Ransomware Operator Claims - Week 38 2022

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 19th September and 25th September 2022, kindly provided by our partners.

Flag Icons created by Freepik and provided by Flaticon.

Sunshine Coast Regional District: Canadian Regional Government's "LockBit" Ransomware Attack Results In IT Systems Disruption

British Columbia regional government acknowledges cyber attack

Optus: Australian Telecommunications Company Suffers Cyber Attack Compromising Customers' Personal Information

Customers’ personal data stolen as Optus suffers massive cyber-attack

[Update] Optus cyber-attack could involve customers dating back to 2017

Wolfe Eye Clinic: Iowa Healthcare Provider Suffers Third-Party Data Breach Compromising 542,776 Patients' Personal Health Information

Iowa Eye Clinic Adds 543K to Eye Care Leaders Data Breach Tally

South Redford School District: Detroit School District Suffers Cyber Attack Resulting In IT Systems Disruption And School Closures

Cyberattack forces South Redford school district to close Tuesday, Wednesday

[Update] South Redford Schools closed again after cyber attack

NYRA: New York Horse Racing Association's "Hive" Ransomware Attack Results In Members' Personal Data Leaked On The Dark Web

Hive ransomware claims attack on New York Racing Association

American Airlines: Texas Airline Suffers Email Data Breach Exposing Customers' And Employees' Personal Information

American Airlines discloses data breach after employee email compromise

[Update] American Airlines learned they were breached from phishing targets

Rockstar: US Video Games Publisher's Cyber Attack Results In "GTA6" Development Gameplay Videos And Source Code Leaked Online

Uber Hacker Targets Rockstar Games, Leaks Trove of GTA 6 Data

[Update] Grand Theft Auto Publisher Rockstar Games Hacked

Data Breaches Digest - Week 38 2022

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 19th September and 25th September 2022.

25th September

3-2-1-1-0 rule to stay ahead of ransomware

Attackers impersonate CircleCI platform to compromise GitHub accounts

Australia: Cyber-attack on wireless firm exposes data belonging to 40% of this country's population

Australia: Federal government to unveil new security measures following massive Optus data breach

“BlackCat” attempts to up the pressure on Suffolk County; starts to leak data?

Covid antigen test results of 1.7m Indian and foreign nationals leaked online

GTA 6 and Uber hacker reportedly caught by London police

GTA 6 hack: UK police confirm they’ve charged teenager linked with breach

How Malware Hides in Images and What You Can Do About It

Metador: A New Hacking Group Hiding in Telecoms and ISPs For Months

New hacking group ‘Metador’ lurking in ISP networks for months

Noberus ransomware gets info-stealing upgrades, targets Veeam backup software

Optus data breach: Cybersecurity reforms expected to enable companies to rapidly inform financial institutions

Optus data breach: Hacker demands $1.5 million ransom, customer info leaked on dark web

Optus faces a customer exodus, calls for compensation amid anger over leaked data

Optus Under $1 Million Extortion Threat in Data Breach

Personal details of stars including Sir David Attenborough & Sarah Ferguson leaked after Russian cons hack organic shop

Ransomware data theft tool may show a shift in extortion tactics

The UK government has tightened its cybersecurity rules, your business should too

Tips for How to Avoid Identity Theft at Casinos

UK Police nab alleged 'GTA VI' footage leaker

Warning over scam Ofgem emails claiming to offer energy bill rebate

What is SIM Swapping and the best tips to avoid falling for this scam

24th September

15 Year Old Python Bug Let Hacker Execute Code in Code 350k Python Projects

American Airlines learned they were breached from phishing targets

Australia's Optus contacts customers caught in cyber attack

Criminals are using QR codes to target victims - how to avoid 'most insidious' scam

FBI Busts Russian-Linked Cybercrime Group Behind Colonial Pipeline Attack

Hackers Actively Exploiting New Sophos Firewall RCE Vulnerability

Israel Bolsters Digital Defense Amid Iran Cyber Threat

Landbank warns of phishing scam via Google Ads search

London Police Arrested 17-Year-Old Hacker Suspected of Uber and GTA 6 Breaches

Microsoft SQL servers hacked in TargetCompany ransomware attacks

Multi-Factor Authentication Fatigue Key Factor in Uber Breach

OneTouchPoint data breach investigation: Who’s affected?

Optus confirms customer data breach, says passport data may be affected

Optus hacking reminds us of digital danger

Optus issues data scam alert to customers

Personal data of celebrities including Jeremy Clarkson, the Duchess of York, and Sir David Attenborough is leaked on the dark web after Russian ransomware attack on luxury organic farm shop

Ransomware attacks on healthcare organizations have devastating results for providers & patients

Some Questions answered by the GTA 6 Leaks and others left hanging

Take-Two confirms cyber attack on 2K Games

TAP cyberattack: Portuguese president's personal data stolen

UK Teen Arrested Amid Uber and GTA 6 Hacking Saga

Watch out for this clever LinkedIn phishing attack

What is a cyber insurance policy? Should you buy one?

23rd September

9 Ways IT Can Do Proactive Cybersecurity

84% of U.S. citizens have experienced social engineering attacks

Accused Russian RSOCKS Botmaster Arrested, Requests Extradition to U.S.

Alleged Teenage ‘TeaPot’ Uber Hacker Arrested In England

Android Banking Users Targeted With Fake Rewards Phishing Scam

APT41 spear-phishing, supply chain campaigns target pharma, healthcare

As Cyberattacks Intensify, Orgs Don’t Report Incidents

Birth of Ransomware

Bjorka, the Online Hacker Trying To Take Down the Indonesian Government

British Columbia regional government acknowledges cyber attack

British police arrest teenager over “Grand Theft Auto” hack

Canada joins condemnation of Iran’s cyber attack on Albania

CISA Warns of Hackers Exploiting Recent Zoho ManageEngine Vulnerability

Colonial Pipeline ransomware group using new tactics to become more dangerous

Critical ManageEngine RCE flaw is being exploited (CVE-2022-35405)

Crypto Scams of the Week: Theta Network Scams & MetaMask Phishing

Cyber attack secrecy must end

Cyber Mercenary Group Void Balaur Continues Hack-For-Hire Campaigns

Data breach leaves Optus customers vulnerable

Data of millions of users exposed in Australia’s 2nd-largest telecom firm breach

Details of Over 300,000 Russian Reservists Leaked, Anonymous Claims

Fake Indian Banking Rewards Apps Targeting Android Users with Info-stealing Malware

From phishing emails to call centres and beyond...

Google’s Mandiant finds evidence of Russia coordinating with hackers

GTA 6 Hacker Possibly Arrested In London

Hackers Deploy Malicious OAuth Apps to Compromise Email Servers, Spread Spam

Hackers Using Fake CircleCI Notifications to Hack GitHub Accounts

Hackers Using Malicious OAuth Apps to Take Over Email Servers

How does identity crime affect victims?

How Technology Can Mitigate Cybersecurity Risks To Infrastructure

How to find out if you will get anything from T-Mobile’s $350 million data breach settlement

How To Protect Your Startup Against Cyber Attacks?

How to secure your hybrid workforce

Humana Announces Reports Third-Party Data Breach Involving Data Security Incident at Choice Health

Landbank warns clients, public vs. phishing scam using Google Ads

Legacy technology undermines ransomware response

LinkedIn Smart Links are being used to send users to phishing sites

Malicious OAuth applications used to control Exchange tenants in sweepstakes scam

Microsoft Issues Out-of-Band Patch for Flaw Allowing Lateral Movement, Ransomware Attacks

MIT Report Validates Impact Of Deep Learning For Cybersecurity

Mitigating the cybersecurity crisis for the school year ahead

Multi-million dollar credit card fraud operation uncovered

New ransomware variants, tactics rattle financial industry

New security vulnerability in Oracle Cloud Infrastructure discovered

New Spam Attack Abusing OAuth Apps to Target Microsoft Exchange Servers

Nigerian Communications Commission (NCC) advises users on Zoom’s data breach

No agency '100 per cent safe' from cybercrime, Australian Competition & Consumer Commission (ACCC) warns after Optus hack

npm packages used by crypto exchanges compromised

NSA and CISA: Here's how hackers are going after critical systems, and what you need to do about it

NSA Reveals "Hackers' Playbook" for Operational Technology (OT) Attacks

Optus cyber-attack: how do you know if your identity has been stolen and what will happen to your data?

