ProactiveIT Cyber Security Daily

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 302.  It is Wednesday February 10th 2021.  I am your host Scott Gombar and It’s The February Post Patch Tuesday Episode

Apple fixes SUDO root privilege escalation flaw in macOS

Adobe fixes critical Reader vulnerability exploited in the wild

Microsoft February 2021 Patch Tuesday fixes 56 flaws, 1 zero-day

Microsoft Warns of Windows Win32k Privilege Escalation

We uncovered a Facebook phishing campaign that tricked nearly 500,000 users in two weeks

Emsisoft Suffers System Breach

HelloKitty ransomware behind CD Projekt Red cyberattack, data theft

Researcher hacks Microsoft, Apple, more in novel supply chain attack

Class Action Lawsuit Filed Against US Fertility Over September 2020 Ransomware Attack

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 301.  It is Tuesday February 9th 2021.  I am your host Scott Gombar and It’s Safer Internet Day

Critical WordPress Plugin Flaw Allows Site Takeover

Fake Forcepoint Google Chrome Extension Hacks Windows Users

Big jump in RDP attacks as hackers target staff working from home

Mortgage loan servicing company discloses ransomware attack to multiple states

Android app joins the dark side, sends malware update to millions

Microsoft to alert Office 365 users of nation-state hacking activity

Hacker modified drinking water chemical levels in a US city

Email Account Breach at Law Firm Affects More Than 36,000 UPMC Patients

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 300.  It is Monday February 8th 2021.  I am your host Scott Gombar and Morse Code Used in Phishing Attacks

Unpatched WordPress Plugin Code-Injection Bug Afflicts 50K Sites

Ransomware Attacks Hit Major Utilities

Fortinet fixes critical vulnerabilities in SSL VPN and web firewall

Mozilla fixes Windows 10 NTFS corruption bug in Firefox

The Great Suspender Chrome extension's fall from grace

Malicious extension abuses Chrome sync to steal users’ data

SitePoint discloses data breach after stolen info used in attacks

New phishing attack uses Morse code to hide malicious URLs

Hackers post detailed patient medical records from two hospitals to the dark web

Ramsey County and Crisp Regional Health Services Affected by Ransomware Attacks

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 299.  It is Friday February 5th 2021.  I am your host Scott Gombar and Plex Media Server Owners Beware

 

Google fixes Chrome zero-day actively exploited in the wild

Microsoft Office 365 Attacks Sparked from Google Firebase

New Malware Hijacks Kubernetes Clusters to Mine Monero

Hackers had access to SolarWinds email system for months: report

Windows 10 2004 now in broad deployment, available to everyone

Hackers steal StormShield firewall source code in data breach

Plex Media servers actively abused to amplify DDoS attacks

5 Healthcare Providers Have Started Notifying Patients About Recent Phishing Attacks

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 298.  It is Thursday February 4th 2021.  I am your host Scott Gombar and More Bad News for SolarWinds

Google Releases Security Updates for Chrome

SonicWall fixes actively exploited SMA 100 zero-day vulnerability

Cisco fixes critical code execution bugs in SMB VPN routers

Windows 10 KB4598291 update fixes device deactivation, freezing issues

Five Critical Android Bugs Patched, Part of Feb. Security Bulletin

Over a Dozen Chrome Extensions Caught Hijacking Google Search Results for Millions

3 New Severe Security Vulnerabilities Found In SolarWinds Software

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 297.  It is Wednesday February 3rd 2021.  I am your host Scott Gombar and Agent Tesla Takes Out Microsoft’s Anti-Malware Interface

Apple Releases Security Updates

US federal payroll agency hacked using SolarWinds software flaw

Babyk Ransomware won't hit charities, unless they support LGBT, BLM

Trickbot malware now maps victims’ networks using Masscan

Netgain ransomware incident impacts local governments

Agent Tesla Trojan ‘Kneecaps’ Microsoft’s Anti-Malware Interface

Intel agency warns of threats from China collecting sensitive US health data

Montefiore Medical Center and Bethesda Hospital Fire Employees for HIPAA Breaches

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 296.  It is Tuesday February 2nd 2021.  I am your host Scott Gombar and More Impersonation Scams Running Rampant

Hezbollah-Linked Lebanese Cedar APT Infiltrates Hundreds of Servers

A New Software Supply‑Chain Attack Targeted Millions With Spyware

Data breach exposes 1.6 million Washington unemployment claims

US govt: Number of identity theft reports doubled last year

Phishing campaign lures US businesses with fake PPP loans

SonicWall SMA 100 zero-day exploit actively used in the wild

European volleyball org's Azure bucket exposed reporter passports

Scammers posing as FBI agents threaten targets with jail time

Failure to Patch Results in 7-Year Breach of Florida Medicaid Applicants’ PHI

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 295.  It is Monday February 1st 2021.  I am your host Scott Gombar and Beware of Fake Social Media Accounts

Many WordPress Sites Affected by Vulnerabilities in 'Popup Builder' Plugin

USCellular hit by a data breach after hackers access CRM software

SpamCop anti-spam service suffers an outage after its domain expired

Windows 10 features that boost your PC's security and privacy

Beware: Malicious Home Depot ad gets top spot in Google Search

North Korean Hackers Building Fake Persona on Social Networks

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 294.  It is Friday January 29th  2021.  I am your host Scott Gombar and NAT Slipstreaming..What Is It?

Pirated themes and plugins are the most widespread threat to WordPress sites

Rocke Group’s Malware Now Has Worm Capabilities

Microsoft: 8 trillion daily signals power our cybersecurity services

Hezbollah hackers attack unpatched Atlassian servers at telcos, ISPs

Microsoft: DPRK hackers 'likely' hit researchers with Chrome exploit

Remote Attackers Can Now Reach Protected Network Devices via NAT Slipstreaming

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 293.  It is Thursday January 28th  2021.  I am your host Scott Gombar and It’s Not Always Bad News

Apple Patches Three Actively Exploited Zero-Days, Part of iOS Emergency Update

Linux malware uses open-source tool to evade detection

Microsoft rolls out Application Guard for Office to all customers

Emotet botnet disrupted after global takedown operation

Netwalker ransomware dark web sites seized by law enforcement

Almost 190,000 Patients Affected by Roper St. Francis Healthcare Phishing Attack