Healthcare provider ILS suffered a data breach allegation... (2023)

Clop ransomware entered the Crown Resorts network by exploiting the GoAnywhere zero-day vulnerability*

Security researchers have discovered a vulnerability in the WiFi protocol that allows attackers to hijack network traffic*

Researchers found Trojanized Tor browsers targeting Russians with malware to steal cryptocurrency*

Attackers targeted European companies to spread Remco's RAT and Formbook malware*

Pakistan-based SideCopy APT Group Targets India's DRDO With Action RAT*

Researchers have found new variants of IcedID Loader that deliver additional malware*

A new MacStealer malware that targets Mac users and steals iCloud Keychain credentials*

Apple fixes WebKit zero-day bug on older iPhones*

Twitter removes leaked source code on GitHub and seeks downloaders*

Attackers target US taxpayers in new Emotet phishing campaign*

A critical bug in the MLflow AI testing framework could expose AI models and machine learning*

OpenAI reveals an incident related to ChatGPT user data*

Microsoft Warns of Outlook Vulnerability Exploited by Russian Attackers*

Procter & Gamble reports GoAnywhere zero-day* data breach

Chinese Nuclear Power Plants Under Attack From 'Bitter' Spy Hackers

Lionsgate Streaming Network Reveals Over 37 Million Subscriber Data*

Malicious Python package uses Unicode technique to evade detection*

Researchers reveal new attack strategies used by Chinese nation-state hackers*

Threat Actors Attack 450 Financial Apps Using Android Banking Trojan*

GitHub code hosting platform quickly replaces exposed RSA SSH key*

Play ransomware gang publishes data stolen from Royal Dirkzwager shipping company*

WordPress fixed a critical vulnerability in the WooCommerce checkout plugin*

BlackGuard Stealer targets 57 browser extensions and cryptocurrency wallets*

Cisco has patched high-severity vulnerabilities in its IOS and IOS XE software*

Microsoft fixes privacy bugs in Windows 11's Acropalypse snipping tool

Researchers warn of Gmail content theft by threat group Kimsuky*

Researchers Publish Proof-of-Concept (PoC) for Vulnerabilities in NETGEAR Orbi Mesh* Wireless System

Trojan ChatGPT Chrome extension found hijacking Facebook accounts*

CISA warned of critical security vulnerabilities in products for industrial control systems*

Play ransomware gang allegedly releases data stolen from logistics service provider Royal Dirkzwager*

Mozilla fixes Firefox crash issue on Windows 11 and macOS* systems

Hackers use new CommonMagic and PowerMagic malware to steal victims' information*

Threat actors targeting Linux servers with various variants of ShellBot* malware

Researchers have found malicious NuGet packages targeting .NET developers*

Scammers extort 1 crore INR from 81 users through mobile payment app*

Threat actors exploited a zero-day vulnerability in Bitcoin ATMs in general*

Ferrari, Italian luxury sports car maker, announces data breach*

Realtek SDK, Huawei routers and Hadoop YARN servers targeted by new HinataBot* botnet

FBI, CISA, and MS-ISAC Release Notice Warning About LockBit 3.0 Ransomware Attacks*

New Trigona ransomware targets Australia, US and European countries*

Threat actors are now proliferating Emotet malware via malicious Microsoft OneNote files*

The NBA suffers a data breach that exposes the personal information of its fans*

Scammers use Twitter's "quote tweet" feature to target bank customers*

Attackers spread "FakeCalls" Android malware in South Korea*

Cyber attack on Latitude Financial Services leads to data theft at two service providers*

Google warns of 18 zero-day bugs in Samsung's Exynos chipsets*

Attackers misuse Adobe Acrobat Sign to spread information-stealing Redline* malware

Mozilla has announced the release of Firefox 111 with dozens of vulnerability patches*

Attackers broke into US federal agencies by exploiting legacy Telerik UI vulnerability*

Researchers Discover Dero's First Cryptojacking Campaign Targeting Kubernetes*

Healthcare provider ILS suffered a data breach that exposed 4.2 million patient records*

Researchers publish technical details about critical vulnerability in Microsoft Outlook*

Tick APT Group contracted with a data loss prevention company in East Asia*

CISA has added a critical Adobe ColdFusion vulnerability to its catalog of known exploits*

New Threat Group YoroTrooper Carries Out Cyber Espionage Campaign Against CIS Government Organizations*

Rubrik Suffers a Data Breach from GoAnywhere's Zero-Day Attack*

SAP fixes five critical vulnerabilities in its security updates*

Microsoft Patchday Security Advisory: March 2023*

Euler Finance Lost $197 Million in Cryptocurrencies in a Flash Loan Attack*

Dark Pink APT Group uses KamiKakaBot malware against government and military entities in Southeast Asia*

Massive cyberattack hijacks East Asian websites to redirect victims to adult content*

Threat actors using AI-generated YouTube videos to spread information-stealing malware*

Researchers have discovered critical vulnerabilities in the Akuvox E11 video door phone*

Unidentified attackers target government networks and exploit new FortiOS bug for zero-day attacks*

Researchers have revealed a cross-site search vulnerability in the OpenSea NFT Marketplace*

Researchers have found a new CASPER attack that leaks data from computers without air*

German vehicle manufacturer BMW reveals customer data and company secrets*

US office supply retailer Essendant suffers multi-day outage*

Updated version of Prometei malware infects 10,000 systems worldwide*

Clop Ransomware Gang Starts Blackmailing Victims of GoAnywhere Zero-Day Exploits*

Researchers discovered BATLOADER malware that abused Google ads to deliver a secondary payload*

New UNC2970 Threat Agent Targeting Security Researchers Using New Custom Malware Families*

Researchers found new servers targeted by GoBruteforcer malware running phpMyAdmin, MySQL, FTP and Postgres* services

CISA adds two vulnerabilities to its catalog of known exploits*

The Brain Health Platform suffered a data breach that affected 3.18 million patients*

Researchers found a new Android malware variant, Xenomorph, targeting over 500 banks*

Threat actors exploiting vulnerabilities in remote desktop software to spread PlugX* malware

New IceFire ransomware variant now actively targets Linux* systems

Attackers Target Oracle WebLogic Server With New ScrubCrypt* Encryptor

A Chinese hacking campaign targets unpatched SonicWall SMA devices to install custom malware*

AT&T carrier hack exposes 9 million customer records*

Researchers have reported a Bitwarden autocomplete flaw that can be abused to steal credentials*

Sharp Panda's new campaign targets Southeast Asian government agencies using Soul Malware*

Veeam has patched a high-level vulnerability in Backup Services affecting its backup infrastructure*

Fortinet has patched a critical RCE vulnerability affecting FortiOS and FortiProxy*

SYS01stealer: A new attack on critical infrastructure companies with Facebook ads*

Transparent Tribe hackers use Trojanized messaging apps to spread CapraRAT*

Microsoft releases fix for Outlook login issues in Exchange environments*

Acer Announces Data Breach After Selling 160GB Of Data On Hacker's Website*

The Android March 2023 update fixes two critical code execution bugs*

New HiatusRAT malware found targets DrayTek Vigor routers to steal data*

Researcher discovered Blackfly APT Group targeting Asian companies*

Experts discover a blind spot in Google Cloud Platform leading to data exfiltration attacks*

New phishing campaign uses legacy Windows User Account Control bypass to drop malware*

Researcher publishes proof of concept for critical Microsoft Word RCE vulnerability*

Sandbox Blockchain Games staff account hacked to send malware-linked emails*

Threat actors using malicious Microsoft OneNote attachments to infect Windows* systems

Researchers found new FiXS ATM malware targeting banks in Mexico*

Tennessee State University and Southeast Louisiana Universities under attack*

CISA and FBI warn of increase in real ransomware attacks*

Researchers found thousands of compromised websites with stolen FTP credentials*

Threat Actors Launch New Cryptojacking Campaign Targeting Misconfigured Redis Database Servers*

