Cyber Briefing

👉 What's happening in cybersecurity today?

********************************************************************

🚨 #CyberAlerts

********************************************************************

BundleBot Malware: Stealthy Data Theft and Social Media Threats

Source:Checkpoint

Sophisticated Supply Chain Attacks: Banking Sector Under Siege

Source: Checkmarx

OpenSSH Security Alert: Remote Code Execution Risk

Source: Qualys

Critical RCE Vulnerabilities Patched by Atlassian

Source: Atalassian

Clop Ransomware Gang Adopts New Extortion Tactic with Internet-Accessible Websites

Source: Bleeping Computer

********************************************************************

💥 #CyberIncidents

********************************************************************

DHL Investigates Massive MOVEit Breach with Over 20 Million Victims

Source: Morning Star Online

Crypto Payment Platform Alphapo Hacked: $23M Stolen

Source: The Crypto Times

Rite Aid Data Breach Exposes Customer Information: Names, Birth Dates, and More

Source: Supermarket news

Suzuki-Authorized Dealers Leak Sensitive Customer Data: A Cybersecurity Wake-Up Call

Source: Cybernews Research Team

MSX International Inc. Reports Data Breach and Exposes Sensitive Consumer Information

Source: JD Supra

********************************************************************

📢 #CyberNews

********************************************************************

Amazon Agrees to $25 Million Fine for Alexa Privacy Violations

Source: FTC

DOJ's National Cryptocurrency Enforcement Team: Strengthening Crypto Crime Investigation

Source: The Wall Street Journal

Global AI Security Pledge: Safeguarding Innovation

Source: The White House

Russian Cybersecurity Founder Faces 18-Year Prison Term for Treason

Source: AFP

Google's AI Red Team Reveals AI Attack Strategies: Lessons Learned and Mitigation Tactics

Source: Google

********************************************************************

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://lnkd.in/d9NfR6tm

********************************************************************

#cyberbriefing #informationsecurity #AI #Crypto #Malware #Google #DHL

SEO

Cyber Briefing 2023-07-24: Security Alerts, Incidents, News

The latest in cybersecurity: BundleBot, OpenSSH, Atlassian, Clop Ransomware, DHL MOVEit Breach, Alphapo, Rite Aid, Suzuki, Alexa, DOJ, AI Pledge, Google AI

👉 What are the latest cybersecurity alerts, incidents, and news?

********************************************************************

🚨 #CyberAlerts

********************************************************************

Critical Citrix Flaw Exploited: Web Shells Deployed

Source: CISA

DDoS Botnets Exploiting Critical Zyxel Flaw: Global Cyber Threat Amplifies

Source: Fortinet

Federal Agencies Warn Hospitals about Data Privacy and Security Risks

Source: FTC

Critical Vulnerabilities Found in AMI MegaRAC BMC Software: Risk to Cloud Computing

Source: Eclypsium

Rising Menace: Mallox Ransomware Surges 174% in 2023, Expanding Its Reach

Source: Unit 42

Apache OpenMeetings Security Flaws: Admin Account Takeover and Code Execution

Source: Sonar

********************************************************************

💥 #CyberIncidents

********************************************************************

Hackers Steal Health Data of 1.2 Million Patients from Tampa General Hospital

Source: HIPAA Journal

North Korean Hackers Behind Cyberattack on GitHub Customers, Microsoft Reports

Source: GitHub

Massive Data Breach: 1st Source Bank's 450K Customers Impacted by Cl0p Ransomware Attack

Source: Cybernews

Russian Medical Lab Hit by Ransomware Attack, Test Results Delayed

Source: TASS

George County Braces for Fallout After Ransomware Attack on Official Computer Systems

Source: WKRG

********************************************************************

📢 #CyberNews

********************************************************************

NSA, Cyber Command Nominee Warns of AI Threat in 2024 Presidential Election

Source: Bloomberg

Federal Reserve Introduces FedNow Service for Instant Payments Nationwide

Source: Federal Reserve

Famed Hacker Kevin Mitnick Dies at 59 After Battle with Cancer

Source: SecurityWeek

Apple Warns UK Law Change May Affect iMessage and FaceTime Encryption

Source: The Guardian

********************************************************************

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://lnkd.in/d9NfR6tm

********************************************************************

#cyberbriefing #informationsecurity #Apple #DDoS #Ransomware #GitHub #Russia

👉 What's going on in the cyber world today?

