Editor's Message

Welcome to DBD. On March 8th we celebrated our 4th Anniversary and the 1st Anniversary of our PRiSM application, officially endorsed by the SANS Institute. Despite recent personal issues that have impacted the amount of time I have been able to dedicate to both projects, I have been doing my best to keep everything as up-to-date as possible, and I would like to take this opportunity to thank everyone for their patience and support whilst I navigate through this very difficult time. Stay safe. :)



Monday, 4 April 2022

Data Breaches Digest - Week 14 2022

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 4th April and 10th April 2022.


10th April

7 Cybersecurity Mistakes Your Employees Likely Made Today

Australian Communications and Media Authority (ACMA) moves to shut down SIM-swap scams

Avoid Scams In Mobile Payment Apps — Here’s How

Cyber attacks on Ukraine: Microsoft takes over seven domains

Cyberattacks on the rise in Vietnam

Don't fall for this information-gathering Easter chocolate scam

Facebook owner Meta takes action against cyber threats in some countries

Fake apps are spreading a new Android trojan called Octo Banking

FBI Disrupts Cyclops Blink Botnet Used by Russian Intelligence Directorate

Florida International University (FIU): Hackers accessed sensitive data, 'no indication' it has been compromised

How to protect your email following Ballad Health data breach

Infamous Conti Ransomware Gang Strikes Snap-On Tools

New Android banking malware takes control remotely

New Meta information stealer distributed in malspam campaign

Real-time is where the cyber security risk is

Soon, Passwords Might Be Optional. How Will You Protect Yourself In The Future?

Taking cover from cyberattacks

The Long Shadow of the ‘Nigerian Prince’ Scam

The mysterious Chinese cyber attack against Ukraine on the eve of the invasion

Threatening Redirect Web Service Instills Malicious Campaigns In Over 16,500 Websites

Why hackers are increasingly targeting small businesses - and what they can do about it

YouTube viewers lost $1.6 million in cryptocurrencies in three days on fake streams

Zero trust model: How MSMEs can secure their digital assets

9th April

7 Benefits of Using AI for Cybersecurity

76 percent of firms suffered data loss in 2021

Accounts deceivable: Email scam costliest type of cybercrime, worse than ransomware

Ballad Health announces possible medical data breach following review

Bank of Ireland fined €463,000 over the corruption of information

Beware: Hackers Impersonate WeTransfer to Steal Data

Don't fall for licence plate sticker refund scam, police warn

Email scams siphon untold billions from economy

Fortuna reports suspicious Russian cyberattacks

Hackers use Conti's leaked ransomware to attack Russian companies

How To Stay Safe Online

How Ukraine has defended itself against cyberattacks – lessons for U.S.

Microsoft seized Russian domains targeting Ukrainian media organizations

More than 8 million Cash App Investing customers potentially impacted by data breach linked to former employee

New Android banking malware remotely takes control of your device

Quick check to make sure no one is spying on your computer

Supply Chain Cyber Attacks Continue to Increase

TD Canada scam targets some residents in Mississauga and Brampton

Twitter scammers hack verified accounts to promote a fake Azuki NFT airdrop

Watch what you surf: Your digital footprints not only hurt privacy but also affect cybersecurity

What Are The Types Of IT Infrastructure Security?

Your digital footprints could help hackers infiltrate computer networks

8th April

3 ways to build cyber resilience post-ransomware attack

5 steps to strengthen cybersecurity defenses in wake of Ukraine-Russia crisis

18% of the top 99 insurance carriers have a high susceptibility to ransomware

76% of organizations suffered downtime and data loss in 2021, system crashes, human error and cyberattacks to blame

A look at what’s new in cybersecurity

Advanced Persistent Threats – Coming to a Network Near You

AWS Lambda sees its first malware attack with Denonia, and we don’t know how it got there

Banking Phishing Scam Found Impersonating Several Malaysian Apps

Big Hacks: 5 Health Data Breaches Affect 1.2 Million

Block confirms Cash app breach affecting 8m users

Cash App data breach could have impacted more than 8 million users

China-backed hackers targetted power stations in Ladakh through compromised IP cameras

Chinese Hacker Groups Continue to Target Indian Power Grid Assets

Consumer fraud tripled in the last two years

Cybercriminals are altering QR codes — How to avoid getting scammed

Data Breach Alert: DialAmerica Marketing, Inc

Developers Remediate Less Than a Third of Vulnerabilities

Don’t get tricked by this phishing campaign that targets WhatsApp users

EMC National Life Company Data Breach Notice

Expect the Ukraine war’s cyber fallout to spread

Fed Law Enforcement Warns Russian Hackers Could Target Wyoming Critical Infrastructure

Fin7 hacker sentenced to 5 years in prison

FIN7 hacking group member sentenced to five years behind bars

FIN7 hacking group returns with new methods and members, what should you look out for?

