Cyber Briefing

👉 What's happening in cybersecurity today?

********************************************************************

🚨 #CyberAlerts

********************************************************************

VMware Fixes Critical Memory Corruption Flaws in vCenter Server for Remote Code Execution

Source: VMware

Fortinet FortiNAC Solution Patched for Critical Remote Command Execution Vulnerability

Source: Fortinet

CISA Orders Urgent Patching as Triangulation Spyware Targets iPhones

Source: CISA

Muddled Libra: Advanced Social Engineering Attacks

Source: Palo Alto Networks

Unleashing PindOS: A New JavaScript Dropper Joining Forces with Bumblebee and IcedID

Source: Deep Instinct

********************************************************************

💥 #CyberIncidents

********************************************************************

RateForce's Breach Exposes 250K+ Documents

Source: vpnMentor

Chinese State-Backed Hackers Accidentally Infect European Hospital with Malware

Source: CyberIQs

Insurer Wilton Re Exposes 1.5 Million People in Vendor Breach

Source: Office of the Maine AG

Hacking Hijinks: Barefoot Contessa's Facebook Page Breached, Unleashing Unexpected Recipes!

Source: NBC Los Angeles

Hairdresser Chain Peter Mark Hit by Cyber Attack

Source: The Irish Times

********************************************************************

📢 #CyberNews

********************************************************************

FBI Seizes BreachForums Domain, Unraveling Cybercrime Network

Source: DataBreaches

Russia Considers Legalizing Piracy to Counter Western Content Ban

Source: RIA Novosti

Australia Appoints First National Cybersecurity Coordinator

Source: AAP

OpenAI Teams Up with Bugcrowd for Innovative Bug Bounty Program

Source: OpenAI

Senators Push for Cyber Force in Defense Department Study

Source: US Senate

********************************************************************

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://lnkd.in/d9NfR6tm

********************************************************************

#cyberbriefing #informationsecurity #Apple #ChatGPT #OpenAI #Malware #MOVEit

👉 What are the latest cybersecurity advisories, alerts and incidents?

********************************************************************

🚨 #CyberAlerts

********************************************************************

Phishing Campaign MULTI#STORM Deploys Multiple RAT Malware in India and U.S.

Source: Securonix

U.S. Army Warns of Suspicious Smartwatches Rigged with Malware

Source: U.S. Army

Mirai Botnet Variant Exploiting Multiple Device Vulnerabilities for DDoS Attack

Source: Palo Alto Networks

Cryptojacking Campaign Targets Internet-Exposed Linux and IoT Devices

Source: Microsoft

RepoJacking: Millions of GitHub Repositories Vulnerable to Supply Chain Attacks

Source: AquaSec

NSA Releases Guidance to Combat BlackLotus UEFI Bootkit Threat

Source: NSA

********************************************************************

💥 #CyberIncidents

********************************************************************

Hawaii Community College Targeted in Ransomware Attack

Source: Big Island Video News

iOttie's Online Store Compromised, Exposing Customer Data

Source: Office of the Maine AG

CalPERS Hit by MOVEit Breach: Largest U.S. Pension Fund Impacted

Source: CalPERS

Data Breach Hits San Luis Obispo County Education Office

Source: The Tribune

********************************************************************

📢 #CyberNews

********************************************************************

Massive Data Breach and Class Action Lawsuit Rock Progress Software Over MOVEit Security Failure

Source: Bloomberg Law

DuckDuckGo Releases Privacy-Centric Browser for Windows

Source: DuckDuckGo

Google Pledges $20 Million for Cybersecurity Clinics and Careers

Source: The Washington Post

Criteo Fined €40M for GDPR Infringements

Source: CNIL

Discord's Dark Side: Child Exploitation, Grooming, and Extortion on the Rise

Source: NBC News

********************************************************************

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://lnkd.in/d9NfR6tm

********************************************************************

#cyberbriefing #informationsecurity #Microsoft #Google #Discord #Linux #GitHub

👉 What's going on in the cyber world today?