Microsoft has patched MMIO information disclosure vulnerabilities in Intel* CPUs

Experts discover an information stealer and an entire Trojan horse in a Python package on PyPI*

Scammers target Trezor customers with fake data breach notifications*

Aruba Networks has patched six critical severity vulnerabilities affecting ArubaOS* releases

Iron Tiger attackers create a new Linux version of their custom malware SysUpdate*

Cisco Addresses Critical RCE Vulnerability in Web UI for Multiple IP Phones*

BlackLotus is the first UEFI boot kit malware to bypass Secure Boot defenses in Windows 11*

Microsoft has addressed a global outage affecting its Exchange online mailboxes*

Blind Eagle hackers target Colombian companies with spear phishing*

Attackers using advanced hacking operation SCARLETEEL to infiltrate cloud services*

Researchers have identified two security flaws in Trusted Platform Module (TPM) 2.0*

US TV giant Dish Network confirms ransomware attack behind multi-day network outage*

CISA Warnings Regarding Active Use of ZK Java Framework RCE Flaw*

Attackers promote new Exfiltrator-22 post-exploit framework to spread ransomware*

LastPass publishes additional data breach information in Password Vault December 2022*

Investigators found a mysterious Nevada group targeting thousands of cloud servers*

Attackers use LinkedIn URL shorteners to send Amazon Prime phishing emails*

Two critical bugs in WordPress Houzez theme and plugin are actively exploited in the wild*

The US Marshals Service suffered a data breach followed by a ransomware attack*

Encino Energy, Ohio's largest oil producer, is the target of a cyberattack*

ChromeLoader campaign now distributes malicious VHD files disguised as game programs*

Cyberattacks target data center organizations to steal information*

News Corp data breach statement reveals hackers have been on their network for 2 years*

Third Party Partner of Electronics Retailer The Good Guy Suffers Data Breach*

Attackers flood NPM repository with 15,000 malicious packages containing phishing links*

Dish Network, American television giant, suffers a blackout*

Stanford University Suffers a Data Breach Affecting 897 Graduate Students*

Researchers found unknown threat actors targeting government agencies with PureCrypter* malware

Pirated Final Cut Pro software targets macOS to mine cryptocurrency*

Researchers uncover a cyber group using Lilith RAT and Atharvan Malware to target materials research industry*

Dole, a fruit and vegetable company affected by a ransomware attack*

Analysts Warn of Increase in Attacks Leveraging Zoho ManageEngine Products*

Canada's second largest telecommunications company, TELUS, is investigating a possible data breach*

Cisco fixes high-severity vulnerabilities in its application-facing infrastructure components*

Attackers exploited the vulnerability in R1Soft Server Backup Manager to provide a backdoor*

New S1deload Info-Stealer malware targets YouTube and Facebook* accounts

Transportation and medical laboratories under attack by the new threat substance Hydrochasma*

Hackers use fake ChatGPT apps to spread malware for Windows and Android*

VMware fixed a critical injection bug in Carbon Black Application Control*

CISA adds three new vulnerabilities to its catalog of known exploits*

Security researchers publish proof-of-concept exploit for Fortinet's critical FortiNAC RCE flaw*

Researchers discovered the MyloBot botnet that infects thousands of systems every day*

Video game publisher Activision suffered a data breach*

Pakistani SideCopy Threat Actor Targeting Indian Government Agencies Using ReverseRAT* Backdoor

Apple has updated its security advisories to add a new class of vulnerabilities*

Researchers found a new feature-rich Stealc malware*

HardBit 2.0 ransomware operators use victim's insurance details to set up ransom payment*

Samsung adds a new security feature to guard against zero-click attacks*

Indian ticketing platform RailYatri suffered a data breach affecting 31 million customers*

The attacker targeted Coinbase employees in a smishing attack

Attackers use a new version of the OxtaRAT backdoor to attack Armenian units*

Researchers found a new WhiskerSpy backdoor implemented by a Trojan codec dropper*

Threat actors exploiting vulnerabilities in Microsoft Exchange ProxyShell to deploy cryptocurrency miners*

Experts found attackers using RambleOn malware to target South Korean journalists*

Researchers found a new Mirai botnet variant targeting Linux and IoT devices*

GoDaddy reports a multi-year security breach it suffered*

Threat actors target Microsoft IIS servers with new Frebniis* malware

Fortinet fixes two critical vulnerabilities in the FortiNAC and FortiWeb* product

CISA alerts on Windows and iOS vulnerabilities exploited as zero days*

Xavier University of Louisiana HBCU reported a data breach in November 2022*

Researchers found an authenticated RCE vulnerability in the Arris* router

Scandinavian Airlines suffered a cyberattack that exposed customer details*

Burton Snowboards canceled online orders after a cyber attack*

RedEyes APT Group uses new "M2RAT" malware to steal data from victims*

Splunk fixes high-severity vulnerabilities in its enterprise solution update*

New stealthy malware "Beep" focuses heavily on evading detection*

Tonga Communications Corporation Suffers Ransomware Attack*

Hyundai and Kia car thefts skyrocket due to TikTok Challenge*

Hackers use new MortalKombat ransomware and Laplas ransomware targeting US victims*

Community Health Systems Suffers Data Breach Affecting 1 Million Patients*

Microsoft Exchange Server 2013 will reach End of Life in April 2023*

Al-Toufan Hacking Group Targets Bahrain Airport News Websites And Websites*

Microsoft Patchday Security Advisory: February 2023*

Pepsi's Largest Bottler, US Bottler, Suffers Data Breach*

Garrison Women's Health suffered a data breach affecting 4,000 patients*

Apple has patched a new actively exploited zero-day vulnerability in WebKit*

Cloudflare detects and mitigates the largest DDoS attack on record*

Modified version of ESXiArgs ransomware blocks VMware host recovery*

New DarkBit Ransomware Group Targets Technion*, Israel's Leading Research University

Threat actors hacked into Namecheap email account to send phishing emails*

CISA Warns of North Korean Hackers Targeting Healthcare Organizations with Ransomware Attacks*

CISA adds three more vulnerabilities to its catalog of known exploits*

Several California medical groups suffered a ransomware attack*

Researchers found malicious packages in PyPI and NPM* repositories

Reproduce attacks with ransomware claims on A10 networks*

Clop Ransomware Gang claims to exploit GoAnywhere zero-day bugs*

Microsoft announces discontinuation of Microsoft Support Diagnostic Tool (MSDT) and troubleshooters*

Researchers have found multiple vulnerabilities in Industrial Wireless Internet of Things (IIoT) devices*

NewsPenguin Threat Actor Targets Pakistani Companies in Phishing Campaign*

Russian Hackers Use Fake Crypto Job Postings to Spread Enigma Malware*

Reddit was hit by a hack that allowed hackers to steal the source code*

Largest Canadian bookstore Indigo suffered cyber attack*

Researchers have found Russian hackers using new Graphiron malware to attack Ukraine*

Ross Memorial Hospital in Lindsay affected by cyberattack*

Munster University of Technology (MTU) in Ireland suffers from a severe IT gap*

Multiple document management systems found with unpatched vulnerabilities*

Google released Chrome 110 that fixes 15 vulnerabilities*

Pharmaceutical retailer AmerisourceBergen affected by a cyberattack*

Researchers found a new Medusa botnet targeting Linux users*

GuLoader malware targets e-commerce industry with malicious NSIS executable files*

Developers Release Emergency Patch for Actively Exploited Zero-Day Bug in GoAnywhere MFTaaS*

Researcher Reveals a Bug Discovered in Toyota's Global Supplier Management System (GSPIMS)*

Google Chrome will no longer support Windows 7, 8, 8.1, Windows Server 2012 and 2012 R2 starting in February 2023*

OpenSSL releases patch to fix high severity vulnerabilities*

US third-party provider Cellular suffers data breach affecting its 52,000 customers*

Researchers announced a high severity string vulnerability in F5 BIG-IP*

India's largest truck broker FR8 discloses 140GB of information in data breach*

TgToxic malware targets Android users in Southeast Asia*

Hackers pose as Ukrainian Ministry officials to deploy malware*

TruthFinder and Instant Checkmate report a data breach affecting 20 million consumers*