Optus Cyber-attack - What You Need to Know

Optus cyber-attack could involve customers dating back to 2017

Optus cyber-attack leaves customers feeling ‘powerless’ over risk of identity theft

Oxfordshire teen arrested in police hacking investigation

Payday lender Cash Express reports data breach affecting 100,000 customers

Phishing Campaign Targets GitHub Accounts: Cybercriminals are Impersonating CircleCI

Phishing For A Victim; Avoid Falling Prey To Scams

Phishing scams steal private information from unsuspecting students

Portsmouth Guildhall website crashed by 'malicious' cyber attack as Mickey Flanagan tickets go on sale

Researchers Uncover New Metador APT Targeting Telcos, ISPs, and Universities

Risk management focus shifts from external to internal exposure

Scam warning to Revolut customers after cyber attack

Scammers stole tens of millions since 2019 using online credit card scheme

Seven-Year Mobile Surveillance Campaign Targets Uyghurs

So you think cross-site scripting isn’t a big deal?

Sophos warns of new firewall RCE bug exploited in attacks

Successor to ransomware used in Colonial Pipeline attack observed using new tools

The Top Questions Every Agribusiness Should Be Asking About Cyberattacks

The value of an adversary-focused approach to cybersecurity

This 17-year-old hacker arrested in the UK may have been behind Grand Theft Auto VI leaks

U-Haul class action accuses company of neglect that led to data breach

Uber hack challenges popular login security practices

Uber investigates huge data breach

UK Police arrests teen believed to be behind Uber, Rockstar hacks

Ukraine: The SBU neutralized a hacker group that “hacked” almost 30 million accounts of Ukrainian and EU citizens

Ukraine dismantles hacker gang that stole 30 million accounts

Void Balaur Hackers-for-Hire Targeting Russian Businesses and Politics Entities

Warning: Watch out for fake texts offering you help with your energy bills - it's a scam

What Cyberattacks Do Businesses Commonly Face?

What is Data Privacy & What Can You Do About It?

Why Are Small Businesses Suffering for Steep Cyber Insurance Premiums?

Why MFA matters: These attackers cracked admin accounts then used Exchange to send spam

Wintermute Asks Hacker To Return Stolen Funds — Or Face Legal Action

22nd September

15-Year-Old Unpatched Python Vulnerability Potentially Affects Over 350,000 Projects

350,000 open source projects at risk from Python vulnerability

Account takeover attacks on the rise, impacting almost 25% of people in the US

ALPHV/BlackCat ransomware family becoming more dangerous

Are QR Codes a Great Invention or a Cybersecurity Threat?

Australia phones cyber-attack exposes personal data

Authorized Push Payments Surge to 75% of Banking Fraud

Bayern rewards hacker for exposing club website flaws

BlackCat ransomware’s data exfiltration tool gets an upgrade

CircleCI, GitHub Users Targeted in Phishing Campaign

CISA warns of critical ManageEngine RCE bug used in attacks

Colonial Pipeline hackers add startling new capabilities to ransomware operation

Criminals are using QR codes to scam people in restaurants with 'QR phishing' on the rise

Critical Magento vulnerability targeted in new surge of attacks

Customers’ personal data stolen as Optus suffers massive cyber-attack

Cyber-attack cost Safestyle UK £4m and underlying profit

Cybersecurity expert raises alarm over increasing data leaks in Malaysia

Data Stolen: TAP Air Portugal Suffers Cyberattack

Denver Suburb Says ‘No Deal’ to $5M Ransomware Demands

Developer Leaks LockBit 3.0 Ransomware-Builder Code

Email blunder sees school send details of vulnerable children to all pupils

Fake Banking Rewards Apps Install Info-stealing RAT on Android Phones

Financial firms increasingly held hostage by advanced ransomware attacks

Google Chrome users looking to download pirated software at risk of new malware infection

Grant County email hit by phishing attack

Hackers stealing GitHub accounts using fake CircleCI notifications

Hackers Targeting Unpatched Atlassian Confluence Servers to Deploy Crypto Miners

HC3 Alerts Healthcare Sector of Monkeypox-Themed Phishing Scheme

How to have fun negotiating with a ransomware gang

How to Prevent Ransomware as a Service (RaaS) Attacks

Iranian Hackers Hid in Albanian Networks for Over a Year

IT Security Takeaways from the Wiseasy Hack

Laws questioned after Optus cyber attack

LinkedIn’s Smart Links abused in phishing attack targeting Slovakian users

Lithuanian Watchdog Launches Probe Into Revolut Data Breach

Los Angeles school district receives ransom demand from Labor Day weekend cyberattacker

Los Angeles school official says hackers targeted district in ransomware attack

Malicious NPM Package Caught Mimicking Material Tailwind CSS Package

Microsoft Exchange servers hacked via OAuth apps for phishing

Morgan Stanley Fined $35m By SEC For Data Security Lapse

National Security Agency (NSA) shares guidance to help secure OT/ICS critical infrastructure

Nelnet loan service data breach: What you should know

Netflix-style Ransomware Makes Your Organisation’s Data The Prize In A Dark Subscription Economy

New Report Highlights Surprising Ransomware Trends

Nigerian Authorities Raid Cybercrime Training Centers

OpIran – Anonymous Hits Iranian State Sites, Hacks Over 300 CCTV Cameras

Optus attack exposes customer information

Optus customer data hit in cyber attack

Optus data breach: who is affected, what has been taken and what should you do?

Optus Hit By Cyber-Attack, Breach Affects Nearly 10 Million Customers

Optus says it has been hit by a cyber attack that has compromised customer information

Optus warns cyberattack may have exposed Australian client details

Optus, Australia’s second largest telco, says customer data exposed in data breach

Preventing the Recruitment of Insider Threat Actors

Python tarfile vulnerability affects 350,000 open-source projects (CVE-2007-4559)

Ransomware operators might be dropping file encryption in favor of corrupting files

Researchers Disclose Critical Vulnerability in Oracle Cloud Infrastructure

Researchers Uncover Years-Long Mobile Spyware Campaign Targeting Uyghurs

Revolut data breach exposes data of 50K+ clients

Russia-Based Hackers FIN11 Impersonate Zoom to Conduct Phishing Campaigns

SMBs vs. large enterprises: Not all compromises are created equal

TAP Air Portugal hit by cyber attack, passenger data stolen

The fake phishing websites stealing your Crypto

The tools and strategies schools need for ransomware defense

Threat actors have their insider threats, too

Three Iranian Nationals Charged in Critical Services Scheme

Twitter Password Reset Bug Exposed User Accounts

Uber hack reveals key security lapses; here’s how firms can avoid them

Up to 9 million Aussies affected in major Optus data breach

US Agency Broke Into China’s Telecom Networks, State Media Says

US' NSA infiltrates China's telecom infrastructure in attack on leading Chinese aviation university

Waterloo Region District School Board (WRDSB) lawyer clarifies police timeline in cyber attack

Westchester EMS Provider Hacked in One of the Largest U.S. Healthcare Ransomware Attacks of 2022

What could be the cause of growing API security incidents?