********************************************************************

🚨 #CyberAlerts

********************************************************************

Critical Authentication Bypass Flaws in Popular WordPress Plugins

Source: Wordfence

Condi Botnet Strikes: Exploiting Unpatched TP-Link Routers

Source: Fortinet

Apple Patches Zero-Day Exploits Installing Triangulation Spyware on iPhones via iMessage

Source: Apple

APT15's Graphican Backdoor Exploits Central and South American Ministries

Source: Symantec

ScarCruft: North Korean Threat Actor Exploits Ably Messaging Service with Wiretapping Malware

Source: AhnLab Security Emergency response Center

High-Severity Flaw in Cisco Secure Client Software Exposes Privilege Escalation Risk

Source: Filip Dragović

********************************************************************

💥 #CyberIncidents

********************************************************************

UPS Canada Warns Customers of Data Breach and Phishing Attacks

Source: Brett Callow

Mondelez Warns Employees of Data Theft: Over 50,000 Affected

Source: Office of the Maine AG

Cancer Center Hit by High-Impact Ransomware Attack

Source: American Hospital Asociation

Z-ERA Card Game Exploited: $285,000 Stolen in NFT Hack

Source: Cryptoslate

********************************************************************

📢 #CyberNews

********************************************************************

Amazon Allegedly Used Dark Patterns to Deceptively Enroll Millions in Prime

Source: Federal Trade Commission

TikTok Accused of Repeatedly Storing Americans' Private Data in China, Senators' Letter Reveals

Source: Senators Richard Blumenthal and Marsha Blacburn 

European Council Seeks to Weaken Journalist Protections in Media Freedoms Law

Source: Politico:

State Dept Calls for AI Regulations and Global Competition Against China

Source: Hudson Institute

Ukrainian Cyberpolice Bust Crypto Scammers Targeting Canadians in Sophisticated Call Center Operation

Source: Cyberpolice of Ukraine

********************************************************************

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://lnkd.in/d9NfR6tm

********************************************************************

#cyberbriefing #informationsecurity #Apple #TikTok #Ukraine #UPS #Amazon

👉 What's trending in cybersecurity today?

********************************************************************

🚨 #CyberAlerts

********************************************************************

Linux SSH Servers Under Attack: Brute-Force Campaign Installs Malware

Source: Asec

RDStealer: Advanced Cyber Attack Targets East Asian IT Company with Custom Malware

Source: Bitdefender

Zyxel NAS Critical Vulnerability: Command Injection Exploit

Source: Zyxel

Forescout Discloses Critical OT Vulnerabilities in Wago and Schneider Electric Products

Source: Forescout Research

Azure AD Flaw: Privilege Escalation in Microsoft Accounts

Source: Descope

VMware Warns of Actively Exploited Critical Vulnerability, Urges Immediate Patching

Source: VMware

********************************************************************

💥 #CyberIncidents

********************************************************************

Des Moines Public Schools Hit by Ransomware Attack, No Ransom Paid

Source: Des Moines Public Schools

Russian Hackers Breach Ukrainian Email Servers

Source: CERT-UA

Gen Digital Cyberattack Exposes Employee Data in MOVEit Ransomware Attack

Source: Dominic Alvieri

Hackers Target Metro Vancouver Police

Source: Global News

Protecting Your Information: The Parker Wellbore Data Breach

Source: JD Supra

University of Manchester Cyberattack: Ransomware Gang Threatens Data Leak

Source: Bleeping Computer

********************************************************************

📢 #CyberNews

********************************************************************

NDIS Scrambles to Assess Cybersecurity Breach Amidst Law Firm Hack

Source: The Guardian

SEC Delays Decision on Cybersecurity Disclosure Rules Amidst Controversy

Source: U.S. Securities and Exchange Commission

Outdated Cyber Law Hinders Fight Against Cybercrime, UK Lawmakers Warn

Source: UK Parliament

********************************************************************

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://lnkd.in/d9NfR6tm

********************************************************************

#cyberbriefing #informationsecurity #Linux #Zyxel #Azure #VMware #MOVEit

👉 What's the latest in the cyber world today?

