"Bank of America warns of data breach, Trucking cybersecurity, and Treasury hack linked to Silk Typhoon."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 11 January 2025, 0234 UTC.

Content and Source:  E-mail subscription from https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

83K followers33 articles per week#security#tech

44

Today

Meloni Says Italy Is Exploring Deals on Telecoms Security, but Denies Private Talks With Musk

Italy nears 1.5 billion SpaceX deal

•

by Associated Press / 9h

If the deal is sealed, SpaceX would provide encryption services for the Italian government and communications infrastructure for the military and emergency services. The post appeared first on SecurityWeek .

In Other News: Bank of America Warns of Data Breach, Trucking Cybersecurity, Treasury Hack Linked to Silk Typhoon

8 TTPs

•

by SecurityWeek News / 13h

Noteworthy stories that might have slipped under the radar: 2025 trucking cybersecurity report, Bank of America discloses data breach, Silk Typhoon behind US Treasury hack. The post appeared first on SecurityWeek .

Banshee macOS Malware Expands Targeting

6 TTPs

•

by Ionut Arghire / 14h

•

Banshee Stealer evades macOS antivirus

The latest version of the Banshee macOS information stealer no longer checks if the infected systems have the Russian language installed. The post appeared first on SecurityWeek .

Major Addiction Treatment Firm BayMark Confirms Ransomware Attack Caused Data Breach

BayMark Health Services data breach

•

by Ionut Arghire / 14h

Substance abuse treatment provider BayMark Health Services says patient personal information was compromised in a data breach. The post appeared first on SecurityWeek .

PayPal Phishing Campaign Employs Genuine Links to Take Over Accounts

7 TTPs

•

by Ionut Arghire / 14h

•

PayPal phishing scam exploits Microsoft 365

Fortinet warns of a phishing campaign that uses legitimate links to take over the victims’ PayPal accounts. The post appeared first on SecurityWeek .

Microsoft DRM Hacking Raises Questions on Vulnerability Disclosures

by Eduard Kovacs / 15h

A research project into vulnerabilities affecting Microsoft’s PlayReady DRM raises some questions on responsible disclosure. The post appeared first on SecurityWeek .

Yesterday

Darktrace to Acquire Incident Investigation Firm Cado Security

Darktrace to acquire Cado Security

•

by Eduard Kovacs / 1d

Darktrace has announced the proposed acquisition of UK-based incident investigation firm Cado Security, reportedly for up to $100 million. The post appeared first on SecurityWeek .

Medical Billing Firm Medusind Says Data Breach Impacts 360,000 People

2 TTPs

•

by Eduard Kovacs / 1d

•

Medusind data breach affects 360000

Medical billing solutions provider Medusind has revealed that a data breach discovered in December 2023 impacts over 360,000 individuals. The post appeared first on SecurityWeek .

GFI KerioControl Firewall Vulnerability Exploited in the Wild

2 TTPs

•

by Ionut Arghire / 1d

Threat actors are exploiting a recent GFI KerioControl firewall vulnerability that leads to remote code execution. The post appeared first on SecurityWeek .

SonicWall Patches Authentication Bypass Vulnerabilities in Firewalls

2 TTPs

•

by Ionut Arghire / 1d

SonicWall has released patches for multiple vulnerabilities in SonicOS, including high-severity authentication bypass flaws. The post appeared first on SecurityWeek .

The ‘Worst in Show’ CES Products Put Your Data at Risk and Cause Waste, Privacy Advocates Say

by Associated Press / 1d

Some of the innovative products presented at CES can pose a serious risk to data and privacy. The post appeared first on SecurityWeek .

From Silos to Synergy: Transforming Threat Intelligence Sharing in 2025

by Marc Solomon / 1d

In the face of ever-growing threats and adversaries, organizations must break down the silos between ALL teams involved in security. The post appeared first on SecurityWeek .

Palo Alto Networks Patches High-Severity Vulnerability in Retired Migration Tool

4 TTPs

•

by Ionut Arghire / 1d

Palo Alto Networks has released patches for multiple vulnerabilities in the Expedition migration tool, which was retired on December 31, 2024. The post appeared first on SecurityWeek .

Excelsior Orthopaedics Data Breach Impacts 357,000 People

Excelsior Orthopaedics data breach affects 357K

•

by Ionut Arghire / 1d

Excelsior Orthopaedics says the information of roughly 357,000 patients and employees was stolen in a June 2024 data breach. The post appeared first on SecurityWeek .

Exploitation of New Ivanti VPN Zero-Day Linked to Chinese Cyberspies

8 TTPs

•

by Eduard Kovacs / 1d

•

CVE-2025-0282

Google Cloud’s Mandiant has linked the exploitation of CVE-2025-0282, a new Ivanti VPN zero-day, to Chinese cyberspies. The post appeared first on SecurityWeek .

Jan 8, 2025

Ivanti Warns of New Zero-Day Attacks Hitting Connect Secure Product

2 TTPs

•

by Ryan Naraine / 2d

Ivanti confirms zero-day exploitation of a remotely exploitable code execution flaw in its Connect Security product line. The post appeared first on SecurityWeek .

