BleepingComputer.com

"This Week in Ransomware...mail bombing is back."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 18 May 2024, 1328 UTC.

Content and Source:  https://www.bleepingcomputer.com/BleepingComputer.com.

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

LATEST ARTICLES

The Week in Ransomware - May 17th 2024 - Mailbombing is back

  • This week was pretty quiet on the ransomware front, with most of the attention on the seizure of the BreachForums data theft forum. However, that does not mean there was nothing of interest released this week about ransomware.

  • Microsoft passwordless
     
    MICROSOFT, SECURITY

Microsoft to start enforcing Azure multi-factor authentication in July

  • Starting in July, Microsoft will begin gradually enforcing multi-factor authentication (MFA) for all users signing into Azure to administer resources.

  • SEC Securities and Exchanges Commission
     
    SECURITY, LEGAL

SEC: Financial orgs have 30 days to send data breach notifications

  • The Securities and Exchange Commission (SEC) has adopted amendments to Regulation S-P that require certain financial institutions to disclose data breach incidents to impacted individuals within 30 days of discovery.

  • Police arrest
     
    SECURITY, CRYPTOCURRENCY

US arrests suspects behind $73M ‘pig butchering’ laundering scheme

  • ​The U.S. Department of Justice charged two suspects for allegedly leading a crime ring that laundered at least $73 million from cryptocurrency investment scams, also known as "pig butchering."

  • Medical Health Hospital Patient
     
    SECURITY, HEALTHCARE

WebTPA data breach impacts 2.4 million insurance policyholders

  • The WebTPA Employer Services (WebTPA) data breach disclosed earlier this month is impacting close to 2.5 million individuals, the U.S. Department of Health and Human Services notes.

  • Learn how day traders think with $375 off this financial masterclass
     
    DEALS

Learn how day traders think with $375 off this financial masterclass

  • Investing in the stock market can be intimidating if you're not sure what you're doing. This eight-course day trading and financial analysis bundle shows you how the market works for $24.97, $375 off the $400 MSRP.

    • BLEEPINGCOMPUTER DEALS
      •  
    • MAY 17, 2024
      •  
    • 07:14 AM
      •  
    • Comment Count 0
  • North Korean hackers
     
    SECURITY

US woman allegedly aided North Korean IT workers infiltrate 300 firms

  • ​The U.S. Justice Department charged five individuals today, a U.S. Citizen woman, a Ukrainian man, and three foreign nationals, for their involvement in cyber schemes that generated revenue for North Korea's nuclear weapons program.

  • Cyberattack ddos network cybersecurity
     
    SECURITY

Norway recommends replacing SSL VPN to prevent breaches

  • The Norwegian National Cyber Security Centre (NCSC) recommends replacing SSLVPN/WebVPN solutions with alternatives due to the repeated exploitation of related vulnerabilities in edge network devices to breach corporate networks.

  • Cybersecurity Lock World
     
    DEALS

Save $95 on a 65+ course cybersecurity training library

  • Constant training is key to staying current on the changing world of cybersecurity. This instant cybersecurity training library lets you fit in the training you need for $24.97, $95 off the $120 MSRP now through the end of May 22th.

    • BLEEPINGCOMPUTER DEALS
      •  
    • MAY 16, 2024
      •  
    • 02:11 PM
      •  
    • Comment Count 0
  • Outlook
     
    MICROSOFT

Microsoft shares temp fix for Outlook encrypted email reply issues

  • ​Microsoft has shared a temporary fix for a known issue preventing Microsoft 365 customers from replying to encrypted emails using the Outlook Desktop client.

  • Data Breach
     
    SECURITY, HEALTHCARE

MediSecure e-script firm hit by ‘large-scale’ ransomware data breach

  • Electronic prescription provider MediSecure in Australia has shut down its website and phone lines following a ransomware attack believed to originate from a third-party vendor.

  • Faceless Hacker Moon
     
    SECURITY

Russian hackers use new Lunar malware to breach a European govt's agencies

  • Security researchers discovered two previously unseen backdoors dubbed LunarWeb and LunarMail that were used to compromise a European government's diplomatic institutions abroad.

  • Windows Server
     
    MICROSOFT

Microsoft: Windows Server 2019 updates fail with 0x800f0982 errors

  • ​Microsoft has acknowledged a new known issue causing this month's KB5037765 security update for Windows Server 2019 to fail to install with 0x800f0982 errors.

  • How to manage the security risks of generative AI tools
     
    SECURITY
    SPONSORED CONTENT

How to manage the security risks of generative AI tools

  • Growth in AI use is widespread, evolving, and showing no signs of slowing, and with it comes risks ranging from competitive and legal concerns to a slew of security implications. Here's how Nudge Security can help you discover and manage AI security risks.

