Editor's Message

Welcome to DBD. On March 8th we celebrated our 4th Anniversary and the 1st Anniversary of our PRiSM application, officially endorsed by the SANS Institute. Despite recent personal issues that have impacted the amount of time I have been able to dedicate to both projects, I have been doing my best to keep everything as up-to-date as possible, and I would like to take this opportunity to thank everyone for their patience and support whilst I navigate through this very difficult time. Stay safe. :)



Monday 2 November 2020

Data Breaches Digest - Week 45 2020

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 2nd November and 8th November 2020.


8th November

1.1M Customer Accounts Compromised in RedMart Security Breach

Attack Surface Analysis of 3 Social Media Giants

Cipla asks its IT team to be on alert after cyber attacks on major pharma firms

Classes to resume at Saskatchewan Polytechnic after cybersecurity attack

HMRC smishing tax scam targets UK banking customers

Italian drinks maker Campari hit by Ragnar Locker ransomware attack

JM Bullion Hacked: PII and Credit Card Data has been stolen

Ransomware targets several U.S. hospitals

Real-time cybersecurity has just got real

Trump lawsuit site to report rejected votes leaked voter data

7th November

Amazon Prime customers warned of scam phone calls

‘Big Basket’ Online Supermarket Breached and Data Leaked

Car dealer Sandicliffe hit by cyber attack where two employee email accounts were accessed

CERT-In is warning companies in India to be careful about a new ransomware

COVID-19 test scam: Don't fall for this coronavirus test result scam e-mail

FBI: Hackers stole source code from US government agencies and private companies

Google Chrome latest update fixes major flaw hackers have been 'actively' exploiting

Guernsey law firm fined £10,000 for data security breach

How Ryuk Ransomware operators made $34 million from one victim

Luxottica data breach exposes LensCrafters, EyeMed patient info

Methods of Identity Theft to Watch Out For

New Microsoft Office 365 Phishing Attack Uses Color Inversion and CSS code to Trick Anti-phishing Software

Ransomware group releases data after attack on Office of the Chief Justice

Ransomware victims often have to pay extra ‘ransom’ to the cybercriminals to stop them from leaking their stolen data, but Coveware’s analysis suggests that it may be a useless practice

Taiwan: Security company issues warning on Singles’ Day scams

Use this fast, free check to see if your email address is spreading spam

6th November

34% Of Employees Say Their Company Doesn’t Follow Basic Cybersecurity Protocols During COVID-19

A New Wave Of Phishing Attempts Targets Ledger Owners

Blackbaud sued after ransomware attack

Brazilian Superior Electoral Court hit by major cyberattack

Campari Group on the Rocks After Ransomware Attack

Capcom hacked in latest cyber-attack on game-makers

Capcom hit by ransomware attack, is reportedly being extorted for $11 million

Capcom May Have Been Hit With a Ransomware Attack

Capcom suffers data breach

Catches of the month: Phishing scams for November 2020

COVID-19 Themed Attacks Surge by 605% in Q2

Crypto owners robbed of 1,150,000 XRP

Crystal Dynamics Warns Against Fake Job Offers

Cyber attackers are ‘taking advantage’ of mass shift in working from home

Cyberattacks target e-learning

Cybercrime isn’t the exciting career it’s cracked up to be, say academics

Cybersecurity in the midstream oil & gas sector

Department of Motor Vehicles (DMV) Warns Of Text Message Phishing Scam

Different Ways Cyber Criminals Can Affect Your Daily Life

E-commerce Security: 5 Ways to Enhance Data Protection During the Shopping Season

European Consumer Groups Begin Suing Over Data Breaches

European weather services hit by storm of malicious email attacks

Exploring risk mitigation and cyber security for connected vehicles

Getting real about ransomware

Going Digital With Payments? Beware Of The Financial Fraudster

Google Forms exploited by scammers to steal passwords and credentials

Hackers steal bank details and personal data of Sandicliffe customers

How network visibility and context simplify cybersecurity management

ICO GDPR Fines Reduced to £20m and £18.4m to Reflect British Airways and Marriott Mitigating Factors

