Editor's Message

Welcome to DBD. On March 8th we celebrated our 4th Anniversary and the 1st Anniversary of our PRiSM application, officially endorsed by the SANS Institute. Despite recent personal issues that have impacted the amount of time I have been able to dedicate to both projects, I have been doing my best to keep everything as up-to-date as possible, and I would like to take this opportunity to thank everyone for their patience and support whilst I navigate through this very difficult time. Stay safe. :)



Monday 29 November 2021

Data Breaches Digest - Week 48 2021

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 29th November and 5th December 2021.


5th December

2.1 million people’s data affected during a data breach

Convincing Microsoft phishing uses fake Office 365 spam alerts

Cyber Vulnerabilities and Safety Risks Across the UK's Digital Railway

Cyberattacks targeting South Korea’s security strategies will increase during elections: National Intelligence Service (NIS)

Cybersecurity predictions: Identity protection to be a priority in 2022

Did the cybersecurity stakes get even higher in 2021?

Education sector among most vulnerable

Garena Free Fire: Stop being defrauded; Know how to prevent a phishing attack; check list

Hackers are spamming businesses' receipt printers with 'antiwork' Reddit manifestos that include messages like 'are you being underpaid?'

How to Protect Yourself from Gift Card Scams This Holiday Season

If you’re mailed a random CD, don’t put it in your computer. Here’s why

Ill cyber winds: Companies and agencies must try harder to protect information

Laying the land for a cyber-safe future

Malicious Excel XLL add-ins push RedLine password-stealing malware

Maryland health department website goes offline after apparent cyberattack

New Twitter phishing campaign targets verified accounts

Phishing campaign is actively targeting U.S. military families

Putting a stop to cybercrime

Ransomware alert

Ransomware attacks on the rise in Switzerland

Ransomware group hits 49 critical infrastructure firms in US

Ransomware groups have reportedly been targeted by the US military

The most common cybersecurity threats and how to prevent them

The National Police warns that cybercriminals are intensifying their campaigns against CaixaBank users to steal their data

Threat to online learning

Three key areas will take the cybersecurity center stage in 2022

Top Ways To Ensure Online Security And Device Safety

US Military Fights Against Ransomware: Cyber Crime is Massive in the Country, Needing More to Fight Against It

Why responsibility for ransomware sits at the top

4th December

Can your premium bonds be stolen? NS&I advises how to keep your money safe

Cybercrimes on the up, with South Africa annually losing about R2.2 billion

Cybercrime predictions for 2022: Deepfakes, cryptocurrencies, and misinformation

Cybersecurity Pros Need a Seat at the Table

Darktrace Reports 30% More Ransomware Attacks Targeting Organizations During The Holiday Period

Data leak of personal employee info least disclosed type of breach

FBI Confiscated Around $2.3 Million in Crypto Tied to Ransomware Gang REvil

FluBot, the malware that spreads via SMS “like the flu”, infected 70,000 cell phones in 24 hours

Global online ‘student cult’ cybercrime syndicate busted in Cape Town

How a Small Email Phish Can Become a Million Rand Ransom

How Can a Small Business Defend Against Ransomware?

How Do You Protect Yourself From A Swatting Attack?

How to Practice Online Safety: Tips and Tricks in 2021

Improve Your Security Strategy: The Rise of Ransomware

Increased security needed in lieu of recent QuickBooks phishing Frauds

Lewis & Clark reopening Tuesday after cyberattack

Malicious KMSPico installers steal your cryptocurrency wallets

Malvertising attack distributes malicious Chrome extensions, backdoors

MI5 expert calls for joint defense against cyber threats

Nearly 69,000 affected in San Juan Regional data breach; man files lawsuit against hospital

Nepal unveils plan to regulate Internet of Things, machine to machine communication

Online shoppers to be targeted by cybercriminals this festive season as Christmas shopping season underway, experts warn

Pegasus Spyware Reportedly Hacked iPhones of U.S. State Department and Diplomats

Ransomware: Even backups may not save you

Ransomware attack hits French-Public School Board

Research finds ransomware vulnerabilities likely to last another two years

South Africa: Cybercriminals, beware!

