ProactiveIT Cyber Security Daily

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 332.  It is Monday March 29th 2021.  I am your host Scott Gombar and Hello, We Recently Ransomwared a Business You’re a Client Of

OpenSSL Releases Security Update

Apple Releases Security Updates 

Executive Order Would Strengthen Cybersecurity Requirements for Federal Agencies

Watch Out! That Android System Update May Contain A Powerful Spyware\

CompuCom MSP expects over $20M in losses after ransomware attack

Microsoft: Black Kingdom ransomware group hacked 1.5K Exchange servers

SolarWinds patches critical code execution bug in Orion Platform

Ransomware gang urges victims’ customers to demand a ransom payment

Cancer Treatment Centers of America Announces 105,000-Record Data Breach

SalusCare Takes Legal Action Against Amazon to Obtain AWS Audit Logs to Investigate Data Breach

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 331. It is Friday March 26th 2021. I am your host Scott Gombar and An Update to the CNA Ransomware Attack

Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

Cisco Releases Security Updates

Samba Releases Security Updates

Webshells Observed in Post-Compromised Exchange Servers

Facebook Disrupts Spy Effort Aimed at Uyghurs

Microsoft Offers Up To $30K For Teams Bugs

Cloudflare Page Shield: Early warning system for malicious scripts

BackBlaze mistakenly shared backup metadata with Facebook

Insurance giant CNA hit by new Phoenix CryptoLocker ransomware

Hospice CEO Pleads Guilty to Falsifying Healthcare Claims and Inappropriate Medical Record Access

Massachusetts Mental Health Clinic Settles HIPAA Right of Access Case for $65,000

Misconfiguration Resulted in Exposure of the PHI of 65,000 Mobile Anesthesiologists Patients

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 330.  It is Wednesday March 24th 2021.  I am your host Scott Gombar and Just a Bunch of Ransomware & Stuff

Office 365 Cyberattack Lands Disgruntled IT Contractor in Jail

WARNING: A New Android Zero-Day Vulnerability Is Under Active Attack

CNA insurance firm hit by a cyberattack, operations impacted

Purple Fox malware worms its way into exposed Windows systems

Ransomware gang leaks data stolen from Colorado, Miami universities

Microsoft warns of phishing attacks bypassing email gateways

High-availability server maker Stratus hit by ransomware

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 329.  It is Tuesday March 23rd 2021.  I am your host Scott Gombar and More on Accellion and MS Exchange

CISA Warns of Security Flaws in GE Power Management Devices

Adobe Fixes Critical ColdFusion Flaw in Emergency Update

Popular remote lesson monitoring program could be exploited to attack student PCs

Energy giant Shell discloses data breach after Accellion hack

Microsoft Exchange servers now targeted by Black Kingdom ransomware

California Department of State Hospitals Discovers Unauthorized Data Copying by IT Employee

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 328.  It is Monday March 22nd 2021.  I am your host Scott Gombar and Acer Hit with a $50 Million Ransomware Attack

Zoom Screen-Sharing Glitch ‘Briefly’ Leaks Sensitive Data

Bogus Android Clubhouse App Drops Credential-Swiping Malware

Critical F5 BIG-IP Bug Under Active Attacks After PoC Exploit Posted Online

Windows 10 KB5001649 update is rolling out again to fix printing

Facebook outage affecting WhatsApp, Messenger and Instagram

Microsoft Defender adds automatic Exchange ProxyLogon mitigation

Computer giant Acer hit by $50 million ransomware attack

More Health Insurers Confirmed as Victims of Accellion Ransomware Attack and Multiple Lawsuits Filed

February 2021 Healthcare Data Breach Report

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 327.  It is Friday March 19th 2021.  I am your host Scott Gombar and Over $4.2 billion officially lost to cybercrime in 2020

Cisco Releases Security Updates

Tutor LMS for WordPress Open to Info-Stealing Security Holes

$4,000 COVID-19 ‘Relief Checks’ Cloak Dridex Malware

Mysterious bug is deleting Microsoft SharePoint, Teams files

CISA releases new SolarWinds malicious activity detection tool

Microsoft warns of more printing issues caused by March updates

US taxpayers targeted with RAT malware in ongoing phishing attacks

New CopperStealer malware steals Google, Apple, Facebook accounts

FBI: Over $4.2 billion officially lost to cybercrime in 2020

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 326.  It is Thursday March 18th 2021.  I am your host Scott Gombar and Trickbot Hasn’t Gone Away..

Mimecast: SolarWinds Attackers Stole Source Code

99.2% of US government Android users are running outdated OS versions

Audacity 3.0 released with new AUP3 file format, speed improvements

Microsoft's Azure SDK site tricked into listing fake package

Microsoft is auto-installing the Windows 10 WebView2 Runtime

CISA-FBI Joint Advisory on TrickBot Malware

PHI of 26,600 Individuals Potentially Copied in Colorado Retina Associates Phishing Attack

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 325. It is Wednesday March 17th 2021. I am your host Scott Gombar and What Happened with Microsoft Yesterday?

Latest Mirai Variant Targets SonicWall, D-Link and IoT Devices

DuckDuckGo browser extension vulnerability leaves Edge users open to potential cyber-snooping

Teen hacker agrees to 3 years in prison for Twitter Bitcoin scam

FBI warns of escalating Pysa ransomware attacks on education orgs

Hacker leaks payment data from defunct WeLeakInfo breach site

Hackers hide credit card data from compromised stores in JPG file

Microsoft explains the cause of yesterday's massive service outage

Reinvestigation of 2019 Metro Presort Ransomware Attack Reveals PHI May Have Been Compromised

2020 Saw Major Increase in Healthcare Hacking Incidents and Insider Breaches

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 324. It is Tuesday March 16th 2021. I am your host Scott Gombar and It’s a Microsoft Kind of Day

Buffalo Public Schools cancels classes after cyberattack

Microsoft releases one-click Exchange On-Premises Mitigation Tool

Windows 10 emergency updates released to fix printing crashes

Blender website in maintenance mode after hacking attempt

Microsoft fixes Office issue causing memory, disk space errors

Microsoft 365 outage knocks down Teams, Exchange Online

Ransomware Gangs Claim Three More Healthcare Victims

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 323.  It is Monday March 15th 2021.  I am your host Scott Gombar and Don’t Tweet the Word Memphis

Updates on Microsoft Exchange Server Vulnerabilities

Microsoft Exchange Exploits Pave a Ransomware Path

Another Google Chrome 0-Day Bug Found Actively Exploited In-the-Wild

REvil Group Claims Slew of Ransomware Attacks

Microsoft shares temporary fix for Windows 10 printing crashes

Scammers promote fake cryptocurrency giveaways via Twitter ads

Twitter bug automatically suspends you when tweeting 'Memphis'

Unsecured Amazon S3 Buckets Contained ID Card Scans of 52,000 Individuals

New London Hospital Data Breach Affects Almost 35,000 Patients

Multistate Settlement Resolves 2019 American Medical Collection Agency Data Breach Investigation