Finland Government Sites Forced Offline by DDoS Attacks

Global Law Enforcement Win: Germany Shuts Down Hydra and U.S. Department of Treasury Follows With Sanctions

Global Supply Chain Attacks Surge 51% in H2 2021

Google Play Bitten by Sharkbot Info-stealer ‘AV Solution’

Google removes apps for secretly copying phone numbers

Hackers Exploiting Spring4Shell Vulnerability to Deploy Mirai Botnet Malware

Hamas Hackers Posing as Women to Con Senior Israeli Officials into Installing Malware

Here’s How to Protect Yourself from New BlackGuard Malware

How to Create Good Passwords That Hackers Will Never Guess

Hydra criminal forum seized and shuttered

India: Cybercrime cases recorded a fivefold jump in 3 years

Insurance industry being ravaged by high rate of cyberattacks

It’s time for SMBs to protect against ransomware

Microsoft: Nearly All Russian State Actors Now Targeting Ukraine

Microsoft Obtains Court Order to Take Down Domains Used to Target Ukraine

Microsoft Seizes Russian Domains Targeting Ukraine

Mirai malware now delivered using Spring4Shell exploits

Mounting US data disasters show we're lucky to have GDPR

National Cybersecurity Strategies Are Under Pressure and Innovation Remains Key to Protection

Network intrusion detections skyrocketing

New Insights on Data Breaches in South Africa

North Carolina prohibits agencies from paying ransoms

Northern Ireland TrustFord Sites Hit by Ransomware Gang

Oklahoma State Bureau of Investigation (OSBI) warns of 'vishing' scam; callers pose as agents and ask for money

Organizations underestimating the seriousness of insider threats

Patient data stolen ahead of East Tennessee Children’s Hospital attack, outage

Philippines respondents worry about execs’ low level of awareness of cybersecurity

Ransomware is Rising in Kenya – Is Your Office 365 Data Secure?

Ransomware payments hit new records in 2021 as dark web leaks climbed

Raspberry Pi just made a big change to boost security

Raspberry Pi removes default user to hinder brute-force attacks

Redefining Ransomware – Why Confronting Cybercrime Starts With a War of Words

Researchers Connect BlackCat Ransomware with Past BlackMatter Malware Activity

San Ramon Based CMG Mortgage Reports Security Incident

Shopify faces fresh class-action lawsuit over 2020 Ledger data breach

Snap-on discloses data breach claimed by Conti ransomware gang

Steady rise in severe web vulnerabilities

SuperCare Health California Data Breach Notice Issued

Supply Chain Security is a Multifaceted Challenge

Take LAPSUS$ teens seriously

Telegram: Ukraine warns of Russian army hacks

The realities of ransomware

The future of cyber risk management – predicting breaches

The Great Resignation poses security concerns for organizations

Toei Animation Hack Was a Targeted Ransomware Virus

Toei Animation Hack Was Ransomware Attack

Toei Animation Reveals Recent Hack Was Result Of Targeted Ransomware Attack

Toei Animation Was Victim Of A Ransomware Attack

U.S. Sanctions Russian Darknet Marketplace and Crypto Exchange Provider

Ukraine and the increased need for cyber security

Ukrainian FIN7 Hacker Gets 5-Year Sentence in the United States

Unusual Ransomware Types

Utah Consumer Privacy Act: What Businesses Need to Know

Warning issued over free Easter egg phishing scam from Russian website

Was your data compromised? About 1,100 members SummaCare affected

Washington schools prepare for potential Russian cyberattacks

What is ransomware?

Your digital footprints are more than a privacy risk – they could help hackers infiltrate computer networks

YouTube Fraudsters Steal $1.7m in Crypto 'Giveaway'

7th April

4 Cybersecurity Risks & Tips for Remote Working in 2022

5 cyber infrastructure tips to support fast-growing companies, regardless of size