********************************************************************

🚨 #CyberAlerts

********************************************************************

Adobe Patched Critical Flaw Found in ColdFusion

Source: Adobe

Russia's Turla Hackers: Spying on Ukraine's Defense with Capibar and Kazuar Spyware

Source: CERT-UA

P2PInfect: New Cloud Worm Targeting Vulnerable Redis Instances

Source: Unit 42

Cloudflare Reports Surge in Sophisticated DDoS Attacks: Russia's Involvement and New Threats

Source: Cloudflare

Stagil Navigation for Jira Plugin Targeted by Exploits: Urgent Patch Needed

Source: The SANS Internet Storm Center

Bioscience Job Scams Target College Students, Extracting Fees through Fake Offers

Source: Proofpoint

********************************************************************

💥 #CyberIncidents

********************************************************************

Roblox Data Leak: Massive Breach Exposes Sensitive User Information

Source: Malwarebytes labs

Estee Lauder Faces Cyber Attack Impacting Business Operations

Source: Reuters

Data Breach at Henry Ford Health: 168K Patients' Info Compromised

Source: The Oakland Press

Charter Oak Federal Credit Union Recovers After Cyber Attack

Source: WTNH

********************************************************************

📢 #CyberNews

********************************************************************

CISA Collaborates with Microsoft to Enhance Cloud Logging in Response to U.S. Gov't Hack

Source: Microsoft

Reddit Faces First Russian Fine for Alleged Content Discrediting Army

Source: Reuters

House Judiciary Approves Bill to End Warrantless Data Sales by Government Agencies

Source: Wired

Cytrox and Intellexa Spyware Vendors Face US Trade Restrictions for Human Rights Risks

Source: U.S. Bureau of Industry and Security

Securing 5G Network Slicing: U.S. Agency Recommendations

Source: NSA

********************************************************************

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://lnkd.in/d9NfR6tm

********************************************************************

#cyberbriefing #informationsecurity #Adobe #Roblox #5G #Reddit #Ukraine

👉 What's trending in cybersecurity today?

********************************************************************

🚨 #CyberAlerts

********************************************************************

Urgent Alert: Critical Vulnerability in Citrix NetScaler ADC & Gateway with Active Exploits

Source: Citrix

FIN8 Cybercrime Group Adopts Ransomware Tactics with Updated Backdoor

Source: Symantec

Google Resolves 'Bad.Build' Vulnerability in Cloud Build Service, Addressing Supply Chain Risk

Source: Orca

Cyber Espionage: APT41 Unleashes Android Spyware WyrmSpy and DragonEgg

Source: Lookout

Cybersecurity vendor Sophos Impersonated by SophosEncrypt Ransomware

Source: Sophos

Alert: Tech Support Scammers Target Elderly with Unusual Demands

Source: FBI

********************************************************************

💥 #CyberIncidents

********************************************************************

Healthcare Security Breaches: Phoenician Medical Center and Public Health Management Corporation

Source: HIPAA Journal

Google's VirusTotal Leak: Intelligence and Defense Employee Data Exposed

Source: Spiegel

Fortescue Metals Targeted by Cl0p Ransomware Group in Cyber-Attack: Data Theft Claimed

Source: The Guardian

Sensitive Driver Data Exposed in FIA World Endurance Championship Data Leak

Source: Cybernews

********************************************************************

📢 #CyberNews

********************************************************************

White House Introduces Cyber Trust Mark Program, Cybersecurity Labeling for Smart Devices

Source: The White House

Ukraine Police Bust Pro-Russia Propaganda and Fraud Bot Farm

Source: Ukraine Police

Germany's New Cyber Chief Aims for EU Cybersecurity Leadership

Source: The Record

Decade-Long Typo Leads to Misdirected US Military Emails

Source: The Register

Nigerian National Sentenced to Prison for $8M Cybercrime

Source: US DOJ

********************************************************************

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://lnkd.in/d9NfR6tm

********************************************************************

#cyberbriefing #informationsecurity #Google #Android #FIA #Ukraine #TheWhiteHouse

👉 What's the latest in the cyber world today?