********************************************************************

🚨 #CyberAlerts

********************************************************************

OnlyFans Malware Campaign: Fake Content and DcRAT Remote Access Trojan Pose Threat to Users' Data

Source: Esentire

State-Sponsored Android Spyware: DoNot Group Targets Southeast Asia with Google Play Apps

Source: Cyfirma

Unveiling CL-STA-0043: Advanced Cyber Espionage Targeting Government Entities in the Middle East and Africa

Source: Palo Alto Networks

Diicot Cybercrime Group Expands with Cayosin Botnet

Source: Bitdifender

ASUS Urges Immediate Firmware Update for Router Security Flaws

Source: Asus

********************************************************************

💥 #CyberIncidents

********************************************************************

Cyberattack Exposes NSU Data on Dark Web: Personal Information at Risk

Source: KTUL

Dark Web Marketplaces Flooded with Compromised OpenAI ChatGPT Account Credentials

Source: Group-IB

Russian Cyber Attack Targets US Government Agencies; Agriculture Department Investigates Data Breach

Source: ABC Columbia

NAB Assures Customers Unaffected by Cyber Attack on HWL Ebsworth

Source: NAB

EIB Faces Suspected Russian Cyber Attack Amid Threats to Financial System

Source: Telegraph

********************************************************************

📢 #CyberNews

********************************************************************

US Offers $10M Bounty for Cl0p Ransomware Gang Tips

Source: U.S. Department of State

Divorced Mom Loses Entire 401(K) to Tinder Scammer: The Cruel 'Pig Butchering' Romance Fraud

Source: Daily Mail

UK Doubles Cyber Defense Funding for Ukraine to Counter Russian Cyberattacks and Strengthen Cyber Defenses

Source: UK Government

Delhi Police and FBI Bust International Cyber Crime Syndicate, Arrests Made in India

Source: The Tribune

Port Arthur Records Incident: Human Error, Not Cyber Attack

Source: ABC News

********************************************************************

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://lnkd.in/d9NfR6tm

********************************************************************

#cyberbriefing #informationsecurity #Android #Malware #ChatGPT #AI #OnlyFans

👉 What's happening in cybersecurity today?

********************************************************************

🚨 #CyberAlerts

********************************************************************

HPE addresses vulnerabilities in Insight Remote Support & RMC firmware with security updates

Source : HPE

Progress Software Releases Security Advisory for MOVEit Transfer Vulnerability

Source:  CISA

Critical Security Update Released for Microsoft Edge Extended Stable Channel

Source: Microsoft

Windows 11 Update Breaks Google Chrome for Cisco and WatchGuard Users

Source: Western Digital

Western Digital Issues Urgent Firmware Update for My Cloud Devices to Prevent Cyber Attacks

Source: Western Digital

Mystic Stealer: Sophisticated Malware Targets Browsers, Cryptocurrency Apps, and More

Source: Cyfirma

********************************************************************

💥 #CyberIncidents

********************************************************************

Clop Ransomware Breach Exposes Millions of Driver's Licenses in Louisiana and Oregon

Source: OMV

Onix Group Ransomware Attack: Medical Facilities Compromised, 319,500 AffectedSource: Onix Group

The BlackCat/ALPHV ransomware gang steals 80GB of data from Reddit in February cyberattackSource: Reddit

Smartpay Holdings Hit by Ransomware Attack, Customer Data StolenSource: Reuters

Pro-Russian Hacktivist Group Behind Azure and Microsoft 365 Outages, Microsoft RevealsSource: Microsoft

********************************************************************

📢 #CyberNews

********************************************************************

Europe Urged to Act Against Huawei and ZTE in 5G Networks Amid Cybersecurity ConcernsSource: EU Commission

Polish Police Detain Suspects in DDoS-for-Hire Operation PowerOFF, Exposing Massive Cybercriminal NetworkSource: FBI

Google Files Lawsuit Against Fraudulent Business Profile Creator for Manipulating ReviewsSource: Google

Genetic Testing Firm Accused of Privacy Violations and Deception by FTCSource: Federal Trade Commission, U.S.

********************************************************************

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://lnkd.in/d9NfR6tm

********************************************************************

#cyberbriefing #informationsecurity #MOVEit, #Huawei, #ZTE, #google, #ransomware

Cyber Briefing 2023-06-19: Security Alerts, Incidents, News

The latest in cybersecurity: MOVEit, Mystic Stealer, Clop Ransomware, Onix Group, BlackCat/ALPHV, Smartpay Holdings, Huawei, ZTE, DDoS-for-Hire, Genetic Testing

👉 What are the latest cybersecurity advisories, alerts and incidents?