5 Ways To Protect Your Network From Ransomware

6 best practices to mitigate risks of Quick Response Codes (QRC) fraud

86% of developers don’t prioritize application security

A DPO's Guide to Delivering a Cybersecurity Awareness Program

A New Security Approach for the New Age of Multi-Cloud

Act now: data breaches in South Africa are on the rise

Actions Target Russian Government Botnet, Hydra Dark Market

Adobe Creative Cloud Experience makes it easier to run malware

Android apps with 45 million installs used data harvesting SDK

App security not top priority for 86% of devs

AvosLocker Prompts Advisory from FBI and FinCEN

Bank of Ireland Fined €463,000 Over Data Breaches

Bank of Ireland fined over data breaches

Bearded Barbie hackers catfish high ranking Israeli officials

Bet9ja’s website hacked by Russian Blackcat group

BlackCat Purveyor Shows Ransomware Operators Have Nine Lives

BlackCat Ransomware Targets Industrial Companies

Brand Protection is Essential for Cybersecurity

Changing ransomware models make proactive security crucial

Chinese hackers target India's power grid again: How cyberwarfare is redrawing battle lines

Crypto Wallet Data Breach Leads to Class Action Litigation

Cryptocurrency has overtaken bank transfers for payments into investment scams

Cyber Resilience and Data Confidentiality are Emerging Components of Healthcare

Cyber-attacks and how can businesses protect themselves

Cybercriminals on Discord: Discovering developing threats

Cybersecurity And Kids: How To Help Protect The Weakest Link

Employee Info Among 13 Million Records Leaked by Fox News

Employee information is among 13 million documents exposed in a Fox News data breach

Facebook battles cyber campaigns targeting Ukraine

FBI Shut Down Russia-linked "Cyclops Blink" Botnet That Infected Thousands of Devices

FIN7 hacking group 'pen tester' sentenced to 5 years in prison

Fintech platform flaw could have allowed bank transfers, exposed data

First Malware Targeting AWS Lambda Serverless Platform Discovered

Former employee blamed for Cash App data breach

Fox News database with 13M records found exposed online

Fraud prevention after the death of a loved one following Christie Clinic data breach

Gone in 240 seconds: ransomware speeds compared

Hackers stole 20 million credit card records from Chili’s, Chipotle and others, feds say

Half of Security Leaders Consider Quitting Due to Stress

Hamas-linked Hackers Targeting High-Ranking Israelis Using 'Catfish' Lures

Horizon Actuarial Services Data Breach, Theft of Personal Information and Extortion Reported

How many steps does it take for attackers to compromise critical assets?

How QR codes work and what makes them dangerous

How to build a strong cyber defence for your construction business

How to create a culture of security at your organization

Incident Of The Week: Social engineering attack sees Mailchimp hacked

Incident Response Planning: What It Is And How To Start

Insights on Data Breaches in South Africa

Insurers must prepare for the worst case of a cyber attack

Into the Breach: Breaking Down 3 SaaS App Cyber Attacks in 2022

Israeli officials are being catfished by APT-C-23 hackers

Java Spring4Shell flaw exploit attempts: These are the industries most affected

Lapsus$ Hackers Published 70GB of Source Code Stolen in the Globant Data Breach

Look Out for These 6 Scams on Discord

Mailchimp Suffers a Data Breach

Malicious Android apps found masquerading as legitimate antivirus tools

Malicious web redirect service infects 16,500 sites to push malware

Mercury One and Ukraine Charitable Donation Scams

Meta Disrupts Two Iranian Threat Groups

Microsoft takes down APT28 domains used in attacks against Ukraine

More than 85 per cent encrypted, blocked GEBE data said secured

Mystery of alleged Chinese hack on eve of Ukraine invasion

Navigating a Heightened Cyber Threat Environment

Nearly 3 in 4 encountered cyberthreat via digital payment

New Cyber Incident Reporting Law Covering Range of Critical Infrastructure Companies

New malware targets serverless AWS Lambda with cryptominers

New Octo Banking Trojan Spreading via Fake Apps on Google Play Store

New research from BT reveals potentially thousands of small businesses have little or no cyber protection

New survey shows heightened online payment risks in Asia

Northern Ireland Trust Ford sites impacted by cyber attack as ransomware gang believed to be responsible

Over 8 million Cash App users possibly affected by data breach from a former employee

Paying ransom doesn’t guarantee data recovery

Pen testing guide: Types, steps, methodologies and frameworks

Phishing Hook: Are you on the line? Cybersecurity experts explain how the criminals lure you in

Potential data breach after hackers target Yorkshire housing company

RansomEXX hacker claims attack on Sonae and reveals 27 GB of company data

Ransomware negotiations are taking longer (and that’s a good thing)

Researchers Uncover How Colibri Malware Stays Persistent on Hacked Systems

Ronin Network bailed out by crypto giant Binance after hack

Russian, Ukraine-themed war lure of choice for cyber espionage

Russian-backed hackers spreading disinformation on Facebook

Salt Security Details FinTech Firm’s API Security Breach

Scots firms at risk over use of cybersecurity products aimed at household consumers

Server-Side Request Forgery (SSRF) Flaw in Fintech Platform Allowed for Compromise of Bank Accounts

SharkBot Banking Trojan Resurfaces On Google Play Store Hidden Behind 7 New Apps

Sharkbot Malware Uses Android Apps To Steal Credentials & Banking Details

Should Okta Shareholders Sell After the Recent Cyberattack?

