ProactiveIT Cyber Security Daily

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 292.  It is Wednesday January 27th  2021.  I am your host Scott Gombar and Internet Outages in the Northeast US

Firefox 85 adds supercookie protection, removes Flash support

TikTok Bug Could Have Exposed Users' Profile Data and Phone Numbers

FTC Reports Scammers Impersonating FTC

Microsoft releases new Windows 10 Intel CPU microcode updates

New Linux SUDO flaw lets local users gain root privileges

Verizon Fios fiber cut causes Internet outage in Northeastern US

Mimecast links security breach to SolarWinds hackers

Google fixes severe Golang Windows RCE vulnerability

Rady Children’s Hospital Facing Class Action Lawsuit over Blackbaud Ransomware Attack

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 291. It is Tuesday January 26th 2021. I am your host Scott Gombar and Add Taunting to Ransomware Tactics

8+ million Teespring user records leaked on hacker forum

Beware of active UK NHS COVID-19 vaccination phishing campaign

Windows 10 NTFS corruption bug gets unofficial temporary fix

Leading crane maker Palfinger hit in global cyberattack

ProtonVPN causes Windows BSOD crashes due to antivirus conflicts

Ransomware gang taunts IObit with repeated forum hacks

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 290.  It is Monday January 25th  2021.  I am your host Scott Gombar and Imagine Being Hacked Using Your Own Zero-Day

Amazon Kindle RCE Attack Starts with an Email

ADT Tech Hacks Home-Security Cameras to Spy on Women

Discord-Stealing Malware Invades npm Packages

Another ransomware now uses DDoS attacks to force victims to pay

Windows 10X feature will prevent unauthorized factory resets

Intel: Hackers stole unpublished earnings info from corporate site

SonicWall firewall maker hacked using zero-day in its VPN device

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 289.  It is Friday January 22nd  2021.  I am your host Scott Gombar and Your Password is on Google

Oracle Releases January 2021 Security Bulletin

Drupal Releases Security Updates

Microsoft Edge gets a password generator, leaked credentials monitor

Google Forms Set Baseline For Widespread BEC Attacks

Windows Remote Desktop servers now used to amplify DDoS attacks

QNAP warns users to secure NAS devices against Dovecat malware

Google Searches Expose Stolen Corporate Credentials

Einstein Healthcare Network Announces August Breach

Data Breaches Reported by Gainwell Technologies, TaylorMade Diagnostics, and Mattapan Community Health Center

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 288.  It is Thursday January 21st  2021.  I am your host Scott Gombar and A Who’s Who of DNSpooq Advisories

Google Chrome now checks for weak passwords, helps fix them

Microsoft shares how SolarWinds hackers evaded detection

Hacker leaks full database of 77 million Nitro PDF user records

Hacker posts 1.9 million Pixlr user records for free on forum

List of DNSpooq vulnerability advisories, patches, and updates

US spinal care practice among first to issue healthcare data breach warning in 2021

At Least 560 U.S. Healthcare Facilities Were Impacted by Ransomware Attacks in 2020

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 287.  It is Wednesday January 20th  2021.  I am your host Scott Gombar and We Haven’t Talked About SolarWinds in a Few Days

Google Chrome 88 released: RIP Flash Player and FTP support

Linux Devices Under Attack by New FreakOut Malware

Bugs in Signal, Facebook, Google chat apps let attackers spy on users

DNSpooq bugs let attackers hijack DNS on millions of devices

Malwarebytes says SolarWinds hackers accessed its internal emails

SolarWinds Malware Arsenal Widens with Raindrop

2020 Healthcare Data Breach Report: 25% Increase in Breaches in 2020

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 286.  It is Tuesday January 19th  2021.  I am your host Scott Gombar and It’s The December 2020 HIPAA Breach Report

IObit forums hacked in widespread DeroHE ransomware attack

Microsoft Defender to enable full auto-remediation by default

OpenWRT Forum user data stolen in weekend data breach

FBI warns of vishing attacks stealing corporate accounts

Over 22 bn records exposed in data breaches in 2020: Report

December 2020 Healthcare Data Breach Report

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 285.  It is Monday January 18th  2021.  I am your host Scott Gombar and Ransomware Now Accounts for half of healthcare data breaches

Today we pay our respects to a great man. Thank you for all you did Dr. Martin Luther King Jr. There’s still a lot of work to be done. Injustice anywhere is a threat to justice everywhere

Microsoft Implements Windows Zerologon Flaw ‘Enforcement Mode’

Apple Kills MacOS Feature Allowing Apps to Bypass Firewalls

WhatsApp Delays Controversial 'Data-Sharing' Privacy Policy Update By 3 Months

Undisclosed Apache Velocity XSS vulnerability impacts GOV sites

Windows 10 bug causes a BSOD crash when opening a certain path

Windows Finger command abused by phishing to download malware

Hackers leaked altered Pfizer data to sabotage trust in vaccines

Ransomware attacks now to blame for half of healthcare data breaches

M.D. Anderson Cancer Center Has $4.3 Million OCR HIPAA Fine Overturned on Appeal

Health Insurer Pays $5.1 Million To Settle Data Breach Affecting Over 9.3 Million People

South Country Health Alliance Breach Impacts 66,874 Plan Members

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 284.  It is Friday January 15th  2021.  I am your host Scott Gombar and DNS Recommendations from the NSA

Juniper Networks Releases Security Updates for Multiple Products

Cisco Releases Security Updates for Multiple Products

Office January security updates fix remote code execution bugs

Telegram Bots at Heart of Classiscam Scam-as-a-Service

Critical WordPress-Plugin Bug Found in ‘Orbit Fox’ Allows Site Takeover

Windows 10 bug corrupts your hard drive on seeing this file's icon

Verified Twitter accounts hacked in $580k ‘Elon Musk’ crypto scam

NSA advises companies to avoid third party DNS resolvers

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 283.  It is Thursday January 14th  2021.  I am your host Scott Gombar and 2020 Year in HIPAA Review

Sophisticated Hacks Against Android, Windows Reveal Zero-Day Trove

CISA: Hackers bypassed MFA to access cloud service accounts

Skype is down worldwide - Microsoft working on issues

SolarLeaks site claims to sell data stolen in SolarWinds attacks

OCR Continues HIPAA Right of Access Crackdown with $200,000 Fine

2020 HIPAA Violation Cases and Penalties