ProactiveIT Cyber Security Daily

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 42.  It is Monday, January 13, 2020. I am your host Scott Gombar and Don’t Say We Didn’t Warn You.

 This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com

New York Phishing Attack: Nassau County Recovers $710,000

UPDATE: PoC Exploits Released for Citrix ADC and Gateway RCE Vulnerability

Sodinokibi Ransomware Publishes Stolen Data for the First Time

Maze Ransomware Publishes 14GB of Stolen Southwire Files

Sodinokibi Ransomware Hits New York Airport Systems

US Govt Warns of Attacks on Unpatched Pulse VPN Servers

Beware of Amazon Prime Support Scams in Google Search Ads

Hundreds of millions of cable modems are vulnerable to new Cable Haunt vulnerability

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 41.  It is Friday January 10, 2020. I am your host Scott Gombar and We Return You to Your Regularly Scheduled Programming.  

 This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com

Drake Lyrics Used as Calling Card in Malware Attack

Exploit Fully Breaks SHA-1, Lowers the Attack Bar

Liverpool Voyeur Used IM-RAT to Video Women at Home

Juniper Networks Releases Security Updates

Cisco Releases Security Updates for Multiple Products

TrickBot Gang Created a Custom Post-Exploitation Framework

Travelex Update

New Iranian data wiper malware hits Bapco, Bahrain's national oil company

Google Removed Over 1.7K Joker Malware Infected Apps from Play Store

 

 

 

 

https://www.hipaajournal.com/up-to-25k-patients-of-the-native-american-rehabilitation-association-of-the-northwest-affected-by-malware-attack/

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 40.  It is Thursday January 9, 2020. I am your host Scott Gombar and What Happens in Vegas is Happening Everywhere.

 This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com

 

City of Las Vegas wakes up to a cyber attack

Google Ditches Patch-Time Bug Disclosure in Favor of 90-Day Policy

50 Percent of Websites Using WebAssembly Show Malicious Behavior: Report

Update: Attackers Are Scanning for Vulnerable Citrix Servers, Secure Now

TikTok Flaws Allowed Hackers to Delete Videos, Steal User Info

SNAKE Ransomware Is the Next Threat Targeting Business Networks

From CES 2020:  CES 2020: Ford wants this two-legged robot to deliver packages to your door

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 39.  It is Wednesday Jan 8, 2020. I am your host Scott Gombar and Just When You Thought We’d Go a Week WIthout a HIPAA Breach

 This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com

Facebook  has begun cracking down on DeepFake Videos.

They will remove videos that are uploaded in an attempt to deceive but will not remove videos determined to be satirical.  

If videos have been edited or synthesized in ways that aren’t obvious to an average person and intend to mislead people into thinking that a subject of the video said words that they did not actually say.

If videos are the product of artificial intelligence or machine learning that merges, replaces or superimposes content onto a video, making it appear to be authentic.

Google has removed several apps with zero day exploits or critical vulnerabilities from the Google Play Store.  They include Camero, FileCrypt, CallCam and Pulse Secure VPN App

Cisco Releases Security Updates

Microsoft Phishing Scam Exploits Iran Cyberattack Scare

Firefox 72 Out With Fingerprinter Blocking, Hidden Notification Prompts

Medical Info of Roughly 50K Exposed in Minnesota Hospital Breach

Hospital Employee Pleads Guilty to Five-Year Account Hacking Spree

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 38.  It is Tuesday Jan 7, 2020. I am your host Scott Gombar and These Are Not The Updates You Are Looking For.

 This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com

A Note to Dentists:  While Researching Practices in my area I have discovered several dentists websites are compromised.  

Continued Warnings re: Tensions Between US and Iran from CISA

US Government Says Iran Can Disrupt Critical Infrastructure

Update to Travelex Ransomware Attack: Sodinokibi Ransomware Hits Travelex, Demands $3 Million

IT Executive Steals $6 Million, Busted by Word Doc Metadata

Update to Infotrax Data Breach: InfoTrax Gets Slap on The Wrist After Being Breached 20+ Times

Fake Windows 10 Desktop Used in New Police Browser Lock Scam

CES 2020: Amazon's Alexa will help you pay for gas at Exxon or Mobil stations

Lots of new 2 in 1 Laptops at CES 2020 including a Lenovo foldable targeted at the mobile workforce ($2500)

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 37.  It is Monday Jan 6, 2020. I am your host Scott Gombar. Even Your Bathroom Can Go High Tech

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com

A Note:  IT and Businesses should be extra vigilant.  Cyber Attacks are a very real threat with the escalating situation between Iran and the US.  There has already been one reported website take down. There’s bound to be more. It might be a good time for an audit to ensure your systems are protected and your backups are secure.

In 2019 Municipalities, Schools and Healthcare Providers were huge Ransomware targets.  That looks to continue in 2020.    

https://www.us-cert.gov/ncas/current-activity/2020/01/04/dhs-releases-ntas-bulletin

Ransomware attack hits City of Ingleside

FBI Warns of Maze Ransomware Focusing on U.S. Companies

Colorado Town Wires Over $1 Million to BEC Scammers

Richmond, MI School District Shuts Down after Ransomware Attack

Charmin at CES 2020: RollBot, SmellSense and V.I.Pee as innovation meets absurd

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 36.  It is Friday Jan 3, 2020. I am your host Scott Gombar. Tik Tok Tik Tok 

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com

CCPA went into effect on Jan 1.  California Consumer Protection Act

Maze Ransomware Sued for Publishing Victim's Stolen Data

Landry's Restaurant Chain Suffers Payment Card Theft Via PoS Malware

Python 2.7 Reaches End of Life After 20 Years of Development

TikTok Banned By U.S. Army Over China Security Concerns

Xiaomi Cameras Connected to Google Nest Expose Video Feeds From Others

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 35.  It is Thursday Jan 2, 2020. I am your host Scott Gombar. This is 2020

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com

Secure New Internet-Connected Devices

2020 Cybersecurity Trends to Watch

Sextortion Email Scammers Try New Tactics to Bypass Spam Filters

Ransomware Stats for 2019 as reported by Emsisoft

In 2019, the U.S. was hit by a record number of ransomware attacks that impacted at least 948 government agencies, educational institutions and healthcare facilities at a cost of more than $7.5 billion by a conservative estimate. The impacted organizations included:

103 federal, state and municipal governments and agencies.

759 healthcare providers.

86 universities, colleges and school districts, with operations at up to 1,224 individual schools potentially affected.

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 34.  It is Tuesday December 31, 2019. I am your host Scott Gombar. Happy New Year!!

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com

Cloud Hopper cyberattacks, launched by APT10 vs. MSPs and CSPs worldwide, were larger than previously disclosed, a new report says

The Curious Case of 20 Unsecured Buckets Containing Nearly 48 Million Records

Special Olympics New York Hacked to Send Phishing Emails

https://www.hipaajournal.com/category/hipaa-breach-news/

Ambulance Company Pays $65,000 to Settle Allegations of Longstanding HIPAA Noncompliance

Good Morning and Welcome to the ProactiveIT Cyber Security Daily number 33.  It is Monday December 30, 2019. I am your host Scott Gombar and Let’s Get Local for a Minute. 

 

This podcast is brought to you by Nwaj Tech, a Client Focused and Security Minded IT Consultant based in Central Connecticut.  You can visit us at nwajtech.com

Connecticut Receives $5 Million for Election Cybersecurity

U.S. Coast Guard Says Ryuk Ransomware Took Down Maritime Facility

Wyze Exposes User Data via Unsecured ElasticSearch Cluster

Microsoft Outlook for the Web to Support Sending Email As Alias