Spain: The National Police warns CaixaBank is being used again to steal your data

We know who is attacking us and we know how to get even, says Israel's cyber defense chief

What is Ransomware?

Why trusting no one is the only way to combat cybercriminals

Why You Should Regularly Change Your Passwords

3rd December

13 Cybersecurity Predictions for 2022

A Quick Guide to Data Security When Managing Offshore Teams

Anyone can obtain banking credentials using phishing kits

APTs Adopting New Phishing Methods to Drop Payload

Are your PLCs an easy target? A mindset shift can significantly reduce PLC firmware vulnerabilities

Arrest Points to Ubiquiti Breach Being an Inside Job

Billions of WhatsApp users warned to secure accounts this week or risk losing them

BIO-ISAC: Beware of Tardigrade Attacks on Biomanufacturers

Blundering NHS says sorry after sharing patients' email addresses

Building new relevance in managed security will be key to channel success in 2022

Businesses set to face an onslaught of ransomware attacks over holiday season

CISA, FBI release alert on Zoho vulnerability

Clearview AI Facing £17 Million Fine From UK ICO Over Violation of Data Protection Laws

Cl0p Ransomware Gang Tries to Topple the House of Cards

Councilman objects after city's email phishing test asks about COVID vaccination status

Critical infrastructure industries struggle to protect themselves from cyberattacks

Crooks are selling access to hacked networks. Ransomware gangs are their biggest customers

Cryptocurrency Scams: 5 Ways to Spot, Avoid and Protect

Cyber fraud fears rise towards festive season

Cyber safety training must be compulsory to combat attacks

Cybersecurity Tips When You Work Remotely From Harlem To Hollywood

Cybersecurity trends 2022: Ransomware and supply chain attacks are major threats

Darktrace reports 30% more ransomware attacks targeting organisations during the holiday period

Data Protection: Your Best Line of Defense Starts Inside

Deepfakes, Voice Impersonators Used in Vishing-as-a-Service

Determined APT is exploiting ManageEngine ServiceDesk Plus vulnerability (CVE-2021-44077)

Do you know where your data goes? Data sovereignty in Australia

Ex Ubiquiti Developer Arrested for Data Theft

Fake support agents call victims to install Android banking malware

FBI: Cuba ransomware breached 49 US critical infrastructure orgs

FBI: Hackers Behind 'Cuba' Ransomware Have Earned At Least $43.9 Million

FBI says the Cuba ransomware gang made $43.9 million from ransom payments

FBI warning: Hackers are targeting this flaw in Zoho ManageEngine ServiceDesk Plus

Federal Trade Commission (FTC) implements tougher data protection rules to safeguard customer information

Fighting Money Laundering on the New Front of Decentralized Finance

Firewalls and Security Protocols Alone Cannot Keep Hackers Out

Hack targets Planned Parenthood, exposing personal information of 400K patients

Hackers Are Spamming Receipt Printers with Pro Labor Messages

Hackers steal $120m from Badger Defi and $30m from MonoX

Headwaters confirms unauthorized access in suspicious email activity

Healthcare Staffing Database Exposed Worker PII

HHS unveils healthcare cybersecurity, threat mitigation resource website

How AI and ML can thwart a cybersecurity threat no one talks about

How companies can answer the national call to action on infrastructure cybersecurity

How Financial Services Organisations Can Protect Against Cyberattacks by Employing Modern Data Protection Best Practices

How MFA Can Help Prevent Data Breaches

How to avoid being a hacker's next target: Don't overshare information on business social media

How to Avoid Falling for Skimming Scams This Holiday

Increase in ransomware attacks targeting organisations during the holiday period

Info watchdog members reappointed as data breaches mount

IRS: Pandemic adds to data-theft risks with new schemes

It's a truly cruel scam. Here's the dramatic way Google is trying to stop it

Major trends in online identity verification for 2022

Massachusetts Registry of Motor Vehicles warns about phishing scam

Misconfigured Database Leaks Info on 150K E-commerce Buyers

MPs launch investigation into combatting fraud in wake of pandemic surge

Netgear router flaws exploitable with authentication...like the default creds on Netgear's website

