ProactiveIT Cyber Security Daily

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 312.  It is Friday February 26th 2021.  I am your host Scott Gombar and VMWare Admins Get it Together Now

Cisco Releases Security Updates 

Malicious Mozilla Firefox Extension Allows Gmail Takeover

North Korean hackers target defense industry with custom malware

TD Bank suffered systemwide banking outage, services now recovered

VC giant Sequoia Capital discloses data breach after failed BEC attack

Attackers scan for vulnerable VMware servers after PoC exploit release

March 1, 2021: Deadline for Reporting 2020 Small Healthcare Data Breaches

Cyberattack Forces St. Margaret’s Health –Spring Valley to Shut Down Computer Systems

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 311.  It is Thursday February 25th 2021.  I am your host Scott Gombar and Accellion Damage Is Becoming More Evident

Mozilla Releases Security Updates for Thunderbird, Firefox ESR, and Firefox

Experts Warns of Notable Increase in QuickBooks Data Files Theft Attacks

Federal Reserve nationwide outage impacts US banking system

NASA and the FAA were also breached by the SolarWinds hackers

Ransomware gang extorts jet maker Bombardier after Accellion breach

Exploitation of Vulnerabilities in Accellion File Transfer Appliance Gave Hackers Access to Data of Kroger Customers

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 310.  It is Wednesday February 24th 2021.  I am your host Scott Gombar and Microsoft Email Users Hit with FedEx Phishing Attack

SonicWall Releases Additional Patches

ServiceNow admin credentials among hundreds of passwords exposed in cloud security blunder

VMware fixes critical RCE bug in all default vCenter installs

Finnish IT services giant TietoEVRY discloses ransomware attack

LinkedIn is down for many, and we are not sure why

Twitter removes accounts of Russian government-backed actors

10K Microsoft Email Users Hit in FedEx Phishing Attack

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 309.  It is Tuesday February 23rd 2021.  I am your host Scott Gombar and What Is the Cost to Paying the Ransom

Microsoft Word for Windows is finally getting predictive typing

Assume Clubhouse Conversations Are Being Recorded, Researchers Warn

Chinese Hackers Hijacked NSA-Linked Hacking Tool: Report

TDoS Attacks Take Aim at Emergency First-Responder Services

Parents alerted to NurseryCam security breach

Texas electric company warns of scammers threatening to cut power

Global Accellion data breaches linked to Clop ransomware gang

Ransom Paid to Recover Healthcare Data Stolen in Cyberattack on Online Storage Vendor

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 308.  It is Monday February 22nd 2021.  I am your host Scott Gombar and January HIPAA Breach Report is Out

Malformed URL Prefix Phishing Attacks Spike 6,000%

Mysterious Silver Sparrow Malware Found Nesting on 30K Macs

Credential-Stuffing Attack Targets Regional Internet Registry

Underwriters Laboratories (UL) certification giant hit by ransomware

CIS now offers free ransomware protection to all US hospitals

US cities disclose data breaches after vendor's ransomware attack

Lakehead University shuts down campus network after cyberattack

Warning: Google Alerts abused to push fake Adobe Flash updater

Kroger data breach exposes pharmacy and employee data

Wilmington Surgical Associates Facing Class Action Lawsuit Over Netwalker Ransomware Attack

January 2021 Healthcare Data Breach Report

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 307.  It is Friday February 19th 2021.  I am your host Scott Gombar and Will Changes to LastPass Impact You?

Google Releases Security Updates for Chrome

Cisco Releases Security Updates for AnyConnect Secure Mobility Client

North Korean Malicious Cyber Activity: AppleJeus

Mac Malware Targets Apple’s In-House M1 Processor

Kia Motors Hit With $20M Ransomware Attack – Report

Microsoft: SolarWinds hackers downloaded some Azure, Exchange source code

LastPass Free to force users to choose between mobile, desktop

21st Century Oncology Data Breach Settlement Receives Preliminary Approval

Email Error Results in Impermissible Disclosure of the PHI of 900 Campbell County Health Patients

Ransomware Gangs Leak Sensitive Data Stolen from Capital Medical Center and Rehoboth McKinley Christian Health Care Services

Grand River Medical Group Email Breach Impacts 34,000 Patients

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 306.  It is Tuesday February 16th 2021.  I am your host Scott Gombar and 25.9 million business account credentials belonging to employees of Fortune 1000 companies are on the darkweb.

Apple will proxy Safe Browsing requests to hide iOS users' IP from Google

DDoS attack takes down EXMO cryptocurrency exchange servers

Microsoft will alert Office 365 admins of Forms phishing attempts

Rampant password reuse puts companies and customers at risk

Sharp HealthCare Pays $70,000 to Resolve HIPAA Right of Access Violation

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 305.  It is Monday February 15th 2021.  I am your host Scott Gombar and Tax Season is Here, So Are the Scams.

 

VMware Releases Security Update

Pre-Valentine’s Day Malware Attack Mimics Flower, Lingerie Stores

Yandex Employee Caught Selling Access to Users' Email Inboxes

Copycats imitate novel supply chain attack that hit tech giants

Egregor ransomware members arrested by Ukrainian, French police

Google Chrome, Microsoft Edge getting this Intel security feature

Leading Canadian rental car company hit by DarkSide ransomware

‘Annoyingly Believable’ Tax Scam Targets Mobile Users

Scammers target US tax pros in ongoing IRS phishing attacks

Ransomware Gang Dumps Data Stolen from Two U.S. Healthcare Providers

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 304.  It is Friday February 12th 2021.  I am your host Scott Gombar and Microsoft Fixes a 12 Year Old Vulnerability in Microsoft Defender.

Military, Nuclear Entities Under Target By Novel Android Malware

If you use Slack on Android, reset your password now

Mobile Health Apps Found to Expose Records of Millions of Users

Alert (AA21-042A) Compromise of U.S. Water Treatment Facility

Internet Explorer 11 zero-day vulnerability gets unofficial micropatch

Microsoft releases emergency fix for Windows 10 WiFi crashes

Buggy WordPress plugin exposes 100K sites to takeover attacks

12-year-old Windows Defender bug gives hackers admin rights

Renown Health Pays $75,000 to Settle HIPAA Right of Access Case

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 303.  It is Thursday February 11th 2021.  I am your host Scott Gombar and Leaky Database exposes 1.5 billion Comcast records

Microsoft Launches Phase 2 Mitigation for Netlogon Remote Code Execution Vulnerability (CVE-2020-1472)

SAP Commerce Critical Security Bug Allows RCE

SIM hijackers arrested after stealing millions from US celebrities

Microsoft Office February security updates patch Sharepoint, Excel RCE bugs

Microsoft fixes Windows 10 bug letting attackers trigger BSOD crashes

Researchers discover exposed Comcast database containing 1.5 billion records

Nebraska Medicine Notifies 219,000 Patients About September 2020 Malware Attack