CyberBriefing *** 2023-03-16

👉 What's trending in cybersecurity today?

What's going on in the cyber world today?

🚨 #CyberAlerts

WaterISAC warns of potential disruption to SCADA due to mandatory Microsoft DCOM patch

Source: WaterISAC

CISA Warns of APT Actor Exploiting Telerik UI Vulnerability at Federal Agency

Source: CISA

Dero Cryptocurrency Draws Attention of Cryptojackers

Source: CrowdStrike

Mozilla releases security updates for Firefox browsers

Source: Mozilla

CISA adds Adobe ColdFusion vulnerability to Known Exploited Vulnerabilities Catalog

Source: CISA

NSA Provides Guidance on Zero Trust Framework for Improved Cybersecurity

Source: NSA

💥 #CyberIncidents

UK’s largest state boarding school hit by “sophisticated cyberattack”

Source: NCSC

Ring denies being victim of Alphv ransomware attack

Source: Resecurity

Tick cyberespionage group attacks East Asian DLP company

Source: ESET

Healthcare firm ILS hit by largest data breach this year, exposing 4.2M patients' data

Source: Office of the Maine AG

French Aerospace Giant Safran Group Leaks Sensitive Data for Over a Year

Source: Cybernews

📢 #CyberNews

SEC Proposes New Cybersecurity Rules for US Stock Market Companies

Source: SEC

Crypto Mixer 'ChipMixer' Seized by Law Enforcement: Largest Crypto Asset Seizure by BKA to Date

Source: BKA

MKS Instruments Hit with $200M Revenue Loss After Ransomware Attack

Source: SEC

NordVPN Releases Linux Client Source Code to Boost Transparency and Accountability

Source: GitHub

Read about all the alerts and incidents at: https://cybermaterial.com/cyber-briefing/

Have you been affected by any of these events?

👉Follow CyberMaterial

#cyberbriefing #ransomware #informationsecurity #Cryptocurrencies #LockBit #Reddit #GoAnywhere

👉 What's trending in cybersecurity today?

🚨 #CyberAlerts

Cybercriminals exploit Silicon Valley Bank collapse

Source: SANS

Microsoft Tracks Dev-1101's Open-Source AiTM Phishing Kit as Cybercriminals Ramp Up Campaigns

Source: Microsoft

CISA Adds Three New Vulnerabilities to Known Exploited Vulnerabilities Catalog

Source: CISA

CISA Releases Four New ICS Advisories on Critical Vulnerabilities

Source: CISA

Microsoft Releases Security Updates for Edge Browser

Source: Microsoft

FBI Warns of Rising 'Pig Butchering' Crypto Scams

Source: FBI

YoroTrooper: A New Cyber-Espionage Threat Targeting CIS Countries

Source: Cisco Talos

💥 #CyberIncidents

Housing Authority of LA hit by ransomware attack leaking sensitive data

Source: HACLA

Hawaii Death Registry System Hacked, Breach of Over 3,400 Death Records

Source: Hawai‘i Department of Health

Brussels Hospital Latest Victim of European Healthcare Cyberattacks

Source: ARS

LockBit Ransomware Claims to Have Stolen SpaceX Supplier Data

Source: ISMG

Reddit Outage: Worldwide Users Blocked from Accessing Social Network

Source: Reddit

Rubrik Confirms Zero-Day Attack on GoAnywhere Platform

Source: Rubrik

📢 #CyberNews

Thriving Darknet Markets Continue to Offer Cybercriminals a Haven Despite Takedowns

Source: Flashpoint

Florida Firm Fined $300K Over Child Data Breach

Source: US Department of Justice

#cyberbriefing #ransomware #informationsecurity #Cryptocurrencies #LockBit #Reddit #GoAnywhere

👉 What's the latest in the cyber world today?

🚨 #CyberAlerts

Critical Security Update: IBM Robotic Process Automation for Cloud Pak

Source: IBM

Dell security advisories for product vulnerabilities

Source: Dell

Experts Warn of Employee Data Leaks to ChatGPT AI Chatbot

Source: Cyber Heaven

Russian hackers shift tactics in Ukraine from disruption to espionage

Source: State Service of Special Communications and Information Protection of Ukraine

CISA Launches Ransomware Vulnerability Warning Pilot (RVWP)

Source: CISA

Ubuntu Urges Users to Update to Fix Security Flaws

Source: Ubuntu

💥 #CyberIncidents

Zoll Medical Data Breach: Over 1 Million Individuals' Personal Information Compromised

Source: Office of the Maine Attorney General

Malicious Cyber Operation Hijacks Thousands of East Asian Websites for Adult-Themed Content