  • North Korean hackers
     
    SECURITY

Kimsuky hackers deploy new Linux backdoor in attacks on South Korea

  • The North Korean hacker group Kimsuki has been using a new Linux malware called Gomir that is a version of the GoBear backdoor delivered via trojanized software installers.

  • Visio
     
    DEALS

Create up-to-date visualizations with $230 off Microsoft Visio 2021

  • Turning your data into floor plans, diagrams, flow charts, and other visualizations should be an efficient process. This Microsoft Visio 2021 Professional instant download for Windows gives you all the tools you need for $19.97, $230 off the $250 MSRP now through the end of May 22nd.

    • BLEEPINGCOMPUTER DEALS
      •  
    • MAY 16, 2024
      •  
    • 07:19 AM
      •  
    • Comment Count 0
  • Google Chrome
     
    GOOGLE, SECURITY

Google fixes third actively exploited Chrome zero-day in a week

  • ​Google has released a new emergency Chrome security update to address the third zero-day vulnerability exploited in attacks within a week.

  • Android
     
    GOOGLE

Android to add new anti-theft and data protection features

  • ​Google is introducing multiple anti-theft and data protection features later this year, some available only for Android 15+ devices, while others will roll out to billions of devices running Android 10 and later.

  • Android
     
    GOOGLE, MOBILE, SECURITY

Android 15, Google Play Protect get new anti-malware and anti-fraud features

  • Today, Google announced new security features coming to Android 15 and Google Play Protect that will help block scams, fraud, and malware apps on users' devices.

  • Nissan
     
    SECURITY

Nissan North America data breach impacts over 53,000 employees

  • Nissan North America (Nissan) suffered a data breach last year when a threat actor targeted the company's external VPN and shut down systems to receive a ransom.

VIEW MORE

Comments

Post a Comment

Please leave a comment about our recent post.

Popular posts from this blog

The Cyberwire Daily Briefing

Image
"Fortinet confirms breach of customer data." Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 15 September 2024, 1339 UTC. Content and Source:   https://thecyberwire.com/newsletters/daily-briefing/13/176 Please check link or scroll down to read your selections.  Thanks for joining us today. Russ Roberts (https://www.hawaiicybersecurityjournal.net). V13 | Issue 176 | 9.13.24 Daily Briefing for 09.13.24 Announcement Cloud Security in the Age of Generative AI. Artificial Intelligence is revolutionizing business, but it also introduces new risks. Join us on Wednesday, September 18th at 2pm EDT for a compelling live webinar on "Good vs. Evil: Cloud Security in the Age of Generative AI" with N2K CyberWire’s Dave Bittner and Sysdig’s Loris Degioanni.  Learn more and register now . Summary By the CyberWire staff At a glance. Fortinet confirms breach of customer data. Iran's Scarred Manticore deploys ne
Read more

BleepingComputer.com

Image
"Progress LoadMaster vulnerable to 10/10 severity RCE flaw." Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 08 September 2024, 1458 UTC. Content and Source:   https://www.bleepingcomputer.com/ Please check link or scroll down to read your selections. Thanks for joining us today. Russ Roberts (https://www.hawaiicybersecurityjournal.net). Latest Articles   Security Progress LoadMaster vulnerable to 10/10 severity RCE flaw Progress Software has issued an emergency fix for a maximum (10/10) severity vulnerability impacting its LoadMaster and LoadMaster Multi-Tenant (MT) Hypervisor products that allows attackers to remotely execute commands on the device. Bill Toulas   September 08, 2024   10:11 AM     0   Deals Get started learning about cybersecurity with this course bundle deal Take a real step towards a job in information security with this intro to cybersecurity. Get the 2024 Cybersecurity Essentials Bundl
Read more

SecurityWeek Briefing

Image
"New RAMBO attack allows air-gapped data theft." Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 10 September 2024, 0035 UTC. Content and Source:  https://www.securityweek.com Please check link or scroll down to read your selections.  Thanks for joining us today. Russ Roberts (https://www.hawaiicybersecurityjournal.net).   Monday, September 9 , 2024 Are you worried about unmanaged devices and apps? LATEST CYBERSECURITY HEADLINES New RAMBO Attack Allows Air-Gapped Data Theft Predator Spyware Resurfaces With Fresh Infrastructure Google Pushes Rust in Legacy Firmware to Tackle Memory Safety Flaws 300,000 Impacted by Data Breach at Car Rental Firm Avis One Million US Kaspersky Customers Transferred to Pango’s UltraAV Two Indicted in US for Running Dark Web Marketplaces Offering Stolen Information Critical SonicWall Vulnerability Possibly Exploited in Ransomware Attacks CISA Breaks Silence on Controversial ‘Airp
Read more