Cyber Briefing

Hello World! It's May 1st, 2023. Welcome to a new edition of Cyber Briefing by Cybermaterial.

Cyber Alerts.

Zyxel Firewall Flaw: Hackers Can Run Arbitrary Code Remotely.

ViperSoftX Malware Targets KeePass and 1Password.

Cyberattacks in Ukraine: Russian Hackers Targeting Government Bodies with Phishing Campaigns.

Beware of the Elegant Fake Payment Forms Hijacked by Hackers

Cisco Works on Patch for Cybersecurity Flaw Found by NATO Expert

Phishing Campaign Targets Romanian Telecom Customers

Cyber Incidents.

Over 17,000 US Residents' Social Security Numbers Exposed in Texas Bank's Email Hack.

Amnesty International Australia Discloses Donor Data Breach After Four-Month Delay.

Wiltshire School Hit by Ransomware Attack

Spartanburg County hit by ransomware attack, alternative phone numbers released

Hackers Steal Personal Data from Dating Websites

Cold storage giant Americold hit by IT issues following network breach

Cyber News.

OpenAI's Chatbot Returns to Italy After Privacy Concerns.

Ukrainian Man Arrested for Selling Data of Over 300 Million People

CISA Seeks Public Feedback on Proposed Secure Software Guidance

That’s all for now! This Cyber Briefing was brought to you by SAINT, your artificial intelligence newscaster.

For more, visit cybermaterial.com

👉 What are the latest cybersecurity advisories, alerts and incidents?

🚨 #CyberAlerts

Illumina Universal Copy Service Vulnerabilities Allow Full System Control

Nomadic Octopus: A Little-Known Cyber-Espionage Group Targeting Tajikistan

RTM Locker RaaS Offers New Linux and NAS Targeting Ransomware

Google Ads Exploited to Distribute LOBSHOT Malware, Stealing Cryptocurrency Assets

PrestaShop Users Beware: Critical SQL Database Vulnerability

💥 #CyberIncidents

Lowell, Massachusetts hit by cyberattack: City's systems down

Data breach at Albertsons exposes personal info of thousands of employees

Ransomware gang leaks sensitive student data from hacked Minneapolis public schools

"Sharp Boys" hackers leak sensitive data of Israeli students

Hacktivist Group Anonymous Sudan Launches Cyberattack on Israel, Including Prime Minister's Site

Minecraft Copycats Infected with Adware on Google Play

📢 #CyberNews

Microsoft announces end of feature updates for Windows 10 with version 22H2 being the last one

Google blocked 173k accounts and 1.5m policy-violating apps in 2022

Microsoft Fixes Outlook Bug Impacting Microsoft 365 Users' Group Access

Aadya Security Raises $5M for SMB Cybersecurity Solution

********************************************************************

Find the full stories at cybermaterial.com

********************************************************************

#cyberbriefing #informationsecurity #Ransomware #Google #Microsoft #Minecraft #Israe

👉 What's going on in the cyber world today?

🚨 #CyberAlerts

Chinese Hackers Launch New Linux Malware Variants: PingPull and Sword2033

FIN7 Cybercrime Group Exploits Unpatched Veeam Backup Instances

Charming Kitten Targets U.S., Europe, and Middle East with New BellaCiao Malware

Apache Superset Flaw Could Allow Remote Code Execution

German Government Warns of Sabotage Risks in Huawei Network Appliances

Microsoft fixes Windows security issue by removing UI feature

💥 #CyberIncidents

IMA Financial Hacked: Personal Data of 1,000 Clients Stolen

HR services firm StaffScapes suffers data breach affecting over 4,500 people

Beauty Product Company Astral Brands Breached, Hundreds of Customers' Financial Data Exposed

Chinese APT Group 'Evasive Panda' Hacks Tencent QQ App in Mysterious Attack

Call of Duty Network Outage Disrupts Thousands of Gamers Worldwide

📢 #CyberNews

EU's new Digital Services Act to impose strict requirements on Facebook, TikTok and Twitter

Google Takes Down CryptBot Malware Network: Disrupting Infrastructure and Distributors in Lawsuit

Microsoft has begun rolling out Phone Link for iOS to all Windows 11 and iPhone users

Telegram Refuses to Cooperate with Brazilian Police, Faces Suspension

********************************************************************

Find the full stories at cybermaterial.com

********************************************************************

#cyberbriefing #informationsecurity #China #Iran #Huawei #Microsoft #CallofDuty

👉 What's trending in cybersecurity today?