New Malvertising Campaigns Spreading Backdoors, Malicious Chrome Extensions

New Payment Data Stealing Malware Hides in Nginx Process on Linux Servers

No time like the present for running an ethical and effective phishing simulation

NSO spyware was reportedly used to target iPhones of US State Department employees

Omicron Phishing Campaign Hits User Inboxes

Omicron Phishing Scam Already Spotted in UK

OneDigital Notifies Blue Shield of California Regarding Data Security Incident That May Involve Members

Password-stealing and keylogging malware is being spread through fake downloads

Phishing kits’ favorite brand? Amazon

Planned Parenthood L.A. was hacked. What it means, and what you can do

Ragnar Locker reminds breach victims it can read the on-network incident response chat rooms

Ransomware: should your company pay?

Ransomware Operations Double Down on Data Leak Sites

Ransomware victims increase security budgets due to surge in attacks

Received Some Random Cryptocurrency? It Might Be a Phishing Scam

Researchers Detail How Pakistani Hackers Targeting Indian and Afghan Governments

Researchers disclose how Pakistani cyber criminals attack the governments of India and Afghanistan

Researchers discover 14 new XS-Leak web browser attacks

Riverhead schools hit by ransomware attack, shutting down computer and tech infrastructure

RMV Warns Customers About Text Message Phising Scam

Sensitive information of 30k Florida healthcare workers exposed in unprotected database

SMBs admit they could not survive for five days following cyber attack

Someone is hacking receipt printers with 'antiwork' messages

Tardigrade Malware Poses Unprecedented Threat to Biomanufacturers

Technical Problem or Cyber Crime? How to Tell the Difference

The 3 Drivers of Zero Trust Network Access Implementation

The Securities and Exchange Commission (SEC) Means Business: Clamping Down on Financial Institution Complacency with Security Practices

Things businesses will need to know about fraud for 2022

Third of businesses have no disaster recovery plan in place in event of cyberattack

This password-stealing and keylogging malware is being spread through fake software downloads

Threat Group Takes Aim Again at Cloud Platform Provider Zoho

‘Tis the season of e-retailers and cybercrime

Tor2Mine cryptominer has evolved: Just patching and cleaning the system won’t help

Transportation Security Administration (TSA) Issues New Cybersecurity Requirements for Rail Sector

Transportation Security Administration (TSA) Issues Security Rules For Rail Operators

Twitter removes another 3,000 state-backed accounts linked to six countries

Types of Malware You Should Be Aware of

UK Government Fined Over Honors List Data Breach

Update your Google settings now as 1.5 BILLION Gmail users hit with warning

US identity thieves jailed over $130,000 scam that targeted the elderly

US Issues Cybersecurity Directive for Airlines and Railroads

US State Dept employees’ phones hacked using NSO spyware

Utility business Delta-Montrose Electric Association loses billing capability and two decades of records after cyber attack

Warning issued as Omicron variant scam doing the rounds online

White House Readies Plan to Boost Cybersecurity of Water Supply

Who Is the Network Access Broker ‘Babam’?

Why Everyone Needs to Take the Latest CISA Directive Seriously

Why self-sovereign identities are so valuable to residents and agencies

Widespread Threats Target Automotive Companies

Zoho: Patch new ManageEngine bug exploited in attacks ASAP

2nd December

5 Simple steps to protect your practice from cyberattacks

63% of C-suite execs do not have an incident response plan

All Sectors Should Expect A Holiday Cyberattack Surprise

Amazon shoppers warned of phishing scam that tries to get account details

AT&T Takes Steps to Mitigate Botnet Found Inside Its Network

Basic Cybersecurity Terms & Definitions Integrators Should Know

BIO-ISAC Warns About Tardigrade Malware Actively Targeting Biomanufacturing Facilities

Cabinet Office fined £500,000 over New Year honours list data breach

CISA Warns of Actively Exploited Critical Zoho ManageEngine ServiceDesk Vulnerability

