ProactiveIT Cyber Security Daily

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 272.  It is Monday December 28th  2020.  I am your host Scott Gombar and From Defeat Comes Victory

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com 

CISA Releases Free Detection Tool for Azure/M365 Environment

Emotet Returns to Hit 100K Mailboxes Per Day

Lazarus Group Hits COVID-19 Vaccine-Maker in Espionage Attack

Windows Zero-Day Still Circulating After Faulty Fix

Apple iCloud outage prevents device activations, access to data

SolarWinds releases updated advisory for new SUPERNOVA malware

Fake Amazon gift card emails deliver the Dridex malware

CrowdStrike releases free Azure security tool after failed hack

OCR Announces its 19th HIPAA Penalty of 2020

Former GenRx Pharmacy Patients’ PHI Potentially Compromised in Ransomware Attack

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 271.  It is Wednesday December 23rd  2020.  I am your host Scott Gombar and A Ransomware Task Force is Formed

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com 

Roanoke College delays spring semester after cyberattack

Safe-Inet, Insorg VPN services shut down by law enforcement

Microsoft: Don't delete Windows 10 root certificate expiring this month

SolarWinds hackers breached US Treasury officials’ email accounts

Partial lists of organizations infected with Sunburst malware released online

Microsoft and McAfee headline newly-formed 'Ransomware Task Force'

November 2020 Healthcare Data Breach Report

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 270.  It is Tuesday December 22nd  2020.  I am your host Scott Gombar and A Second Orion Attacker?

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com 

Smart Doorbell Disaster: Many Brands Vulnerable to Attack

Dark Web Pricing Skyrockets for Microsoft RDP Servers, Payment-Card Data

Zero-Click Apple Zero-Day Uncovered in Pegasus Spy Attack

Critical Bugs in Dell Wyse Thin Clients Allow Code Execution, Client Takeovers

New SUPERNOVA backdoor found in SolarWinds cyberattack analysis

FTC Settles 2019 Consumer Data Breach Case with SkyMed

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 269.  It is Monday December 21st  2020.  I am your host Scott Gombar and More Updates to the SolarWinds Breach

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com 

NSA Releases Cybersecurity Advisory on Detecting Abuse of Authentication Mechanisms

Flavors designer Symrise halts production after Clop ransomware attack

Stealthy Magecart malware mistakenly leaks list of hacked stores

The SolarWinds cyberattack: The hack, the victims, and what we know

Lost Storage Device Contained Unencrypted PHI of Cedar Springs Hospital Patients

Email Account Breaches Reported by Meharry Medical College and MEDNAX Services

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 268.  It is Friday December 18th  2020.  I am your host Scott Gombar and It’s Ugly

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com 

5M WordPress Sites Running ‘Contact Form 7’ Plugin Open to Attack

Ransomware masquerades as mobile version of Cyberpunk 2077

Iranian nation-state hackers linked to Pay2Key ransomware

Nation-state hackers breached US think tank thrice in a row

CISA: Hackers breached US govt using more than SolarWinds backdoor

Nuclear Weapons Agency Hacked in Widening Cyberattack – Report

Microsoft confirms breach in SolarWinds hack, denies infecting others

FBI, CISA officially confirm US govt hacks after SolarWinds breach

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 267.  It is Thursday December 17th  2020.  I am your host Scott Gombar and HPE discloses critical zero-day vulnerability

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com 

Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

New Goontact spyware discovered targeting Android and iOS users

Malicious Chrome, Edge extensions with 3M installs still in stores

FireEye, Microsoft create kill switch for SolarWinds backdoor

Emulated mobile devices used to steal millions from US, EU banks

HPE discloses critical zero-day in server management software

House Passes Bill Calling for HHS to Recognize Adoption of Cybersecurity Best Practices When Making Regulatory Determinations

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 266.  It is Wednesday December 16th  2020.  I am your host Scott Gombar and The Hits Keep Coming

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com 

Apple Releases Security Updates for Multiple Products

Firefox 84 dramatically boosts performance on Apple Silicon Macs

Millions of Unpatched IoT, OT Devices Threaten Critical Infrastructure

Ransomware attack causing billing delays for Missouri city

Gmail hit by a second outage within a single day

Microsoft to quarantine compromised SolarWinds binaries tomorrow

SEC filings: SolarWinds says 18,000 customers were impacted by recent hack

45 Million Medical Images Left Exposed Online

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 265.  It is Tuesday December 15th  2020.  I am your host Scott Gombar and DHS & Treasury Hit by Cyberattack Using Solarwinds Orion.

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com 

Microsoft Office 365 Credentials Under Attack By Fax ‘Alert’ Emails

Google outage affecting YouTube, Gmail and more

Subway marketing system hacked to send TrickBot malware emails

DHS Among Those Hit in Sophisticated Cyberattack by Foreign Adversaries – Report

Tufts Health Plan Members’ PHI Exposed in EyeMed Phishing Attack

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 264.  It is Friday December 11th  2020.  I am your host Scott Gombar and U.S. warns of increased cyberattacks against K-12 distance learning

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com 

Adobe Releases Security Updates for Acrobat and Reader

Remote code execution vulnerability uncovered in Starbucks mobile platform

Hackers can use WinZip insecure server connection to drop malware

Fake data breach alerts used to steal Ledger cryptocurrency wallets

250,000 stolen MySQL databases for sale on dark web auction site

U.S. warns of increased cyberattacks against K-12 distance learning

Six More Healthcare Providers Impacted by Ransomware Attacks

Dental Care Alliance Data Breach Impacts More Than 1 Million Patients

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 263.  It is Thursday December 10th  2020.  I am your host Scott Gombar and Ransomware Gangs Are Getting Faster..What That Means For You

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com 

COVID-19 Vaccine Cyberattacks Steal Credentials, Spread Zebrocy Malware

Lightning does strike twice: If you get hacked once, you'll probably be attacked again within a year

Ransomware gangs are getting faster at encrypting networks. That will make them harder to stop

Qbot malware switched to stealthy new Windows autostart method

Pfizer COVID-19 vaccine documents accessed in EMA cyberattack