🚨 #CyberAlerts

SLP Protocol Abused for DoS Attacks: Experts Warn of Amplification Factor

CISA Issues ICS Security Advisories

VMware Security Advisory: Update Required for Arbitrary Code Execution

Mirai Botnet Exploiting TP-Link Archer A21 Vulnerability

Google Cloud Security and Project Zero Researchers Discover Multiple Vulnerabilities in Intel Trust Domain Extensions (TDX)

North Korean hackers target Mac users with RustBucket malware

💥 #CyberIncidents

Peugeot Exposes User Data in Peru: Cybersecurity Failure by Well-Known Brand

Iranian Hackers Deploy New Version of PowerLess Backdoor in Phishing Attacks Against Israel

Exposed Cloud Registries Put Millions of Artifacts at Risk: Aqua Security Report

Massive data leak exposes personal details of over 630 million Chinese citizens

Pro-Russia hackers target Canadian gas pipeline, potential for explosion

📢 #CyberNews

US Justice Department Shifts Focus to Preventing and Disrupting Cybercrime, Rather than Courtroom Victories, Says Deputy Attorney General

Google Authenticator Update: Safely Backup Your OTPs to Your Google Account

Google Cloud launches Security AI Workbench with generative AI models for threat detection

Sonet.io Raises $6M for Remote Worker Security Platform

********************************************************************

Find the full stories at cybermaterial.com

********************************************************************

#cyberbriefing #informationsecurity #Google #Apple #NorthKorea #Peugeot #China

👉 What's the latest in the cyber world today?

🚨 #CyberAlerts

Linux Kernel Vulnerabilities Found in Multiple Ubuntu Versions

Dell issues security advisory for critical vulnerabilities in EMC Data Protection and PowerProtect DP Series

New All-In-One Info Stealer for Windows Available for Sale on Dark Web

Active Exploitation of PaperCut Vulnerability Linked to TrueBot Malware

Russian-Speaking Threat Actor, Tomiris, Focused on Intelligence Gathering in Central Asia

Discarded Enterprise Network Equipment May Reveal Corporate Secrets

💥 #CyberIncidents

US HHS Investigates Network Shutdown at Guam Hospital After Data Breach

KuCoin Twitter Account Hacked: Over $22K in Crypto Stolen in Fake Giveaway Scam

Medtronic's InPen App Data Disclosure: Another Case of Unintentional Sharing

Microsoft investigates ongoing search functionality issue affecting 365 services

US Defense Shipbuilder Fincantieri Marine Group Hit by Ransomware Attack

📢 #CyberNews

2 Traders Accused of Laundering North Korean Hackers' Cryptocurrency

Stack Identity Raises $4M for Cloud IAM Solution

Industrial Cybersecurity Firms Launch Open-Source Threat-Sharing Platform

IRS to Deploy Cybercrime Specialists Abroad to Combat Cryptocurrency Crimes

********************************************************************

Find the full stories at cybermaterial.com

********************************************************************

#cyberbriefing #informationsecurity #Linux #Ubuntu #IRS #Crypto #NorthKorea

👉 What are the latest cybersecurity advisories, alerts and incidents?

🚨 #CyberAlerts

Oracle's April 2023 Security Update: Patch Now or Risk Breach!

Drupal Vulnerability Allows for System Takeover: CISA Urges Patching

"GhostToken" flaw in Google Cloud Platform (GCP) allows account backdoors

RBAC Buster: Hackers Hijack Kubernetes Clusters for Crypto-mining

Outdated Plugin Used in Malicious Campaign to Infect WordPress Sites

Beware of Bumblebee Malware Masquerading as Zoom, Cisco, and ChatGPT

💥 #CyberIncidents

The American Bar Association (ABA) hacked: 1.5 million member credentials at risk

Pro-Russia hackers launch massive DDoS attack on EUROCONTROL

Cyberattacks Target Israel's Infrastructure After Al-Aqsa Clashes

Montana State University Hit by Cyberattack: Network and Internet Services Shut Down

California regulator calls out crypto firms for fraudulent AI claims

Yellow Pages Group hit by cyber attack: Black Basta ransomware claims responsibility

📢 #CyberNews

Halcyon raises $50m for AI-powered anti-ransomware engine

Five Eyes Agencies Release Cybersecurity Guidance for Smart Cities

Seagate fined $300M for violating export controls with Huawei

********************************************************************

Find the full stories at cybermaterial.com

********************************************************************

#cyberbriefing #informationsecurity #Oracle #Drupal #WordPress #YellowPages #Huawei

Welcome to Cyber Briefing, the newsletter that informs you about the latest cybersecurity advisories, alerts, incidents and news every weekday.