Colorado energy company loses 25 years of data after cyberattack, still rebuilding network

Community college in southwest Illinois closes after ransomware attack

Config error left 190 Australian organisations open to phishing attacks

Cyber-attack on Planned Parenthood

Darktrace Reports 30% More Ransomware Attacks Targeting Organizations During The Holiday Period

Data belonging to 400,000 Planned Parenthood patients stolen by ransomware hackers

Data breach at Florida school district impacts 50,000 students and employees

Data from 400,000 Planned Parenthood patients compromised

DNA test data breach affects millions of people – see if you’re one of them

Double Extortion Ransomware Victims Soar 935%

‘Double-Extortion’ Ransomware Damage Skyrockets 935%

Facebook's Meta says bad actors are changing tactics as it takes down six more groups

FBI Warns of Heightened Ransomware and Cybersecurity Risks During M&A Transactions and Over the Holidays

Federal watchdog warns security of US infrastructure 'in jeopardy' without action

FluBot malware warning after 70,000 attacks launched over SMS

Four steps to protect online personal information and data breach

Former Ubiquiti Dev Arrested for Orchestrating Data Breach, Trying to Extort $2M

Hackers are turning to this simple technique to install their malware on PCs

Hackers use in-house Zoho ServiceDesk exploit to drop webshells

Hackers using NEW technique to put malware on your PC – here’s how to stay safe

Holiday Season Fraud Fear Higher this Year

How phishing kits are enabling a new legion of pro phishers

How to Outplay the Ransomware Playbook

How to Reduce the Financial Impact of Cyberattacks to Your Business

IKEA Suffers Ongoing Phishing Attacks From Compromised Internal and Vendor Accounts

Insider threats: How trustworthy are your employees?

Investing In A Thorough Understanding Of Your Threat Surface

IT leaders are over-stressed and under-prepared for ransomware attacks

Key Characteristics of Malicious Domains

Lewis & Clark to Have Limited Reopening Monday Following Cyber Attack

Malicious Chrome Extension, Backdoor Uncovered in Malware Campaign

Malware variants in 2021: Harder to detect and respond to

Mid-Size Orgs Continue to Be Targeted in Healthcare Cyberattacks

Mozilla properly fuzzed NSS and still ended up with a simple memory corruption hole

New malware hides as legit nginx process on e-commerce servers

NHS trust apologises for Covid trial data breach

Nine WiFi routers used by millions were vulnerable to 226 flaws

Ontario family agency hit by ransomware, says no data was stolen

Phishing actors start exploiting the Omicron COVID-19 variant

Phishing Scam Targets Military Families

Planned Parenthood data breach: Hackers steal 400,000 patients’ data

Planned Parenthood data breach exposes 400,000 patients

Planned Parenthood LA announces ransomware incident, healthcare info of 400,000 patients leaked

Police Arrest 1800 in Major Money Laundering Crackdown

Railway cyber risk management: Raising awareness on relevant threats

Ransomware actors steal data of 400K patients from LA Planned Parenthood

Ransomware attack hits French-Public School Board

Ransomware attack on Planned Parenthood LA exposes info for 400,000 patients

Ransomware Attempts Jump by 30% During Holidays

Ransomware groups increasingly using data leak threats to pile pressure on victims

Rebranded Ransomware Group Sabbath Hitting Hospitals and Schools

Researchers Detail 17 Malicious Frameworks Used to Attack Air-Gapped Networks

Researchers take down scams targeting US military families

Russian Bulletproof Hosting Kingpin Gets Five Years

Securing the Modern Software Supply Chain

Security experts offer tips to avoid online holiday scams

Security Hygiene, Posture Management Remain Challenging

Shopping online? FBI says beware of these holiday scams and phishing threats

Someone stole $120 million in crypto by hacking a DeFi website

The Concept of Shared Responsibility in Combating Ransomware

The importance of vulnerability management for your organization

Three key ransomware actors changed jobs on October 18 – the same day REvil went dark

Transportation Security Administration (TSA) will force train and plane operators to tell the feds when they've been hacked

Ubiquiti data breach orchestrated by “trusted insider”, says Department of Justice (DoJ)

What 2021 Shows Us About The Future Of Access Management

What Microsoft’s shift to passwordless means for cybersecurity

Why a Risk Reset Is Needed for a More Secure, Automated Cyber Future

Why are Hacker’s after financial data of Germans

Why is the biggest furniture company in the world facing a crisis?