What Happens if the Rockstar Hacker Leaks the Grand Theft Auto 6 (GTA6) Source Code

What you need to know about Evil-Colon attacks

What’s the worst that could happen in a data breach? Lessons from the Okta data breach

21st September

2K Games Discloses Startling Security Breach, Tells Players Not To Open Support Emails

2K Games Support Desk Hacked, Phishing Emails Sent To Certain Players

2K Warns Customers Of Security Breach And Phishing Scam

2K warns of cyber attack of its customer support

20/20 visibility is paramount to network security

350K Open-Source Projects At Risk of Supply Chain Vulnerability

Aliens Closer to Home Than Desired – Malware Discovered in James Webb Telescope Images

American Airlines confirms data breach exposing some customers’ data

American Airlines Says Data Breach Affected Some Customers, Employees

American Airlines suffers data breach

‘Anonymous’ hackers knock Iran state websites offline amid nationwide protests

AttachMe - Oracle Patches “Severe” Vulnerability in its Cloud Infrastructure

Behind the priorities of tech and cybersecurity leaders

Berry, Dunn, McNeil & Parker, LLC Reports Data Breach Following Compromised Employee Email Account

Best practices to bolster software supply chain security

Biometric authentication use in US businesses tripled over 3 years to tackle cyber threats

ChromeLoader, what took you so long? Malvertising irritant now slings ransomware

Companies Without Zero Trust Could Lose $1M More During a Data Breach

‘Convincing’ Phishing Campaign Impersonates Government Agencies

Critical Remote Hack Flaws Found in Dataprobe's Power Distribution Units

Crypto Market Maker Wintermute Hacked, $160 Million Stolen

Crypto Trading Firm Wintermute Loses $160 Million in Hacking Incident

Domain shadowing becoming more popular among cybercriminals

Elden Ring publisher Bandai Namco admits "possibility" customer details exposed in July hack

FBI: Iranian hackers lurked in Albania’s government network for 14 months

Former Uber security chief details hunt for hackers behind 2016 data breach

Grand Theft Auto (GTA) Publisher Take-Two's Awful Week Gets Worse With Another Disastrous Hack

Great Cyber Hygiene Starts with a Culture of Security Awareness

Hackers using monkeypox phishing scheme to target healthcare organizations, HHS warns

How DKIM records reduce email spoofing, phishing and spam

Intercontinental Hotels Group class action claims hotel giant let hackers access company network

Iowa Eye Clinic Adds 543K to Eye Care Leaders Data Breach Tally

Iran’s central bank target of cyber attack amid nationwide protests

Iranian State Actors Conduct Cyber Operations Against the Government of Albania

LinkedIn Smart Links abused in evasive email phishing attacks

LockBit ransomware builder leaked online by “angry developer”

Los Angeles Unified School District (LAUSD) receives unspecified ransom demand over cyber attack

Michigan School District Cancels Classes After Cyber Attack

Microsoft Learns a Lesson From Cybercrime Sting

Microsoft office 365 phishing campaign impersonates U.S. agencies

Morgan Stanley to pay $35M after hard drives with 15M customers’ personal data turn up in auction

Multiple Vulnerabilities Discovered in Dataprobe's iBoot-PDUs

National Cyber Security Centre (NCSC): British Retailers Need to Move Beyond Passwords

National Cyber Security Centre (NCSC) publishes cyber guidance for retailers

New York Racing Association confirms hack by Hive ransomware group

New York Racing Association Reports Data Breach Following Hive Ransomware Attack

Ninety Percent of Organizations Struggle with Ransomware

Okta: Credential stuffing accounts for 34% of all login attempts

Open Source Repository Attacks Soar 700% in Three Years

Optus security breach compromises customers' passport details

Over 39,000 Unauthenticated Redis Instances Found Exposed on the Internet

Pay-per-install services provide access to thousands of compromised computers

Protecting Healthcare Organizations from Ransomware Attacks

Ransomware: The Latest Chapter

Ransomware Groups Turn to Intermittent Encryption to Speed Attack Times

Ransomware is (slightly) on the decline, cyber insurance company claims

Record DDoS Attack with 25.3 Billion Requests Abused HTTP/2 Multiplexing

Revolut data breach exposes information for more than 50,000 customers

Revolut falls victim to “highly targeted” cyber-attack

Scammers using QR codes to target people with restaurant menus among ways to be caught by them

SEC fines Morgan Stanley Smith Barney $35 million over failure to secure customer data

Security lessons to learn after the Uber data breach

Social media account takeovers increased over 1000% in 2021

South Redford Schools closed again after cyber attack

Southwell confirms cybersecurity incident after report claims it negotiated with ransomware group

Stolen single sign-on credentials for major firms available for sale on dark web

Suffolk County services crippled by cyber attack

Suffolk County Will Notify Anyone Whose Data Was Compromised In Cyber Attack

Survey Reveals the Severity of Cloud Security Challenge

T-Mobile data breach $350M class action settlement

Take-Two says hacker accessed 2K Games' help desk

Technical Analysis of Crytox Ransomware

The cybersecurity lifecycle: how to put security first at every step

The Multi-Cloud is The New Normal, But Creates Key Security Challenges

The rise of ‘PhaaS’ - and a roadmap to mitigate ‘Phishing-as-a-Service’

Third-party risk: What it is and how CISOs can address it

Two-Fifths of US Consumers Suffer Personal Data Theft

U-Haul Data Breach Exposed Sensitive Customer Data of More Than 2 Million Clients Over 5 Months

Uber links cyber attack to LAPSUS$, says sensitive user data remains protected

Unpatched 15-year old Python bug allows code execution in 350k projects

Untrained Employees Pose Major Risk to Organizations Due to Uncertainty of Security Reporting

Video Game Publisher Admits Helpdesk Was Hijacked

What is a phishing text message?

What Is Cryptojacking? How It Works and How to Protect Against It

What Is Ransomware? A Guide to Ransomware Prevention and Removal

Whether You’re A Startup Or Large Enterprise, Know How To Defend Your Data

Who Attacked Montenegro? The Moral And Strategic Hazards of Misassigning Blame

Why humans are the top gateway to cyber compromise

Why Manufacturing Struggles With Cloud Security

Why You Should Level Up The Security Of Your Business-Critical Systems

20th September

2K game support hacked to email RedLine info-stealing malware

2K Games says hacked help desk targeted players with malware

2K warns of phishing scam

A Ransomware Defense Is Not Enough: Organizations Also Need a Recovery Strategy

American Airlines Breach Exposes Customer and Staff Information

American Airlines hit by data breach

American Airlines says data breach affected some customers, employees

Canada: Police now investigating school board cyber attack

Cash Express, LLC Files Notice of Data Breach Following Unauthorized Access to the Company’s IT Network

City Furniture, Inc. Files Notice of Data Breach

Critical Vulnerability in Oracle Cloud Infrastructure Allowed Unauthorized Access

Cyber Threat Detection: The First Layer of Defence in Depth

Digital Bank Revolut's Data Breach May Have Affected 50,000 Customers

Europol and Bitdefender Jointly Release LockerGoga Decryptor

Game developer 2K’s support site hacked to push malware via fake tickets

Grand Theft Auto Publisher Rockstar Games Hacked

Grand Theft Auto VI footage leaked by hacker

Hackers Admit Destroying InterContinental Hotels Group's Data 'For Fun'

Hackers steal $162 million from Wintermute crypto market maker

Healthcare Ransomware Attacks are Increasing: How to Prepare

HHS alerts health sector to monkeypox-themed phishing campaign

Hive ransomware claims attack on New York Racing Association

How To: Defend the Legal Sector from Insider Threats

How to Detect a Cyber Attack

How to Dodge New Ransomware Tactics

Imperva mitigated long-lasting, 25.3 billion request DDoS attack

Indonesia finally passes personal data protection law

Kiwi Farms Website Hacked! Admin Warns of Data Leak

Latest Uber Data Breach Caused by Hacker Tricking Worker

MFA Fatigue: Hackers’ new favorite tactic in high-profile breaches

Open-source software usage slowing down for fear of vulnerabilities, exposures, or risks

Organizations Lack Visibility Into Cloud Access

Phishing attacks targeting US government have evolved in sophistication, Confense reports

Ransomware as a Service: A new wrinkle on an old threat

Ransomware attacks have nearly doubled since 2020, according to GetApp

Ransomware is growing despite company investments

Ransomware is (slightly) on the decline, cyberinsurance company says

Revolut Breach May Have Hit 50,000+ Customers

Revolut data breach: 50,000+ users affected

Ripple effects of ransomware attack against Suffolk County continue more than a week later

Russian Sandworm Hackers Impersonate Ukrainian Telecoms to Distribute Malware

Social Engineering: How A Teen Hacker Allegedly Managed To Breach Both Uber And Rockstar Games

