ProactiveIT Cyber Security Daily

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 262.  It is Wednesday December 9th  2020.  I am your host Scott Gombar and It’s the December Patch Tuesday Episode

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com 

Patches/Updates Available from SAP, OpenSSL, Adobe, Apache Struts, D-Link Routers and Microsoft

FireEye Cyberattack Compromises Red-Team Security Tools

Spearphishing Attack Spoofs Microsoft.com to Target 200M Office 365 Users

‘Amnesia:33’ TCP/IP Flaws Affect Millions of IoT Devices

Ransomware forces hosting provider Netgain to take down data centers

Scammers spoof Target's gift card balance checking page

All Kubernetes versions affected by unpatched MiTM vulnerability

Insider Data Breaches Reported by Montefiore Medical Center and Mercy Health

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 261.  It is Tuesday December 8th  2020.  I am your host Scott Gombar and Anyone Have $34 Million?

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com 

Cisco Releases Security Advisory for Vulnerability in AnyConnect Software

NSA Releases Advisory on Russian State-Sponsored Malicious Cyber Actors Exploiting CVE-2020-4006

PlayStation Now bugs let sites run malicious code on Windows PCs

Microsoft announces Azure cloud for top secret government data

QNAP patches QTS vulnerabilities allowing NAS device takeover

Foxconn electronics giant hit by ransomware, $34 million ransom

Greater Baltimore Medical Center Hit by Ransomware Attack

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 260.  It is Monday December 7th  2020.  I am your host Scott Gombar and Healthcare Organizations are Under Siege

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com 

Google Releases Security Updates for Chrome

Apache Releases Security Advisory for Apache Tomcat

US and Australia to develop shared cyberattack training platform

Largest global staffing agency Randstad hit by Egregor ransomware

BlackShadow hackers extort Israeli insurance company for $1 million

Metro Vancouver's transit system hit by Egregor ransomware

Johnson & Johnson CISO: Healthcare orgs are seeing nation-state attacks every single minute of every single day

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 259.  It is Friday December 4th  2020.  I am your host Scott Gombar and More Tricks for Trickbot

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com 

VMware Releases Security Updates to Address CVE-2020-4006

Apple Releases Security Updates for iCloud for Windows

Credit card stealing malware hides in social media sharing icons

Kmart, Latest Victim of Egregor Ransomware – Report

Several Unpatched Popular Android Apps Put Millions of Users at Risk of Hacking

Ransomware gang says they stole 2 million credit cards from E-Land

IBM Releases Report on Cyber Actors Targeting the COVID-19 Vaccine Supply Chain

TrickBot Returns with a Vengeance, Sporting Rare Bootkit Functions

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 258.  It is Thursday December 3rd  2020.  I am your host Scott Gombar and Using Dropbox to Store Malware

Stolen Data.

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com 

Mozilla Releases Security Update for Thunderbird

Xerox Releases Security Updates for DocuShare

Healthcare 2021: Cyberattacks to Center on COVID-19 Spying, Patient Data

iPhone Bug Allowed for Complete Device Takeover Over the Air

Phishing targets US brokerage firms using FINRA lookalike domain

Microsoft Office November 2020 updates fix Outlook, Skype issues

FBI and Homeland Security warn of APT attacks on US think tanks

Russian hacking group uses Dropbox to store malware-stolen data

Email Account Breaches Reported by University of Minnesota Physicians and McLeod Health

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 257. It is Wednesday December 2nd 2020. I am your host Scott Gombar and Another Day, Another School Ransomware Attack

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut. You can visit us at nwajtech.com

Cayman Islands Bank Records Exposed in Open Azure Blob

Zoom Impersonation Attacks Aim to Steal Credentials

Electronic Medical Records Cracked Open by OpenClinic Bugs

Android app still exposing messages of 100M users despite bug fix

Alabama school district shut down by ransomware attack

Healthcare Provider Discovers Patient Data Exposed Online for Over 4 Years

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 256.  It is Tuesday December 1st  2020.  I am your host Scott Gombar and They’re Baaaack...

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com 

Happy Giving Tuesday

MacOS Users Targeted By OceanLotus Backdoor

Baltimore students told to ditch Windows PCs after ransomware attack

Windows 10 Cumulative Update Preview KB4586853 Released

Gootkit malware returns to life alongside REvil ransomware

Healthcare provider AspenPointe data breach affects 295K patients

Mayo Clinic Faces Multiple Lawsuits over Insider Privacy Breach

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 255.  It is Monday November 30th 2020.  I am your host Scott Gombar and The Problem With Long Weekends

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com 

Drupal Releases Security Updates

Fortinet FortiOS System File Leak

TurkeyBombing Puts New Twist on Zoom Abuse

Pennsylvania county pays 500K ransom to DoppelPaymer ransomware

IIoT chip maker Advantech hit by ransomware, $12.5 million ransom

Phishing lures employees with fake 'back to work' internal memos

Truck routing provider Rand McNally hit by cyberattack

cPanel 2FA bypassed in minutes via brute-force attacks

Sophos alerts customers of info exposure after security breach

Baltimore County Public Schools hit by ransomware attack

UVM Health Restores Electronic Health Record System One Month After Ransomware Attack

US Fertility Reports Ransomware Attack Involving Data Theft

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 254.  It is Wednesday November 25th 2020.  I am your host Scott Gombar and Trickbot Has New Tricks

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com 

Happy Thanksgiving

‘Minecraft Mods’ Attack More Than 1 Million Android Devices

Post-Breach, Peatix Data Reportedly Found on Instagram, Telegram

Crooks impersonate US govt agencies offering financial aid

New WAPDropper malware stealthily subscribes you to premium services

TrickBot malware uses obfuscated Windows batch script to evade detection

Three More Healthcare Providers Suffer Cyberattacks Involving Ransom Demands

Phishing Incidents Reported by Connecticut Department of Social Services, Mercy Iowa City and LSU Care Services

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 253. It is Tuesday November 24th 2020. I am your host Scott Gombar and the October HIPAA Breach Roundup Has Arrived

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut. You can visit us at nwajtech.com

VMware Releases Workarounds for CVE-2020-4006

Manchester United: IT Systems Disrupted in Cyberattack

Spotify Users Hit with Rash of Account Takeovers

GoDaddy Employees Used in Attacks on Multiple Cryptocurrency Services

TikTok fixes bugs allowing account takeover with one click

Tesla Model X key fobs could be hacked to steal cars, fix released

FBI warns of recently registered domains spoofing its sites

October 2020 Healthcare Data Breach Report