SuperCare Health Data Breach Impacts 318K

The conflict in Ukraine may indirectly trigger more cybersecurity investment

The Cyclops Blink botnet has been disrupted

The Dangers of Obsolete and Redundant Data

The Top 3 Things You Need to Know About Client-Side Web Application Attacks

Thousands of Android users downloaded this password-stealing malware disguised as anti-virus from Google Play

US Action Disrupts Russian Botnet Cyclops Blink

Verizon warning for customers who received text from a very familiar number

VMware warns of critical remote code execution bug in Workspace ONE Access

Website of Russian Oil Giant Gazprom Neft Down After Alleged Hack

What is spear phishing? Examples, tactics, and techniques

Why You Need A Cybersecurity Strategy Now

You — yes, you — need to care about cybersecurity. These 6 mistakes could cost you

Zero Trust Architecture for Healthcare – 7 Common Pitfalls to Avoid

Zoom awarded $1.8 million in bug bounty rewards over 2021

6th April

3 Examples of Telephone Scammers and Online Identity Theft

3 of the Most Significant Data Breaches in Recent Years

3 steps for CISOs to ensure third-party vendor security

9 in 10 enterprises hit by ransomware, claims study

63% of organizations paid the ransom last year

Alleging security failures caused data breach, patients sue Montana’s Logan Health

Almost a Fifth of Global Firms Targeted with Spring4Shell

Anonymous Affiliate NB65 Breach State-Run Russian Broadcaster; Leak 786GB of Data

Are Protection Payments the Future of Ransomware?

Attack on Ukraine Telecoms Provider Caused by Compromised Employee Credentials

Attackers Spoof WhatsApp Voice-Message Alerts to Steal Info

Audit of the Connecticut Health Insurance Exchange Uncovers 44 Unreported Data Breaches

Australian cybercrime on the rise in 2022

Bank of Ireland could face civil cases after 47,000 customers hit by data breach

Bernards Township School District Writes Parents About Data Breach

Best advice for responding to today's biggest cyber threats

Biden administration says partnering with private sector will better prepare for next cyberattack

Block Admits Data Breach Involving Cash App Data Accessed by Former Employee

Block admits former employee was behind Cash App US customer data breach

Block Warns Eight Million Customers of Insider Breach

Board level executives assume they’ll never be attacked, despite rising ransomware incidents

Business unity is essential to beat cyber attacks

Calgary police played major role in ending international ransomware ring

CaptureRx Data Breach $4.75M Class Action Settlement

City Warns Of Phishing Scam

Cloud Services Are Increasingly Exploited for Command and Control in Cyber Espionage Operations

Combatting the Phishing Threat Landscape: Three Tips for MSPs

Conti ransomware leaks show a low-tech but effective model

Credit agency warns weak cybersecurity defenses could hurt a company’s credit rating, even before an attack

Cybercriminals take aim at digital payments

Cybersecurity is Central to Digital Transformation

Data Breach Alert: Parker-Hannifin Corporation

Data breach at Christie Clinic, lawyer gives tips on identity theft

Data Centers Hold The World’s Most Valuable Resource: How To Keep These Assets Secure

Demystifying API Security

Department of Justice (DoJ) takes down Russian botnet that targeted WatchGuard and Asus routers

Developers do not view application security as a top priority, study finds

Don’t click that link! New phishing emails could be very hard to spot

DVLA issues urgent warning to drivers not to share document online

Electric Vehicle Chargers Hacked to Show Porn

Ethical Hacking and Penetration Testing. Where to Begin

Europe Warned About Cyber Threat to Industrial Infrastructure

Fake Android shopping apps steal bank account logins, 2FA codes

FIN7 Cybercrime Operation Continues to Evolve Despite Arrests

Fined for watching too much porn? Cybersecurity watchdog warns about intricate phishing scam

Four common security mistakes and how to avoid them

Google increases its bug bounty for Fitbit and Nest security flaws

Greek Post Restarts Services After Cyber-Attack Downs System

Hackers Distributing Fake Shopping Apps to Steal Banking Data of Malaysian Users

Hackers employ voicemail phishing attacks on WhatsApp users

Hackers Hit Email Marketing Giant Mailchimp, Access Crypto Wallets' Data

Hong Kong: Scam gets down and dirty with porn

Housing associations hacked, ID proofs and bank details on the street

How often do developers push vulnerable code?