In Q2 2020, there was an average of 419 new threats per minute

Incident Of The Week: Once Considered Off Limits, A Streak Of Ransomware Attacks Hit The United States Healthcare System

Ireland: Department reports itself to data watchdog over lost passports

Israeli companies targeted with new Pay2Key ransomware

Italian liquor giant Campari Group suffers Ragnar Locker ransomware attack

Limited Impact of Phishing Site Blocklists and Browser Warnings

Linux version of RansomEXX ransomware discovered

Lupin internal IT systems affected due to information security incident

Malicious File Transfer: What You Need To Know About an Attacker’s Methods and Techniques To Protect Your Organization From Malware

Marvel’s Avengers Dev Crystal Dynamics Warns Of Job Offer Phishing Scam

Mayo Clinic faces lawsuit in breach of patients' health records

McAfee detects 419 new cyber threats per minute in Q2

McAfee says it witnessed 419 new cyber threats per minute globally in Q2

McAfee sees COVID-19-themed threats and powershell malware surge in Q2 2020

Ministry of Health, Ontario Provincial Police assisting in investigation of suspected ransomware attack at Kingston hospital

New Pay2Key ransomware encrypts networks within one hour

October 2020’s Most Wanted Malware: Trickbot and Emotet Trojans Are Driving Spike in Ransomware Attacks

Police warning following reports of malicious calls purporting to be from HMRC

Private prison firm hit with ransomware attack

Quantum computers: How to prepare for this great threat to information security

RansomExx ransomware also encrypts Linux systems

Ransomware: Give Us Your Money – or Else

Ransomware actors reneging on promises despite extracting huge ransom

Ransomware Gangs Not Honoring Ransom Payments for Stolen Data

Ransomware gangs that steal your data don't always delete it

Ransomware Groups Posting Stolen Data Even After Payment

Reverse shell botnet Gitpaste-12 spreads via GitHub and Pastebin

Security Blueprints of Heavily Guarded Companies Leaked After Ransomware Attack on Swedish Firm

Security Summit Warn Taxpayers of New COVID-Related Text Scam

The Biggest Cybersecurity Threats of 2020

This hacking group is using previously unknown tools to target defence contractors

'Thousands' of people could have had personal details in cyber attack on Sandicliffe car dealership

Three ways CISOs should be rethinking mobile security in 2021

Tips to avoid ransomware attacks in post-pandemic world

Top 5 scams to look out for during the next lockdown

Top six cyber security threats to watch out for

Toy manufacturer Mattel suffers ransomware attack

Tyler Technologies Lost $4 Million In Sales Due To Ransomware Attack

U.S. Government makes biggest crypto grab, worth $1 billion

Upstate New York health system computer network back online after 10-day outage

US: We've just seized $1bn in bitcoin stolen from Silk Road by 'Individual X' hacker

US private prison, detention centers operator hit by ransomware attack

US Seizes $1bn from Silk Road Crypto Account

US Seizes $24m in Crypto-Fraud Crackdown

US seizes 27 additional domain names used by Iran’s Islamic Revolutionary Guard Corps to further a global, covert influence campaign

Use Office 365? Watch for this tricky new phishing attack

UVM hospital network still recovering after cyberattack: What patients should do

Vietnamese hacking group OceanLotus uses imitation news sites to spread malware

Visa shares how retailers can stop fraud from hurting the business

Warning: Major Windows Ransomware Gang Makes Its Way to Linux

What is a Phishing Attack?

What one threat group’s work tells us about the use of legit tools for illegitimate ends

When Hackers Have PR Departments: Tens of Thousands in Stolen Bitcoins Donated To Charity Organizations

You clicked on what?! Shaming among the most effective deterrents for phishing scams

5th November

3 steps to secure a hybrid workplace

6 Ways To Keep Your Gmail Account Safe From Hackers

£8m losses reported due to fake PayPal emails

45% of businesses faced a data breach in last 12 months

71% increase in ransomware attacks in healthcare sector in October 2020

$350K Proposed Settlement Reached in Saint Francis Data Breach Lawsuit

Achieving Application Security in Today’s Complex Digital World

Another Indian pharmaceutical giant reports cybersecurity breach within two weeks of ransomware hack on Dr Reddy’s