Source: Wiz

Hackers Steal $200 Million from Euler Finance in Ongoing Attack

Source: Euler Finance

Hackers Threaten to Leak Data for Highly-Anticipated Game 'STALKER 2' in Ukrainian Company's Ransomware Attack

Source: STALKER

Gloucester museum still reeling from cyber attack one year on

Source: BBC

Source: https://cyprus-mail.com/2023/03/13/land-registry-website-to-be-fully-restored-next-week/

📢 #CyberNews

Microsoft Outlook to Get Authenticator Lite for MFA Adoption on iOS and Android

Source: Microsoft

Kali Linux 2023.1: The 10th Anniversary Release with 'Kali Purple' Distro for Defensive Security

Source: Kali Linux

FBI Reveals $10B in Cybercrime Losses for 2022: Investment Scams Skyrocket

Source: FBI

#cyberbriefing #ransomware #cyberattack #informationsecurity #FBI #Ubuntu #ChatGPT #Russia #CISA #IBM #Dell #KaliLinux #Microsoft #STALKER

👉 What's happening in cybersecurity today?

🚨 #CyberAlerts

GoBruteforcer: The New Botnet Malware Targeting Web Servers with Weak Passwords

Source : Palo Alto

North Korean Hackers Target Security Researchers and Media Outlets with Fake Job Offers and New Malware Families

Source : Mandiant

CISA Adds Two Critical Vulnerabilities to its Catalog of Known Exploits

CISA

OpenSea Fixes Cross-Site Search Vulnerability, Preventing Deanonymization of Users and Protecting Against Exploitation of Largest NFT Marketplace

Source: Imperva Red Team

FBI warns of fake reward scams in 'play-to-earn' mobile games stealing millions in cryptocurrency

Source: FBI’s IC3

Dark Pink APT Targets Military and Government in Southeast Asia with KamiKakaBot Malware

Source :  EclecticIQ

Beware: Malware Abuses Google Ads for Delivery

Source: eSentire

💥 #CyberIncidents

Essendant Suffers Multi-day System Outage

Essendant Faces Multi-Day System Outage, Cancellations and Shipping Delays

Source : Essendant

Health Platform Cerebral Data Breach

Cerebral Telehealth Platform Hit by Data Breach Exposing Sensitive Medical Information

Source: Cerebral

Estonia Elections Survive Cyberattacks

Estonia's Internet Voting System Survives Cyberattacks During Parliamentary Elections

Source : The Record

Prometei Botnet: 10k+ Infected Systems

Prometei Botnet Malware Infects Over 10,000 Systems Worldwide for Cryptocurrency Mining

Source: Talos Intelligence

📢 #CyberNews

Brazilian Agency Seizes Flipper Zero Hacking Tool Due to Alleged Criminal Use

Source : EFF

ECB to Conduct Cyber Stress Tests for European Banks as Cyber attacks Rise

Source : European Central Bank

Blackbaud Pays $3M Fine for Misleading Investors About Ransomware Attack

Source : Blackbaud

Silicon Valley Bank Depositors Get Lifeline to Avert Cybersecurity Startups' Collapse

Source :  Federal Reserve

 CyberBriefing *** 2023-03-10

What are the latest cybersecurity advisories, alerts, incidents and news?

Cyber Alerts

PlugX Malware Exploits Security Vulnerabilities in Remote Desktop Programs

Source : Ahnlab

China-Linked Hackers Deploy Custom Malware on SonicWall SMA Appliance to Steal User Credentials

Source : Mandiant

IceFire Ransomware Expands to Target Linux Enterprise Networks Across Multiple Sectors

Source : SentinelLabs

Xenomorph 3rd Gen: The New and Dangerous Android Banking Trojan Targeting 400+ Financial Institutions Worldwide

Source : ThreatFabric

CISA Releases Five Industrial Control Systems Advisories on Security Issues and Vulnerabilities

Source: CISA

Bitwarden's Credentials Auto-fill Feature at Risk of Fraud

Source : Flashpoint

Iranian State-Sponsored Hackers Impersonate US Think Tank in Social Engineering Campaigns

Source : SecureWorks

Cyber Incidents

AT&T Notifies 9 Million Customers of Data Breach, Exposing Some Account Information

Source : AT&T

Swiss Cybersecurity Firm Acronis Acknowledges Customer Data Breach

Source : Acronis

Akamai Mitigates Largest DDoS Attack Ever at 900.1 Gbps and 158.2 Million PPS

Source : Akamai

BianLian Ransomware Claims to Have Infiltrated Waynesboro City Government Network

Source : Brett Callow

Parques Reunidos, a Global Amusement Park Operator, Hit by Ransomware Attack

Source: Parques Reunidos

 Cyber News

International Law Enforcement Operation Seizes NetWire Trojan and Arrests Administrator

Source : US Justice Department

Biden's Budget Proposal Includes Increased Funding for Federal Cybersecurity

Source : US Office of Management and Budget

SANS Institute and Google launch Cloud Diversity Academy to boost cybersecurity training for underrepresented groups

Source : SANS INSTITUTE

👉   What's trending in cybersecurity today?