How to Secure Your Email as Cybersecurity Concerns Grow

How to Secure Your Remote Work Environment from Cybersecurity Threats

Hydra: How German police dismantled Russian darknet site

Hydra Darknet Market shut down by law enforcement

If You Own One Of These Older Samsung Phones, Update Immediately

India: How to report bank fraud

Inside Conti ransomware group’s leaked chat logs

Is your cyber resilience strategy fit for purpose?

IT Leaders Say Employees Not Fully Prepared for Cyberattacks

Malaysians encounter most social engineered scams

Malicious actors targeting the cloud for cryptocurrency-mining activities

March Firmware Threat Report

Microsoft asks bug hunters to probe on-premises Exchange, SharePoint servers

NATO’s Role in Global Cyber Security

New FFDroider malware steals Facebook, Instagram, Twitter accounts

New Zealand Windows users at risk of devastating cyber attacks

NFT Security Risks: Old Scams and New Tricks

NHS Covid test scam exposed

Okta Accepts Responsibility, Explains How Recent Data Breach Occurred

Pakistan: National Cyber Security Policy Emphasizes on Digital Transformation & Mitigation of Cyber Attacks

Palo Alto Networks firewalls, VPNs vulnerable to OpenSSL bug

Physical Infrastructure Cybersecurity: A Growing Problem for Data Centers

Prioritizing cybersecurity training during the onboarding process

Ransomware: Conti gang is still in business, despite its own massive data leak

Ransomware still demands a proactive approach to security

Reinforcing identity in IoT: A vital best practice

Roseburg officials warn of phishing email scam threatening utility shutoffs

SBI Bank customers beware! New fake SBI Yono SMS can steal your money

Seattle Health Center Discovers Additional Data Stolen During June Breach

Seriously, You Need a Password Manager. Here's Why, and How to Set One Up

Shutterfly Employee Data Breach in Attack by Conti Ransomware Group

Singapore moots bill to slap banks with higher fines for security breach

South African and US Officers Swoop on Fraud Gang

Staffordshire Police warning over free Cadbury Easter basket Whatsapp scam

Texas Department of Insurance Data Breach Affected 1.8M People

The Original APT: Advanced Persistent Teenagers

The Works closes stores after cyberattack

These sneaky hackers hid inside their victims' networks for nine months

This new malware targets AWS Lambda environments

Thousands Of Indians Exposed In Data Breach Affecting Money Lending App CashMama

Top 4 Cybersecurity Trends for APAC Companies in 2022

Treasury Sanctions Russian-Based Darknet Market and Virtual Currency Exchange

U.S. sanctions crypto-exchange Garantex for aiding Hydra Market

U.S. Treasury Department Sanctions Russia-based Hydra Darknet Marketplace

UK retail chain The Works shuts down stores after cyberattack

Ukraine Warns of Cyber attack Aiming to Hack Users' Telegram Messenger Accounts

Ukraine-related Phishing Emails Up More than 200%

US disrupts Russian Cyclops Blink botnet before being used in attacks

US Justice Department shuts down Russian dark web marketplace Hydra

Vevo to ‘review’ security after YouTube feeds for Lil Nas X, Justin Bieber, and others were hacked

VMware Releases Critical Patches for New Vulnerabilities Affecting Multiple Products

VMware warns of critical vulnerabilities in multiple products

What Is the Role of Incident Response in ICS Security?

WhatsApp phishing campaign attempting to spread malware

Why Supply Chain Woes Mean The Shipping Industry Needs Increased Cybersecurity

World's largest dark web marketplace taken down by law enforcement

5th April

5 quick tips for better Android phone security now (yes, it's this easy)

5 Reasons Single Sign-On (SSO) Can’t Completely Solve SaaS Security

49% of small medical practices don’t have a cyberattack response plan

A history of major cyberattacks, in and around Baltimore

Addressing Cybersecurity Readiness for the Global Shipping Industry

Anonymous Vows ‘Unprecedented Attack’ on Russia, Companies Operating There in Retaliation for Bucha Crimes

Another Log4Shell? Not Quite-But Spring4Shell is Serious

Australia warns of money recovery phishing luring past victims

Authorities Fully Behead Hydra Dark Marketplace

Bank had no firewall license, intrusion or phishing protection – guess the rest

Battling Cybersecurity Risk: How to Start Somewhere, Right Now

Block Shares Fall 7% After Disclosure of Data Breach

Borat Expands RAT Capabilities

C-Suite & Data Breach – The Minacious Combo

Cash App notifies 8.2 million US customers about data breach

CashApp Says Ex-Employee Stole Customer Stock Trading Data

Chinese hackers abuse VLC Media Player to launch malware loader

CISA adds Spring4Shell to list of exploited vulnerabilities

CISA “Shields Up” Campaign Offers Practical Cybersecurity Guidance for Organizations