Army National Guard Deployed to University of Vermont (UVM) Health Network to Assist Ransomware Recovery

Beware Of This Google Drive Phishing Campaign

Big League Cybersecurity for Small/Medium Business (SMB) Convenience Stores and Franchisees

Bitcoin: $1bn seized from Silk Road account by US government

Brazil's court system under massive RansomExx ransomware attack

California voters approve California Privacy Rights Act (CPRA)

California Votes to Strengthen Privacy Laws

Campari hit by Ragnar Locker Ransomware, $15 million demanded

Capcom hit by Ragnar Locker ransomware, 1TB allegedly stolen

Capcom quietly discloses cyberattack impacting email, file servers

Chesapeake Regional Healthcare: 23,000 people affected by data breach

Common Types of Cyber Attacks

Company that runs US illegal immigration detention centers discloses ransomware attack

Cone Health practice loses data in ransomware attack

COVID-19 Related Scams Cost Americans Over $160 Million Since the Start of 2020

Cyberattack targets Workforce Solutions Alamo

Cybercrime Unit probing attack at Port of Spain City (PoS) corporation

Critical bug actively used to deploy Cobalt Strike on Oracle servers

Data breach affecting 12,600 patients reported at Beaufort hospital. What happened?

Data Loss: The How-To of Not Losing Data in an Industrial Setup

Don't click on ransomware disguised as political ads

‘Dozens’ of Arrests as South Korean Police Swoop on Bogus Ethereum Fund

Edinburgh Security Firm Discovers Major RackSpace Vulnerability

Email security best practices for a remote human perimeter

Fintech Cermati data breach points to urgency for data protection law

Four security threats affecting FSIs in 2020

Gaming Giant Capcom Suffers Security Breach

Git LFS vulnerability allows attackers to compromise targets’ Windows systems (CVE-2020-27955)

GitHub denies getting hacked

Global number of industrial IoT connections to reach 36.8 billion by 2025

Hackers access personal data as housing provider falls victim to cyber attack

Hackers are exploiting unpatched VoIP flaws to compromise business accounts

Health Care Facilities Are Under Cyberattack; Cyber Insurance Provides A Valuable Defense

Hospitals said to tighten email security in response to CEO spear phishing attempts

Hospitals tighten email security, restrict external messages to prevent ransomware

Housing provider hit by serious cyber attack

How to avoid being scammed this Black Friday

How to Protect Against Email Scams

Indonesian fintech Cermati suffers data breach, legislators rush to regulate industry

Information Security and Backup Strategies to Keep Ransomware at Bay

IRS Warns of COVID Payment Scam

Is Your Business Data Safe in Slack and Microsoft Teams?

Isentia warns of hit to FY21 net profit before tax due to ransomware attack

Italian beverage vendor Campari knocked offline after ransomware attack

Kraken Security Labs Warns Cryptocurrency Investors About Recent Phishing Attacks related to Ledger Hardware Wallet

Leading cyber organisation in Scotland advises individuals and business to ensure systems are ‘fit for purpose’

Malware is exploiting US election uncertainty

Marriott Data Breach Fine Reduced to £18.4 million by UK ICO

McAfee detects 419 new cyber threats per minute in Q2

Millions of marijuana growers hit in major data breach

Nasty malware attacks iPhones and Android - what to do now

National Guard to Help Vermont Health Network After Cyber-Attack

Network Security: Why Visibility Isn’t Enough

New APT hacking group leverages ‘KilllSomeOne’ DLL side-loading

New Zealand: 500 Vodafone customers get bills with wrong names and addresses

‘No Company is Immune against Cyber Attacks’

North Korea attacks targeting defense workers more covert than previously thought

One in four enterprises say a single bot attack has cost them $500,000 or more in the past year

Online community for marijuana growers suffers data breach

Over 70,000 Personal Files Found on 100 Second-Hand USBs

Over Half of Organizations Still Operating Without a BYOD Policy

Paying a ransom to prevent leaking of stolen data is a risky gamble

Paying to delete stolen data doesn’t always work out for the victim, new study suggests

Philippines: Cyber crimes up during early days of quarantine

Phishing scam using inverted images hits Office 365 accounts

Phishing scams using text messages targeting Montgomery County

Questions to Ask to Spot Scams

Rackspace Hosted Email Flaw Actively Exploited by Attackers

Ransomware attack toys with Mattel systems, data

Ransomware gangs pretend to delete stolen data to extort victims twice, report warns

Red team vs. blue team vs. purple team: What's the difference?

