ProactiveIT Cyber Security Daily

Update on the Pensacola FL Ransomware Attack. 460,000 payment cards sold on the black market. New vulnerability impacting Intel processors dubbed 'plundervolt'. iOS patches Vulnerability in AirDrop. Zeppelin Ransomware attacks targeting healthcare in Europe, Canada and US. Phishing attacks reported at Sunrise Community Health and Katherine Shaw Bethea Hospital and another Florida Ransomware attack reported, this time at PRIDE.

Updates to Google Chrome, Adobe and Microsoft Windows. Banner Health settles for $6,000,000. Another Amazon Storage account left open to the public exposing thousands of birth certificate applications.

An update on the Louisiana OMV and other state offices Ransomware attack. NJ Hospital hit with undisclosed technology disruption. Another AWS S3 Bucket left open n leading to massive document leaks for Dunkin Donuts, GE And Forever 21. Pensacola FL hit with a Cyber Attack. Snatch Ransomware reboots Windows computers into safe mode to disable anti-malware and Trickbot continues to evolve and add attack vectors.

A busy weekend for Cyber News. AT&T, Verizon and TMobile bills left exposed on unsecured AWS S3 Bucket. Facebook pays $4 million for compromised ads accounts. VMWare releases patches for vulnerabilities in ESXi and Horizon DaaS. A clever Microsoft Phishing scam. A fake (free) VPN pushes information stealing Trojans. Nvidia patches severe flaw in Mercedes Infotainment system, Nintendo Switch and Some Chromebooks. Another class action b lawsuit filed against TikTok. Mac uses targeted again with fileless trojan. And the big news....110 dental practices hit n with Ransomware because their MSP wasn't using MFA.

An update on the CYRUSOne Data Center Ransomware attack. New Linux Vulnerability let's attackers hijack VPN Sessions. New PCI Security standards for contactless payments. Microsoft releases security advisory for Microsoft Hello for Business. Hackerone pays $20,000 bounty for but found on their own site and rogue employee accessed ePHI they weren't supposed to access in Nebraska

Zerocleare being used by Iran to wipe devices targeting the energy sector in the middle East. "Ultimate" MiTM attack steals $1 million from Israeli startup. Dutch politician facing 3 years for hacking iCloud accounts and stealing/leaking nude photos. Healthcare threat detections are up 45% in Q3 2019.

Windows 7 EOL is coming in just over a month. What does that mean for you? Avast and AVG browser plugins spying on users? Smith+Wesson site hacked to steal customer payment info. FTC warns of scam spreading terrorism allegations. And an November HIPAA breach n round up... hint, don't store PHI in email.

Unprotected database exposes millions of text messages. New Chrome password stealer sends credentials to a MongoDB. Strandhogg vulnerability affects Android OS. Facebook and Amazon Ads manager targeted by new info stealing Trojan. CISA encourages collaboration with Vulnerability disclosures.

FBI warns of Smart TVs being vulnerable. Europol shuts down Imminent Monitor Rat. Magento Marketplace breached. Netflix account freeze phishing email and deactivated accounts reactivated. Scammers pose as CISA reps over the phone and Ransomware attack at Great Plains Health.

It's no coincidence that our 13th episode comes on Black Friday. We discussed Twitter MFA, Facebook outage, COPRA, Governments hacking Google Accounts, protecting your identity on Black Friday and tomorrow is national computer security day.