SpyCloud Report: Despite Increased Spend on Ransomware Mitigation, 90% of Companies Affected in the Last Year

Survey Shows CISOs Losing Confidence in Ability to Stop Ransomware Attacks

Take cybersecurity out to where employees and data are coming together

The Types of Phishing Attacks and How to Dodge All of Them

Third-Party Risk in the Cloud

This Microsoft 365 phishing campaign is using some crafty US government lures

Thousands of customers affected in Revolut data breach

Uber Blames Lapsus$ for Breach

Uber Blames LAPSUS$ Hacking Group for Recent Security Breach

Uber exposes Lapsus$ extortion group for security breach

Uber pins security breach on Lapsus$ ransomware group

Uber says Lapsus$ gang is behind the recent breach

Uber Says Lapsus$-Linked Hacker Responsible for Breach

While Hackers Eye Small Businesses, Ransomware Attacks Decline

Why More Users Mean More Problems With Ransomware Attacks

Wide-Ranging Philippines Phishing Scams Are Sending Out Millions of Messages, SIM Card Registration Bill Proposed as a Solution

19th September

Akamai APJ Ransomware Report H1 2022 - Summary

American Airlines discloses data breach after employee email compromise

Been hit by LockerGoga ransomware? A free fix is now out

Bosnia and Herzegovina investigating alleged ransomware attack on parliament

ChromeLoader can overload systems with malware and lead to ransomware attack

Cisco admits that the Yanluowang ransomware gang stole data from its network

Countering the Future Growth of Ransomware

Critical Infrastructure Takes Center Stage

Crypto giveaway scams continue to escalate

Emotet Botnet Started Distributing Quantum and BlackCat Ransomware

Empress EMS Announces Data Breach Leaking the Sensitive Information of 318,558 People

Europol and Bitdefender Release Free Decryptor for LockerGoga Ransomware

Google, Meta FINED about US$72 million in South Korea for data breach

Grand Theft Auto 6 Hacker May Be Trying To Make A Deal With Rockstar

Grand Theft Auto (GTA) 6 in-development footage leaked, hack still unconfirmed

Grand Theft Auto VI footage leaked after hack, developer Rockstar confirms

GTA 6 leaked: Hacker leaks over 90 gameplay videos showcasing alleged build

Hackers targets gamers in South Africa, Kenya

High severity vulnerabilities found in Harbor open-source artifact registry

How to Know if You’ve Been Caught up in a Data Breach, and What You Can Do About It

How to protect your organization’s single sign-on credentials from compromise

Hunt on for hacker who leaked over one billion Indonesians’ data

Indonesia hunts for Bjorka, hacker selling 1.3 billion SIM card users’ data, taunting officials

It’s 2022 – Are Passwords Still Important?

LastPass publishes details of the cyber attack it received

LastPass Says No User Data Compromised in Cyberattack

Microsoft 365 phishing attacks impersonate U.S. government agencies

Microsoft Teams' GIFShell Attack: What Is It and How You Can Protect Yourself from It

Microsoft Warns of Large-Scale Click Fraud Campaign Targeting Gamers

Most critical security gaps in the public cloud

No More Ransom Offers Free Decryptor to LockerGoga Ransomware Victims

Pacific Asia Travel Association (PATA) cautions on mailing list scam

Prevention remains best strategy when dealing with cyber risks

Revolut Bank reveals that it has suffered a data breach on its data security

Revolut hack exposes data of 50,000 users, fuels new phishing wave

Rockstar Games Confirms Hacker Stole Early Grand Theft Auto VI Footage

Russian Sandworm hackers pose as Ukrainian telcos to drop malware

SaaS Security Issues Driven by Sprawl, Lack of Visibility

Some residents' personal information possibly compromised in Quincy cyberattack

Starbucks Singapore involved in data breach

The benefits of digital trust

The Security Awareness Of People Is The Important Firewall In IT

Trend Micro warns of attack surge, targets more sectors

Uber blames security breach on Lapsus$, says it bought credentials on the dark web

Uber Hacker Claims To Have Hacked Rockstar Games, Releases GTA 6 Videos

Uber Hacker Targets Rockstar Games, Leaks Trove of GTA 6 Data

Uber ‘in contact with the FBI’ over potential GTA 6 hacker

Uber links breach to Lapsus$ group, blames contractor for hack

Uber says compromised credentials of a contractor led to data breach

VMware, Microsoft warn of widespread Chromeloader malware attacks

What do SOC analysts need to be successful?

Ransomware Operator Claims - Week 37 2022

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 12th September and 18th September 2022, kindly provided by our partners.

Flag Icons created by Freepik and provided by Flaticon.

Empress Emergency Medical Services: New York Ambulance Service Suffers "Hive" Ransomware Attack Exposing Patients' Personal Data

New York ambulance service discloses data breach after ransomware attack

Starbucks: US Coffee House Chain's Singapore Division Suffers Data Breach Resulting In 333,523 Customers' Information For Sale Online

330,000 Singapore Starbucks customers' data leaked, info sold online for $3,500

Uber: US Ride-Hailing Service Provider's Cyber Attack Compromises Critical Internal IT Systems Resulting In Stolen Vulnerability Reports

Uber hacked, internal systems breached and vulnerability reports stolen

[Update] Uber Claims No Sensitive Data Exposed in Latest Breach...But There's More to This

Bell Technical Solutions: Canadian Telecommunications Company Suffers "Hive" Ransomware Attack Compromising Customers' Data

Hive ransomware claims cyberattack on Bell Canada subsidiary

Medical Associates Of The Lehigh Valley: US Healthcare Provider Suffers Ransomware Attack Exposing 75,628 Patients' Health Data

Ransomware Attack on Medical Associates of the Lehigh Valley Affects 75K Patients

Canadian Solar: Canadian Renewable Energy Products Manufacturer's "LockBit" Ransomware Attack Results In Stolen Data Leak Threat

Solar technology company, Canadian Solar has been hacked by LockBit 3.0 ransomware

U-Haul: US Moving Truck And Storage Rental Company Suffers Cyber Attack Exposing Customers' Names And Driver's Licenses Information

U-Haul discloses data breach exposing customer driver licenses

OakBend Medical Center: Texas Medical Center's "Daixin" Ransomware Attack Results In Patients' Health Data Leaked On The Dark Web

OakBend Medical Center hit by ransomware; Daixin Team claims responsibility

Data Breaches Digest - Week 37 2022

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 12th September and 18th September 2022.

18th September

Authorities chase down Bjorka, Indonesia's most-wanted hacker

AWS misconfiguration exposes the data of Indian government and universities including Banaras Hindu University

Bangladesh is at serious risk of cyber crimes

CERT-In issues new advisory for smartphone users as cybercrime cases rise

ClearBalance, Bricker & Eckler settle data breach lawsuits involving patient data

Deleted popular hotel chain’s data ‘for fun,’ claims hacker couple

Do not pay anything online if you do not do this to protect yourself

Elder fraud is real. Tell your parents, grandparents and friends about these scams

Employees exposed to rogue apps & BOTS daily

Grand Theft Auto 6 Hacker Claims He Also Hacked Into Uber

Grand Theft Auto 6 hacker has access to source code, shares 10K lines of code

GTA 6 source code and videos leaked after Rockstar Games hack

Hacker couple erased hotel group's data for fun

Hacker Couple Who Erased Hotel Chain Data Mock Terrible Password

Hacker leaks dozens of ‘Grand Theft Auto VI’ gameplay videos

Hackers launch cyber-attack on UK hotel chain for 'fun'

Indonesia hunts for Bjorka, hacker selling 1.3b SIM card users' data, taunting officials

Ireland: An Post issue major warning to customers over new text scam – three tips to avoid falling victim

Large cache of Grand Theft Auto 6 development footage may have leaked online

Lloyds Bank issues alert on council tax scam targeting 'anyone with an email account'

Malvertising: How to avoid falling for these malware-infested ads

Microsoft Teams deemed unsafe to use by security researchers

More than 4,000 accounts were impacted by an Indiana Department of Workforce Development data breach

Piracy Advertising Researchers Fall Victim to Ransomware Attacks

RiskLens Fast Facts on Cyber Risk in Manufacturing – Ski-Doo Maker BRP

Starbucks Singapore’s Database Gets Breached

Staying ahead of scammers an opportunity for Singapore to boost its financial reputation

TeamTNT hijacking servers to run Bitcoin encryption solvers

The Storage Manager’s Quick-Guide to Ransomware Resiliency

Top Phishing and Social Media Threats: Key Findings from the Quarterly Threat Trends & Intelligence Report

Uber Data Breach: Company Says No Private Users' Data Compromised

Uber Hack Update: Was Sensitive User Data Stolen & Did 2FA Open Door To Hacker?