********************************************************************

🚨 #CyberAlerts

********************************************************************

Massive Exposure of Secrets in Docker Hub Images: A Security Crisis Unveiled

Source: RWTH Aachen University

Cloud Credential Stealing Campaign Targets Azure and Google Cloud

Source: SentinelOne

Unmasking NoEscape: The Notorious Avaddon Ransomware Gang Returns with a Double-Extortion Operation

Source: BleepingComputer

Critical WooCommerce Payments Plugin Exploited: Hackers Targeting WordPress Sites

Source: Wordfence

ColdFusion Vulnerabilities Exploited for Webshell Attacks

Source: Rapid7

Critical Vulnerabilities Found in Becton Dickinson Medication Infusion Product Suite

Source: Becton, Dickinson and Co. (BD)

********************************************************************

💥 #CyberIncidents

********************************************************************

Hillsborough County Warns 70,000 People of Potential Risk to Personal Information

Source: Fox13

Washington State Food Service Data Breach: 1.5 Million Accounts Compromised

Source: The center Square

Global Data Breach: Idaho Colleges and Students at Risk

Source: KMTV

TomTom, Pioneer, and Autozone Impacted in MOVEit File Transfer Attacks

Souce: Cybernews

********************************************************************

📢 #CyberNews

********************************************************************

Meta Faces Daily Fines of $100,000 Over Privacy Breaches in Norway

Source: Financial Post

CISA Offers Free Cloud Security Tools: Safeguard Your Digital Assets

Source: CISA

Spanish Police Apprehend Scareware Operator After Decade-Long Hunt

Source: Spain National Police

Former IT Employee Imprisoned for Ransomware Blackmail Scheme

Source: The South East Regional Organised Crime Unit (SEROCU) (UK)

CISA Orders Mitigation of Russian Zero-Days Exploited in NATO Phishing Attacks

Source: CISA

********************************************************************

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://lnkd.in/d9NfR6tm

********************************************************************

#cyberbriefing #informationsecurity #Google #Abobe #Meta #Cloud #MOVEit

👉 What's happening in cybersecurity today?

********************************************************************

🚨 #CyberAlerts

********************************************************************

Chinese State-Sponsored Hackers Target UK MPs Frequently, Warns the Intelligence and Security Committee Report

Source: Intelligence and Security Committee of Parliament (UK)

Armageddon: Russian Hackers Target Thousands of Ukrainian Government Systems with Advanced Campaign

Source: The Ukrainian computer Emergency Response Team (CERT-UA)

AVrecon Malware Targets SOHO Routers: Over 70,000 Devices Infected in 20 Countries

Source: Lumen

AIOS WordPress Security Plugin Flaw Exposes Passwords

Source: AIOS

Silentbob: Aggressive Cloud Campaign by TeamTNT Targets Docker, Kubernetes, and More

Source: Aquasec

Unleashing WormGPT: The Dark Side of Generative AI Cybercrime Tool

Source: SlashNext

********************************************************************

💥 #CyberIncidents

********************************************************************

Shutterfly Thwarts Clop Ransomware Attack, Safeguards Customer Data

Source: Bitdefender

Nation-State Actor Targets JumpCloud Customers in Sophisticated Security Incident

Source: JumpCloud

Colorado State University Confirms Clop Ransomware Breach

Source: Colorado State University

Charles Schwab and TD Ameritrade Compromised in MOVEit Software Attack

Source: Investment News

Crowe LLP Low Impact in Cl0p MOVEit Breach

Source: Cybernews

********************************************************************

📢 #CyberNews

********************************************************************

Zluri Secures $20 Million in Series B Funding to Fuel SaaS Management Platform Expansion and AI Innovation

Source: Forbes

Maritime Cyber Incidents Database Raises Industry Awareness

Source: Port Technology International

Cybercrime Marketplace Owner Pleads Guilty to Hacking Charges

Source: US Court

Spotify Faces Privacy Controversy: Allegations of Private Playlists Made Public Without Consent

Source: William Devereux ( @MasterDevwi)

********************************************************************

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://lnkd.in/d9NfR6tm

********************************************************************

#cyberbriefing #informationsecurity #Russia #Malware #Ukraine #ChatGPT #Spotify

👉 What are the latest cybersecurity alerts, incidents, and news?