Researchers Uncover New Malspam Campaign Exploiting #Election2020 Controversy

Ryuk is challenging traditional 'find a flaw, fix a flaw' strategy

Scammers are sending mass emails making false, dramatic claims about the election to mislead people and steal their information

ShinyHunters hacker leaks 5.22GB worth of Mashable.com database

Sonoma Valley Hospital computer crash was ransomware attack

South Africa: Beware of SARS payment emails

Student data leaked on dark web after cyberattack on Newcastle University

Swedish Insurer Folksam Admits to an Accidental Customer Data Breach

Ten signs it’s time to review your endpoint protection

The Business Email Compromise Scam – Who Is Liable?

The Complex New Normal of Network Access

The One Critical Element to Hardening Your Employees' Mobile Security

The power of trusted endpoints

The rise of viral threats and network detection and response

Threats to election likely to extend for weeks

Toymaker Mattel reveals ransomware attack

Trickbot drops, the botnet that put half the world in check

Trinidad and Tobago: The cybersecurity threat

Two-Thirds of Financial Services Firms Suffered Cyber-Attack in the Past Year

US, Brazilian law enforcement seize $24 million in cryptocurrency generated through online fraud

US Election Interference-Themed Spam Spreads Banking Trojan

US illegal immigration detention center operator hit by ransomware attack

US private prison operator comes clean about ransomware attack in August

US Seizes More Islamic Revolutionary Guard Corps (IRGC) Domains

Wakefern/ShopRite Fined for Pharmacy Data Violations

Warning over fake email claiming you have been issued a parking fine

Watch Dogs: Legion Source Code Allegedly Leaked, Ubisoft Investigating the Breach

Windows 10: Using Cisco's Webex Meetings for remote work? Patch now, warns Cisco

4th November

$1bn in Bitcoin Moved from Silk Road Wallet

5 Ways to Prevent Data Loss & Mitigate Ransomware Attacks

2020 could be 'the worst year in cybersecurity history'

23,600 hacked databases have leaked from a defunct 'data breach index' site

Adobe kills Flash in Acrobat and Reader – pushes out these critical security bug fixes

Americans Confident in IoT Device Security

As Maze retires, clients turn to Sekhmet ransomware spin-off Egregor

Barbie hacked: Toymaker Mattel targeted in ransomware attack

BBC blasted with over 250,000 email attacks every day

BC Hydro customers in Nanaimo fall prey to ‘brazen’ scam

Bitcoin: $1bn address with Silk Road links 'being transferred

Building Cyber-Resilience Across the Wider Economy Post-COVID

Cone Health unable to recover patient data lost in ransomware attack

Cork hospital fined €65k after patients' personal data found in public recycling facility

Council still working to restore services as IT boss describes horror at cyber attack

Cyber Security Awareness Month 2020: Six experts share their thoughts on staying safe online

Cybersecurity in 2020 - What You Need to Know

Cybersecurity Tips For Lawyers You Should Know

Data breach at insurance firm affects up to one million customers

Dealing with Two Schoolyard Bullies: Schools Are Forced to Contend with Cyber-attacks While Also Trying to Manage Covid-19 Crisis

Election Day is over, but threats to voting systems remain

Email scammer targeting Yorkton restaurants

Emotet Attacks Continue to Soar as Botnet Spreads Globally

Employee education singled out as the biggest cybersecurity weakness during lockdown

Essentials of Cyber Risk Management: The Difference between Cyber Protection and Cyber Insurance

Former eBay Execs Indicted for Cyber-Stalking Campaign

Genshin Impact Phishing Scam: Community Reports Illegal Tricks In The Game

GEO Group Hit with Ransomware Attack

Georgia involved in Europol international sweep arresting 20 in multi-million money laundering case

Google fixes two actively exploited Chrome zero-days (CVE-2020-16009, CVE-2020-16010)

Google Forms Abused to Phish AT&T Credentials

Has Watch Dogs Legion's source code leaked online?

