Daily Cybersecurity News: Microsoft Fined $63M, Crypto Heist, Excel Intrusion Vector & More

Cybersecurity News

CyberHub Podcast

December 28th, 2022

Today's Headlines and the latest #cybernews from the desk of the #CISO:

New info-stealer malware infects software pirates via fake cracks sites

APT Hackers Turn to Malicious Excel Add-ins as Initial Intrusion Vector

Container Verification Bug Allows Malicious Images to Cloud Up Kubernetes

Hackers steal $8 million from users running trojanized BitKeep apps

North Korean Hackers Created 70 Fake Bank, Venture Capital Firm Domains

French data agency fines Microsoft $63 million for Bing cookie violations

Story Links:

https://www.bleepingcomputer.com/news/security/new-info-stealer-malware-infects-software-pirates-via-fake-cracks-sites/

https://thehackernews.com/2022/12/apt-hackers-turn-to-malicious-excel-add.html

https://www.darkreading.com/cloud/container-verification-bug-malicious-images-free-rein-kubernetes

https://www.bleepingcomputer.com/news/security/hackers-steal-8-million-from-users-running-trojanized-bitkeep-apps/

https://www.securityweek.com/north-korean-hackers-created-70-fake-bank-venture-capital-firm-domains

https://therecord.media/french-data-agency-fines-microsoft-63-million-for-bing-cookie-violations/

Apply now to be a featured partner on the show: https://www.cyberhubpodcast.com/contact

******

Find James Azar Host of CyberHub Podcast, CISO Talk, and Goodbye Privacy

James on Linkedin: https://www.linkedin.com/in/james-azar-a1655316/

“The Microsoft Doctrine” by James Azar now on Substack https://jamesazar.substack.com/p/the-microsoft-doctrine

******

Sign up for our newsletter with the best of CyberHub Podcast delivered to your inbox once a month:

http://bit.ly/cyberhubengage-newsletter

******

Website: https://www.cyberhubpodcast.com

Youtube: https://www.youtube.com/c/TheCyberHubPodcast

Rumble: https://rumble.com/c/c-1353861

Facebook: https://www.facebook.com/CyberHubpodcast/

Linkedin: https://www.linkedin.com/company/cyberhubpodcast/

Twitter: https://twitter.com/cyberhubpodcast

Instagram: https://www.instagram.com/cyberhubpodcast

Listen here: https://linktr.ee/cyberhubpodcast

The Hub of the Infosec Community.

Our mission is to provide substantive and quality content that’s more than headlines or sales pitches. We want to be a valuable source to assist those cybersecurity...

Daily Cybersecurity News: Twitter User Data for Sale, $725M Facebook Fine, SBOM News & More

Cybersecurity News

CyberHub Podcast

December 27th, 2022

Today's Headlines and the latest #cybernews from the desk of the #CISO:

Data of 400 Million Twitter Users for Sale as Irish Privacy Watchdog Announces Probe

Hackers exploit bug in WordPress gift card plugin with 50K installs

Zerobot adds new exploits, DDoS attack capabilities

Software bills of material face long road to adoption Facebook Agrees to Pay $725 Million to Settle Privacy Suit

Story Links:

https://www.securityweek.com/data-400-million-twitter-users-sale-irish-privacy-watchdog-announces-probe

https://www.bleepingcomputer.com/news/security/hackers-exploit-bug-in-wordpress-gift-card-plugin-with-50k-installs/

https://therecord.media/microsoft-zerobot-adds-new-exploits-ddos-attack-capabilities/

https://www.cyberscoop.com/dhs-sbom-adoption/

https://www.securityweek.com/facebook-agrees-pay-725-million-settle-privacy-suit

Apply now to be a featured partner on the show: https://www.cyberhubpodcast.com/contact

******

Find James Azar Host of CyberHub Podcast, CISO Talk, and Goodbye Privacy

James on Linkedin: https://www.linkedin.com/in/james-azar-a1655316/

“The Microsoft Doctrine” by James Azar now on Substack https://jamesazar.substack.com/p/the-microsoft-doctrine

******

Sign up for our newsletter with the best of CyberHub Podcast delivered to your inbox once a month:

http://bit.ly/cyberhubengage-newsletter

******

Website: https://www.cyberhubpodcast.com

Youtube: https://www.youtube.com/c/TheCyberHubPodcast

Rumble: https://rumble.com/c/c-1353861

Facebook: https://www.facebook.com/CyberHubpodcast/

Linkedin: https://www.linkedin.com/company/cyberhubpodcast/

Twitter: https://twitter.com/cyberhubpodcast

Instagram: https://www.instagram.com/cyberhubpodcast

Listen here: https://linktr.ee/cyberhubpodcast

The Hub of the Infosec Community.

