall

Skybox Security Shuts Down and Sells Assets to Tufin After Raising $335 Million

Source: Meir Orbach via CTECH

This Cyber Briefing is powered by https://911cyber.app 

Get help from cybersecurity first responders today!

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://911cyber.app/cyber-briefing

#cyberbriefing #informationsecurity #Linux #Ukraine #WordPress #Orange #Sweden #WhatsApp #Signal #Backdoor

👉 What's the latest in the cyber world today?

🚨 #CyberAlerts

Critical Remote Code Execution Flaw Discovered in MITRE Caldera Framework

Source: MITRE Caldera via Medium

Researchers Discover KernelSnitch Side Channel Attack in Linux Kernel

Source: Lukas Maar, Jonas Juffinger, Thomas Steinbauer, Daniel Gruss, and Stefan Mangard, Graz University of Technology

ScreamedJungle Campaign Use Stolen Browser Fingerprints to Bypass Fraud Detection

Source: Dmitrii Yankelevich, Pavel Naumov, Dmitry Pisarev, Group-IB

Malicious ISO Files Bypass Outlook Filters Using Hyperlink Obfuscation

Source: Karol Mazurek via Afine

BIG SHARK Android RAT Leaked Creating Major Cybersecurity Threat for Global Users

Source: Cyber Underground Feed (@cyberfeeddigest) via X

💥 #CyberIncidents

Breach at Major IT Provider LANIT Impacts Russian Financial and Banking Services

Source: GosSOPKA 

Lithuanian Fintech Paysera Targeted by DDoS Attack Disrupting Services on Friday

Source: LRT

Cleveland Municipal Court Remains Closed Due to Cyber Incident

Source: Chris Beeble, Kaitor Kay via WKYC

Anne Arundel County Public Services Affected by Cyber Incident

Source: Anne Arundel County Government via X

Nuna Baby Essentials Reports Data Breach Involving Sensitive Consumer Information

Source: Office of the Maine General Attorney

📢 #CyberNews

EU Imposes Sanctions on North Korean Tied to Lazarus Group Over Ukraine War

Source: EUR-Lex

Australia Bans Kaspersky Software Over National Security Concerns

Source: Australian Secretary of the Department of Home Affairs

RAD Security Raises $14 Million to Expand AI-Driven Cloud Defense Platform

Source: FinSMEs

One Billion Fraudulent Calls Reported in Q4 2024 with Surge in Deepfake Incidents

Source: Hiya

Wireshark 4.4.4 Release Fixes DoS Vulnerability and Improves Network Analysis Tools

Source: Wireshark

This Cyber Briefing is powered by https://911cyber.app 

Get help from cybersecurity first responders today!

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://911cyber.app/cyber-briefing

#cyberbriefing #informationsecurity #MITRE #Linux #Microsoft #Outlook #DDoS #Deepfake #NorthKorea #AI

👉 What's happening in cybersecurity today?

🚨 #CyberAlerts

LockBit Attack Targets Atlassian Confluence in Coordinated Ransomware Operation

Source: DFIR Labs

Gamers Targeted in Counter-Strike 2 Streamjacking Scam Stealing Accounts

Source: Alina BÎZGĂ via Bitdefender

GhostSocks Malware Uses SOCKS5 Proxy for Evasion and Financial Exploitation

Source: Infrawatch

SpyLend Malware Masquerades as Loan App to Steal Data and Extort Users in India

Source: Cyfirma

Phishing Scam Targets ChatGPT Users with Fake Subscription Payment Requests

Source: Broadcom

💥 #CyberIncidents

Bybit Suffers $1.5 Billion Ethereum Heist Tied to Lazarus Group Cyberattack

Source: Bybit

Infini Crypto Fintech Loses $49 Million in Hack by Developer Using Tornado Cash

Source: Cyvers

Black Basta Ransomware Group Exposed in Massive Leak Revealing Operations

Source: Prodaft

Cyberattack Targets Paratus Namibia Compromising Internal Systems

Source: ITWeb Africa

Rainbow District School Board Cyberattack Exposes Sensitive Data

Source: Rainbow Schools

📢 #CyberNews

Apple Removes iCloud Advanced Data Protection in UK Over Government Demands

Source: Zoe Kleinman via  BBC 

Oxford Achieves Quantum Information Teleportation for Distant Processors

Source: Oxford University

Warby Parker Fined 1.5 Million for Failing to Protect Health Data in 2018 Attack

Source: Rihem Akkouche via USA Herald

OpenAI Bans Accounts Using ChatGPT to Develop AI Surveillance Tools

Source: OpenAI

Google Cloud Introduces Quantum Safe Digital Signatures in Cloud KMS

Source: Google

This Cyber Briefing is powered by https://911cyber.app 

Get help from cybersecurity first responders today!

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://911cyber.app/cyber-briefing

#cyberbriefing #informationsecurity #CS2 #India #ChatGPT #Android #Crypto #Ethereum