1st December

80K Retail WooCommerce Sites Exposed by Plugin XSS Bug

2022 cyber surge of ransomware

300,000+ users downloaded malware droppers from Google Play

About 50,000 students and employees may have had their personal info stolen. They’re getting told now

Access brokers are making it easier for ransomware operators to attack businesses

Alarming rise in cyberattacks against healthcare facilities, 68 attacks in Q3 2021

Android warning to DELETE these Google Play store apps NOW as they were ‘secretly banking trojan malware’

API security awareness: The first step to better assessing the risk

Australia set to gain ability to sanction cyber attackers under 'Magnitsky-style' law

BlackByte ransomware attacks exploiting ProxyShell flaws

Broward County Public Schools (BCPS) reveals what information was stolen in data breach

Bulletproof hosting founder imprisoned for helping cybercrime gangs

Butler County Community College (BC3) in Brockway will resume classes December 6 after ransomware attack

Butler County Community College Still Dealing With Fallout Of Ransomware Attack

Christmas hackers

Cloud Accounts: A Growing Target for Opportunistic and State-Sponsored Threat Actors

Cloud Honeypots Shed Light on 'Shocking' Exposed Service Attacks

Control failures are behind a growing number of cybersecurity incidents

Critical Bug in Mozilla's NSS Crypto Library Potentially Affects Several Other Software

Despite the popularity of password managers, many still use pen and paper

DNA testing service data breach impacting 2.1 million users

Don’t let cybercriminals turn you into a Grinch this holiday season

Emotet now spreads via fake Adobe Windows App Installer packages

Europol: 18k money mules caught laundering money from online fraud

Evangelion Store Online Reports Credit Card Data Breach

EVANGELION STORE Online Reveals Data Breach, Over 17,800 Credit Card Numbers Leaked

Facial recognition firm could face £17 million fine over UK data ‘breach’

FBI seized roughly $2.3 million in cryptocurrency tied to ransomware attacks

Feds Warned to Look Out For Ransomware Grinches over the Holidays

Final Member of 'The Community' Sentenced

Florida school district acknowledges data breach in ransomware incident

Former Ubiquity dev charged for trying to extort his employer

Hacker Jailed for Stealing Millions of Dollars in Cryptocurrencies by SIM Hijacking

Hackers look to suppliers for access to corporate systems and data

Hackers targeting and stealing billions from Iranian citizens in texting scheme

Healthcare staffing info leak exposes 170K records

Holiday cyber warning: think before you click

How diplomacy can (and can’t) solve the world’s cybercrime crisis

How to Cut Down on Data Breach Stress and Fatigue

How to Proactively Remove File-Based Malware

How to Recognize a Fake Bank Email

How Vulnerable Is Your Personal Information? 4 Essential Reads

How Will Cyber Threats Impact the Beijing Winter Olympics?

HP Printer Hijack Bugs Impact 150 Models

Hybrid cloud brings benefits. But it also brings new cybersecurity risks, too

Kaspersky intelligence ranks the UAE’s most prominent APT threats

Keeping client data secure: How’s your cybersecurity immunity?