A new wave of ransomware attacks on ESXi systems exploiting a vulnerability in VMware*

Major Power and Internet Outages in Bermuda*

A new banking Trojan for Android targets Brazilian financial institutions*

A GoAnywhere MFT zero-day bug allows server hacking*

Florida hospital shuts down its IT systems after cyberattack*

Threat Actors Targeting Vulnerabilities in SugarCRM and Oracle E-Business Suite*

Atlassian's Jira software has a critical authentication vulnerability*

Iranian oil rig hackers use new backdoor to steal data from government agencies*

Hackers use KoiVM virtualization technology to avoid detection when installing Formbook Data Stealer*

North Korean hacking group Lazarus stole 100GB of data through the No Pineapple!* campaign

Financial Software Provider ION Group Suffers Ransomware Attack Global Markets Affected*

Cisco has patched a high severity vulnerability in its IOx application*

Car dealership Arnold Clark suffers data breach claimed by Play* ransomware

Hackers have stolen the data of 240,000 Planet Ice Skating customers*

Rogue Crypto Apps Infiltrate Apple App Store and Google Play Store*

BlackCat ransomware gang claims attack on Solar Industries, a manufacturer of industrial explosives*

Hackers used the Google Fi data breach to launch SIM swapping attacks*

A phishing attack on the Latvian Ministry of Defense linked to the Russian hacker group*

Guildford County School Suffers Cyber Attack Leading to Blackout*

US telco status notice affected by third-party data breach*

Indianapolis Housing Agency Suffers Ransomware Attack Affecting 212,910 People*

Hackers announce new Golang-based malware via Telegram channel*

Attackers stole GitHub Desktop encrypted code signing certificates for Mac and Atom apps*

Developers are struggling with a new reported vulnerability in the KeePass software*

QNAP fixes a critical vulnerability in its NAS devices*

UK retailer JD Sports suffered a data breach affecting 10 million customers*

A critical vulnerability in Lexmark printers affects more than 120 models*

Researchers found Grootkit malware with new components and obfuscation techniques*

ISC has patched several high severity DoS vulnerabilities in the DNS BIND software package*

Researchers warn of several vulnerabilities in OpenEMR* healthcare software

Researchers found attackers using portable USB storage devices to spread a new variant of PlugX malware*

Several malicious apps were found in the Google Play Store with over 5 million downloads*

Hackers use new SwiftSlicer Data Cleaner to infect Windows* operating system

CERT IN has published a high severity alert for users of Microsoft Edge*

A major Microsoft 365 outage was caused by a WAN router IP address change*

A hacker group called Sandworm attacked a Ukrainian news agency with five data drafts*

A researcher found 75,000 WordPress sites still using a vulnerable version of the LearnPress plugin*

Data breach against two healthcare organizations affected 400,000 people*

BayCare Clinic suffers a data breach due to the tracking pixel used by a third party*

Websites, administrations and organizations of the financial sector of the German airport suffer DDoS attack*

New Mimic ransomware uses "all" Windows search tools to encrypt files*

Federal Organizations CISA Violation Using Legitimate Remote Desktop Software*

Phishing campaigns use new malware Python RAT to attack Windows*

Threat actors exploit critical Realtek SDK flaw in millions of attacks*

North Korean Hackers Actively Collect Credentials in Latest Cyberattacks*

Zacks Investment Research security breach affects 820,000 clients*

Researchers found threat actors abusing Google ads to spread malware*

DragonSpark attack group uses Golang malware to evade detection*

Several Microsoft services stop responding, including Teams, Outlook, and the Store: Stopping Microsoft Probes*

Arm Mali GPU vulnerability leads to arbitrary kernel and root code execution on Pixel 6 phones*

A vulnerability in the Diksha app exposed the personal information of millions of Indian teachers and students*

Zendesk suffered a data breach after its employee was caught in a phishing attack*

Security researchers have discovered two vulnerabilities in Samsung's Galaxy Store app for Android*

Apple-backed security patches for zero-day vulnerabilities in older iPhone and iPad models*

Nunavut Energy Company Qulliq Energy Corporation suffered cyberattack*

Roaming Mantis adds a new DNS changer to its Android malware to hack WiFi routers*

Ransomware attack on Costa Rica's Ministry of Public Works and Transportation (MOPT)*

Riot Games development environment compromised through social engineering attacks*

Drupal fixes information disclosure vulnerabilities*

Chinese Hackers Use Fortinet Bug As Zero-Day Exploit To Drop Malware*

Hackers actively use OneNote attachments to spread malware*

Researchers are cracking down on massive ad fraud called "Vastflux"*

Over 19,000 Retired Cisco Routers Vulnerable to RCE Attacks*

Windows 10 Preview KB5019275 update contains 14 bug fixes*

Critical Vulnerabilities Fixed OpenText Enterprise Content Management System*

Gamaredon company uses Telegram to launch cyberattacks against Ukraine*

Hackers can abuse GitHub's Codespaces functionality to host and distribute malware*

Researchers discover a new banking Trojan hook with RAT* functions

Fast Food Brand Operator Yum! Brands attacked by ransomware attacks*

Researchers have discovered a critical RCE bug called EmojiDeploy in Microsoft Azure services*

T-Mobile announced a data breach affecting 37 million pieces of customer personal information*

Attackers hacked 34,942 PayPal user accounts in a credential stuffing attack*

Cisco has announced fixes for a high severity SQL injection vulnerability in Unified CM and CM SME*

Oracle fixes 327 vulnerabilities in its January 2023 critical patch update*

The human resources management platform Myrocket.co has revealed personal data of millions of job seekers*

CERT Coordination Center has revealed critical vulnerabilities in Netcomm and TP-Link* routers

Researchers found the NjRAT Trojan distributed through the New Earth Bogle campaign*

MailChimp suffers data breach after attackers obtained employee credentials*

CISA warns of vulnerabilities in products from Siemens, GE Digital and Contec ICS*

Researchers Warn of Critical RCE Vulnerability in Zoho ManageEngine Products*

Nissan North America suffers a data breach due to a misconfigured third-party database*

Microsoft Azure services were vulnerable to unauthorized access to cloud resources*

Git fixes two critical vulnerabilities that allow hackers to execute arbitrary code*

Threat actor "Lolip0p" uploaded three malicious packages to the PyPi platform*

The ODIN Intelligence website has been defaced and breached*

DNV ShipManager software suffers from ransomware attack affecting thousands of shipments*

The Vice Society ransomware gang leaked confidential data from the University of Duisburg-Essen*

Hackers Leak Sensitive San Francisco Transit Police Files Online*

Researchers found Android TV Box with pre-installed malware*

Cryptocurrency wallet provider MetaMask warns users of a new address poisoning scam*

Most of Cacti's servers were found to be unpatched due to a critical vulnerability leading to attacks*

Canada's largest liquor store website hacked to steal credit card information*

Researchers discovered that the CircleCI security incident was caused by information-stealing malware*

Hackers breached NortonLifeLocks* password manager accounts

Cybercriminals use Polyglot files to spread malware undetected*

WordPress plugins along with PoCs have been found to be vulnerable to critical SQL injection bugs*

Researchers have discovered that EyeSpy malware is distributed via Trojan-laden VPN droppers*

Attackers Exploit Fixed FortiOS Zero-Day SSL VPN Vulnerability Against Government Networks*

IcedID Malware Attack Compromised Active Directory Domain*

Researchers found that hackers were actively exploiting a critical flaw in the web control panel*

Cisco discovers three vulnerabilities in Asus router software *

Researchers reveal SymStealer vulnerability in Google Chrome and Chromium*-based browsers

Australia Victoria fire brigade suffers alleged data breach by Vice Society Ransomware Gang*

Gootkit Loader abuses VLC Media Player to infect Australian healthcare organizations*