********************************************************************

🚨 #CyberAlerts

********************************************************************

Critical ICS Vulnerabilities Uncovered: CISA Releases 14 Advisories for Enhanced Security

Source: CISA

Chinese Hackers Exploit Zero-Day: A Massive Cyber Espionage Operation Unveiled

Source: Mandiant

Critical XSS Vulnerabilities in Azure Services: Unauthorized Access and Data Tampering Risk

Source: Orca

New Android Malware Campaign Spreads GravityRAT via Trojanized Chat App 'BingeChat,' Stealing WhatsApp Backups

Source: ESET

Progress Software Unveils Third Vulnerability in MOVEit Transfer as Cybercriminals Deploy Extortion Tactics

Source: Progress

********************************************************************

💥 #CyberIncidents

********************************************************************

Russian Cyberattack Targets US Federal Agencies in Global Hacking Spree

Source: CNN

Floating Point Group (FPG) Hit by $15M-$20M Crypto Hack

Source: Coindesk

Johns Hopkins University Hit by Cyberattack, Data Breach

Source: Baltimore Sun

Cybercriminals Spread Fake WannaCry Ransomware to Russian Gamers of Enlisted

Source: Cyble

Chilean Army's Data Leaked by Rhysida Ransomware Gang

Source: German Hernandez (@1ZRR4H)

********************************************************************

📢 #CyberNews

********************************************************************

Russian National Arrested for LockBit Ransomware Attacks Across the GlobeSource: DOJ

Shift5 Raises $33M in Series B Funding for OT Cybersecurity SolutionsSource: SiliconAngle

Cybersecurity Startup Trust Lab Raises $15M to Detect Harmful Internet Content with AISource: Security Week

Sturdy Finance Offers $100K Bounty to Hacker in DeFi Exploit ResolutionSource: Cointelegraph

Jailed Hacker Ordered to Pay £100,000 for Stealing Unreleased Songs from Ed Sheeran and Lil Uzi VertSource: Evening Standard

********************************************************************

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://lnkd.in/d9NfR6tm

********************************************************************

#cyberbriefing #informationsecurity #Clop #MOVEit #Russia #Ransomware #Ed Sheeran

👉 What's going on in the cyber world today?

********************************************************************

🚨 #CyberAlerts

********************************************************************

ChromeLoader Campaign Infects Warez and Pirated Movie Sites with Shampoo AdwareSource: HP

ChamelGang Expands Arsenal with Linux Implant 'ChamelDoH' for Encrypted DNS CommunicationSource: Stairwell

Shuckworm Strikes Again: Russian Cyber Espionage Group Intensifies Attacks on Ukrainian TargetsSource: Symantec

Microsoft Exposes Russia-Linked APT Group 'Cadet Blizzard' Engaged in Destructive Cyber Operations Source: Microsoft

********************************************************************

💥 #CyberIncidents

********************************************************************

Hackers Breach Scranton Cardiology Group, Exposing Private Data of 181k PatientsSource: Yahoo

Potential Data Breach Exposes Personal Details of Freelance DoctorsSource: Healthnews

State-owned Bank in South Africa Hit by Akira Ransomware Attack, Threatens Data LeakSource: DBSA

Cyberattack Targets Busy Toll Road Tunnel with Ransom Demand for Sensitive InformationSource: Daily Mail

Amazon Web Services Restores Cloud Services After Widespread DisruptionSource: Reuters

Atomic Wallet Hit by $100 Million Crypto Heist, Users Demand AnswersSource: Cointelegraph

********************************************************************

📢 #CyberNews

********************************************************************

European Lawmakers Approve AI Restrictions, Banning Biometric Recognition in Public PlacesSource: European Parliament

French Conglomerate Thales Acquires Australia's Tesserent to Expand Cybersecurity FootprintSource: Business Wire

LockBit Ransomware: $91 Million Extorted from U.S. Organizations in 1,700 Attacks.Source: CISA

Spotify Faces $5.4M Fine in Sweden for GDPR ViolationsSource: The Swedish Authority for Privacy Protection (IMY)

Bipartisan Bill Aims to Safeguard Americans' Data from Foreign ExploitationSource: Senator Ron Wyden

********************************************************************

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://lnkd.in/d9NfR6tm

********************************************************************

#cyberbriefing #informationsecurity #Microsoft #Spotify #Amazon #Linux #Ransomware

👉 What's trending in cybersecurity today?