Uber responding to “cyber security incident” following reports of significant data breach

Uber says services are operational following data breach

Watford Community Housing denies scam calls due to data breach

What Is Data Loss Prevention (DLP)?

What is Sova virus? All you need to know about the new mobile banking virus

What is the potential financial damage of cyberattacks?

What to do if you were a corporate hack victim

Young hacker tricks way into Uber’s system

17th September

3 held for aiding hacker gain unauthorised access to payment gateways of companies

330,000 Singapore Starbucks customers' data leaked, info sold online for $3,500

A new phishing attack on Steam puts gamers at risk

Antivirus warning: What to do if you see this warning from McAfee

Bank scams: Five expert tips to protect yourself from phishing scams

Be careful, pirates take advantage of the death of Elizabeth II to launch new attacks

CISA Expands Vulnerabilities Catalog With Old, Exploited Flaws

Continuous Data Protection (CDP): A priority in the evolution of ransomware recovery

Couple deletes Holiday Inn data for fun after ransomware attack fails

Emotet botnet now pushes Quantum and BlackCat ransomware

Financial Costs of a Ransomware Attack and Breaking the Attack Chain: Collateral damage and data loss

Go North East bus drivers' pay hit after cyber attack on Go Ahead

Google, Microsoft can get your passwords via web browser's spellcheck

Hackers Demanding Ransom Leak Files in Suffolk Cyberattack

Hackers Had Access to LastPass's Development Systems for Four Days

IHG hack: 'Vindictive' couple deleted hotel chain data for fun

In the past year, 54% of organisations had their security breached by outsiders

India: Centre issues hacker warning for Google Chrome for desktop users

LastPass revealed that intruders had internal access for four days during the August hack

LastPass was hacked, but it says no user data was compromised

Microsoft Teams authentication tokens being stored in plain text

New Spear Phish Methodology Relies on PuTTY SSH Client to Infect Systems

New York ambulance service discloses data breach after ransomware attack

Securing the business is a process

Serious data breach at Uber spotlights hacker social deception

Starbucks Singapore hit by data breach

The Importance Of Cybersecurity: What Every Business Needs To Know

Uber Claims No Sensitive Data Exposed in Latest Breach...But There's More to This

Uber Data Breach is Worst Case Scenario

Uber Downplays Data Breach Impact, Claims No Sensitive Data Stolen

Uber suffers massive breach from phishing attack

US Sanctions IRGC-Affiliated Hackers on Ransomware Charges

16th September

3 ways to protect your business from ransomware

5 FBI recommendations for medical device cybersecurity

A Cyber Attack On LAUSD Makes Life At Venice High A Struggle

A hacker reveals an unpatcheable bug on PS4 and PS5: will piracy reach these consoles?

Akamai Mitigated Record-Breaking DDoS Attack Against European Customer

Allies Warn of Iranian Ransom Attacks Using Log4Shell

Anonymous hacker, who bragged about exploits on TikTok, says he was raided by Canadian police

Are Atlantic Canadians overly confident about online security?

Are Phishing Scams Likely to Go Away Anytime Soon?

Attackers Began to Embed Keyloggers in Phishing Pages

Bell Canada subsidiary hit by Hive ransomware attack

Bitdefender releases free decryptor for LockerGoga ransomware

Bitdefender, Europol, Swiss police publish decryptor for LockerGoga ransomware

‘BlackCat’ group claims responsibility for ransomware attack on Suffolk County, begins publishing stolen documents on dark web

Canadian police investigating ransomware attack on Bell subsidiary after employee data stolen

CISA orders agencies to patch vulnerability used in Stuxnet attacks

Cloudflare Thinks India Needs More Awareness on Data Security

Crypto Scams Soar as Domains Surge 335%

Cyber attack prevents revelations of alleged sexual abuse cover-ups at the French Football Federation (FFF)

Cyber security for fintech enterprises

Cybersecurity Vulnerabilities: The Race to Patch

Don’t reply to all: Scammers now talk amongst themselves to find new victims

EU and US authorities move to strengthen cyber-security protections

EU puts smart device manufacturers on the hook for cyber security

Fake cryptocurrency giveaway sites have tripled this year

Farm protection from cyberattacks almost non-existent

FBI and CISA Responded to a Cyber Attack and Ransomware Incident on Los Angeles School District (LAUSD)

Four cloud security lessons from the Wegmans data breach

Genomics company reaches $12.5M settlement for 2020 data breach

Graph-Fueled Defense-in-Depth Can Strengthen Security Posture

Hacker sells stolen Starbucks data of 219,000 Singapore customers

Hackers Targeting WebLogic Servers and Docker APIs for Mining Cryptocurrencies

How Hackers Hack and the Tools They Use

How serious are organizations about their data sovereignty strategies?

How to improve public sector’s security strategy?

Indonesia: Police name one suspect in government data breach

IoT: Europe readies cybersecurity rules for smart devices - with big fines attached

Japan: Ransomware damage reports surge in January-June

Japan sees 87% increase in ransomware attacks in 1st half of 2022

KeyBank mortgages hit with data breach

LastPass says hackers had internal access for four days

Laval city shuts down online services after ‘targeted’ cyber attack

NCSC warns about Queen-related phishing scams

North Korean Hackers Spreading Trojanized Versions of PuTTY Client Application

Pirate sites pose malware risk

Ransomware attacks up 87 percent in Japan

Ransomware gang threatens to expose one million sensitive medical records online

Ransomware is a business resilience issue, not an IT problem – be data ready to reduce risk and recover

Real Estate Phish Swallows 1,000s of Microsoft 365 Credentials

Researchers Find Link between PrivateLoader and Ruzki Pay-Per-Install Services

Sea Mar data breach $4.4M class action settlement

Self-Storage Operator U-Haul Notifies Customers of Data Breach

Serious breach at Uber spotlights hacker social deception

Smaller firms are becoming bigger targets for cyber criminals

Starbucks Singapore hit by data breach involving customers’ names, emails and mobile numbers

Starbucks Singapore says customer data illegally accessed in data leak

Suffolk County struggles to recover from BlackCat ransomware attack

Texas hospital confirms patient data theft amid network outage from ransomware attack

The Physicians’ Spine and Rehabilitation Specialists of Georgia Reports Data Breach, Possible Ransomware Attack

The Springs Living, Inc. Files Notice of Data Breach After Unauthorized Party Accesses the Company’s IT Network

This Hacker Stole Data From 200M Americans. Now He’s Infiltrating Scam Gangs

Uber cyber attack: protecting against social engineering

Uber Data Breach: Hacker Used Social Engineering to Break Into Multiple Internal Systems

Uber Hack – Ride-hailing Giant Investigating Large-Scale Data Breach

Uber hacked, attacker tears through the company’s systems

Uber hacked, internal systems breached and vulnerability reports stolen

Uber Hacker May Have Compromised Secret Bug Reports

Uber investigates 'cybersecurity incident'

Uber investigating security breach of several internal systems

Uber Is Looking Into Massive Security Breach As Teen Hacker Posts Sensitive Screenshots

Uber probing data breach incident involving ‘internal systems’

Uber responds to possible breach following hacker taunts

Uber Says It's Investigating a Potential Breach of Its Computer Systems

Uber suffers major cyber attack

Uber's Had A Data Breach, And We Don't Know How Bad It Is Yet

Welsh city council hit by cyber attack

What can be Done to prevent a Data Breach Nightmare from Becoming a Reality?

What does a doomsday level cyber attack look like?