KnowBe4’s Team of Cybersecurity Experts Release Predictions for 2022

List of data breaches and cyber attacks in November 2021 – 223.6 million records breached

Malicious Android app steals Malaysian bank credentials, MFA codes

Malicious Google Play Apps Show Password Vulnerabilities

Mediahuis/INM fails to stall data breach case

MI6 Boss: Digital Attack Surface Growing "Exponentially"

Microsoft Exchange servers hacked to deploy BlackByte ransomware

New EwDoor Botnet Targeting Unpatched AT&T Network Edge Devices

New ransomware group is third rebranding of gang that hit Canadian, U.S. targets

New Ransomware Variant Could Become Next Big Threat

NHS Omicron PCR test scam email: What it looks like, how to avoid it

North Korean hacking group takes aim at activists with Chinotto malware

Organizations Now Have 76 Security Tools to Manage

‘Over-permissive’ authentication checks left 190 Australian organizations vulnerable to business email compromise attacks

Pakistan needs national data security strategy to meet cyber-attack challenges

Panasonic confirms data breach, after cybercriminals gain access to file server

Panasonic discloses data breach

Planned Parenthood LA discloses data breach after ransomware attack

Planned Parenthood Los Angeles says hack breached about 400,000 patients’ information

Private medical files dumped in cabinet outside GP surgery

Ransoms demanded to ransoms paid on the decline

Ransomware: What Can Be Done to Protect Legal Firms?

Ransomware, fleeceware among top threats of 2021

Ransomware Attack In Mysuru Private Hospital

Ransomware response: Do your backups work?

Report finds 'glaring gaps' in financial sector's cybersecurity measures

Researchers Warn Iranian Users of Widespread SMS Phishing Campaigns

Russian Man Gets 60 Months Jail for Providing Bulletproof Hosting to Cyber Criminals

Singaporean workers distressed by accidentally deleted cloud data

Sink or swim: Why your business resiliency depends on your Active Directory recovery strategy

So you’ve been breached? How to break the news...

State-backed hackers increasingly use RTF injection for phishing

Stealthy ‘WIRTE’ Gang Targets Middle Eastern Governments

Tech adoption makes construction industry top target for cyberattacks

The Cost of a Ransomware Attack, Part 2: Response & Recovery

The Cyber Threats Facing Retailers This Holiday Shopping Season

The ripple effect: Why protection against supply chain attacks is a must

The urgent need for a radical approach to cyber security

These researchers wanted to test cloud security. They were shocked by what they found

Threat-actors and cloud computing: predictions for 2022

Treasury Crypto Security Sanction Blocks Exchange Favored by Ransomware Actors

UK business leaders expect ransomware threat spike in 2022

We all have a role to play in the fight against ransomware

Why You’re Getting Spam Texts, According to a Cybersecurity Expert

Widespread ‘Smishing’ Campaign Defrauds Iranian Android Users

30th November

8-year-old HP printer vulnerability affects 150 printer models

150+ HP multifunction printers open to attack (CVE-2021-39237, CVE-2021-39238)

300,000 Android users impacted by malware apps on Play Store

300,000 banking Trojan infections from Google Play in 4 months

Android banking malware infects 300,000 Google Play users

Australian government-owned energy company hit by ransomware attack

BlackMatter Ransomware Quickly Fills Void Left by Darkside, REvil

Boulder medical firm hit with data breach

Business School Dean Guilty of Data Conspiracy

Clearview AI to be Fined $22.6M for Breaching UK Data Protection Laws

Congressional Committee Seeks Lessons Learned From Ransomware Attack

Critical Wormable Security Flaw Found in Several HP Printer Models

Cyber Essentials Set for Major Update in 2022

DNA testing center admits to breach affecting SSNs, banking info of more than 2 million people

DNA testing firm discloses data breach affecting 2.1 million people

DVLA issue scam warning ahead of Christmas as phishing on the rise

Ecommerce retailers facing a 350% increase in fraudulent online orders

EwDoor botnet targets AT&T network edge devices at US firms

Facial recognition firm's £17 million fine for data breach

Family services agency suffered data breach

FBI seized $2.3M from affiliate of REvil, Gandcrab ransomware gangs

FBI seized roughly $2.3 million in cryptocurrency tied to ransomware attacks

Finding Security Awareness Training Balance

Finland Cautions Android Users Over Flubot Malware Spread Through Messages - What to Do if Your Device Gets Infected?