Google released Chrome 109 to fix 17 vulnerabilities*

New dark pink advanced threat agent that deploys custom malware against government and military installations*

Cisco warns of critical authentication bypass vulnerability in retired routers*

Spread spider threat actors using vulnerable Intel drivers to evade detection*

Royal Mail, the UK's leading postal delivery service, suffers severe service disruptions following a cyber-attack*

CISA adds two more vulnerabilities to its catalog of known exploits*

Security researchers found cryptographic vulnerabilities in messaging app Threema*

Zoom fixes several bugs that Windows and macOS* users are discovering

Largest public school in Iowa school district Des Moines hit by cyberattack*

StrongPity hackers targeted Android users with a Trojan version of the Telegram app*

Found over 1,300 fake AnyDesk websites offering Vidar malware to steal information*

Microsoft Patchday Security Advisory: January 2023*

Auth0 project releases patch for RCE bugs in JsonWebToken library*

Scammers abuse open redirect on UK DEFRA website to redirect visitors to fake dating sites*

Hackers broke into Kubernetes clusters via PostgreSQL* database as part of a malware campaign

CISA High Severity Vulnerability Alerts Affecting Hitachi Energy Products*

Russian threat group Cold River targets three US nuclear research labs*

Attackers distribute NetSupport malware disguised as a Pokémon deck to infect users*

MedStar Mobile Healthcare Suffers Ransomware Attack Affecting 612,000 Customers*

Threat actors use CAPTCHA bypass tactics on GitHub in hacking campaign*

Hackers bypass firewall restrictions with CloudFlare tunnels*

Air France and KLM suffer data breach; Multiple customer accounts hacked*

Chick-fil-A fast food chain suffers data breach*

Rackspace customer data accessed in ransomware attack*

Microsoft releases temporary patch for ODBC* database connection issues

A new variant of Dridex malware that actively attacks Windows and macOS* systems

CircleCI launches security alert to warn users about cyberattacks*

Bluebottle hackers attacked banks with signed Windows* drivers

Cricketsocial.com Database Disclosure of Private Customer Information and Admin Credentials*

Hackers accessed Slack's private GitHub code repositories with a stolen employee*

Five Guys Burger Chain Suffers Data Breach Affecting Applicants*

Researchers noted a sudden increase in Android SpyNote* malware infection rates

New Linux malware compiled by SHC installs cryptominers and DDoS bots*

Several bug updates have been released for Qualcomm and Lenovo ThinkPad chipsets*

Zoho fixes a critical SQL injection vulnerability in its ManageEngine products*

API errors in various car brands reveal personal information of the owner*

Fortinet released patches for high severity vulnerabilities found in FortiADC and FortiTester*

LockBit Ransomware Group alleges ransomware attack on Los Angeles Housing Authority*

Royal Ransomware Group claims attack on Queensland University of Technology hit by data breach*

Threat actors use stolen Colombian bank customer information as bait in phishing emails*

Fixed Synology's critical vulnerability in VPN Plus* server software

PyTorch administrators reveal a malicious dependency in PyTorch-nightly*

Bristol Community College attacked by ransomware attack*

A Telekom Malaysia company suffers from a data breach affecting over 250,000 customer accounts*

Scripps Health agrees to pay $3.5 million to victims affected by the 2021 data breach*

Jakks Pacific Toy Production servers suffer from ransomware attack, Hive and BackCat Group lose data*

Royal Ransomware Group alega ciberataque en Iowa Public Broadcasting Network*

LockBit ransomware gang claims cyberattack on Lisbon port in Portugal*

CISA has issued a warning about vulnerabilities affecting TIBCO Software's JasperReports* product

A Canadian mining company closes a factory after being attacked by ransomware*

WordPress Sites Hit by New Linux Malware With 30 Plugin Exploits*

Cert-In Warns Indian Users About LastPass Data Exploit And NetApp OnCommandInsight Vulnerability*

Anonymous Twitter user posted 10,000 cryptocurrency trading platform API keys 3 commas*

CISA warns of multiple vulnerabilities in Rockwell Automation controllers*

Royal Ransomware Gang Takes Responsibility For Cyber Attack On Telco Intrado*

NETGEAR resolves a high severity vulnerability affecting several models of its wireless routers*

Hackers moved their original infection vector to malicious Excel companion files*

Attackers abusing Google ads to spread Trojanized software products*

Hive ransomware claims Louisiana hospital attack affected 270,000 patients*

Citrix fixes Critical Severity vulnerabilities in its ADC and Gateway servers*

Sargent and Lundy Energy Firm suffered a data breach affecting the personal data of 6,900 people*

A hacker claims to have stolen data from 30 million Indian Railways users*

New YouTube bot malware discovered stealing sensitive data*

North Korean Lazarus APT Group Targets NFT Investors With Phishing Campaign*

BlueNoroff threat actors have introduced new techniques to bypass Windows MotW* protection

Researchers found a password vulnerability in ZyXEL* indoor routers

BTC.com suffers cyberattack and loses USD 3 million in cryptocurrencies*

New GuLoader malware applying new anti-scan techniques to avoid detection*

Hackers Targeted Cryptojacking Bitkeep Wallet Users, Siphoning $8 Million In Assets*

Researchers warn of a critical Linux kernel vulnerability affecting ksmbd*-enabled SMB servers

Cincinnati State Technical Community College suffers a cybersecurity breach*

Researchers discovered a serious flaw in Kyverno's container image signature verification engine*

Researchers discover critical authentication bypass vulnerability in Ghost CMS*

Microsoft has quietly fixed the cross-tenant network bypass bug in its Azure Container service*

Researchers discover W4SP stealers in various PyPI packages with different names*

Threat actors use new intelligence-stealing malware to infect software pirates*

Hackers Actively Exploit WordPress Gift Card Plugin With 50,000 Installs*

Researchers Warn Indian Authorities About Kavach 2FA Phishing Attacks*

Widespread 2FA Bypass Attacks Affect Comcast Xfinity* Accounts

LastPass suffers a data breach exposing customer vault data*

FIN7 Hackers Use Automated Attack Platform to Crack Vulnerable Exchange Servers*

A hacker leaked BetMGM customer details on the hacker forum*

Researchers have discovered several serious flaws in the password management solution Passwordstate*

Zerobot Botnet is added with new features and exploits new vulnerabilities*

Researchers Discovered 'GodFather' Banking Trojan Targeting 400 Banks and Cryptocurrency Exchange Apps*

Hackers Profit By Hacking JFK Airport Taxi Dispatch System

Hackers Target Telecom and Government Systems with Raspberry Robin Worm*

Attackers broke into Okta Company's private GitHub repositories*

Researchers found malicious packages containing data-stealing "W4SP" malware on the PyPi platform*

Hackers attack Brazilian bank users with new Android trojan BrasDex*

Security researchers suspect that the KMSdBot botnet offers attackers DDoS services for rent*

Researchers found a new Microsoft Exchange exploit used by Play ransomware to hack servers*

Phishing sites that distribute DarkTortilla* malware

Researchers found a rogue and malicious "SentinelOne" package in the PyPi repository*

Meta Platforms shut down fake accounts operated by nearly 200 spyware vendors worldwide*

The Play ransomware gang claims responsibility for a cyberattack on the hotel chain 'H-Hotels'*

Microsoft has downgraded a Windows vulnerability to Critical Severity*

The Department of Health reports data on 254,000 patients at risk*

Colombian energy company EPM hit by BlackCat Ransomware attack*

SevenRooms CRM platform suffers a data breach, exposing customer information*

Samba releases security updates to address several high severity vulnerabilities*

After being stopped by Google, the Glupteba malware is back*

FBI warns of BEC attacks on food deliveries*

CISA adds critical Veeam security and replication vulnerabilities to its catalog of known exploits*

Microsoft warns that new Minecraft DDoS malware is infecting Windows, Linux and IoT devices*

Researchers found a new MirrorStealer malware targeting Japanese politicians*

Ukrainian government networks were attacked with Trojans using Windows 10* installers

