ProactiveIT Cyber Security Daily

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 352. It is Tuesday May 4th 2021. I am your host Scott Gombar and May the Fourth Be With You

Apple fixes 2 iOS zero-day vulnerabilities actively used in attacks

Deepfake Attacks Are About to Surge, Experts Warn

Over 40 Apps With More Than 100 Million Installs Found Leaking AWS Keys

PoC exploit released for Microsoft Exchange bug dicovered by NSA

Toronto hit by ‘potential cyber breach’ from Accellion file transfer software

Health care giant Scripps Health hit by ransomware attack

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 351. It is Monday May 3rd 2021. I am your host Scott Gombar and First Horizon Bank Accounts Hacked

Codecov Releases New Detections for Supply Chain Compromise

CISA Updates Alert on Pulse Connect Secure

Babuk quits ransomware encryption, focuses on data-theft extortion

Your stolen ParkMobile data is now free for wannabe scammers

First Horizon bank online accounts hacked to steal customers’ funds

Californian Healthcare Provider Discovers Patient Data was Exposed on the Internet for Over a Year

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 350. It is Friday April 30th 2021. I am your host Scott Gombar and Stopping Ransomware 101

CISA Releases ICS Advisory on Real-Time Operating System Vulnerabilities

Cisco Releases Security Updates for Multiple Products

Experian API Leaks Most Americans’ Credit Scores

Microsoft Office SharePoint Targeted With High-Risk Phish, Ransomware Attacks

New ransomware group uses SonicWall zero-day to breach networks

QNAP warns of AgeLocker ransomware attacks on NAS devices

Security expert coalition shares actions to disrupt ransomware

PHI of 31,000 Individuals Potentially Compromised in River Springs Health Plans Phishing Attack

Einstein Healthcare Network Facing Class Action Lawsuit over 2020 Phishing Attack

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 349. It is Thursday April 29th 2021. I am your host Scott Gombar and FOMO Leads to Phishing

Apple Releases Security Updates

Chase Bank Phish Swims Past Exchange Email Protections

Cybercriminals Widely Abusing Excel 4.0 Macro to Distribute Malware

F5 BIG-IP Found Vulnerable to Kerberos KDC Spoofing Vulnerability

DigitalOcean data breach exposes customer billing information

New stealthy Linux malware used to backdoor systems for years

SMS phishing scam lures Rogers customers with outage refunds

Wyoming Department of Health Announces GitHub Data Breach Affecting 164,000 Individuals

Ransom Payment Increase Driven by Accellion FTA Data Exfiltration Extortion Attacks

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 348. It is Wednesday April 28th 2021. I am your host Scott Gombar and Stomping Out Emotet

Google Releases Security Updates for Chrome

Hackers Threaten to Leak D.C. Police Informants' Info If Ransom Is Not Paid

Microsoft Teams worldwide outage impacts user logins, chats

FBI shares 4 million email addresses used by Emotet with Have I Been Pwned

Phishing Attack on Home Medical Equipment Provider Affects 153,000 Individuals

Several Healthcare Providers Postpone Radiation Treatments Due to Cyberattack on Software Vendor

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 347. It is Tuesday April 27th 2021. I am your host Scott Gombar and Guidance on Defending Against a Software Supply Chain Attack Released

Apple fixes macOS zero-day bug exploited by Shlayer malware

Flubot Spyware Spreading Through Android Devices

Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU Software

Hacker dumps sensitive household records of 250M Americans

DC Police confirms cyberattack after ransomware gang leaks data

Microsoft announces end of life for multiple .NET Framework versions

Apple iCloud Mail outage causing email sending, receiving issues

CISA and NIST Release New Interagency Resource: Defending Against Software Supply Chain Attacks

Manquen Vance Email Breach Impacts 7,018 Patients

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 346. It is Monday April 26th 2021. I am your host Scott Gombar and REvil vs. Apple

Passwordstate Password Manager Update Hijacked to Install Backdoor on Thousands of PCs

Costco Issues Scam Warning

Hacker leaks 20 million alleged BigBasket user records for free

Windows 10 package manager can now remove any app from the command line

Emotet malware nukes itself today from all infected computers worldwide

HashiCorp is the latest victim of Codecov supply-chain attack

REvil’s Big Apple Ransomware Gambit Looks to Pay Off

Twitter accidentally sends suspicious emails asking to confirm accounts

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 345. It is Friday April 23rd 2021. I am your host Scott Gombar and Simple Styling to Hide Warnings in Microsoft Emails..

Telegram Platform Abused in ‘ToxicEye’ Malware Campaigns

Researchers Find Additional Infrastructure Used By SolarWinds Hackers

Trend Micro flaw actively exploited in the wild

Apple, you've AirDrop'd the ball: Academics detail ways to leak contact info of nearby iThings for spear-phishing

Exchange Online down: Microsoft 365 outage affects email delivery

QNAP removes backdoor account in NAS backup, disaster recovery app

Attackers can hide 'external sender' email warnings with HTML and CSS

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 344. It is Thursday April 22nd 2021. I am your host Scott Gombar and Logins for 1.3 million Windows RDP servers have been leaked.

Novel Email-Based Campaign Targets Bloomberg Clients with RATs

QR Codes Offer Easy Cyberattack Avenues as Usage Spikes

Hackers threaten to leak stolen Apple blueprints if $50 million ransom isn't paid

Massive Qlocker ransomware attack uses 7zip to encrypt QNAP devices

Microsoft Autoruns is crashing when listing Windows 10 startups

Google fixes exploited Chrome zero-day dropped on Twitter last week

WhatsApp Pink malware can now auto-reply to your Signal, Telegram texts

Logins for 1.3 million Windows RDP servers collected from hacker market

Data Breaches Reported by VEP Healthcare and the American College of Emergency Physicians

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 343. It is Wednesday April 21st 2021. I am your host Scott Gombar and Eversource Customers, Your Data Was Exposed!

Mozilla Releases Security Update for Firefox, Firefox ESR, and Thunderbird

VMware Releases Security Update

Oracle Releases April 2021 Critical Patch Update

CISA Releases Alert on Exploitation of Pulse Connect Secure Vulnerabilities

Fake Microsoft Store, Spotify sites spread info-stealing malware

Hundreds of networks reportedly hacked in Codecov supply-chain attack

REvil gang tries to extort Apple, threatens to sell stolen blueprints

SonicWall warns customers to patch 3 zero-days exploited in the wild

Eversource Energy data breach caused by unsecured cloud storage