Finland Faces Blizzard of FluBot-Spreading Text Messages

Finland warns of Flubot malware heavily targeting Android users

GoDaddy WordPress data breach: A timeline

Going Global: How the Russian Ransomware Model Could Spread Worldwide

Government-Industry Cooperation May Be the Most Potent Ransomware Antidote

Hackers could steal encrypted data now and crack it with quantum computers later, warn analysts

How Decryption of Network Traffic Can Improve Security

How sensitive AI data may become more private and secure in 2022

How to combat ransomware with visibility

How to Get Your Staff Onboard with Information Security

Implications of strengthening the cybersecurity of small business in America

Lloyd’s Carves Out Cyber-Insurance Exclusions for State-Sponsored Attacks

Manufacturing Industry Is the Second Most Affected by Ransomware

Massive online crime crackdown leads to 1,000 arrests

Most challenging security threats for CTOs

New Ransomware Family Spotted Targeting US Companies - Researchers Warn of Yanluowang Operations

Ottawa french public school board paid hackers ransom after data breach

Panasonic Suffers Data Breach After Hackers Hack Into Its Network

Panasonic’s Data Breach Leaves Open Questions

Password management strategies differ across the US

Patching takes 2.5 times longer when endpoints are remote

Pennsylvania Primary Care Medical Group Victim of Ransomware

Police Set for Record Haul in Anti-Card Fraud Operation

Printing Shellz: Critical bugs impacting 150 HP printer models patched

Queensland government energy generator hit by ransomware

Quest’s ReproSource faces patient lawsuit over data breach impacting 350K patients

Ransomware, Scams Taking Advantage of Pandemic New Habits, and Fleeceware Among the Top Threats of 2021

Ransomware attack exposed personal info of Hancock unit owners

Ransomware Group Rebrands Multiple Times to Evade Detection

Ransomware vs. Cities: A Cyber War

Recovering from ransomware: One organisation’s inside story

Research reveals surge in phishing-as-a-service activity targeting Black Friday shoppers

Sabbath ransomware group rebrands, continues attacks

School’s (Locked) Out: Defending Against the New Ransomware Threat

Smartwatches for children are a privacy and security nightmare

Spy chief's warning: Our foes are now 'pouring money' into quantum computing and AI

Texas School District to Scan Children’s Devices

The Cost of a Ransomware Attack, Part 1: The Ransom

UK and Israel Pledge Greater Cooperation in Cybersecurity

UK climbs up the ransomware target league

Understanding the Adversary: How Ransomware Attacks Happen

Unpatched Microsoft Exchange Servers abused in new phishing campaign

Unpatched Unauthorized File Read Vulnerability Affects Microsoft Windows OS

Why does ransomware still work?

Why It's Time to Talk About Nation-State Attacks...Again

WIRTE Hacker Group Targets Government, Law, Financial Entities in Middle East

Yanluowang ransomware operation matures with experienced affiliates

Yanluowang Ransomware Tied to Thieflock Threat Actor

29th November

3 Ways To Prepare For Cyber Attacks

4 Android Banking Trojan Campaigns Targeted Over 300,000 Devices in 2021

1,000 arrests made in online fraud crackdown, says Interpol

An Ounce of Segmentation Is Worth a Pound of Ransomware Cure

APT37 targets journalists with Chinotto multi-platform malware

As Ransomware costs balloon, it’s last call for legacy security

Attackers exploiting Windows Installer vulnerability despite patching

Australian Federal Police (AFP) targets Business Email Compromise (BEC), phishing with new cybercrime centre

Behavioral biometrics: A promising tool for enhancing public safety

Butler County Community College (BC3) Closes For Two Days Due To Ransomware Attack

Butler County Community College closes for 2 days after cyberattack

CISA Seeks Extra Email Protection

Cryptominers and ransomware on the rise in Q3 2021

Cyber-attack on Ikea

Cybercriminals: Frenemies China, Russia, North Korea

Data Breach at Panasonic

Dark web market Cannazon shuts down after massive DDoS attack

DVLA scam warning as fraudsters target motorists with phishing emails and texts

Fast-paced dash to digital leaves many public services exposed

Federal Trade Commission (FTC) warns health apps to comply with health data-breach rules