First time seeing this? Please subscribe.

2. BrokenSesame Flaws in Alibaba Cloud Services3. Microsoft Edge update fixes critical vulnerability

👉 What's going on in the cyber world today?

🚨 #CyberAlerts

Play Ransomware Group Develops Custom Tools for More Effective Cyberattacks

CISA adds new exploited vulnerability to catalog

Red Hat releases security updates for multiple products

Google releases emergency Chrome update to fix zero-day vulnerability

PaperCut Printing Software Flaws Exploited by Hackers: Urgent Update Required

NCSC Warns of Heightened Risk from Russian Hacktivists in the UK

💥 #CyberIncidents

DoNot APT targets Kashmiri individual with disguised chat apps malware

APT36 Targets Indian Government with Linux Backdoor Poseidon

Point32Health, a New England healthcare provider, falls prey to ransomware attack

Rentomojo Data Breach Exposes User Information

CFPB Employee Sends Confidential Consumer Data to Personal Email Account

📢 #CyberNews

Clop Ransomware Gang Exploits Zero-Day, Breaks Record with 129 Attacks in March 2023

Iranian Government-Backed Actor "Mint Sandstorm" Linked to U.S. Infrastructure Attacks

Safe Security Raises $50 Million to Help Businesses Manage Cyber Risk at Scale

Russian Cybercriminal Laundering Ryuk Ransom Proceeds Sentenced to Time Served

********************************************************************

Find the full stories at cybermaterial.com

********************************************************************

#cyberbriefing #informationsecurity #Google #India #Iran #Ransomware #Russia

👉 What's trending in cybersecurity today?

🚨 #CyberAlerts

API Attacks Surge Due to Poorly Coded Web Apps

New Sandbox Escape Flaw in VM2 Library Puts Millions of Downloads at Risk

Sophisticated Loader Delivers Aurora Info Stealer Malware

MuddyWater hacks victims with SimpleHelp

Russian State-Sponsored Hackers Deploy 'Jaguar Tooth' Malware on Cisco Routers, Warns US and UK

💥 #CyberIncidents

Sensitive data stolen from UK government tech supplier Capita now up for sale by Black Basta

Affinity Forum Hacked: User Data Compromised, Risk of Phishing

US network giant CommScope suffers data breach with employees' personal data exposed

$10M Sophisticated Hack Targets Secure Crypto Users and Experts Are Baffled

Massive Data Breach Exposes Sensitive Information of Millions of Filipinos

📢 #CyberNews

Hackers Exploit Vulnerabilities for Over Six Days

Scam Surge in Australia: Record $3.1B Lost in 2022

Seattle cybersecurity startup SpecterOps raises $25M to fuel expansion plans

Elon Musk's Blue Check Mark Subscription Enables Spread of Misinformation, Claims Watchdog

ESET and GitHub team up to disrupt RedLine Stealer operations

********************************************************************

Find the full stories at cybermaterial.com

*******************************************************************

#cyberbriefing #informationsecurity #YouTube #Cisco #Crypto #ElonMusk #Twitter

👉 What's the latest in the cyber world today?

🚨 #CyberAlerts

QBot malware is being distributed in phishing campaigns using PDFs and Windows Script Files

CISA Adds Two Known Exploited Vulnerabilities to Catalog

New Android trojan "Chameleon" steals user credentials, evades detection

CISA Releases SBOM Sharing Lifecycle Report to Assist Cybersecurity and Supply Chain Communities

FIN7 and Conti Join Forces with New Domino Malware

Chinese Hackers Abusing Google Tool in Data Theft Attacks

💥 #CyberIncidents

NCR's Aloha PoS platform hit by BlackCat/ALPHV ransomware gang causing outage

Android Malware "Goldoson" Hits 100 Million Downloads on Google Play

German technology company Rheinmetall hit by cyberattack

Sensitive Files Leaked by Volvo Retailer in Brazil

Hundred Finance loses $7M in Optimism hack

📢 #CyberNews

Chinese hacker group suspected of targeting European foreign ministries

Israeli Spyware Vendor QuaDream Allegedly Shutting Down After Being Exposed by Citizen Lab and Microsoft

ZeroFox to acquire LookingGlass for $26M in stock

Woman Scams Holocaust Survivor Out of $2.8 Million

********************************************************************

Find the full stories at cybermaterial.com

********************************************************************

#cyberbriefing #informationsecurity #Google #Android #Volvo #Crypto #Holocaust