What is phishing? Meaning of email scam term, what is ‘spear phishing’, online malware attacks explained

What to do if you were a corporate hack victim

Your personal data isn't safe - here's why

15th September

5 Ways to Mitigate Your New Insider Threats in the Great Resignation

77% of Global Retail Organisations Hit by Ransomware in 2021

Akamai stopped new record-breaking DDoS attack in Europe

Australia: Watchdog calls for mandatory data breach notification laws in Victoria

Auth Token Mining Weakens Microsoft Teams Security

Average Data Breach in U.S. Costs $9.4 Million

Avoiding inertia with 7 steps to a zero trust architecture

Backlogs larger than 100K+ vulnerabilities but too time-consuming to address

Bot attacks in 2022 and how companies can protect themselves

Bricker & Eckler data breach $1.9M class action settlement

Businesses still losing mission-critical company data

C-suite executives say software supply chain hacks have become a 'chief concern'

Can Hardware Wallets Be Hacked? You Are NOT That Safe With A Hardware Wallet!

Canada targeted by dozens of cyberespionage attacks since 2010, study shows

Cisco Won’t Fix Flaw in Routers, Citing End of Life

Conti Ransomware Gang Hit with Data Leak

Critical Vulnerabilities Found in Devices That Provide WiFi on Airplanes

Cyber Attack by Russian Hackers Disrupted 20 Japanese Government Websites

Cybercrime Forum Admins Steal from Site Users

Cyber insurance - A changing of the guard

Don't take the bait

Dozens of cyberespionage operations perpetrated against Canada since 2010

Empress EMS hit by Hive ransomware

EU wants to tighten cybersecurity rules for smart devices

Excess privilege in the cloud is a universal problem, IBM says

Federal cybersecurity laws can improve private sector security

Five Myths About Cybercrime and Cybersecurity

GRIT Ransomware Report: August 2022

Hackers have found a new technique to trap you even better

Hackers trojanize PuTTY SSH client to backdoor media company

Hive ransomware claims cyberattack on Bell Canada subsidiary

How does data governance affect data security and privacy?

How SOCs distribute cybersecurity alerts to avoid burnout

How to Improve Data Backup & Resiliency Plan

In the Battle Against Ransomware, Organizations Need to Enhance their Data Protection Capabilities

Indianhead Credit Union Warns Of Phishing Attack

Indonesia: Police HQ Comment on Alleged Arrest of Hacker Bjorka

Information Security vs Cyber Security: The Difference

Iran steps up its cybercrime game and Uncle Sam punches back

Italian ministry's Twitter account hacked

Japan saw 87% increase in ransomware attacks in first half of 2022

Linux variant of the SideWalk backdoor discovered

Man In The Middle Phishing Attacks That Can Bypass OTP

Managing security compliance with a hybrid workforce

Massive Uptick in Cyber Attacks Puts Student Data in Grave Danger

Microsoft Edge’s News Feed ads abused for tech support scams

Moved lately? U-Haul breach leaks 2.2M driver’s license numbers

NATO Documents Stolen in Breach of Portuguese Armed Forces, Found for Sale on Dark Web

New malware bundle self-spreads through YouTube gaming videos

New Mobile Banking Virus Prowling In Indian Cyberspace

New mobile banking virus SOVA prowling in Indian cyberspace

Notepad++ Plugins Allow Attackers to Infiltrate Systems, Achieve Persistence

Piracy to Ads to Ransomware: Investigation Finds $121 Million in Dangerous Malicious Ads on Piracy Sites Designed to Trick Users into Infecting Their Devices

Pro-Russia hackers claim to have temporarily brought down Japanese government websites

Ransomware franchising: How do groups get started?

Recent Cyber Attacks Highlight Need for Municipal Data Governance and Security

Researchers Warn of Self-Spreading Malware Targeting Gamers via YouTube

Russia Slips from Center Stage as UN Cybercrime Treaty Negotiations Forge Ahead

Russian Gamaredon Hackers Target Ukrainian Government Using Info-Stealing Malware

Russian hackers use new info stealer malware against Ukrainian orgs

Scam webpages look like Land Bank’s website but they’re not

Slam! Anatomy of a Publicly-Available Ransomware Builder

SMBs are hardest-hit by ransomware

Some Critical Data Breach Statistics And Facts For People To Be Well Prepared To Fight Against Cybercrime

Suffolk To Pay Nonprofits By Check In Wake Of Cyber Attack

Taiwan watchful as China unleashes its cyber war

Telltale signs of a network compromise: A step-by-step analysis

Texas-based OakBend Medical Centre suffers a ransomware attack, loses over 1m records to hackers

The Effects of Ransomware on Science & Its Researchers

The Global DDoS Threat Landscape – September 2022

The Importance of Security Control Validation in Breach Damage Minimization

The Problem of Badly Configured Web Application Firewalls

Three ZTNA Considerations When Replacing Cloud-based VPNs

Transparency, disclosure key to fighting ransomware

U.S. Charges 3 Iranian Hackers and Sanctions Several Others Over Ransomware Attacks

U.S. Treasury Department Sanctions Bitcoin (BTC) Addresses Linked to Ransomware

Uber security breach 'looks bad', potentially compromising all systems

UK’s financial sector faces new wave of brute force DDoS attacks

US Charges 3 Iranian Hackers Over Ransomware Attacks

US government software suppliers must attest their solutions are secure

US senator reveals how US Customs has amassed data from Americans' devices

US, UK, Canada and Australia Link Iranian Government Agency to Ransomware Attacks

User Alert as Phishing Campaigns Exploit Queen's Passing

Webworm Attackers Deploy Modified RATs in Espionage Attacks

Webworm Hackers Using Modified RATs in Latest Cyber Espionage Attacks

Webworm hackers modify old malware in new attacks to evade attribution

When It Comes to Security, Don’t Overlook Your Linux Systems

Why Artificial Intelligence is Must for Cybersecurity

YouTube Users Targeted By RedLine Self-Spreading Stealer

14th September

3 Iranian citizens charged in broad hacking campaign in US

4 ways organizations fail to address cybersecurity risk

5 Most Common Cybersecurity Threats When Working From Home

$12.25M settlement reached in Ambry Genetics health data breach lawsuit

49ers Data-Breach Lawsuits Expose Risks of Monetizing Information

50+ Alarming Cybersecurity Statistics 2022 Facts and Trends That Users Need To Know

A busy morning for those tracking ransomware in the healthcare sector

Albania suffers second cyber attack in two months, blames Iranian agencies

Android Phone Security Issues: How To Stay Safe

Attackers mount Magento supply chain attack by compromising FishPig extensions

Bandai Namco confirms to have suffered a ransomware attack

Central banks security an uncomfortable unknown as cyberattacks increase

Chief Financial Officers' overconfidence in cybersecurity can cost millions

Chinese hackers create Linux version of the SideWalk Windows malware

CISA orders agencies to patch Windows, iOS bugs used in attacks

Cloud security pros expect elevated risk for serious data breaches

Could ID Management Limit Cyber Attacks on K-12 Districts?

Data is Being Exfiltrated by Employees

DDoS Attacks on UK Firms Surge During Ukraine War

Death of Queen Elizabeth II exploited to steal Microsoft credentials

DNS Protection: A Logical First Line for Security Defenses

Don’t Get Schooled: How MSPs and Security Teams Can Catch a Phish

Dutch man suspected of laundering ‘tens of millions’ worth of bitcoin

Emotet Resurfacing as Power Player in Ransomware Wars

FBI: Hackers steal millions from healthcare payment processors

FBI says farmers should beef up security systems to protect data before harvest

FormBook Knocks Off Emotet As Most Used Malware in August

Former Conti Ransomware Members, Tools Linked To Initial Access Broker Targeting Ukraine

Four-Fifths of Firms Hit by Critical Cloud Security Incident

Fraudsters aim to capitalize on student loan forgiveness confusion

Fremont County, Colorado, Extends Cyber Attack Emergency Declaration

Gay hookup site typosquatted by 50 domains to push dodgy Chrome extensions

‘Hacktivist’ polarizes Indonesian netizens after data breach spree

Henderson & Walton Women’s Center, P.C. Files Notice of Data Breach Following Hacked Employee Email Account

How to Do Malware Analysis?