CISA Warns of Active Exploitation of Critical Spring4Shell Vulnerability

Class-action lawsuit filed following Logan Health data breach

Combat Double Extortion Ransomware Attacks by Devaluing Your Data

Connecticut Health Insurance Exchange Failed to Report 44 Breaches, Audit Finds

Cumbrian businesses warned to protect against cyber attacks

Cybercrime Group FIN7 Moves into Ransomware Operations, Mandiant Finds

Data Breach Alert: Biersch Inc. d/b/a Universal Industries, Inc

Data Breach Alert: Medsurant Holdings, LLC

Discount retailer The Works hit by cyber attack

Email security firm reports surge in Ukraine invasion phishing scams

Fake versions of real smartphone apps are being used to spread malware. Here's how to stay safe

Feds slay dark-web souk Hydra: Servers and $25m in crypto-coins seized

FIN7 hackers evolve operations with ransomware, novel backdoor

FIN7 Hackers Leveraging Password Reuse and Software Supply Chain Attacks

Germany closes Russian darknet market Hydra

Germany Shuts Down Russian Dark Web Market Hydra; Seizes $25M in BTC

Germany Shuts Down Russian Darknet Marketplace Hydra

Germany Shuts Down Russian Hydra Darknet Market; Seizes $25 Million in Bitcoin

Germany takes down Hydra, world's largest darknet market

Global APT Groups Use Ukraine War for Phishing Lures

Google blames Microsoft 'monoculture' for government security problems

Hackers Breach Mailchimp Email Marketing Firm to Launch Crypto Phishing Scams

Hackers breached Mailchimp to target crypto holders

Hackers flood internet with what they say are Russian companies' files

Healthcare cybersecurity to serve as the backbone for digital transformation

How Data Breaches Are Affecting People Who Donate to Charity

How phishing attacks are exploiting Russia’s invasion of Ukraine

How Russia was to blame for Cadbury Easter egg WhatsApp scam

How to evolve your K-12 cybersecurity approach

How to develop an engaging cybersecurity awareness program

How to Protect Your Small Business Against Ransomware

Hybrid threat model: Watch out for the unhappy employee

Hydra, the world’s biggest cybercrime forum, shut down in police sting

India: Over 600 government social media accounts hacked since 2017

Insurance Companies: A “Tasty Morsel” to Cyber Criminals

It's been two weeks since hackers attacked Plainfield. The town hasn't recovered yet

Kalispell hospital sued for patient data breach

Kaspersky shows how scammers create fake pages using phishing kits

Kubernetes Ransomware Challenge: How to Mitigate and Recover

Ledger-Shopify Data Breach Saga Not Over Yet, Another Class Action Lawsuit Filed

Log4Shell exploitation: Which applications may be targeted next?

Mailchimp Confirms That Platform Was Hacked To Phish Crypto Wallets

Mailchimp Data Breach – Here’s What You Need to Know

March ransomware attacks strike finance, government targets

Microsoft detects Spring4Shell attacks across its cloud services

Mitigate your cybersecurity risk

Nearly two-thirds of ransomware victims paid ransoms last year

New Data Finds Phishing Attacks Could Impact 82% of the Largest Insurance Carriers

New Russian Android Malware Tracks GPS Location and Spies on Victims

New Zealand: Kiwis being defrauded at record levels since COVID-19 began

No-Joke Borat RAT Propagates Ransomware, DDoS

Not in My Backyard: North Carolina Becomes First State to Prohibit Public Entities from Paying Ransoms

Online Fraud Up 233% During Pandemic

Partnership HealthPlan of California Hacked

Phishing: Don't take the bait

Police in Latchford warn of fake family phishing scam

Police issue warning over bank scam in Sussex

Privilege Escalation Attacks: What it is, How it Happens and Examples

Ransomware Attacks Case Studies Provide Rare Learning Opportunities

Ransomware Gang Leaks Files Stolen From Industrial Giant Parker Hannifin

Ransomware Is on the Rise: 10 Steps for Defending Your Business

Real-time is where the cybersecurity risk is

Remote Access Trojan adds ransomware and DDoS attacks to usual bag of tricks

Researchers Trace Widespread Espionage Attacks Back to Chinese 'Cicada' Hackers

Retailer The Works Closes Stores After Cyber-Attack

Russia/Ukraine-themed War Docs are now a Popular Cyber-lure

Russian cyberattacks are a threat. But so is Americans’ fear of shortages

SandRidge Energy, LLC Files Notice of Recent Data Breach

Saskatchewan Liquor and Gaming Authority (SLGA) dealing with information breach

School district explains response to potential exposure of staff and student personal information in cyberattack incident

Securing information and communications technology supply chain

Shopify facing another lawsuit from crypto holders over Ledger data breach

Should colleges be worried by threats of Russian cyber attacks on the U.S.?