🚨 #CyberAlerts

👾 Ongoing Exploitation of Critical VMware Flaw: Wallarm Detect Warns of Catastrophic Risks

📑 CISA adds three actively exploited vulnerabilities to its catalog

📲 Google patches 50+ Android vulnerabilities in March 2023 updates

☠️ AresLoader: A New Private Loader for Covertly Downloading Harmful Payloads

🪲 New Advanced Information Stealer "SYS01" Targeting Facebook Business Accounts

🇨🇳 Sharp Panda targets Southeast Asian Governments with Soul Malware Campaigns

👽 Emotet Malware Returns with Massive Inflated Word Documents in New Spam Campaign

💥 #CyberIncidents

🏥Hackers Steal Corporate Data from Brazilian Engineering Giant Andrade Gutierrez

🏫 Hamburg University of Applied Sciences Hit by Ransomware Attack

💻 Acer discloses data breach after threat actor claims hack

💰Ethical hacker drains $1.59M from DeFi lending platform, then returns the stolen funds

🇰🇷 South Korean financial entity hacked by Lazarus Group via zero-day exploit

📢 #CyberNews

📂 Microsoft Excel Blocks Untrusted XLL Add-ins to Combat Malware

🛡️ TSA mandates improved cybersecurity resilience for US airports and aircraft operators

📨 Microsoft releases fix for Outlook sign-in errors on iOS and Android devices

#cyberbriefing #ransomware #cyberattack #informationsecurity #Acer #databreach #Emotet #android #cybersecurity #malware #google

Subscribe and Comment.

Copyright © 2023 CyberMaterial. All Rights Reserved.

Follow CyberMaterial on:

LinkedIn, Twitter, Reddit, Instagram, Facebook, Youtube, and Medium.

Welcome to Cyber Briefing, a short newsletter that informs you about the latest cybersecurity advisories, alerts, incidents and news every weekday.

First time seeing this? Please subscribe.

👉 What's the latest in the cyber world today?

🚨 #CyberAlerts

🇪🇺 Phishing Campaign Targets Eastern European Organizations with Remcos RAT Malware

🚁 16 Security Vulnerabilities Found in DJI Drones, All Models Affected

💰 Beware: Financial Scammers Using Fake ChatGPT to Target Users in Multiple Countries

🌏 Twitter Experiences Global Outage Affecting Logins, Links, and Images

🇵🇰 Transparent Tribe Linked to Ongoing Cyber Espionage Campaign Targeting Android Users in India and Pakistan

🎥  Hiatus Malware Targets Business-Grade Routers to Covertly Spy on Victims

Subscribe and Comment.

Copyright © 2023 CyberMaterial. All Rights Reserved.

Follow CyberMaterial on:

LinkedIn, Twitter, Reddit, Instagram, Facebook, Youtube, and Medium.

👉 What's happening in cybersecurity today?

🚨 #CyberAlerts 

New ATM Malware Targets Mexican Banks

Critical GitLab Security Fixes: Upgrade Now

Vulnerability found in Gitpod CDE

💥 #CyberIncidents 

📢 #CyberNews

Welcome to Cyber Briefing, a short newsletter that informs you about the latest cybersecurity advisories, alerts, incidents and news every weekday.

First time seeing this? Please subscribe.

🚨 Cyber Alerts

💥 Cyber Incidents

📢 Cyber News

Subscribe and Comment.

Copyright © 2023 CyberMaterial. All Rights Reserved.

Follow CyberMaterial on:

LinkedIn, Twitter, Reddit, Instagram, Facebook, Youtube, and Medium.

Welcome to Cyber Briefing, a short newsletter that informs you about the latest cybersecurity advisories, alerts, incidents and news every weekday.

First time seeing this? Please subscribe.

2. BlackLotus: The First Malware to Bypass Secure Boot

3. APT27 Iron Tiger Expands Malware Toolkit to Target Linux Devices

Subscribe and Comment.

Copyright © 2023 CyberMaterial. All Rights Reserved.

Follow CyberMaterial on:

LinkedIn, Twitter, Reddit, Instagram, Facebook, Youtube, and Medium.