Iran-Sponsored Cyberspies Using New Techniques For Phishing

Iranian cyberspies use multi-persona impersonation in phishing threads

Iranian Islamic Revolutionary Guard Corps Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations

LA schools and the mystery of the missing ransom note

Lorenz Ransomware Exploit Mitel VoIP Systems to Breach Business Networks

Malaysia saw 282% year-on-year jump in ransomware attacks in 1H22

Microsoft Fixes Two Zero-Days This Patch Tuesday

Microsoft Teams stores auth tokens as cleartext in Windows, Linux, Macs

Microsoft's Latest Security Update Fixes 64 New Flaws, Including a Zero-Day

Montana Department of Agriculture lost more than $344K to phishing scam, auditors say

National Cyber Security Centre (NCSC) Warns of Potential Phishing Activity During Queen’s Mourning

National Cyber Security Centre (NCSC) warns public of potential Queen-related phishing attacks

New Lenovo BIOS updates fix security bugs in hundreds of models

New Linux Malware Shikitega Can Take Full Control of Devices

Newly unsealed indictment accuses three Iranian nationals of ransomware attacks against hundreds of U.S. victims

North Korean cyberespionage actor Lazarus targets energy providers with new malware

Over 280,000 WordPress Sites Attacked Using WPGateway Plugin Zero-Day Vulnerability

Phishers take aim at Facebook page owners

Phishing Triggers Majority of Cyber Claims in 2022 First Half

Phishing page embeds keylogger to steal passwords as you type

PowerShell used by Iran’s Cobalt Mirage in June ransomware attack

Ransomware Attack on Medical Associates of the Lehigh Valley Affects 75K Patients

Ransomware Attacks on Agriculture Potentially Timed to Critical Seasons

Ransomware gang DEV-0270 now using Windows BitLocker function to encrypt devices

Ransomware gang threatens 1 million-plus medical record leak

Ransomware Roulette with Consumer Trust – The Link Between Loyalty And Attacks

Reel in phishing attacks with Zero Trust Network Access

Report finds 12 percent of ads on piracy websites involve malware to target users

Researchers Detail OriginLogger RAT - Successor to Agent Tesla Malware

Retail industry suffers as ransomware attacks rise by 75%

SMBs hardest hit by ransomware

Software Supply Chain Security Takes Center Stage in Washington

SparklingGoblin APT Hackers Using New Linux Variant of SideWalk Backdoor

SparklingGoblin APT Targeted Hong Kong University With New Linux Backdoor

Strong Authentication Considerations for Digital, Cloud-First Businesses

Students warned to watch out for common online scams

Texas hospital still bringing systems back online after Sept 1 ransomware attack

The Future of Hybrid Work and Cybersecurity Risks

The Global State of Cybersecurity Is Not Good

The Role of Cloud Services in the Hybrid War in Ukraine

Thwarting attackers in their favorite new playground: Social media

TIC International Corporation Reports Data Breach Following Conti Ransomware Attack

Top 3 data security risks facing businesses

Treasury Sanctions IRGC-Affiliated Cyber Actors for Roles in Ransomware Activity

U.S. Accuses Three Iranians Of Carrying Out Cyberattacks, Issues Sanctions Against Them

U.S. charges three Iranians for ransomware attacks on women's shelter, businesses

U.S. government takes sweeping action against Iranian hackers accused of ransomware spree

U-Haul hack: Names and driver’s licenses exposed in data breach

US charges three Iranians for ransomware attacks on companies, women’s shelter

US government sanctions ten Iranians linked to ransomware attacks

Vulnerabilities Found in Airplane WiFi Devices, Passengers' Data Exposed

Why Are You Under Cyberattack?

Why Cloud Fax Is Better For Secure Data Exchange Than Email

13th September

6 tips to avoid being a victim of cyber banking scams

Albania: New Details Unveiled over Cyber Attack on TIMS System

Albania: Prosecution Starts Investigations over Cyber Attack on TIMS System

Albania Drops Diplomatic Ties With Iran in First-Ever Severance of Relations Due to a Cyber Attack

Albania says it has repelled renewed Iranian cyber attack that rattled border system

Apple fixes actively exploited zero-day in macOS, iOS (CVE-2022-32917)

Apple Releases iOS and macOS Updates to Patch Actively Exploited Zero-Day Flaw

Asian Governments and Organizations Targeted in Latest Cyber Espionage Attacks

Beef up your Cyber Protection with Multi Factor Authentication

China reveals new details of US cyber-attack

China says NSA used multiple cybersecurity tools in attacks against Chinese university

Cisco: Yes, Yanluowang leaked our data. No, it's not serious

Cisco confirms data breach following Yanluowang ransomware attack in May

CrowdStrike threat report: Intrusions up, breakout time down

Cyber criminals increasingly relying on ransomware-as-a-service, report says

Cyber-crooks prey on Nigeria in phishing attacks

Cyberattack on Long Island Disrupts Government Agencies

Cybersecurity threats finance sector facing more cunning

Cyberspies drop new infostealer malware on government networks in Asia

FBI Warns of Drastic Implication of Unpatched/Outdated Medical Devices

Finland: Three Vastaamo employees suspected of data protection offences

Five of the most dangerous RansomOps attacks

Gloucester planning site still disrupted after 2021 cyber attack

GPS jammers are being used to hijack trucks and down drones: How to stop them

Hackers breach software vendor for Magento supply-chain attacks

Hackers now use ‘sock puppets’ for more realistic phishing attacks

Hackers Steal Steam Credentials With 'Browser-in-the-Browser' Technique

Hong Kong’s electoral office finds ‘gross misconduct of negligence’ at heart of breach of 15,000 electors’ personal data

How Can Businesses Improve Their Cyber Resilience?

How Defence in Depth Can Help Organisations Tackle Complex Cyber Security Risks

How does Australia stack up to other countries when it comes to authentication and identity safety?

How prepared are organizations to tackle ransomware attacks?

How to Stop Ransomware

Implent Cloud Security Tools Now, Not Later

Information warfare against India - the China angle

Indonesia: Government Downplays Data Breach Fiasco, Claims 'Insignificant' Data Was Spread

Institutionalising best cybersecurity practices in modern businesses

Iranian Hackers Launch Renewed Attack on Albania

Iranian Hackers Target High-Value Targets in Nuclear Security and Genomic Research

Lorenz Ransomware Intrusion: How a VoIP Vulnerability Was Leveraged for Initial Access

Los Angeles Unified School District (LAUSD) approves emergency declaration after cyber attack

Los Angeles Unified School District (LAUSD) Board to consider emergency declaration after cyber attack

Los Angeles Unified School District (LAUSD) Ransomware Attack: Action Too Little, Too Late?

Los Angeles Unified School District (LAUSD) Ransomware Attack Foreshadowed By 2021 Intrusion

Medical billing company faces lawsuit after ransomware attack

Microsoft Patch Tuesday: 64 new vulnerabilities, including five critical ones

Modernizing data security with a zero trust approach to data access

Montenegro falls victim to Russian cyberattack

Napa Valley College Alerts 8,000 About Possible Data Breach

Napa Valley College ransomware attack caused possible data breach

New PsExec spinoff lets hackers bypass network security defenses

Online payment fraud has doubled over the past seven years

Orca Security Reports Widespread Cloud Security Issues

Organizations should fear misconfigurations more than vulnerabilities

Patch your Mitel VoIP systems, Lorenz ransomware gang is back on the prowl

Police arrest man for laundering tens of millions in stolen crypto

Police warn public in regards to callback phishing scams

Privacy compliance and cyber security asset management

Ransomware Gang Hacks VoIP for Initial Access

Ransomware Insurance Cover Set to Die Out – What’s Going On With Cyber-Insurance? – Part 1

Researchers Warn of 674% Surge in Deadbolt Ransomware

ShadowPad-Associated Hackers Targeted Asian Governments

Should you pay ransom settlements?