New Phishing Campaign Uses Facebook Posts to Bypass Email Security*

Hacker posted stolen Social Blade user data in data breach on hacker forum*

Personal data of 5.7 million Gemini users leaked in a third-party data breach*

FuboTV suffers a transmission interruption due to a cyber attack*

TPG Telecom Australia suffers data breach affecting 15,000 customers*

Ransomware hackers use Microsoft-signed drivers to gain access to systems*

FBI Seizes 48 Online Booter or Stresser Platforms Used for DDoS Attacks*

Unknown threat actors have uploaded 144,000 phishing packages to open source NuGet, NPM, and PyPi package repositories*

Microsoft fixes LSASS memory leak bug affecting Windows* servers

VMware releases patches for critical vulnerabilities in ESXi and vRealize*

Microsoft Patchday Security Advisory: December 2022*

Stalkware Xnspy app found to be stealing data from thousands of iPhone and Android devices*

A new Python backdoor allows hackers to remotely access compromised VMware ESXi servers*

India Ministry of Foreign Affairs Pravasi Rishta Global Portal Reveals Passport Information*

Apple has patched a new zero-day vulnerability that is actively exploited in its security updates*

LockBit Ransomware Gang alleges ransomware attack against California Department of Treasury*

Hive Ransomware group claims attack on Knox College*

Fortinet Releases Emergency Patch For Previously Exploited FortiOS SSL VPN Vulnerability*

Information on nearly 360,000 people affected by the Ontario COVID-19 vaccine data leak*

Cryptocurrency mining campaign infects Linux users with Go-based malware dubbed CHAOS*

Uber suffers data breach after attack on its third-party provider*

Iran-backed MuddyWater campaign abuses remote administration tool Syncro*

Telstra, the Australian telecommunications company, apologizes for data breach that exposed the data of 130,000 customers*

Air-gapped PCs are highly susceptible to data theft due to radiation from the power supply*

Rackspace Issues Phishing Alert After Ransomware Incident*

Cisco Warns Enterprises of High Severity Unpatched Bug Affecting IP Phone Firmware Worldwide*

Researchers reveal a new attack method to bypass popular web application firewalls*

An updated variant of TrueBot that takes advantage of the Netwrix Auditor bug and the Raspberry Robin worm*

Researchers discover Drokbk, a new malware that uses GitHub as a deadlock resolution system*

Iranian Hackers Target Diamond Industry With Elegant Data Wiping Malware*

Formbook malware is distributed via a OneNote Document Trojan*

Hive ransomware group targeted by French sports brand Intersport*

CommonSpirit Health suffered a ransomware attack that exposed 623,000 patient data*

Cisco announces a high severity vulnerability affecting its 7800 and 8800 series IP phones*

New Zerobot Malware Exploits Over 21 Vulnerabilities in Zyxel Firewalls, F5 BIG-IP Firewalls, and D-Link Routers*

Compromised WordPress plugins redirect website visitors to push notification scams*

The attacker made over 6,000 attempts to hack the ICMR server*

The Vice Society ransomware gang attacked more than 30 schools in 2022*

Hackers broke into CloudSEK's Confluence server with stolen employee credentials*

Attackers found a vulnerability in the SiriusXM platform to remotely unlock and start cars*

Amnesty International Canada was allegedly the target of a cyber attack from Beijing*

Researchers have discovered the largest dark web "in the box"*

Antwerp's digital partner suffered a cyberattack that disrupted the city's digital services*

VTB Bank, the second largest financial institution in Russia, suffers a massive DDoS attack*

Hackers sell personal data of 150,000 patients at Sree Saran Medical Center in Tamil Nadu*

The André Mignot University Hospital in France suffers a ransomware attack*

A chain of three harmless Linux vulnerabilities could allow hackers to gain full root privileges*

A vulnerability in IBM Cloud databases for PostgreSQL allows unauthorized access*

Researchers found malicious Android apps with over two million downloads in the Google Play Store*

New Zealand health insurer Accuro suffered a cyberattack that compromised the data of 34,000 customers*

Group of North Korean hackers using new and fake crypto applications to break into networks and steal cryptocurrency*

Google patches a ninth zero-day vulnerability in its Chrome browser update*

Previously undocumented data wiper CryWiper masquerades as ransomware*

Attackers target unpatched Redis servers to exclude new Redigo* backdoors

Various platform certificates used by OEM Android device vendors to digitally sign malware*

Colombian healthcare provider Keralty suffers a ransomware attack that disrupts its operations*

Schoolyard Bully malware infected over 300,000 devices to harvest Facebook account credentials*

New malware-as-a-service DuckLogs used by thousands of cybercriminals*

Researchers have discovered that some NPM tools fail to detect security vulnerabilities*

NVIDIA fixes critical GPU display driver vulnerabilities in Windows and Linux*

North Korean attackers use new Dolphin gate to spy on South Korean targets*

Google released Chrome 108 to fix serious memory vulnerabilities*

Hackers broke into GoTo's development environment and cloud storage; Impact on your LastPass affiliate*

Researchers found outdated OpenSSL used on devices from Dell, HP, and Lenovo*

Hive ransomware claims responsibility for attacking Guilford College in North Carolina*

Attackers Using Trigona Ransomware Increase Attacks Worldwide*

Malicious Android app "Symoo" detected with 100,000 installs on Google Play Store*

Lanner has patched over a dozen vulnerabilities in BMC firmware*

Southampton County, Virginia, reported theft of people's personal information following a ransomware attack*

Acer releases patches for high severity vulnerabilities that allow you to disable Secure Boot*

Fraudsters used the FC Barcelona website domain for a third-party scam campaign*

More than 5.4 million Twitter user records are freely available on a hacking forum*

Researchers have discovered a critical remote code execution vulnerability in Windows Internet Key Exchange*

Ransomware group targets Belgian community but attacks police*

New ransomware attacks against Ukrainian organizations linked to the Russian group Sandworm*

Google patches a zero-day vulnerability in its Chrome browser update*

Vice Society Ransomware Group is responsible for the attack on Cincinnati State College

Hackers Target Windows Gamers with Miners and Information Stealers via Fake MSI Afterburner*

Researchers discovered a new stealthy variant of RansomExx ransomware developed using the Rust* programming language

Hackers have injected spyware into new variants of the SoftVPN and OpenVPN Trojan software*

Millions of Android devices require patches for ARM Mali* GPU vulnerabilities

Ducktail threat actors targeting Facebook business accounts via WhatsApp*

Security researchers have revealed a cross-tenant vulnerability in the AWS AppSync* service

Pro-Russian hackers claim responsibility for DDoS attack on European Parliament website*

AIIMS Server in Delhi Suffers Cyber Attack Disrupting Patient Care*

An issue with the Sophos and McAfee scan engines causes the Cisco Secure Email Gateway filter to be bypassed*

Researchers found a sudden increase in WM-themed phishing emails*

Sharkbot Banking Trojan Distributed Via Fake Android File Managers*

Threat actors targeted discontinued Boa web servers to infiltrate powerful organizations*

Over 1,500 Mobile Apps Lose Algolia API Keys*

Google Chrome Data Stealer Extension "VenomSoftX" Used to Steal Cryptocurrency and Passwords*

Researchers have found that cybercriminals are increasingly adopting Aurora Infostealer malware into their operations*

Attackers trying to bypass 2FA of crypto exchange platforms via Team Viewer and fake support chat*

Daixin Team hacker group claims to have stolen 5 million AirAsia passenger and staff data*

DraftKings Clients Suffer Credential Stuffing Attack and Lose $300,000*

New AXLocker ransomware group steals Discord accounts of infected users*

Attackers use Google Ads to spread Royal* ransomware

New variants of LodaRAT malware are deployed alongside other sophisticated malware*

Hackers exploit Windows zero-day vulnerability to deploy QBot* malware

Indian Central Depository Services Limited announces that its network has been compromised by malware*

More than 22,000 students targeted by credential phishing attacks impersonating Instagram*

Critical Omron PLC vulnerability exploited by sophisticated malware targeting industrial control systems*

Atlassian fixes critical vulnerabilities in Crowd Server and Bitbucket Server*

Samba fixes vulnerability that leads to DoS attacks and remote code execution*

Chinese hackers deliver custom malware to government organizations via Google Drive*

The previously unknown ARCrypter ransomware is expanding its attacks around the world*

Researchers discovered a new version of RapperBot malware targeting game servers*

Investigators discovered a phishing kit posing as well-known brands to target US consumers*

Attackers exploit a DLL hijacking bug in the Windows 10 Control Panel to infect systems*

Disneyland Cybercrime Group uses Punycode to counterfeit popular bank brands.