Our mission is to provide substantive and quality content that’s more than headlines or sales pitches. We want to be a valuable source to assist those cybersecurity practitioners in their mission to keep their organizations secure.

Thank you for watching and Please Don't forget to Like this video and Subscribe to my Channel!

#cybernews #infosec #cybersecurity #cyberhubpodcast #practitionerbrief #cisotalk #ciso #infosecnews #infosec #infosecurity #cybersecuritytips #podcast #technews #tinkertribe #givingback #securitytribe #securitygang #informationsecurity

Daily Cybersecurity News: Azure Cross-Tenant Patch, BetMGM Breach, Xfinity accounts hacked & LastPass Breach

Cybersecurity News

CyberHub Podcast

December 26th, 2022

Today's Headlines and the latest #cybernews from the desk of the #CISO:

Microsoft Patches Azure Cross-Tenant Data Access Flaw

BetMGM Confirms Breach as Hackers Offer to Sell Data of 1.5 Million Customers

GuLoader Malware Uses New Technique to Evade Security Software

Lastpass: Hackers stole customer vault data in cloud storage breach

Comcast Xfinity accounts hacked in widespread 2FA bypass attacks

China's ByteDance Admits Using TikTok Data to Track Journalists

Story Links:

https://www.securityweek.com/microsoft-patches-azure-cross-tenant-data-access-flaw

https://www.securityweek.com/betmgm-confirms-breach-hackers-offer-sell-data-15-million-customers

https://thehackernews.com/2022/12/guloader-malware-utilizing-new.html

https://www.bleepingcomputer.com/news/security/lastpass-hackers-stole-customer-vault-data-in-cloud-storage-breach/

https://www.bleepingcomputer.com/news/security/comcast-xfinity-accounts-hacked-in-widespread-2fa-bypass-attacks/

https://www.securityweek.com/chinas-bytedance-admits-using-tiktok-data-track-journalists

Apply now to be a featured partner on the show: https://www.cyberhubpodcast.com/contact

******

Find James Azar Host of CyberHub Podcast, CISO Talk, and Goodbye Privacy

James on Linkedin: https://www.linkedin.com/in/james-azar-a1655316/

“The Microsoft Doctrine” by James Azar now on Substack https://jamesazar.substack.com/p/the-microsoft-doctrine

******

Sign up for our newsletter with the best of CyberHub Podcast delivered to your inbox once a month:

http://bit.ly/cyberhubengage-newsletter

******

Website: https://www.cyberhubpodcast.com

Youtube: https://www.youtube.com/c/TheCyberHubPodcast

Rumble: https://rumble.com/c/c-1353861

Facebook: https://www.facebook.com/CyberHubpodcast/

Linkedin: https://www.linkedin.com/company/cyberhubpodcast/

Twitter: https://twitter.com/cyberhubpodcast

Instagram: https://www.instagram.com/cyberhubpodcast

Listen here: https://linktr.ee/cyberhubpodcast

The Hub of the Infosec Community.

Our mission is to provide substantive and quality content that’s more than headlines or sales pitches. We want to be a valuable source to assist those cybersecurity practitioners in their mission to keep their organizations secure.

Thank you for watching and Please Don't forget...

ProxyNotShell is Back, Okta Source Code Stolen, JFK Taxi Hack, PyPI Malware & More

Cybersecurity News

CyberHub Podcast

December 21st, 2022

Today's Headlines and the latest #cybernews from the desk of the #CISO:

Ransomware Uses New Exploit to Bypass ProxyNotShell Mitigations

Okta's source code stolen after GitHub repositories hacked

Critical Vulnerability in Hikvision Wireless Bridges Allows CCTV Hacking

Raspberry Robin Worm Targets Telcos & Governments

Hacker’s bombard PyPi platform with information-stealing malware

Two Men Arrested for JFK Airport Taxi Hacking Scheme

Story Links:

https://www.securityweek.com/ransomware-uses-new-exploit-bypass-proxynotshell-mitigations

https://www.bleepingcomputer.com/news/security/oktas-source-code-stolen-after-github-repositories-hacked/

https://www.securityweek.com/critical-vulnerability-hikvision-wireless-bridges-allows-cctv-hacking

https://www.darkreading.com/attacks-breaches/raspberry-robin-worm-targets-telcos-governments

https://www.bleepingcomputer.com/news/security/hackers-bombard-pypi-platform-with-information-stealing-malware/

https://www.securityweek.com/two-men-arrested-jfk-airport-taxi-hacking-scheme

Apply now to be a featured partner on the show: https://www.cyberhubpodcast.com/contact