Healthcare system: 23,000 people affected by data breach

Hospitals make themselves a target for cyber attacks

Hospitals on high alert after phishing emails target executives

How Cyber-Criminals 'Get in the Game' and What it Means to Defend Against Them

How Microsoft is future proofing against cyber risk

How smartphones became IoT’s best friend and worst enemy

How to deal with the escalating phishing threat

How To Ensure Your NIST Cybersecurity Framework Implementation Isn’t Too Little, Too Late

How to Organize Employees to Cooperate in Threat Mitigation

How to Protect Small Businesses from Cybercrime

InfoSec teams fight dual battle: Limited visibility and board communication

Indonesian fintech Cermati reports data breach, 2.9 million users affected

Japanese game dev Capcom hit by cyberattack, business impacted

Mattel admits it was hit by a ransomware attack

Mattel Reveals July Ransomware Attack Impacting Business

New RegretLocker ransomware has virtual machines in its crosshairs

Newly discovered ‘RegretLocker’ ransomware targets Windows virtual machines

Polls close on Election Day with no apparent cyber interference

Privacy Shield Is Gone. So What Now?

QBot phishing lures victims using US election interference emails

Ransomware attacks grow more menacing during the pandemic, creating headaches in health sector

Ransomware attacks surge 40% globally in Q3

Ransomware gang claims to have leaked Watch Dogs Legion source code

Reports of Watch Dogs Legion source code leak prompts Ubisoft investigation

Rethinking Cloud Security in the New Normal

REvil Ransomware Gang Acquire Source Code for KPOT 2.0 Infostealer

REvil ransomware gang 'acquires' KPOT malware

River Hospital shuts down system email

Russian cybercriminal sentenced to prison for $100 million botnet conspiracy

Scammers are exploiting a legitimate Google Drive feature to spread malware

Small biz in firing line as cyber breaches surge

Sneaky Office 365 phishing inverts images to evade detection

Someone just emptied out a $1 billion Bitcoin wallet

Sophos Uncovers Attackers Targeting Non-Governmental Organizations in Myanmar With New ‘KilllSomeOne’ Backdoor

Spike in Emotet activity could mean big payday for ransomware gangs

Stress a Major Factor in Pandemic Cybercrime Growth

Top Ten: Things Learned from the National Cyber Security Centre (NCSC) Annual Report

Toy maker Mattel discloses ransomware attack

Toymaker Mattel Says It Was Hit With Ransomware

Ubisoft investigating after ransomware group claims to have leaked Watch Dogs source code

UK watchdog fines Marriott 18.4mn pounds over data breach

Understanding bot attacks and how to stop them

Unknown Biden-Trump Election Outcome Benefits Cybercriminals

Vermont Guard cyber team to help respond to cyberattack on health network

Warning - More Covid-19 ‘financial support’ scams targeting businesses during lockdown

Watch Dogs Legion Source Code Leaked Online By Ransomware Gang

Weak Hash Exposes Millions of Passwords on Cannabis Site

Why Paying to Delete Stolen Data is Bonkers

Your Guide to Shopping Safely Online This Cyber Monday

3rd November

3 Steps to Building a Resilient Incident Response Plan

5 Healthcare Providers Still in Downtime, as Sky Lakes Confirms Ryuk Ransomware

34M Records from 17 Companies Up for Sale in Cybercrime Forum

A beginner's guide to cyber security terms

Adobe fixes critical security vulnerabilities in Acrobat, Reader

Advice for combating the world’s largest cyberattacks

After two zero-days in Chrome desktop, Google patches a third zero-day in the Android version

Alert AA20-302A: Federal agencies warn about ransomware attacks targeting hospitals

APT Groups Finding Success with Mix of Old and New Tools

As remote learning spreads, so have cyberattacks. Are schools ready?

