____________________ Summary : The federal government is proposing financial incentives and penalties to encourage the health sector to improve cybersecurity, but industry groups are divided on the effectiveness of this approach. Key Point : 🔒 Proposed federal budget includes $1.3 billion in financi…
Threat Actor: – Unknown individual or group Victim: – Favenorte de Mato Verde (organization) Additional Information: – The attack occurred in March 2024. – The threat actor leaked a database containing sensitive documents. – The compromised data includes ID cards, CPF cards, diploma certificates, el…
Threat Actor: – The threat actor claiming to possess the trove of emails from UNAM IIMAS. Victim: – UNAM IIMAS (Instituto de Investigaciones en Matemáticas Aplicadas y en Sistemas de la Universidad Nacional Autónoma de México) Additional Information: – The emails are stored in .msg format. – The dat…
Threat Actor: – The threat actor offering unauthorized VPN access to a Chinese Telecommunication Company Victim: – The Chinese Telecommunication Company with a revenue of $3 billion Additional Information: – The access allows entry into Windows systems through a Windows VPN – The access provides aut…
Guardio Labs disclosed CVE-2024-21388 in Microsoft Edge, where a private marketing API (edgeMarketingPagePrivate) could be abused to silently install extensions from the Edge Add-ons Store when JavaScript runs on privileged Microsoft domains. Microsoft patched…
____________________ Summary : Ransomware gang attacks the Big Issue, a street newspaper supporting the homeless Key Point : 🔹 The Big Issue, a street newspaper in the UK, has been impacted by a cyber incident. 🔹 The Qilin ransomware gang stole 550 gigabytes of confidential data. 🔹 The incident high…
Summary : Only 5% of Boards Have Cybersecurity Expertise Key Point 🛡️: – Just 5% of businesses have a cyber expert on the board – Companies with cyber experts on specialized risk committees have higher security performance scores – Stronger cybersecurity correlates with better financial performance…
____________________ Summary: A new hacking campaign called “ShadowRay” is exploiting an unpatched vulnerability in the Ray framework to breach servers and hijack resources, affecting various industries. Key Point: 🔒 Ray framework vulnerability exploited by hackers 🔒 Attackers gaining access to sens…
Summary : Scammers are taking advantage of tax season anxiety to exploit Americans with online tax scams. McAfee’s research highlights the increasing use of AI tools by cybercriminals to carry out sophisticated scams. Key Point : 🔒 25% of Americans have lost money to online tax scams. 🛡️ 68% of peop…
Summary : The leaked data trove belonging to the Chinese hacking contractor iSoon reveals its links to Chinese APT groups, showcasing its involvement in cyberespionage operations on behalf of Beijing. Key Point : 🔍 The leaked data trove belonging to iSoon reveals its links to Chinese state hacking g…
Summary : Germany has warned about 17,000 vulnerable Microsoft Exchange servers exposed online, with many critical security vulnerabilities. Key Point : 🔒 Approximately 37% of Exchange servers in Germany are severely vulnerable, affecting various institutions and companies. 🔒 Admins are urged to use…
__________________________________________________ Summary : The GEOBOX tool on the Dark Web allows hackers to manipulate GPS, simulate networks, mimic Wi-Fi, and evade anti-fraud filters using Raspberry Pi devices. Key Point : 🔒 Cybercriminals repurpose Raspberry Pi devices with GEOBOX for digital…
Reinforcement learning is the path forward for AI integration into cybersecurity – Help Net Security
__________________________________________________ Summary: Reinforcement learning is crucial for AI integration into cybersecurity, helping to sift through alerts efficiently and identify real threats. It can enhance detection, prediction, and prevention of cyber attacks. Key Point: 🔒 Reinforcement…
__________________________________________________ Summary: The vulnerabilities in Electronic Logging Devices (ELDs) used in US commercial trucks could lead to widespread infections and control of vehicles by malicious actors. Key Point: 🚛 ELDs in commercial trucks can be accessed over Bluetooth or…
__________________________________________________ Summary: The Communications Workers Union is currently dealing with a cyberattack on its IT systems, with experts investigating the extent of the attack and working on mitigation strategies. Key Point: 🔒 The CWU has confirmed being the victim of a c…