Telegram Shared Data of Thousands of Users After CEO’s Arrest

Telegram shares user data with authorities

•

by Eduard Kovacs / 2d

After its CEO was arrested last summer, Telegram has been increasingly sharing user data at the request of authorities. The post appeared first on SecurityWeek .

Japan Links Chinese Hacker MirrorFace to Dozens of Cyberattacks Targeting Security and Tech Data

Collection (Enterprise TA0009)

•

by Associated Press / 2d

•

China group hacks Japan targets

Japan says China-linked cyberattacks were systematic attacks with an aim of stealing data on Japanese national security and advanced technology. The post appeared first on SecurityWeek .

Rationalizing the Stack: The Case for Security Vendor Consolidation

by Joshua Goldfarb / 2d

Consolidating from an overly burdensome number of point solutions to an easier to manage platform-based approach brings with it a number of benefits. The post appeared first on SecurityWeek .

Thousands Impacted by Casio Data Breach

3 TTPs

•

by Eduard Kovacs / 2d

•

Casio ransomware attack exposes data

Casio has completed its investigation into the data breach caused by a recent ransomware attack and found that thousands of individuals are impacted. The post appeared first on SecurityWeek .

Cybersecurity Funding Reached $9.5 Billion in 2024: Report

by Ionut Arghire / 2d

Cybersecurity firms raised $9.5 billion in over 300 funding rounds in 2024, with Wiz scoring the largest investment at $1 billion. The post appeared first on SecurityWeek .

Insider Threat: Tackling the Complex Challenges of the Enemy Within

by Kevin Townsend / 2d

The insider threat problem will worsen, and the solutions will widen, in the age of generative-AI. The post appeared first on SecurityWeek .

New Labels Will Help People Pick Devices Less at Risk of Hacking

US Cyber Trust Mark launching 2025

•

by Associated Press / 2d

The US government is rolling out a consumer labeling system designed to help Americans pick smart devices that are less vulnerable to hacking. The post appeared first on SecurityWeek .

CISA Warns of Mitel MiCollab Vulnerabilities Exploited in Attacks

2 TTPs

•

by Ionut Arghire / 2d

CISA says two recently disclosed path traversal vulnerabilities in the Mitel MiCollab collaboration platform have been exploited in attacks. The post appeared first on SecurityWeek .

Chrome 131, Firefox 134 Updates Patch High-Severity Vulnerabilities

3 TTPs

•

by Ionut Arghire / 2d

Chrome and Firefox updates released this week resolve high-severity vulnerabilities in the two popular browsers. The post appeared first on SecurityWeek .

Jan 7, 2025

First Android Update of 2025 Patches Critical Code Execution Vulnerabilities

by Ionut Arghire / 2d

This year’s first batch of monthly security updates for Android resolves 36 vulnerabilities, including critical remote code execution flaws. The post appeared first on SecurityWeek .

Veracode Targets Malicious Code Threats With Phylum Acquisition

Veracode acquires Phylum technology

•

by Ryan Naraine / 3d

The deal includes certain Phylum assets, including its malicious package analysis, detection, and mitigation technology. The post appeared first on SecurityWeek .

Trolley Problem, Safety Versus Security of Generative AI

by Matt Honea / 3d

The only way to advance AI safety is to increase human interactions, human values and societal governance to promote a reinforced human feedback loop, much like we do with traditional AI training methods. The post appeared first on SecurityWeek .

Former NSA Director Rob Joyce Joins DataTribe as Venture Partner

Rob Joyce joins DataTribe as partner

•

by SecurityWeek News / 3d

DataTribe said Joyce will be a venture partner tasked with finding entrepreneurs developing new and emerging technologies for cyber defense. The post appeared first on SecurityWeek .

Chinese Tech Companies Tencent, CATL and Others Protest US Listings as Army-Linked Companies

CATL designated as Chinese military company

•

by Associated Press / 3d

The U.S. Defense Department added dozens of Chinese companies, including Tencent, SenseTime and battery maker CATL, to a list of companies it says have ties to China’s military. The post appeared first on SecurityWeek .

Dell, HPE, MediaTek Patch Vulnerabilities in Their Products

3 TTPs

•

by Ionut Arghire / 3d

MediaTek, HPE and Dell release advisories to inform customers about potentially serious vulnerabilities found and patched in their products. The post appeared first on SecurityWeek .

Washington Attorney General Sues T-Mobile Over 2021 Data Breach

WA sues T-Mobile over data breach

•

by Ionut Arghire / 3d

Washington State Attorney General Bob Ferguson has filed a lawsuit against T-Mobile over a 2021 data breach that impacted over 76 million consumers. The post appeared first on SecurityWeek .

CISA: No Federal Agency Beyond Treasury Impacted by BeyondTrust Incident

by Ionut Arghire / 3d

CISA says no federal agencies other than Treasury were impacted by the recent compromise of a BeyondTrust cloud-based service. The post appeared first on SecurityWeek .

Critical Infrastructure Ransomware Attack Tracker Reaches 2,000 Incidents

by Eduard Kovacs / 3d

Temple University’s Critical Infrastructure Ransomware Attacks (CIRA) database now contains over 2,000 entries. The post appeared first on SecurityWeek .