Aussies warned of Netflix phishing scam

Australian Competition and Consumer Commission (ACCC) ScamWatch warns over phishing scam impersonating Netflix

BBC hit with 250,000 email attacks daily

BBC Weathers Over a Quarter Million Phishing Attacks Daily

BEC attacks increase in most industries, invoice and payment fraud rise by 155%

Behind the surge in cyber criminality: Antidotes to growing cloud and data vulnerabilities during Covid-19

Big US transportation services firm hit by Windows REvil ransomware

Bitdefender Warns of Zoom Sextortion Scam

Blackbaud Expects Cyber Insurer Will Cover Most Attack Costs

Blackbaud sued in 23 class action lawsuits after ransomware attack

Buguroo Warns About Rising Threat of Smishing Fraud

Cannabis growing community site exposes 3.4 million user records and passwords

Common Gift Card Scams to Watch Out For

Common mobile payment risks and how to avoid them

Configuration snafu exposes passwords for two million marijuana growers

Crooks Are Sending Ransomware Disguised as Coronavirus Test Results

Cyber security CEO predicts that smaller companies will be a large target for attacks in 2021

Cyberattacks: Just How Sophisticated Have They Become?

Cybersecurity: One in three attacks are coronavirus-related

Cybersecurity: What new challenges are on the horizon in 2021

Data Breach Hits 1 Million Swedes as Insurance Firm Admits Error

Data breach stirs new university protests about proctoring apps

Election 2020: Your cybersecurity questions answered

Employees suffering due to phishing scams

European power giant Enel hit by ransomware gang Netwalker

Fake COVID-19 test result email drops King Engine ransomware

Feds Fine New Haven Over Health Data Breach

Folksam data breach leaks info of 1M Swedes to Google, Facebook, more

Google Forms Used In Password-Stealing Spree: What You Need To Know

Google patches two zero days in Chrome

Healthcare system facing 'increased and imminent' cyber threat

How businesses rate their own security and compliance risks

How Microsoft worked with CBI to take down Windows tech support scamming firms in India

How to protect your online accounts if you're affected by the Eatigo and Redmart data breaches

ICO Fines Marriott International for failing to keep customers’ personal data secure

Infamous hacking network shut down by Microsoft resurfaces in time for US presidential election

Is Your Class Action Settlement Reasonable? A Look Inside the Court’s Approval of the Yahoo! Data Breach Settlement May Shed Some Light

Isentia ransomware attack expected to cost at least $7 million

IT systems at UK feed manufacturer, NWF Group, hacked

It's an urgent plea this Election Day: Don't click on ransomware disguised as political ads

Kansas Department of Labor (KDOL) warns of text message phishing scam

Kraken Unveils Elaborate Ledger Phishing Attack

Leading toy maker Mattel hit by ransomware

Marriott smacked with $33.7m fine over infamous data breach

Maze ransomware gang retires

Muscatine schools looking into possible student data breach

National Cyber Security Centre (NCSC) defended the UK from more than 700 cyber attacks in the last year

National Cyber Security Centre (NCSC) forced to ramp up response to escalating cyber attacks during pandemic

National Cyber Security Centre (NCSC) Report Highlights #COVID19 Threat Surge

National Cyber Security Centre (NCSC) Reports Record Number of Cyber Incidents Amid COVID-19

New RegretLocker ransomware targets Windows virtual machines

Not all data is created equal: Protecting our digital journeys

One year after ransomware attack, the Nunavut government says all computers systems are restored

Oracle publishes rare out-of-band security update for WebLogic servers

Patients who see doctors at St. Catharines clinic being notified of hack

Precious Metal Trader JM Bullion Acknowledges Breach

Prison for Russian Player in $100m Botnet Conspiracy

Protecting your computer and data with the help of antivirus software

Rail and Ransomware

Ransomware Alert as Emotet Detections Surge 1200%

Ransomware vs Healthcare: A Dangerous Liaison

Recent Cybersecurity Incidents on the Campaign Trail Highlight Risks for Ordinary Companies