********************************************************************

🚨 #CyberAlerts

********************************************************************

APT Group Targets Rockwell Automation Products Vulnerabilities, Critical Infrastructure at Risk

Source: Rockwell Automation

Critical Vulnerabilities Found in QuickBlox SDK Threaten Millions of Users in Telemedicine, IoT, and Finance

Source: Claroty

Urgent Action Required: Actively Exploited Zero-Day Hits Zimbra Collaboration Suite Email Servers

Source: Zimbra

Honeywell's Industrial Control System Vulnerabilities Unveiled by Armis

Source: Armis

GhostWriter Campaign: Targeting Ukraine and Poland in Data Theft and Remote Access Attacks

Source: Cisco Talos

Deceptive PoC on GitHub: Backdoor Concealed in Learning Tool

Source: Uptycs

********************************************************************

💥 #CyberIncidents

********************************************************************

Norwegian Refugee Council: Data of Vulnerable Participants Compromised

Source: NRC

Massive Data Breach at Pension Benefit Information Exposes Consumer Information in MOVEit Vulnerability

Source: JD Supra

Bangkok Post and Hundreds of Users Hit by Ransomware Attack

Source: Bangkok Post

Ogun State Government Website Hacked by 'Anon Ghost'

Source: Daily Trust

********************************************************************

📢 #CyberNews

********************************************************************

Russia Mulls Ban on iPhones for Government Employees Amid Spyware Concerns

Source: RBC

Acting Director Denied Nomination, Threatening Future of the Office of the National Cyber Director (ONCD)

Source: The Record

Biden-⁠Harris Administration Publishes the National Cybersecurity Strategy Implementation Plan

Source: White House

Resurgence of USB Malware: Sophisticated Campaigns Targeting Multiple Industries

Source: Mandiant

Teenagers from Lapsus$ Hacking Group Face Prosecution for High-Profile Hacks and Data Breaches

Source: City of London Police

********************************************************************

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://lnkd.in/d9NfR6tm

********************************************************************

#cyberbriefing #informationsecurity #GitHub #Malware #MOVEit #Ukraine #Apple

👉 What's going on in the cyber world today?

********************************************************************

🚨 #CyberAlerts

********************************************************************

Apple Urges Removal of Emergency Software Updates as Latest Fix Causes Web-Surfing Issues

Source: Apple

PyLoose: Python-Based Fileless Attack Targeting Cloud Workloads for Cryptocurrency Mining

Source: Wiz

Sophisticated APT29 Hackers Lure Diplomats with Car Listings in Ukraine

Source: Unit 42 Palo Alto Networks

Critical Remote Code Execution Flaw in Ghostscript Puts Linux Systems at Risk

Source: Kroll

Urgent Patch Required: SonicWall Exposes Critical Vulnerabilities in Firewall Management Suites

Source: SonicWall

********************************************************************

💥 #CyberIncidents

********************************************************************

Massive Data Breach: Clop Ransomware Hits Ernst & Young Clients, Exposing Terabytes of Confidential Information

Source: Information Security Media Group

Radisson Hotels and Insurance Firms Hit by MOVEit Breaches

Source: TechCrunch

China-Based Hackers Target US Government Agencies in Espionage Campaign

Source: CNN

Telekom Malaysia Confirms Data Breach: Unifi Customers' Personal Information Compromised

Source: New Straits Times

Tampa Bay Zoo Targeted by Royal Ransomware Offshoot in Major Cyberattack

Source: WFLA

Tennessee State Retirees' Personal Data Breached: Hackers Access 170K Members' Information

Source: WCYB

********************************************************************

📢 #CyberNews

********************************************************************

GitHub Introduces Passwordless Authentication Support with Passkeys in Public Beta

Source: GitHub

Crypto Hacker Considers Fleeing with Stolen Millions, Seeks Advice Online

Source: Yahoo Finance

Clop Ransomware Gang Hideout Exposed: Mastermind Strikes from Ukraine

Source: Cybernews Research team

Albania's PM Urges Increased US Funding for Cyberdefense Initiative

Source: The Record

********************************************************************

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://lnkd.in/d9NfR6tm

********************************************************************

#cyberbriefing #informationsecurity #Apple #Python #Ransomware #GitHub #Malware

👉 What's trending in cybersecurity today?