‘Smishing’ and other forms of cyber attack on the rise

Solar technology company, Canadian Solar has been hacked by LockBit 3.0 ransomware

Steam accounts are being stolen by this devious phishing attack

Steam Accounts are Being Stolen Using a Browser-in-the-Browser Phishing Technique

The emerging role of cybersecurity in the automotive sector

The impact of a data breach

The Importance of Protecting Work From Anywhere Employees Against Cyber Attacks

The Insidious Political Consequences of Cyberattacks

The Major Types of Phishing Attacks & How to Identify Them: The Definitive Guide

The scary future of the internet: How the tech of tomorrow will pose even bigger cybersecurity threats

Trend Micro warns of actively exploited Apex One RCE vulnerability

U-Haul reports data breach, customers’ info exposed

U-Haul says customer names, driver's license numbers exposed in data breach

Vitalik Buterin impersonators ramp up ETH phishing ahead of The Merge

What You Can Learn From The SEC Fining Top Companies For Failing To Safeguard Against Identity Theft

Why is healthcare a top target for cybersecurity threats?

12th September

5 actions to help state and local agencies gain visibility and improve IT hygiene

6 trends driving hardware cybersecurity innovation

After Possible Cyberattack, Suffolk Deploys Manual Record-Keeping

Apple fixes eighth zero-day used to hack iPhones and Macs this year

APT groups use spam emails to launch attacks

Bad bots are coming at APIs! How to beat the API bot attacks?

Be careful, these exchange sites are the target of a vast phishing campaign!

Billions stolen each year by internet, cryptocurrency fraud. How to avoid scams

Can you afford to cut back on web application security?

Central New York (CNY) medical billing company faces lawsuit after ransomware attack

Chaos continues as district tries to recover from systems hack

Check before you click and fight the phish

China Accuses NSA's TAO Unit of Hacking its Military Research University

Cisco confirms Yanluowang ransomware leaked stolen company data

Cisco Data Breach Attributed to Lapsus$ Ransomware Group

Cops Raid Suspected Fraudster Penthouses

Cyber Attack on IHG Impacted Hotel Booking System and Mobile Apps; Exposes Unknown Quantity of Data, Causes Extended System Outage

‘Cyber insecurity’ in healthcare is leading to increased patient mortality rates

Cyber security: five top tips

Cyber warfare trends in the wake of Russia-Ukraine war continue to evolve

Cybercriminals Use Cloud for DDoS Attacks

Digital attacks from the IT army: more than 2400 paralyzed online resources in 2 weeks

Eagle Mountain accidentally pays cyber-hacker over $1 million

Exhausted IT Security Teams Battle Rise of Deepfakes, API Attacks

Expect ‘Fluidity’ From Threat Actors Ahead of the Midterm Elections

Extortion Group 'Vice Society' Targeting Public Schools

FBI recommends action to protect vulnerable medical devices from cyberattacks

FBI warns hackers are targeting K-12 schools and potentially your student’s personal data

Finland: National Bureau of Investigation (NBI) suspects 3 of gross negligence in therapy firm's data breach

Five years after the Equifax data breach, how safe is your data?

Former members of Conti ransomware group repurposing tools to attack Ukraine

Google Play Store Introduces Data Breach Alerts For Compromised Accounts

Growing technology usage comes with greater cybersecurity threats

Hackers Compromise Employee Data at PVC-Maker Eurocell

Hackers steal Steam accounts in new Browser-in-the-Browser attacks

Hackers Utilising Encryption Technique Putting Users at Risk

Hacktivist Group GhostSec Compromises 55 Berghof PLCs Across Israel

Has your password been leaked? Here's how to quickly find out

High Severity Vulnerabilities Found in HP Enterprise Devices

High-Severity Firmware Security Flaws Left Unpatched in HP Enterprise Devices

Homeworkers putting home and business cyber-safety at risk

How has COVID-19 affected cybersecurity?

How to Identify Scammers on Freelancing Sites

Identity protection is key to metaverse innovation

Improve your privacy by disabling the webcam when you’re not using it

Infoblox’s Cyber Threat Intelligence Report highlights smishing and vulnerabilities in WordPress websites

Investigators Seize $30m in Stolen Crypto from North Korea

Iranian Ministry of Intelligence sanctioned after Albania cyber attack

Kaspersky shares a guide to top ransomware techniques

Lawsuit Filed Against 49ers After Ransomware Attack

Lorenz ransomware breaches corporate network via phone systems

Malware vs spyware vs ransomware - what’s the difference?

Many health care organizations lack resources to fend off cyberattacks

Mediant Communications data breach class action settlement

MFA is Powerless Against This Vicious New Hacking Tool

Montenegro defends massive cyber attack by Russia

MSPs and cybersecurity: The time for turning a blind eye is over

Multiple ransomware campaigns linked to Iranian threat actor DEV-0270

Napa Valley College ransomware attack caused possible data breach

New approach to ransomware encryption threatens to undermine cyber security strategies

New GIFShell Attack Targets Microsoft Teams

NHS cyber attack: Health board warns of no quick fix to dealing with incident

North Korean Lazarus Group Hacked Energy Providers Worldwide

Numerous HP business laptops and desktops vulnerable to publicly disclosed security bugs

One Medical, Inc. Reports Data Breach that Leaked Social Security Numbers and Health Information

OpenAPIs and Third-Party Risks

Oxeye Discovers Several High Severity IDOR Vulnerabilities in Harbor

Pharming: another reason to think before you click

Philippine Airlines Suffers Cyberattack With Frequent Flyer Program

Popular YouTuber Scuba Jake’s channel hacked to run crypto scam

Prior to Black Friday, delivery phishing schemes had already increased

Protect yourself from cybercrime with these simple tips

Public warned over cost of living scams targeting bank accounts and those struggling financially

Ransomware Actors Embrace Intermittent Encryption

Ransomware attacks on retail increase, average retail payment grows to more than $200K

Ransomware gangs using clever new technique to dance past security protections

Ransomware makes use of intermittent encryption to bypass detection algorithms

Ransomware Trends in 2022H1: State-Sponsored Ransomware, New Popular Targets and Evolving Extortion Techniques

Recent Cyber Attacks Confirm Personal Digital Lives are a Risk to Enterprise Security

Russian sovereign internet creates cyber risks for re/insurers

Samsung hit with class action lawsuit following data breach

San Francisco 49ers data breach affects 20K fans

Scammers defraud hundreds of victims from prison

Scammers Leveraging Microsoft Team GIFs in Phishing Attacks

Scottish students warned of five scams in circulation as new term begins

Security Awareness Training Must Evolve to Align With Growing E-Commerce Security Threats

SERV Behavioral Health System reports data breach

Shikitega Linux malware uses multi-stage deployment to avoid detection

Signs That May Indicate Your Phone Is Hacked

Some issues remain after Suffolk County cyberattack but 'no compromise to public safety'

South Africa’s thriving banking sector is vulnerable to cybercrime

Supply chain leaving Aussie orgs at risk of ransomware

Texas hospital facing communication issues, system rebuild amid ransomware attack

Texas hospital hit by ransomware attack

The days of the online password are numbered

The old ways aren’t working – Let’s rethink our cybersecurity

The Top 8 Cyber Threats Facing Manufacturers

Thousands of QNAP NAS devices hit by DeadBolt ransomware (CVE-2022-27593)

Threats to air force assets too real to ignore

Two-Year Long DangerousSavanna Campaign Attacks Financial and Banking Institutions

U-Haul discloses data breach exposing customer driver licenses

Ukraine’s IT Army paralyzed 2,400 Russian resources in 2 weeks

US Treasury Sanctions Iranian Minister Over Hacking of Govt and Allies

VPN vs. Zero Trust Network Access: What’s the difference?

Watch out - that WeTransfer link could be a phishing scam

Watch out for the insider threat

Western Balkans Urged to Prepare for Uptick in Cyber-Attacks

What Is Phishing, and How Do You Avoid It?

Why Are Cybersecurity Training Programs Essential For Businesses?

Why cybersecurity won’t be such a major concern in two years’ time

Will hospitals ever be free from cyber threats?

Yanluowang Ransomware Hackers Steal 55GB of Data From Cisco Network