******

Find James Azar Host of CyberHub Podcast, CISO Talk, and Goodbye Privacy

James on Linkedin: https://www.linkedin.com/in/james-azar-a1655316/

“The Microsoft Doctrine” by James Azar now on Substack https://jamesazar.substack.com/p/the-microsoft-doctrine

******

Sign up for our newsletter with the best of CyberHub Podcast delivered to your inbox once a month:

http://bit.ly/cyberhubengage-newsletter

******

Website: https://www.cyberhubpodcast.com

Youtube: https://www.youtube.com/c/TheCyberHubPodcast

Rumble: https://rumble.com/c/c-1353861

Facebook: https://www.facebook.com/CyberHubpodcast/

Linkedin: https://www.linkedin.com/company/cyberhubpodcast/

Twitter: https://twitter.com/cyberhubpodcast

Instagram: https://www.instagram.com/cyberhubpodcast

Listen here: https://linktr.ee/cyberhubpodcast

The Hub of the Infosec Community.

Our mission is to provide substantive and quality content that’s more than headlines or sales pitches. We want to be a valuable source to assist those cybersecurity practitioners in their mission to keep their organizations secure.

Thank you for watching and Please Don't forget to Like this video and...

Microsoft MacOS Bypass, Quantum Computing Cyber Act, RisePro Infostealer, Russia & Iran

Cybersecurity News

CyberHub Podcast

December 20th, 2022

Today's Headlines and the latest #cybernews from the desk of the #CISO:

FoxIt Patches Code Execution Flaws in PDF Tools

Microsoft Details Gatekeeper Bypass Vulnerability in Apple macOS

Malicious ‘SentinelOne’ PyPI package steals data from developers New 'RisePro' Infostealer Increasingly Popular Among Cybercriminals

Quantum Computing Cybersecurity Act Passes Senate

Russia, Iran Turmoil Limited Meddling in US Vote

Russian Hackers target major petroleum

Story Links:

https://www.securityweek.com/foxit-patches-code-execution-flaws-pdf-tools

https://thehackernews.com/2022/12/microsoft-details-gatekeeper-bypass.html

https://www.bleepingcomputer.com/news/security/malicious-sentinelone-pypi-package-steals-data-from-developers/

https://www.securityweek.com/new-risepro-infostealer-increasingly-popular-among-cybercriminals

https://www.hstoday.us/subject-matter-areas/cybersecurity/quantum-computing-cybersecurity-act-passes-senate/

https://www.securityweek.com/official-russia-iran-turmoil-limited-meddling-us-vote

https://thehackernews.com/2022/12/russian-hackers-target-major-petroleum.html

Apply now to be a featured partner on the show: https://www.cyberhubpodcast.com/contact

******

Find James Azar Host of CyberHub Podcast, CISO Talk, and Goodbye Privacy

James on Linkedin: https://www.linkedin.com/in/james-azar-a1655316/

“The Microsoft Doctrine” by James Azar now on Substack https://jamesazar.substack.com/p/the-microsoft-doctrine

******

Sign up for our newsletter with the best of CyberHub Podcast delivered to your inbox once a month:

http://bit.ly/cyberhubengage-newsletter

******

Website: https://www.cyberhubpodcast.com

Youtube: https://www.youtube.com/c/TheCyberHubPodcast

Rumble: https://rumble.com/c/c-1353861

Facebook: https://www.facebook.com/CyberHubpodcast/

Linkedin: https://www.linkedin.com/company/cyberhubpodcast/

Twitter: https://twitter.com/cyberhubpodcast

Instagram: https://www.instagram.com/cyberhubpodcast

Listen here: https://linktr.ee/cyberhubpodcast

The Hub of the Infosec Community.

Our mission is to provide substantive and quality content that’s more than headlines or sales pitches. We want to be a valuable source to assist those cybersecurity practitioners...