********************************************************************

🚨 #CyberAlerts

********************************************************************

Criminals Utilize Android-Based "Mobile Anti-Detects" to Evade Anti-Fraud Controls in Online Banking Theft

Source: Resecurity

Chinese Threat Actors Exploit Windows Policies to Sign Malicious Kernel Mode Drivers, Evoke Stealthy Access and Control

Source: Microsoft

CISA Releases Four ICS Advisories Addressing Security Issues and Vulnerabilities in Industrial Control Systems

Source: Cybersecurity Infrastructure Security Agency

Big Head Ransomware Emerges with Malvertising Campaign, Disguises as Bogus Microsoft Updates and Poses Multifaceted Threat

Source: TrendMicro

Microsoft Addresses Actively Exploited Zero-Day Vulnerabilities in July 2023 Patch Tuesday, Fixes 132 Flaws

Source: Microsoft

********************************************************************

💥 #CyberIncidents

********************************************************************

Arcadia Finance Falls Victim to Reentrancy Exploit, Losing $455,000 in DeFi Attack

Source: Arcadia Finance (Twitter)

Deutsche Bank Data Breach Exposes Customer Data in MOVEit Attack

Source: Handelsblatt

Fanfiction Website AO3 Taken Down by Hacktivist Group, Leaves Millions of Works Inaccessible

Source: AO3 Status (Twitter)

City of Hayward Hit by Ransomware Attack, Shuts Down Website as IT Teams Assess Cybersecurity Incident

Source: Henry K. Lee  (Twitter)

Wave of Cyberattacks Hits Lithuania Ahead of NATO Summit

Source:  Kyiv Post

********************************************************************

📢 #CyberNews

********************************************************************

Spanish Police Dismantle Cybercriminal Ring Targeting Banking Customers

Source: Policia de España

Cryptocurrency Engineer Arrested for $9 Million Decentralized Exchange Fraud

Source: United States Court Southern District of New York

Microsoft to Rebrand Azure Active Directory as Microsoft Entra ID

Source : Microsoft

Johns Hopkins University Faces Class Action Lawsuits Over Moveit Cybersecurity Breach

Source : Bankinfosecurity

Israeli Startup Savvy Raises $30 Million in Funding to Revolutionize SaaS Security and Incident Response Automation

Source : Crunchbase

********************************************************************

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://cybermaterial.com/cyber-briefing-2023-07-12/

********************************************************************

#cyberbriefing #informationsecurity #movieit #ransomware #lawsuits

👉 What's the latest in the cyber world today?

********************************************************************

🚨 #CyberAlerts

********************************************************************

Apple Issues Emergency Updates for Zero-Day Exploits

Source: Apple

Urgent Warning: Public Release of Exploit Code for Critical VMware Vulnerability

Source: VMware

RomCom RAT Targets NATO Supporters in Spear-Phishing Campaign

Source: Blackberry

Sophisticated Windows Trojan Targets Latin American Businesses

Source: Zscaler

SCARLETEEL: Advanced Attack Targeting AWS Fargate

Source: CSO Online

Public Release of CVE-2023-31998 Exploit for Ubiquiti EdgeRouter Vulnerability

Source: SSD Secure Disclosure

********************************************************************

💥 #CyberIncidents

********************************************************************

Trinidad and Tobago Hit by Cyberattack

Source: Office of the Attorney General and Ministry of Legal Affairs (AGLA)

Data Breach Exposes Personal Information of 11 Million Patients

Source: TheMessenger Business

Critical Infrastructure Provider Ventia Takes Systems Offline After Cyberattack

Source: Ventia

Cosmetics Giant Shiseido Faces Data Breach with Threats of Online Exploitation

Source: BBC

Dark Web Sale: Personal Data of 35M Indonesian Passport Holders Exposed

Source: Teguh Aprianto

********************************************************************

📢 #CyberNews

********************************************************************

EU-US Data Transfer Agreement Strengthens Privacy Protections and Transatlantic Digital Trade

Source: The European Commission

Mozilla Introduces Quarantined Domains

Source: Mozilla

Windows 11 21H2 Editions: End of Service Warning and Forced Updates

Source: Microsoft

TPG Acquires Forcepoint's Global Governments and Critical Infrastructure Business Unit in $2.5 Billion Deal

Source: Reuters

********************************************************************

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://lnkd.in/d9NfR6tm

*****************************************************************