Finance Ministry identifies weak link in CDSL that put sensitive data of investors at risk

Five alarming cyber predictions

Former Northwell hospital employee charged with HIPAA violation for snooping 13,000 patient EHRs

GoDaddy data breach affected over 1.2m Managed WordPress customers

Google says people are hacking cloud accounts to mine cryptocurrency

Hack 'Sabbath': Elusive new ransomware detected

Hackers Using Compromised Google Cloud Accounts to Mine Cryptocurrency

Highland Village targeted in phishing attack

Holiday Ready: How Retailers Can Prepare a Gift-Wrapped Availability and Security Framework During the Holiday Period

Hope Is Not A Strategy: How To Face The Risk Of Ransomware Head-On, Part 2

Hospital cyber-attacks are the new pandemic; here’s the cure

How far-right extremist groups face exposure from army of hacktivists

How the Rise in Cyberattacks Is Changing Consumer Behavior

How To Ensure a Healthy and Ransomware-Proof Environment

How To Secure Your Broadband?

How vulnerable is your personal information? 4 essential reads

Ikea email systems bombarded by phishing attacks

IKEA fights against hacker attack, an email ransomware

IKEA Hit by Email Reply-Chain Cyberattack

Insurers shy away from ransomware cover as losses mount

Israel Blamed for Crippling Attack on Iranian Gas Stations

Lewis and Clark Cyberattack: Community College Ransomware Recovery Updates

Look out for these 3 common - and dangerous - Cyber Monday shopping scams

Memo Cites Lessons from Ransomware Payments by CNA, JBS and Colonial Pipeline

Mitigating cyber threats within 5G cloud infrastructure

Nadra’s data breach a national security threat

New Chinotto Spyware Targets North Korean Defectors, Human Rights Activists

Online scams spiked during Black Friday

Over 300,000 Android users have downloaded these banking trojan malware apps, say security researchers

Panasonic confirms cyberattack and data breach

Panasonic confirms data breach after hackers access internal network

Panasonic discloses data breach after network hack

Patients File Lawsuits in Wake of Healthcare Data Breaches

Phishing attacks top 260,000 in Q3 2021

Phishing Remains the Most Common Cause of Data Breaches, Survey Says

Prepare, defend, recover, repeat – The vicious cybersecurity cycle in 2021

Protecting against ransomware in a hybrid cloud world

Putting the “sec” in DevSecOps: An overall reduction of risk

Ransomware Attack Affects over 2300 Sonoma County Clients

Ransomware Group Continually Rebrands to Slip Under Radar

Ransomware teaches us the importance of data protection

Rapid Money Laundering Response Helps Intercept $27m

Remote access tools abused to spread malware and steal cryptocurrency

Researchers Flag 300K Banking Trojan Infections from Google Play in 4 Months

REvil 'super-hacker' wanted by FBI for 'using ransomware to fleece millions of dollars' from Americans is unmasked by DailyMail.com in his plush hideout in Siberia as Kremlin turns blind eye

Sabbath hackers are targeting US schools and hospitals

Scanning Docker Images for Secrets

ScarCruft APT Mounts Desktop/Mobile Double-Pronged Spy Attacks

Shape-Shifting ‘Tardigrade’ Malware Hits Vaccine Makers

Singapore cops arrest 39 for alleged involvement in job, phishing scams where losses amounted to S$20mil

Stealthy WIRTE hackers target governments in the Middle East

Telegram channel admins who sold fake vaccine cards arrested

The True Cost Of Rising Cyber Threats, According To A Cybersecurity CFO

Unpatched Windows Zero-Day Allows Privileged File Access

Vestas ‘close to normal’ after ransomware attack Vestas ‘close to normal’ after ransomware attack

Vestas Indicates Cyber Security Incident Was Ransomware Attack

WFH security: How to protect your remote endpoints from vulnerabilities

What the SEC Requires From Businesses After a Data Breach

Wind turbine maker Vestas confirms recent security incident was ransomware

Your stepwise approach for preventing ransomware

Zero trust could be the key to defending against ransomware attacks