Cybersecurity News

CyberHub Podcast

December 15th, 2022

Today's Headlines and the latest #cybernews from the desk of the #CISO:

High-Severity Memory Safety Bugs Patched With Latest Chrome 108 Update

December Windows Server updates break Hyper-V VM creation

Rackspace says more than two-thirds of customers regained email access

Hackers target Japanese politicians with new MirrorStealer malware

CISA Warns Veeam Backup & Replication Vulnerabilities Exploited in Attacks

Hacker Claims Breach of FBI's Critical-Infrastructure Portal

Iran-linked cyberspies expand targeting to medical researchers, travel agencies

Story Links:

https://www.securityweek.com/high-severity-memory-safety-bugs-patched-latest-chrome-108-update

https://www.bleepingcomputer.com/news/microsoft/microsoft-december-windows-server-updates-break-hyper-v-vm-creation/

https://www.cybersecuritydive.com/news/rackspace-customers-email-access-ransomware/638519/

https://www.bleepingcomputer.com/news/security/hackers-target-japanese-politicians-with-new-mirrorstealer-malware/

https://www.securityweek.com/cisa-warns-veeam-backup-replication-vulnerabilities-exploited-attacks

https://www.securityweek.com/hacker-claims-breach-fbis-critical-infrastructure-portal

https://therecord.media/iran-linked-cyberspies-expand-targeting-to-medical-researchers-travel-agencies/

Apply now to be a featured partner on the show: https://www.cyberhubpodcast.com/contact

******

Find James Azar Host of CyberHub Podcast, CISO Talk, and Goodbye Privacy

James on Linkedin: https://www.linkedin.com/in/james-azar-a1655316/

“The Microsoft Doctrine” by James Azar now on Substack https://jamesazar.substack.com/p/the-microsoft-doctrine

******

Sign up for our newsletter with the best of CyberHub Podcast delivered to your inbox once a month:

http://bit.ly/cyberhubengage-newsletter

******

Website: https://www.cyberhubpodcast.com

Youtube: https://www.youtube.com/c/TheCyberHubPodcast

Rumble: https://rumble.com/c/c-1353861

Facebook: https://www.facebook.com/CyberHubpodcast/

Linkedin: https://www.linkedin.com/company/cyberhubpodcast/

Twitter: https://twitter.com/cyberhubpodcast

Instagram: https://www.instagram.com/cyberhubpodcast

Listen here: https://linktr.ee/cyberhubpodcast

The Hub of the Infosec Community.

FBI Infragard Hacked, Patch Tuesday Recap, Apple Zeroday Patch, China & Citrix

Cybersecurity News

CyberHub Podcast

December 14th, 2022

Today's Headlines and the latest #cybernews from the desk of the #CISO:

Patch Tuesday Recap: Microsoft, Adobe, VMware & more

Patch Tuesday ICS: Siemens, Schneider Electric

AWS fixes vulnerability affecting container image repository

Apple Patches Zero-Day Vulnerability Exploited Against iPhones

FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked

Hackers Actively Exploiting Citrix ADC and Gateway Zero-Day Vulnerability

Story Links:

https://www.securityweek.com/patch-tuesday-microsoft-plugs-windows-hole-exploited-ransomware-attacks

https://www.securityweek.com/vmware-patches-vm-escape-flaw-exploited-geekpwn-event

https://www.securityweek.com/adobe-patches-38-flaws-enterprise-software-products

https://www.securityweek.com/ics-patch-tuesday-siemens-fixes-80-openssl-openssh-flaws-switches

https://therecord.media/aws-fixes-vulnerability-affecting-container-image-repository/

https://www.securityweek.com/apple-patches-zero-day-vulnerability-exploited-against-iphones

https://krebsonsecurity.com/2022/12/fbis-vetted-info-sharing-network-infragard-hacked/

https://thehackernews.com/2022/12/hackers-actively-exploiting-citrix-adc.html

“The Microsoft Doctrine” by James Azar now on Substack https://jamesazar.substack.com/p/the-microsoft-doctrine

The Practitioner Brief is sponsored by:

Your BRAND here - Contact us for opportunities today!

******

Find James Azar Host of CyberHub Podcast, CISO Talk, and Goodbye Privacy

James on Linkedin: https://www.linkedin.com/in/james-azar-a1655316/

******

Sign up for our newsletter with the best of CyberHub Podcast delivered to your inbox once a month:

http://bit.ly/cyberhubengage-newsletter

******

Website: https://www.cyberhubpodcast.com

Youtube: https://www.youtube.com/c/TheCyberHubPodcast

Rumble: https://rumble.com/c/c-1353861

Facebook: https://www.facebook.com/CyberHubpodcast/

Linkedin: https://www.linkedin.com/company/cyberhubpodcast/

Twitter: https://twitter.com/cyberhubpodcast

Instagram: https://www.instagram.com/cyberhubpodcast

Listen here: https://linktr.ee/cyberhubpodcast

The Hub of the Infosec Community.

Our mission is to provide substantive and quality content that’s more than...