F5 fixes various vulnerabilities and security issues in its products*

CISA revealed that the federal agency was hacked by Iranian hackers using the Log4Shell exploit*

Pro-Russian Hackers Claim Responsibility For DDoS Attack On FBI Websites*

Mozilla announced the release of Firefox 107 with high-impact vulnerability patches*

Hundreds of Amazon RDS instances expose users' personal information*

PCspooF vulnerability in TTE affecting network technology used in aircraft and spacecraft*

State-sponsored Chinese hacker group that targets government and defense organizations in Asian countries*

Security researchers revealed details of vulnerabilities in Zendesk Analytics Service*

Spotify's backstage developer platform is vulnerable to a critical RCE bug*

Researchers discover a new version of DTrack Backdoor aimed at European organizations*

Researchers discover new malware KmsdBot that mines cryptocurrency and launches DDoS attacks*

Malicious for-profit group "Fangxiao" uses 42,000 websites for brand identity fraud*

Researchers have identified an information disclosure vulnerability in Aiphone* intercom products

Russian hackers infected Ukrainian organizations with new Somnia ransomware*

New phishing campaign targets taxpayers in Spain to steal bank information*

Cisco fixes 33 security vulnerabilities in its enterprise firewall products*

Foxit fixes four code execution vulnerabilities in its PDF reader*

A new blackmail scam threatens to leak confidential information from websites around the world*

A 24 hour outage made Royal Mail tracking unavailable*

Rise Up, a Canadian grocery retail giant affected by Black Basta Ransomware*

New BadBazaar Android Spyware Linked to Chinese Cyberspies*

Two malicious Android apps distributing the Xenomorph* banking Trojan have been detected

US seizes 18 domains used to recruit money mules*

New version of IceXLoader malware released by phishing emails*

Workok Threat Group hides new data-stealing malware in PNG files*

Spymax RAT Android Malware Targets Indian Armed Forces*

Lenovo fixes high severity vulnerabilities that allow attackers to disable UEFI Secure Boot*

New StrelaStealer data-stealing malware targets Outlook and Thunderbird* accounts

Intel and AMD address multiple security vulnerabilities in their Tuesday updates*

SAP has released patches for critical vulnerabilities in BusinessObjects and SAPUI5*

Massive Google SEO Poisoning Campaign Hacks 15,000 Websites*

LockBit 3.0 Ransomware spreads Amadey Bot malware via phishing emails*

Cloud9 Chrome Botnet uses malicious extensions to remotely control victims' browsers*

Citrix fixes a critical authentication bypass vulnerability in its ADC and Gateway products*

VMware fixes three critical vulnerabilities in Workspace ONE Assist*

Siemens and Schneider Electric fix multiple security vulnerabilities in their products*

SocGholish Operators expands its malware preparation infrastructure for counter-defenders*

Researchers found that Security Scanner URLScan accidentally exposes URLs and sensitive data*

Cyberattack on PNORS technology leads to breach of Victorian schoolboy's medical records*

The largest Canadian food company, Maple Leaf Foods, was exposed to a cyberattack*

Robin Banks Phishing-as-a-Service (PhaaS) platform is back to steal bank accounts*

Hackers use Microsoft Dynamic 365 voice of customer for phishing attack*

CISA warns of critical vulnerabilities in three ICS* software

Apple releases Xcode update to fix Git* vulnerabilities

Verified Twitter users point to a new phishing attack*

New Crimson Kingsnake Group Poses as Law Firm in BEC Attacks Against Commercial Email Compromise*

Indian government officials are the target of a new malware campaign*

Users around the world are having trouble accessing Twitter*

RomCom RAT malware distributed via websites mimics SolarWinds NPM, KeePass, Veeam Software*

LockBit ransomware gang claims cyberattack on German manufacturer Continental*

Cisco has patched high-severity vulnerabilities in email, identity, and web security products*

The ALMA radio telescope suffers a cyberattack that forces it to shut down all its operations*

Splunk fixes 9 major vulnerabilities in its enterprise product*

Fortinet has patched 6 high-severity vulnerabilities across its various products*

Researchers have discovered multiple vulnerabilities in Checkmk's IT infrastructure monitoring software*

Threat actor distributing malware to hundreds of US news sites*

Malicious PyPI packets found to drop "W4SP" information-stealing malware *

The infamous Emotet malware has resumed operations after a five-month hiatus*

Vodafone Italy has announced a data breach after its retailer FourB suffered a cyberattack*

Hacker steals 130 GitHub repos from Dropbox in data breach*

Malicious VPN app infects Android users with SandStrike* spyware

Malicious Android apps downloaded over a million times and detected in the Google Play Store*

OpenSSL releases patches to fix two serious vulnerabilities in the open source library*

Microsoft has patched a critical RCE vulnerability found in Azure Cosmos DB Jupyter notebooks*

Air New Zealand hack compromises multiple user accounts*

Threat actors abusing antivirus software to spread LODEINFO malware targeting Japanese organizations*

Australian defense company suffers ransomware attack*

Researchers have discovered a vulnerability in the Galaxy Store app for Samsung*

Label Printing Giant Multi-Color Corporation confirms data breach*

Bed Bath & Beyond Inc suffers a data breach*

US bank exposes data breach affecting 11,000 customers*

Veja Tickets suffers a major card data breach that lasts 2.5 years*

Michigan Medicine suffered a data breach affecting 33,000 patients*

ConnectWise fixes RCE bug that left thousands of servers vulnerable to attack*

Twilio, a cloud communications company, announces another data breach*

Google patches the seventh zero-day vulnerability in its Chrome browser*

Cyberattack on Aurubis forces shutdown of IT systems*

Researchers discover Android Malware Dropper on Google Play with 130,000 installations*

(Video) Independent Living Systems Healthcare Suffers Data Breach | 4M Users Data Exposed | CTI Report

Threat actors using Clop ransomware to encrypt devices previously infected with the Raspberry Robin worm*

The latest Fodcha ransomware botnet has appeared*

Drinik Android malware masquerades as an official tax administration tool, targeting users from 18 Indian banks*

Australian Clinical Labs has announced a data breach after months of data leaks*

Microsoft fixed sync issue in vulnerable drivers blacklist*

Medibank confirms that hackers accessed customer personal information during a ransomware attack*

New version of FurBall Android malware to spy on Iranian citizens*

Aurora Health (AAH) Lawyer Suffers a Data Breach That Exposed the Data of 3 Million Patients*

Ursnif malware goes from stealing bank accounts to accessing computers*

Hackers Exploit Microsoft Azure SFX Vulnerability to Hijack Service Fabric* Clusters

Apache has fixed the RCE vulnerability in its Commons* open source text library

WordPress patched 16 vulnerabilities with security update 6.0.3*

Researchers have discovered a previously undetected PowerShell backdoor that infected more than 60 users*

Microsoft suffers a data breach due to a misconfigured server exposing customer information online*

Cobalt Strike Releases Out-of-Band Security Update for Critical RCE Vulnerability*

DiceyF attackers use GamePlayerFramework in attacks on Asian casinos*

Hong Kong government agency network targeted by hackers in year-long campaign*

Ransom Cartel Ransomware has similar features to Notorious REvil Ransomware*

Black Basta Ransomware Gang Empregando Qakbot para eliminar Brute Ratel C4 Framework*