Remote Work, Threat Fatigue, and Budget Constraints: 3 Priorities for Cybersecurity Heading into 2021

Remote Working Exposing Businesses to Unforeseen Threats

Researchers Say 68% of the USB Sticks Resold on eBay Contain Sensitive Data

Russian hacker jailed over botnet data scraping scheme that drained victim bank accounts

Russian Ransomware Attack Cripples California Hospital

Ryuk ransomware behind one third of all ransomware attacks in 2020

SaltStack reveals new critical vulnerabilities, patch now

SASE: The new wave of securing the enterprise

Saskatchewan Polytechnic continues dealing with cyber 'incident'

Security risks surrounding the presidential election, and the importance of voter data protection

Singapore: Update to data law seeks to retain trust, spur innovation

Stamford Hospital: Patient info may have been leaked in data breach

State high court to decide ransomware insurance coverage dispute

Sweden’s Folksam Insurance Group Reports Data Breach Involving Big Tech

The 5 Most Notorious Organized Cybercrime Gangs

The Anatomy of Account Takeover Attacks in Banking and Fintech

The Cybersecurity Myths We Hear Ourselves Saying

These software bugs are years old. But businesses still aren't patching them

Think 3,2,1 to Protect Your Business Against Ransomware

This could be the most expensive data breach ever

Tips to protect your online accounts after a data breach

To Stop Future Hacks, Look to the Past

Two Charged in SIM Swapping, Vishing Scams

US Cyber Command expands operations against Russia, China and Iran

US election security: “The threat actor’s favourite candidate is chaos”

Wakefern and ShopRite Settle Slapdash Data Disposal Claim

Working remotely during the Covid-19 pandemic? Keep I.T confidential

2nd November

60% of organizations have accelerated their zero trust projects

2020 is ‘the perfect storm’ for online scams

1,150,000 XRP Stolen from Ledger users By Recent Phishing Scam

A massive hacking network that Microsoft and the US military tried to stop last month is already back - and it could be a bad sign for Election Day

Additional Hacking Tools Tied to North Korea-Linked Group

Aetna, City of New Haven hit with Office for Civil Rights (OCR) fines after data breach

AI in cybersecurity ups your odds against persistent threats

Are New York’s elections safe from cyberattack?

BBC bombarded with over 280,000 phishing emails every day

BBC hit with over 250,000 phishing emails every day

Behavioral Biometrics: People-Friendly Zero Trust

Channel has key role to play in stemming ransomware tide

CISA Updates Advisory on Large-Scale Impending and Credible Ransomware Threat to Healthcare to Include Additional IOCs

CivMix website is back online after cyber attack

Criminals Are Using Google Drive to Infect Hospitals With Ransomware

Criminals use Windows REvil ransomware to hit big casino supplier

Cyber Attack Targets Central Florida Orthopedic Patients

Cyber Security as Competitive Advantage

Cyber-Criminals Target Naked Zoom Users

Cyberattack shuts down Saskatchewan Polytechnic

Cyberattack targets Montreal health agency, forcing it to go offline

Cyberattacks hit over 1,000 schools, colleges between June-September

Cybersecurity - Why national security is now in our hands, thanks to COVID-19

Cybersecurity: How to make businesses more secure and resilient

Cybersecurity Lessons from the Twitter Hack as New York’s Chief Financial Services Regulator Calls for a Dedicated Cybersecurity Regulator of Large Social Media Companies

Data breach reports were down 51% in the first three quarters of 2020

Deemed as ‘attractive targets’, hospitals hit by surge in ransomware

DoppelPaymer Ransomware Gang Leaks Data Stolen From Georgia County Hack

Eatigo reports data breach

Enterprise IT security teams continue to struggle

Everything you need to know about CEO Fraud and how to prevent it

Facebook, Amazon, Netflix among top targeted platforms in phishing attempts

Fake texts from Halifax and Lloyds banks have been circulating - how to spot the phishing scam

Federal Government Raises Alarms Over Cyberattacks Against Hospitals

Finland: More than 20,000 criminal reports have been registered for the hacker’s data breach, and more will come