Sophisticated Cyberattacks Pit Security Teams Against the Clock

Sophisticated phishing attacks steal Trezor’s hardware wallets

Spanish energy giant Iberdrola hit by a major data breach

Spring4Shell flaw: Here's why it matters, and what you should do about it

SpringShell attacks target about one in six vulnerable orgs

State Bank Of India (SBI) Customers Receiving Phishing SMS

Sustainable cybersecurity starts with protecting both sides of the entry point

That WhatsApp voice message may be a phishing scam

The Active Directory security issue that only take five minutes to fix

The ransomware wars: Here's how much cash the top gangs reel in

The Role of Cloud-Based Identities in Cloud Security

The Works forced to close some stores after cyber-attack

The Works forced to shut some shops after cyber-attack

The Works has been forced to close some stores because of a cyber attack

The Works is forced to close some of its stores across the UK after hackers target retailer's tills and deliveries

These fearsome malware can be bought for a pittance

These ten hacking groups have been targeting critical infrastructure and energy

Threats Hiding Behind Trusted Microsoft Domains

Top Cybersecurity Threats Your Organization May Face this Year

Tracking 2022 Cyber Threat Trends

Traditional identity fraud losses soar, totalling $52 billion in 2021

UK government publishes annual Cyber Security Breaches Survey

UK retailer The Works suffers ransomware attack leading to store closures

Ukraine spots Russian-linked 'Armageddon' phishing attacks

Ukrainian CERT details Russia-linked phishing attacks targeting government officials

US judge sentences men for $1.5 million Apple Gift Card scam

US Schools Prepare for Potential Cyberthreat from Russia

Utilizing biological algorithms to detect cyber attacks

What Is a Ransomware Gang and How Dangerous Are They?

WhatsApp Users Beware: New Phishing Campaign Imitates App's Voice Message Feature

WhatsApp 'Voice Message' Is an Info-Stealing Phishing Attack

WhatsApp voicemail phishing attack targets nearly 28K organizations

Wilshire Advisors discloses it was target of cyberattack

Wind Turbine Giant Nordex Shuts Down IT Systems in Response to Cyberattack

Workers increasingly likely to fall for 'advanced' phishing attacks

Zero Trust must be more than marketing speak

Zyxel releases patches for critical vulnerability that allows firewall and VPN hijacks

4th April

5 Reasons Why Google Drive Is a Security Risk

6 Recommendations To Make Your Business More Secure And Professional

15 Tech Leaders On The ‘Next Big Thing’ In Cybersecurity

81% of esports firms see an increased need for security

A significant spike in cyberattacks from Russia could be expected in April

Activist Admits Shutting Down California County's Website

Am I Really Vulnerable? Gut-Checking Bug Risk

Anti-Phishing Skills: Don’t Bite The Bait

Apparently, Captcha Bot Was Not Hacked: Discord Scams Were Phishing

Australian university students targeted in employment fraud

Beastmode DDoS Botnet Exploiting New TOTOLINK Bugs to Enslave More Routers

Beware of crypto scams

Billions are advised to update Chrome browser especially crypto users to avoid phishing attacks

BlackGuard Password Stealing Malware Being Sold on Russian Hacking Forums

Borat RAT: Multiple threat of ransomware, DDoS and spyware

Borat RAT malware: A 'unique' triple threat that is far from funny

Brokenwire Hack Could Let Remote Attackers Disrupt Charging for Electric Vehicles

Cadbury Warns of Easter Egg Scam

Choccy offer too good to be true

Cyber crooks benefitting from the war in Ukraine

Cyber resilience must go from static to dynamic

Data Breach Alert: Emma - The Sleep Company

Deepfake Scams May Be on the Rise

Delivery app breach exposes Russian military data

Differences Between Small and Large Healthcare Organizations on Security

Digital Citizens had a 30% Chance of Encountering a Threat in 2021

Emma Sleep Company admits checkout cyber attack

Employees’ tech habits posing a risk to APAC businesses

Endpoint Security: Why It’s Essential Now More Than Ever

Englewood Health Files Notice of Recent Data Breach

Experts Shed Light on BlackGuard Infostealer Malware Sold on Russian Hacking Forums

FBI disrupts $51 million business email compromise schemes

FIN7 Evolves With New Malware, Initial Access Tactics

FIN7 hackers evolve toolset, work with multiple ransomware gangs

Hackers breach MailChimp's internal tools to target crypto customers

Hackers hit email marketing giant Mailchimp, access crypto wallets’ data

Hardening Your Print Security Strategy

Hive ransomware gang strikes Indonesian gas giant PGN

Here's How You Can Protect Yourself Against Phishing as Trezor is Attacked

How Does Cybersecurity Impact Environmental Services and Infrastructure?

