The CyberWire Daily Briefing.

"Chinese hackers targeted the U.S. Treasury Department's Office of Foreign Assets Control."

Views expressed in this cybersecurity, cyber espionage, and cyber crime update are those of the reporters and correspondents.  Accessed on 05 January 2025, 1456 UTC.

Content and Source:  https://thecyberwire.com

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

 Issues

V14 | Issue 2 | 1.3.25

Chinese hackers targeted the US Treasury Department's Office of Foreign Assets Control.

Phishing campaign compromised at least 35 browser extensions. Apple will pay $95 million to settle proposed privacy lawsuit.

V14 | Issue 1 | 1.2.25

US Treasury Department breached by Chinese APT.

AT&T and Verizon say they've contained China's Salt Typhoon attacks. US Army soldier arrested over alleged involvement in Snowflake hacks.

V13 | Issue 241 | 12.23.24

Judge finds NSO Group liable in WhatsApp lawsuit. China accuses the US government of cyberattacks.

Alleged LockBit ransomware developer to be extradited to the US.

V13 | Issue 240 | 12.20.24

Threat actors stole $2.2 billion worth of cryptocurrency in 2024.

Hacker leaks data allegedly stolen from Cisco. Mirai botnet operators are targeting Juniper Networks routers using default passwords. Raccoon Infostealer operator sentenced to 60 months in prison.

V13 | Issue 239 | 12.19.24

CISA issues security guidance for highly targeted individuals amid Salt Typhoon hacks.

Russia's Sandworm targets Ukrainian soldiers. Nebraska sues Change Healthcare over data breach. APT29 launches widespread rogue RDP campaign.

V13 | Issue 238 | 12.18.24

US considers a ban on Chinese-made TP-Link routers. Meta fined $263 million for alleged GDPR violations.

HiatusRAT malware operators are scanning for vulnerable web cameras and DVRs. South Asia-nexus threat actor targets Turkish defense sector.

V13 | Issue 237 | 12.17.24

Biden Administration moves to ban China Telecom from US networks.

CISA issues new draft of its National Cyber Incident Response Plan. Telecom Namibia sustains data breach. New York City man convicted for SQL injection attacks.

V13 | Issue 236 | 12.16.24

Hackers breach Rhode Island benefits system. Clop ransomware gang claims responsibility for Cleo attacks.

California healthcare system sustains ransomware attack.

V13 | Issue 235 | 12.13.24

Cleo urges customers to patch actively exploited vulnerability. Iran-linked threat actor deploys new ICS malware.

Law enforcement shutters the Rydox cybercrime marketplace.

V13 | Issue 234 | 12.12.24

Outages hit Meta and OpenAI products.

Microsoft patches against technique to bypass multifactor authentication. Researchers describe Nova, a new version of the Snake Keylogger.