Gold Bullion Seller Hit by Magecart Attack

Google discloses actively exploited Windows zero-day (CVE-2020-17087)

Google patches second Chrome zero-day in two weeks

Google Reveals Zero-Day Vulnerability on Windows 10 After Microsoft Failed to Release Patch in 7 Days

Hacker group uses Solaris zero-day to breach corporate networks

Hackers have only just wet their whistle. Expect more ransomware and data breaches in 2021

Hackers leak data after security firm Gunnebo refuses to pay ransom

Health Care Organizations Should Be on Guard Against Heightened Ransomware Threats

Healthcare system facing "imminent" cyber threat – FBI

Hospitals take action to avoid ransomware attacks, including pre-emptive email shut down

How the pandemic has reinvigorated Emotet

How to keep your business protected in a WFH world

How to Recognize and Protect Against Phishing Attacks

Important Cybersecurity Lessons Learned During The Pandemic

India needs IoT security standards

IoT Security: Everything Starts with Awareness

Isentia enters into trading halt following cyber security incident

It’s Time to Fight Back and Protect our Critical Infrastructure

List of data breaches and cyber attacks in October 2020 – 18.4 million records breached

Malicious npm package opens backdoors on programmers' computers

Marriott fined £18.4 million by UK watchdog over customer data breach

Maze ransomware gang retires from cyber crime

Maze ransomware shuts down operations, denies creating cartel

Maze, a notorious ransomware group, says it’s shutting down

More suspected North Korean malware identified after US alert on Kimsuky hackers

Moving beyond passwords and 2FA

Netflix users warned of new phishing scam targeting credit card details

North Korean Malware Helps Hackers Target #COVID19 Vaccines

NWF Group suspends shares after company's IT systems hacked

Oracle issues emergency patch for critical WebLogic Server flaw

Phishers Using Google Drive to Trick People into Visiting Malicious Websites

Phishing scam targets Ledger wallet users - again

Ransomware Attacks Montreal Transit System: Cybercriminals Demand $2.8M

Ransomware booms, but how many attacks achieve their ends?

Ransomware strikes Wyckoff Heights Medical Center, Brooklyn

Ransomware surge imperils hospitals as pandemic intensifies

Reasons to Have a Cyber Essentials Certificate for Your Business

Remote Insider Data Theft Worries Financial Industry

Responding To The Rising Threat Of eSkimming

REvil ransomware gang says it wants to reach profits of $2 billion

Russia-Based Hackers Plan New Wave of Attacks Against U.S. Hospitals

Schools, here’s how to stay cyber-safe in the age of remote learning

Security Pros Have Role in Combatting Disinformation

ShopRite, Wakefern will pay $235k fine, improve security after massive data breach, Attorney General says

Singapore updates data protection law to exclude user consent for 'legitimate' business purposes

Smaller Enterprises Cannot Fly Under the Cyber-Attack Radar Any Longer as Breaches Predicted to Rise By 40% in 2021

Staying Aware of Financial Scams in Australia

Surge in Ryuk ransomware attacks has hospitals on alert

Technology solutions providers must empower end users to improve cybersecurity standards

The BBC Experiences Over 250,000 Malicious Email Attacks Per Day

Texas Gold-Dealer Mined for Payment Details in Months-Long Data Breach

This Google Drive feature is allowing scammers to send malicious links to users

Three Things Hospitals and Healthcare Providers Should Do Right Now To Prepare For Expected Wave Of Ransomware Attacks

Three Ways To Hack An Election

Tighten Cybersecurity In Your Home Office With These 13 Expert Tips

Top Cybersecurity Strategies for Financial Advisors in 2021

Top tasks IT professionals are spending more time on

US: Department of Social Services (DSS) clients’ data exposed

US City Fined Over Former Employee's Data Theft

US Department of Justice charges a 19-year old for an alleged SIM-swap crypto theft

US Election Cybersecurity: CISA Virtual War Room Counters Attacks

US hospitals target ransomware like the Trickbot trojan amid the COVID second wave

Use this fast, free check to see if your email address is spreading spam

Who is abusing your parked domain?

You don’t have to use the dark web to be exposed to its dangers