"Hackers steal data of 2 million in SQL injection, XSS attacks."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 06 February 2024, 1406 UTC.

Content and Source: ("").

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (

Save $500 on 60 hours of live cybersecurity training sessions

  • If you need to get hands-on and learn how cybersecurity works, a live session is a crucial tool. This cybersecurity training series with Mohamed Atef offers the training you need for $499.99, $500 off the $1000 MSRP.

    • FEBRUARY 06, 2024
    • 07:11 AM
    • Comment Count 0
  • Data theft data breach hacker cyberattack

Hackers steal data of 2 million in SQL injection, XSS attacks

  • A threat group named 'ResumeLooters' has stolen the personal data of over two million job seekers after compromising 65 legitimate job listing and retail sites using SQL injection and cross-site scripting (XSS) attacks.

  • Outlook

Microsoft Outlook December updates trigger ICS security alerts

  • Microsoft is investigating an issue that triggers Outlook security alerts when trying to open .ICS calendar files after installing December 2023 Patch Tuesday Office security updates.

  • US State Department

US announces visa ban on those linked to commercial spyware

  • Secretary of State Antony J. Blinken announced today a new visa restriction policy that will enable the Department of State to ban those linked to commercial spyware from entering the United States.

  • HPE

HPE investigates new breach after data for sale on hacking forum

  • Hewlett Packard Enterprise (HPE) is investigating a potential new breach after a threat actor put allegedly stolen data up for sale on a hacking forum, claiming it contains HPE credentials and other sensitive information.

  • Ivanti

Newest Ivanti SSRF zero-day now under mass exploitation

  • An Ivanti Connect Secure and Ivanti Policy Secure server-side request forgery (SSRF) vulnerability tracked as CVE-2024-21893 is currently under mass exploitation by multiple attackers.

  • Microsoft 365

One year of Microsoft 365 for one user is now $45 in this deal

  • A Microsoft 365 one-year subscription for one user is on sale for just $44.99 (reg. $69), and you can also opt for this Microsoft 365 one-year subscription for a family or group of up to six users for just $74.99 (reg. $99). 

    • FEBRUARY 05, 2024
    • 07:09 AM
    • Comment Count 0
  • Windows Server

Microsoft is bringing the Linux sudo command to Windows Server

  • Microsoft is bringing the Linux 'sudo' feature to Windows Server 2025, offering a new way for admins to elevate privileges for console applications.

  • Package Container

Leaky Vessels flaws allow hackers to escape Docker, runc containers

  • Four vulnerabilities collectively called "Leaky Vessels" allow hackers to escape containers and access data on the underlying host operating system.

  • Clorox

Clorox says cyberattack caused $49 million in expenses

  • Clorox has confirmed that a September 2023 cyberattack has so far cost the company $49 million in expenses related to the response to the incident.

  • Google Chrome

Check if you're in Google Chrome's third-party cookie phaseout test

  • Google has started testing the phasing out of third-party cookies on Chrome, affecting about 1% of its users or approximately 30 million people. Learn how to check if you are part of the initial test.

  • Mastodon

Mastodon vulnerability allows attackers to take over accounts

  • Mastodon, the free and open-source decentralized social networking platform, has fixed a critical vulnerability that allows attackers to impersonate and take over any remote account.

  • Upgrade your cloud storage with $470 off an Internxt lifetime subscription

Upgrade your cloud storage with $470 off an Internxt lifetime subscription

  • Cloud storage can vastly improve hybrid work, personal file sharing, and so much more. Get 2TB of cloud storage for a lifetime from Internxt for $129.97,  $470 off the $599 MSRP, but only through February 4th.

    • FEBRUARY 03, 2024
    • 08:53 AM
    • Comment Count 0
  • hospital ward

The Week in Ransomware - February 2nd 2024 - No honor among thieves

  • Attacks on hospitals continued this week, with ransomware operations disrupting patient care as they force organization to respond to cyberattacks.

  • AnyDesk

AnyDesk says hackers breached its production servers, reset passwords

  • AnyDesk confirmed today that it suffered a recent cyberattack that allowed hackers to gain access to the company's production systems. BleepingComputer has learned that source code and private code signing keys were stolen during the attack.

  • Lurie Children's

Lurie Children's Hospital took systems offline after cyberattack

  • Lurie Children's Hospital in Chicago was forced to take IT systems offline after a cyberattack, disrupting normal operations and delaying medical care in some instances.

  • Department of Justice DOJ

BTC-e server admin indicted for laundering ransom payments, stolen crypto

  • Aliaksandr Klimenka, a Belarusian and Cypriot national, has been indicted in the U.S. for his involvement in an international cybercrime money laundering operation.

  • Hacker Screens

Interpol operation Synergia takes down 1,300 servers used for cybercrime

  • An international law enforcement operation code-named 'Synergia' has taken down over 1,300 command and control servers used in ransomware, phishing, and malware campaigns.

  • Datacenter Network Switch

Save $149 on this core IT certifications training course bundle

  • Getting certified helps you move your IT career forward. Get ready for those exams with these eight cybersecurity and IT exam prep courses for $34.99, $149 off the $184 MSR

    • FEBRUARY 02, 2024
    • 07:08 AM
    • Comment Count 0
  • Blackbaud

FTC orders Blackbaud to boost security after massive data breach

  • Blackbaud has settled with the Federal Trade Commission after being charged with poor security and reckless data retention practices, leading to a May 2020 ransomware attack and a data breach affecting millions of people.



Popular posts from this blog

SecurityWeek Briefing.

Cyber War Newswire

SecurityWeek Briefing.