ProactiveIT Cyber Security Daily

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 412 It is Friday August 6th 2021. I am your host Scott Gombar and 73% of Businesses Suffered a Data Breach Linked to a Phishing Attack in the Past Year

Cisco Releases Security Updates 

VMware Releases Security Updates for Multiple Products

Linux version of BlackMatter ransomware targets VMware ESXi servers

CISA teams up with Microsoft, Google, Amazon to fight ransomware

New DNS vulnerability allows 'nation-state level spying' on companies

Angry Conti ransomware affiliate leaks gang's attack playbook

New Windows PrintNightmare zero-days get free unofficial patch

UF Health Says PHI Potentially Compromised in May 2021 Cyberattack

73% of Businesses Suffered a Data Breach Linked to a Phishing Attack in the Past 12 Months

Healthcare Industry has Highest Number of Reported Data Breaches in 2021

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 411 It is Thursday August 5th 2021. I am your host Scott Gombar and Can You Trust Your Employees?

Google Releases Security Updates for Chrome

‘I’m Calling About Your Car Warranty’, aka PII Hijinx

Several Malware Families Targeting IIS Web Servers With Malicious Modules

Energy group ERG reports minor disruptions after ransomware attack

Cisco fixes critical, high severity pre-auth flaws in VPN routers

LockBit ransomware recruiting insiders to breach corporate networks

Phishing Attacks Reported by Academic HealthPlans and Wayne County Hospital

Guidehouse Reports Breach Affecting Multiple Healthcare Provider Clients

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 410 It is Wednesday August 4th 2021. I am your host Scott Gombar and Critical Vulnerability Impacts at least 80% of US Hospitals

Raccoon Stealer Bundles Malware, Propagates Via Google SEO

Microsoft halts Windows 365 trials after running out of servers

Windows 10 to automatically block potentially unwanted apps

Windows PetitPotam attacks can be blocked using new method

Ransomware Volumes Hit Record Highs as 2021 Wears On

PwnedPiper critical bug set impacts major hospitals in North America

Star Refining & Express MRI Report Phishing Attacks

Harris County, TX: PHI of 26,000 Individuals Exposed Online

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 409 It is Monday August 2nd 2021. I am your host Scott Gombar and Emails from 27 US Attorneys’ offices breached by SolarWind’s hackers.

NSA Warns Public Networks are Hacker Hotbeds

Novel Meteor Wiper Used in Attack that Crippled Iranian Train System

DarkSide ransomware gang returns as new BlackMatter operation

Remote print server gives anyone Windows admin privileges on a PC

FBI warns investors of fraudsters posing as brokers and advisers

DOJ: SolarWinds hackers breached emails from 27 US Attorneys’ offices

More Than 447K Patients Affected by Phishing Attack on Orlando Family Physicians

PHI Potentially Compromised in Ransomware Attacks on Eye Center and Law Firm

Accidental Disclosures of PHI at LA Fire Department and Standard Modern Company

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 408 It is Thursday July 29th 2021. I am your host Scott Gombar and What Are the Most Exploited Vulnerabilities?

New US security memorandum bolsters critical infrastructure cybersecurity

Biden: Severe cyberattacks could escalate to 'real shooting war'

Critical Microsoft Hyper-V bug could haunt orgs for a long time

Northern Ireland suspends vaccine passport system after data leak

LockBit ransomware now encrypts Windows domains using group policies

Microsoft Teams now automatically blocks phishing attempts

Top Routinely Exploited Vulnerabilities

McLaren Health Care and Greenwood Leflore Hospital Impacted by Elekta Ransomware Attack

Phishing Attacks Reported by UC San Diego Health and UnitedHealthcare

Florida Heart Associates Operating at 50% Capacity 2 Months After Ransomware Attack

Overlake Hospital Medical Center Proposes Settlement to Resolve Data Breach Case

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 407 It is Tuesday July 27th 2021. I am your host Scott Gombar and Another Kaseya Problem??

Babuk Ransomware Gang Ransomed, New Forum Stuffed With Porn

Microsoft Defender ATP now secures removable storage, printers

Apple fixes zero-day affecting iPhones and Macs, exploited in the wild

Researchers warn of unpatched Kaseya Unitrends backup vulnerabilities

Paperwork Containing PHI of Oklahoma Heart Hospital Patients Accidentally Donated to Charity

UNC Health and Nebraska DHHS Report Phishing Attacks

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 406 It is Monday July 26th 2021. I am your host Scott Gombar and We’re Not Taking 2FA/MFA Seriously.

FIN7’s Liquor Lure Compromises Law Firm with Backdoor

Microsoft 365 drops support for Internet Explorer 11 in August

Microsoft shares mitigations for new PetitPotam NTLM relay attack

Fake Windows 11 installers now used to infect you with malware

MacOS malware steals Telegram accounts, Google Chrome data

Apple fixes bug that breaks iPhone WiFi when joining rogue hotspots

Twitter reveals surprisingly low two-factor auth (2FA) adoption rate

Former Scripps Health Worker Charged Over HIPAA Violation in COVID-19 Unemployment Benefit Fraud Case

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 405 It is Friday July 23rd 2021. I am your host Scott Gombar and 740 ransomware victims named on data leak sites in the 2nd quarter

 Cisco Releases Security Updates

Drupal Releases Security Updates

Critical Jira Flaw in Atlassian Could Lead to RCE

Phish Swims Past Email Security With Milanote Pages

Kaseya obtains universal decryptor for REvil ransomware victims

Akamai DNS global outage takes down major websites, online services

Ransomware gang breached CNA’s network via fake browser update

740 ransomware victims named on data leak sites in Q2 2021

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 404 It is Thursday July 22nd 2021. I am your host Scott Gombar and The June 2021 HIPAA Breach Report Has Arrived

Apple Releases Security Updates

Google Releases Security Updates for Chrome

Adobe Releases Security Updates for Multiple Products 

Malware Targeting Pulse Secure Devices

MacOS Being Picked Apart by $49 XLoader Data Stealer

NPM Package Steals Passwords via Chrome’s Account-Recovery Tool

Chinese state hackers breached over a dozen US pipeline operators

Microsoft shares workaround for Windows 10 SeriousSAM vulnerability

June 2021 Healthcare Data Breach Report

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 403 It is Wednesday July 21st 2021. I am your host Scott Gombar and The Vulnerabilities Keep Coming, And Some Never Left

Citrix Releases Security Updates 

Fortinet Releases Security Updates for FortiManager and FortiAnalyzer

Oracle Releases July 2021 Critical Patch Update

16-Year-Old HP Printer-Driver Bug Impacts Millions of Windows Machines

DuckDuckGo's new email privacy service forwards tracker-free messages

Microsoft Teams chat feature rolling out to Windows 11

New Windows 10 vulnerability allows anyone to get admin privileges

New Linux kernel bug lets you get root on most modern distros

FBI: Threat actors may be targeting the 2020 Tokyo Summer Olympics

Significant Historical Cyber-Intrusion Campaigns Targeting ICS

Email Account Breaches Reported by MultiPlan and Hawaii Independent Physicians Association

Advocate Aurora Health, Jefferson Health, and Intermountain Healthcare Affected by Elekta Ransomware Attack