How Internet Censorship Affects You – Pros and Cons

How Nigerian hackers exploited vulnerabilities in a Hyderabad bank and came away with crores of rupees

How Phishing Attacks Work?

How secure is your data - hacked firm fined £98,000 – could you be next?

How to be prepared for a cyberattack

How To Stay Safe From Online Fraud And Protect Your Digital Assets

How Zero Trust Could Have Changed The Outcome

India: Iranian hackers new challenge, say experts

Industries Most Affected By Ransomware Attacks In February

IoT Devices: An Advantage or Being Taken Advantage of?

Japanese Confectionary Morinaga Disclosed Data Breach

Keep your smart home devices out of the hands of hackers

Key Steps for Public Sector Agencies To Defend Against Ransomware Attacks

Lapsus Teen Suspects Have their Day in Court

LockBit Ransomware Attack Costs CRM Services Provider Over $42 Million

LockBit Victim, Atento Lost $42 Million To Ransomware Attack

Metaverse security aspect must not be ignored, Microsoft says

Multiple Hacker Groups Capitalizing on Ukraine Conflict for Distributing Malware

Nearly all businesses hit by IT downtime last year - here's what's to blame

Nearly Two-thirds of Ransomware Victims Paid Ransoms Last Year

New and less known cybersecurity risks you should be aware of

New report identifies the biggest cyber threats to businesses

New security requirements introduced for medical device manufacturers

New Zero-Day RCE Vulnerability in Spring Java Framework; Could “Spring4Shell” Be the Next Log4Shell?

NFT Discord Channels Are Being Attacked By Hackers Looking To Steal Cryptocurrency

Nigerian Communications Commission (NCC) Raises Alarm Over New Cyber Threats

Nordex hacked: Wind turbine giant shuts down IT systems globally

Norton Issues Warning Against Fake Phishing Scam

Notorious hacking group FIN7 adds ransomware to its repertoire

Online Scams Surging: Here’s How to Identify and Avoid Them

Phishing attack exposes 54K patient records at West Virginia hospital

Phishing Attacks, Email Security Incidents Hit 3 Healthcare Orgs

Phishing emails are still a big danger to PC users, even in 2022

Protecting your medical practice from a devastating cyberattack

Ransomware attacks represent a growing danger

Ransomware Will Grind You Down Without Proper Precautions, FBI Tells Local Governments

Record High Ransomware Payouts in 2021 as Extortion Evolves

Researchers Uncover New Android Spyware With C2 Server Linked to Turla Hackers

Scottish Power Parent Company Hit by Data Breach

Scottish Power Parent Company Iberdrola Hit by Cyberattack

Security flaws found in 82% of public sector software applications

Teen hackers are wreaking havoc on the world’s biggest companies

The rise of cybercrime - Over $300 million lost to scams last year

This creepy new Android malware records your audio and tracks your location

This phishing con looks like a receipt for an iPhone you didn’t buy

Top 10 Ransomware Trends: Board Responsibilities, Tracking Ransomware, and Mitigating Risk in 2022

Trezor cryptocurrency wallets targeted with phishing attacks following Mailchimp compromise

Trezor Customers Phished After MailChimp Compromise

Turkey seeks 40,000-year sentences for alleged cryptocurrency exit scammers

Vietnam: Authorities warn of cybercriminals

VMware patches Spring4Shell RCE flaw in multiple products

Vulnerabilities and cyberattacks that marked the year 2021

War, fear, ‘hacktivist’ zeal are upending energy cybersecurity

Warning over Covid text scam which could take your bank details

Watch Out Electric Vehicle Owners – Brokenwire Attack Remotely Disrupts Charging

What Is a Zero-Click Attack?

What is Device Posture Check?

WhatsApp voice message phishing emails push info-stealing malware

Why Zero Trust Is All About Identity

Wind turbine maker Nordex shuts down systems as cyber attack hits

You need to start understanding a vendor’s dark web exposure score