MyDeal suffers from a data breach in which 2.2 million personal customer details were stolen*

Australia's largest health insurer, Medibank, suffers ransomware attack*

A zero-day vulnerability in Windows Mark of the Web gets a free unofficial patch*

End of Life of 45,000+ VMware ESXi Servers*

Venus ransomware encrypts Windows devices through publicly accessible remote desktop services*

New PHP version of Ducktail malware targets business Facebook accounts*

Zimbra zero-day vulnerability used to compromise more than 900 servers*

Microsoft researchers discovered a new prestigious ransomware targeting organizations in Ukraine and Poland*

Colombian government suffers data breach exposing undercover Australian police officers*

Tata Power, the largest electricity company in India, affected by a cyber attack*

Microsoft Office 365 may disclose message content due to vulnerable email encryption mode*

Hackers Distribute Copybara Android Banking Malware Using TOAD Tactics*

Magniber Ransomware targets Windows users via fake antivirus and security updates*

A critical flaw in Siemens SIMATIC PLCs allows hackers to steal cryptographic keys*

Cloudflare Mitigates Largest DDoS Attack on Minecraft* Gaming Platform Server

Windows, macOS and Linux systems targeted by the new Alchemist Attack Framework*

Scammers misuse Google Forms in new Covid-19-themed phishing campaign

Unofficial WhatsApp application "YoWhatsApp" steals user account*

Hackers create font clone packs to trick developers into attacking the supply chain*

Aruba fixed critical authentication bypass and RCE errors in its EdgeConnect Enterprise Orchestrator*

POLONIUM Threat Group Uses Creepy Malware in Cyber Espionage Against Israeli Organizations*

Microsoft Exchange servers targeted to remove Lockbit ransomware*

Researchers warn of a critical RCE vulnerability in the VM2* sandbox library

Adobe fixes critical bugs in ColdFusion, Adobe Commerce and other products*

Microsoft Patch Tuesday Security Advisory: Late 2022*

Caffeine, a phishing platform as a service, makes it easy to launch phishing attacks*

Researchers discover new Emotet* delivery and evasion techniques

Toyota Passkey falsely disclosed on GitHub and customer details exposed*

Pro-Russian Hackers Take Down US Airport Websites With Large-Scale DDoS Attacks*

Android security updates for October patches Critical vulnerabilities*

Hackers Target Solana Cryptocurrency Holders Through Fake Ghost Security Update

Dark Web Carding Market BidenCash publishes details of 1.2 million stolen credit cards*

Intel Alder Lake* UEFI Firmware Source Code Leaked

Callback scammers amplify their social engineering techniques*

Taiwanese chipmaker 'ADATA' dismisses recent RansomHouse data breach claims*

Fortinet fixes critical authentication bypass bug in FortiGate firewalls and FortiProxy* web proxies

Threat actors actively exploiting a zero-day RCE vulnerability in Zimbra Collaboration Suite*

Eternity Hackers Group offers new LilithBot Malware-as-a-Service through Telegram Channel*

Details of newly patched macOS* Archive Utility Vulnerability

Telstra's third-party platform suffers a breach exposing its employees' information*

A new bug in Linux kernel 5.19.12 that crashes the screens of Intel* laptops

Hackers break into the City of Tucson's network and steal information from more than 125,000 people*

Researchers discover a new "Maggie" backdoor targeting multiple Microsoft SQL* servers

Consumer bank Chase Bank suffers outage affecting UK customers*

Trojanized Comm100 live chat app to spread malware in supply chain attacks*

US Alert: Hackers use new custom malware to steal data from US defense organization*

Hackers inject malicious JavaScript into scammers' crypto websites to steal crypto funds*

Popular Chinese-language YouTube channel distributing malicious Tor browser installer*

A high severity vulnerability in the Packagist PHP repository could lead to a supply chain attack*

Cheerscrypt, a Linux-based ransomware associated with Chinese hackers*

Researchers warn that Microsoft Exchange zero-day mitigation can be bypassed for on-premises servers*

Hackers trying to exploit exploits use Microsoft Exchange ProxyNotShell, not GitHub*

BlackCat added NJVC to its data leak site*

Threat actors abusing web browser application mode to create desktop phishing pages*

After Data Breach, "DNS" Retail Chain Confirms Data Breach*

CISA adds critical vulnerabilities in Bitbucket Server and Microsoft Exchange to the Known Exploited Vulnerability (KEV) catalog*

Hackers exploit vulnerable WordPress sites to inject SolarMarker* malware

An unidentified attacker has hacked into Shangri-La Hotel Group's customer database*

Investigators uncovered several fake LinkedIn profiles for CISOs from large organizations*

Cisco has patched several high severity vulnerabilities in its network software*

Lazarus attackers use new BYOVD technique in cyber attacks*

Scammers launch cobalt attack flares through fake US government job ads*

Microsoft confirms that new zero-day bugs in Exchange are being exploited wildly*

Microsoft Spots Lazarus Hackers Using Open Source Software*

Indian government platform in Swachh city suffers data breach*

Researchers have discovered new zero-day vulnerabilities in Microsoft Exchange that are being actively exploited for attacks*

Hackers Use New Malware to Defraud VMware ESXi Servers*

Hackers exploit vulnerabilities in Ethernet VLAN stacking to launch DoS and MiTM* attacks

Investigators Uncover New Covert Attack Campaign Targeting Military Companies*

World's Leading Business Media Brand Fast Company Under Attack by Attackers*

New Chaos malware launches DDoS attacks on Windows and Linux* devices

The Internal Revenue Service has warned Americans about the huge increase in smishing attacks*

Cybercriminals distribute macOS malware through lucrative job offers posing as Crypto.com*

Optus suffers a data breach resulting in the publication of 10,200 customer records*

NullMixer malware distributed via malicious websites posing as cracked software*

Hackers spread Graphite malware using a new code execution technique*

New information-stealing malware, Erbium, targets popular video games with fake cracks and cheats*

Tibetan companies attacked by Chinese hackers with new LOWZERO* backdoor

WhatsApp fixed 2 major zero-day bugs affecting iOS and Android versions*

Researchers found the "Scylla" ad fraud campaign on the Google Play Store and Apple Store*

Attack on Universities, Telecom Companies and ISPs Discovered by Researchers*

Android users attacked by malware that steals information about bogus rewards apps for Indian banks*

Several npm packages released by crypto exchanges were compromised*

Microsoft Endpoint Configuration Manager phishing vulnerability fixed by Microsoft*

Microsoft SQL Server targeted by new TargetCompany* ransomware attacks

A new RCE firewall bug exploited by attackers in Sophos Firewall; Repair available*

A global blackout affects YouTube live broadcasts*

GitHub users target a new phishing campaign*

Threat actors actively exploiting critical Magento vulnerabilities*

Threat actor hacked into Microsoft Exchange servers to implement a phishing campaign*

CISA adds a critical RCE bug in ManageEngine to its catalog of known exploited vulnerabilities*

Threat actors use LinkedIn smart links to avoid detection in a phishing campaign*

More than 39,000 unauthenticated Redis servers are exposed to the Internet*

CISA Warns of Several Vulnerabilities Discovered in Dataprobe Power Distribution Units*

15-year-old Python vulnerability affects more than 350,000 open source repositories*

Oracle fixed a critical vulnerability in its cloud infrastructure*

Hackers steal $162 million in digital assets from cryptocurrency trading firm Wintermute*

Attackers broke into the 2K gaming support platform to infect gamers with malware*

Security company Imperva stopped a long-running DDoS attack with 25.3 billion requests*

Hive ransomware claimed responsibility for the attack on the New York Racing Association*

Attack on fintech Revolut reveals data of 50,000 users*

Microsoft and VMware Alert on Chromeloader* Malware Campaign

US government agencies targeted by sophisticated lures in phishing attacks*

American Airlines suffered a data breach that exposed employee and customer information*

Uber Sues Contractors For Non-Compliance, Claims Threat Group Lapsus$ Was Behind Cyberattack*