********************************************************************

🚨 #CyberAlerts

********************************************************************

Microsoft's Patch Tuesday: Critical Vulnerabilities Addressed, including Windows PGM Bugs and Exchange Server Exploit. Source: Microsoft

Massive Brand Impersonation Campaign Targets Popular Apparel and Footwear Brands. Source: Bolster

Adobe Addresses Critical Flaws in Patch Tuesday Updates. Source: Adobe

Chinese Hackers Exploit VMware Zero-Day: Backdooring Virtual Machines. Source: Mandiant

Fake Researchers' Cybersecurity Charade Exposes Malicious Repositories on GitHub. Source: VulnCheck

********************************************************************

💥 #CyberIncidents

********************************************************************

Data Breach at Idaho Department of Health and Welfare Exposes Medicaid Members' Information. Source: KTVB

Confidential Data Breach: Ofcom Cyberattack Exposes Companies and Employees. Source: The Fintech Times

Massive Data Leak: Personal Info of 8.9M Zacks Investment Research Users Exposed. Source: Bitdefender

University Cyberattack Disrupts SFA's Online Systems. Source: KTRE

WooCommerce Stripe Plugin Vulnerability Exposes Sensitive Data to Attackers. Source: Patchstack

********************************************************************

📢 #CyberNews

********************************************************************

France Accuses Russia of Impersonating Government and Media in Disinformation Campaign to Undermine Democratic Institutions. Source: The French Ministry for Europe and Foreign Affairs

CosmicEnergy Malware: A Looming Threat to Industrial Control Systems. Source: Dragos

Former Samsung Executive Charged with Stealing Secrets for China Chip Factory, Posing Economic Threat. Source: Barron’s

Unmasking the Human Element in Automated Attacks: Insight into Remote Desktop Protocol Targeting. Source: GoSecure

Romanian 'Virus' Sentenced to Prison for Bulletproof Hosting and Malware Distribution. Source: U.S. Department of Justice

********************************************************************

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://lnkd.in/d9NfR6tm

********************************************************************

#cyberbriefing #informationsecurity #Microsoft #Adobe #Malware #GitHub #Samsung

👉 What's the latest in the cyber world today?

********************************************************************

🚨 #CyberAlerts

********************************************************************

Dell Releases Critical Security Advisories for CyberSense and Streaming Data Platform

Source: Dell

Critical IBM Security Advisories: Protect Your Systems Now!

Source: IBM

BatCloak: The Fully Undetectable Malware Obfuscation Engine Unveiled by Researchers

Source: Trend Micro

Clop Ransomware Gang Exploits Critical MOVEit Transfer Bug: Horizon3 Researchers Release PoC

Source: Horizon3

Visual Studio Installer Flaw Enables Malicious Extension Distribution

Source: Varonis 

********************************************************************

💥 #CyberIncidents

********************************************************************

Swiss Federal Websites Targeted in Pro-Russia Cyber Attack

Source: FalconFeedsio

Sensitive Data Breach at Intellihartx Impacts 490K Individuals

Source: Office of the Maine AG

Cybersecurity Breach Exposes Sensitive Data of 85 Million Turkish Citizens

Source: Medya News

German University's IT Infrastructure Taken Offline in Cyberattack

Source: HS Kaiserslautern

Indian Government Denies Direct Database Access in Covid Data Leak Incident

Source: The Print

********************************************************************

📢 #CyberNews

********************************************************************

U.K. Banks to Reimburse Customers in Fight Against Authorized Push Payment Scams

Source: PSR

Ukraine Police Bust Bot Farm Fueling Pro-Russia Propaganda

Source: Ukraine's Cyber Police

Microsoft Azure Portal Outage: Traffic Spike and Anonymous Sudan's DDoS Claim

Source: Azure

Acer Continued Supplying Computer Hardware to Russia Despite Suspension Announcement

Source: Reuters

Reddit Communities Stage Mass Strike to Protest Monetization of Data Access

Source: BBC

********************************************************************

Find the full stories at cybermaterial.com

Or click here 👇 to read the summaries.

https://lnkd.in/d9NfR6tm

********************************************************************

#cyberbriefing #informationsecurity # IBM #Microsoft #Reddit #Ukraine #India