LastPass development systems were accessed for four days in a data breach*

A hacker claims to have stolen the source code and assets of GTA 5 and 6*

Security researchers have discovered new attacks by the notorious hacker group TeamTNT*

North Korean attackers targeted media companies with the malicious putty ssh client*

BlackCat and Quantum ransomware groups use Emotet malware to deliver payloads*

A ransomware attack causes a data breach at the New York Ambulance Service*

A hacker is selling the personal information of 219,000 Starbucks customers in Singapore*

Organizations must patch Stuxnet vulnerabilities, says CISA*

Uber's internal systems were breached, revealing vulnerability reports*

Threat actors spread a new malware package via YouTube*

Akamai mitigates another record DDoS attack in Europe*

Hive ransomware takes responsibility for attack on Bell Tech Solutions*

Phishing campaign targeting Greek taxpayers to steal victims' passwords*

Scammers use Queen's Death to steal users' Microsoft credentials in phishing attacks*

Lenovo has fixed several BIOS vulnerabilities in the September 2022 security updates*

FBI Warns of Hackers Targeting Healthcare Payment Processors*

Hackers target nuclear and genomics researchers through multi-person phishing techniques*

Hackers Compromise Software Vendor Magento in Supply Chain Attack*

Cyber espionage attacks on Asian governments and organizations*

WPGateway Zero-Day Vulnerability Actively Exploited in the Wild*

Actively Exploited Apex One RCE Vulnerability, Warns Trend Micro*

Microsoft Patchday Security Advisory: September 2022*

Lorenz Ransomware Gang Exploits Vulnerability in Mitel MiVoice VOIP* Device

GhostSec hacktivist gang claims responsibility for compromising 55 PLC Berghof in Israel*

Researchers Discover New “Zanubis” Android Banking Trojan Targeting Peruvian Banks*

Steam Community Accounts Get Hacked by New Browser-in-Browser Attacks*

Apple has patched the actively exploited zero-day vulnerability in its security updates*

US Rental Company U-Haul Confirms Data Breach, Customer's Driver's License Information Revealed*

Ransomware developers use a new encryption technique to evade detection*

FAQs

How do you respond to a healthcare data breach? ›

How to Manage a Healthcare Data Breach

Start your incident response plan. If you suspect a data breach, it's critical to stop information from being stolen and repair your systems so a breach won't happen again. ...
Preserve evidence. ...
Contain the breach. ...
Start incident response management. ...
Investigate and fix your systems.

Read The Full Story ›

What should be the first response to any actual or suspected data breach? ›

You should take several urgent steps when a data breach is detected. The first is to record the date and time of detection as well as all information known about the incident at the moment. Then, the person who discovered the breach must immediately report to those responsible within the organization.

Explore More ›

How should responses to data breaches be handled? ›

Notify law enforcement.

Report your situation and the potential risk for identity theft. The sooner law enforcement learns about the theft, the more effective they can be.

Discover More Details ›

What is the most appropriate action that you should take when you encounter a data breach? ›

You need to stop the data leakage, remove the hacker, patch the system and keep evidence of a breach. Determine how to stop the breach from spreading. Eliminate the threat. Take your computers and servers offline.

What is the first step when dealing with a breach of data? ›

1) Inform your Data Protection Officer: As soon as a personal data breach is identified, the first and foremost task is to inform and involve the DPO in your organisation.

Explore More ›

What is the first step you should take after a data breach occurs? ›

Contain the Cybersecurity Breach

The first step you should take after a data breach is to determine which servers have been compromised and contain them as quickly as possible to ensure that other servers or devices won't also be infected.

Find Out More ›

What are five steps that data breach victims should follow? ›

What To Do After a Data Breach: 12 Steps

Confirm the breach has happened (but be cautious of emails)
Find out what sensitive data was stolen.
Secure your log-ins, passwords, and PINS.
Switch to an authenticator app for 2FA/MFA.
Freeze your credit with all three bureaus.
File a report with the Federal Trade Commission (FTC)

More items...

Jan 11, 2023

See Details ›

What are the four actions that companies should perform after a data breach? ›

Here's what companies should do immediately after detecting a data breach:

Act Quickly. ...
Contain the Breach. ...
Perform a Damage Assessment. ...
Identify and Fix Vulnerabilities. ...
Inform Relevant Parties. ...
Test Cybersecurity Defenses. ...
Implement New Data Security Policies and Procedures.

Mar 2, 2023

Discover More Details ›

What are the 5 steps of the data breach response plan? ›

At a high level, a data breach incident response plan should include the following five steps.

Preplanning exercises. ...
Define response teams and members. ...
Create a contact list. ...
Create a communications plan. ...
Perform incident response.

What are the 7 stages incident response plan? ›

In the event of a cybersecurity incident, best practice incident response guidelines follow a well-established seven step process: Prepare; Identify; Contain; Eradicate; Restore; Learn; Test and Repeat: Preparation matters: The key word in an incident plan is not 'incident'; preparation is everything.

Get More Info Here ›

What are the 6 processes in incident response? ›

cyber incident response plan has 6 phases, namely, Preparation, Identification, Containment, Eradication, Recovery and Lessons Learned.

View Details ›

What are the 5 6 major stages of incident response? ›

The NIST incident response lifecycle breaks incident response down into four main phases: Preparation; Detection and Analysis; Containment, Eradication, and Recovery; and Post-Event Activity.

Tell Me More ›

What are the three 3 kinds of data breach? ›

Personal data breaches can include:

access by an unauthorised third party;
deliberate or accidental action (or inaction) by a controller or processor;
sending personal data to an incorrect recipient;
computing devices containing personal data being lost or stolen;
alteration of personal data without permission; and.

More items...

Do I need a data breach response plan? ›

As a company, you're obligated to take reasonable steps to protect any personal information from misuse, interference and loss as well as unauthorised access. Those 'reasonable steps' likely include having a data breach response plan.

Get More Info ›

What is a data breach in healthcare? ›

A breach is, generally, an impermissible use or disclosure under the Privacy Rule that compromises the security or privacy of the protected health information.

Get More Info Here ›

How do you respond to a HIPAA breach? ›

Immediately report to privacy officer. All covered entities must have a privacy officer and security officer designated in writing. Train staff to immediately report suspected breaches to the privacy officer. – Immediate response may help avoid breach reporting obligation and/or penalties.

Find Out More ›

What are the five steps of the data breach response plan? ›

At a high level, a data breach incident response plan should include the following five steps.

Preplanning exercises. ...
Define response teams and members. ...
Create a contact list. ...
Create a communications plan. ...
Perform incident response.

Read On ›

How long do you have to investigate a data breach? ›

Generally, an organisation or agency has 30 days to assess whether a data breach is likely to result in serious harm.

What happens if someone accidentally violates the HIPAA privacy Rule? ›

All violations of HIPAA that contravene an employer´s HIPAA policies will likely attract sanctions, while those that result in a complaint being made to OCR could result in enforcement action.

Discover More Details ›

What happens if there is a breach in HIPAA? ›

Covered entities and specified individuals, as explained below, who "knowingly" obtain or disclose individually identifiable health information, in violation of the Administrative Simplification Regulations, face a fine of up to $50,000, as well as imprisonment up to 1 year.

View Details ›

Is a HIPAA violation the same as a breach? ›

Some sources conflate the terms violation and breach. It is important for Covered Entities and Business Associates to understand the difference between the two terms and what is considered a breach of HIPAA because, while HIPAA violations can be the cause of HIPAA breaches, only HIPAA breaches are reportable events.

What happens when a company experiences a data breach? ›

A data breach puts financial records and personal information in jeopardy which can lead to identity theft and even leave you drowning in fraudulent charges. For obvious reasons, a data breach can be very bad news to any company that experiences one.

Healthcare provider ILS suffered a data breach allegation... (2023)

FAQs

How do you respond to a healthcare data breach? ›

What are the 7 stages incident response plan? ›

What happens if there is a breach in HIPAA? ›

Videos

References