Article Summary: 🔒 New Zealand government reveals it has been attacked by China. 🔍 Government agencies were compromised by a PRC state-sponsored group known as APT40. 🔐 Networks containing important government information were breached. 🛡️ National Cyber Security Center worked to contain the activit…
Article Summary: 🔹 U.S. federal prosecutors indicted seven Chinese nationals for hacking activities linked to Beijing economic and intelligence espionage group. 🔹 The indicted suspects were contractors for a front company set up by a provincial government arm of China’s Ministry of State Security. 🔹…
Article Summary: 🔒 Giant Tiger, a discount retailer, experienced a security breach involving customer information. 📧 The compromised data included names, emails, phone numbers, and addresses of customers. 🛡️ Giant Tiger is working to resolve the issue and has hired cybersecurity experts for an indep…
Article Summary: 🔹 The U.S. military needs a cyber branch to address growing threats in cyberspace. 🔹 A report by the Foundation for Defense of Democracies calls for the establishment of a Cyber Force branch with 10,000 personnel and a $16.5 billion budget. 🔹 The report highlights inefficiencies in…
Article Summary : 🔍 A new phishing kit called Tycoon 2FA has been discovered by the cybersecurity community, utilizing the Adversary-in-The-Middle (AiTM) technique. 🔍 The kit has been active since at least August 2023 and has become one of the most prevalent AiTM phishing kits. 🔍 Tycoon 2FA operates…
Lumen’s Black Lotus Labs uncovered an updated TheMoon botnet variant that has been recruiting end-of-life SOHO routers and IoT devices into the Faceless residential proxy service, growing to over 40,000 bots in early 2024. Lumen blocked associated infrastructu…
Threat Actor Claims Database Leak of Konica Minolta, Exposing Sensitive Information – Daily Dark Web
A threat actor has purportedly leaked 91GB of data that has affected Konica Minolta. This breach encompasses a variety of critical information related to healthcare X-ray products, including specifications, documentation, and potentially sensitive data regarding their functionality and operation. Th…
Article Summary : 🔹 A U.S. senator is raising questions about a report that $7.5 million was stolen by cyber thieves from the Department of Health and Human Services (HHS) last year. 🔹 The hackers took over email accounts of grantees and tricked HHS into sending funds to their bank accounts. 🔹 Sen….
Article Summary: 🔍 Organizations in the United Kingdom that work transparently with regulators and cybersecurity officials after a data breach will receive leniency in penalties and fines. 🔍 The Information Commissioner’s Office released new guidance detailing the legal framework for assessing penal…
Article Summary: 🔹 The American Hospital Association is advocating for Change Healthcare to be solely responsible for notifying patients in the event of a breach. 🔹 HHS OCR is investigating the cyberattack on Change Healthcare and UnitedHealth Group to determine if PHI was compromised. 🔹 AHA is seek…
Article Summary: 🔍 Academic researchers developed ZenHammer, the first variant of the Rowhammer DRAM attack that works on CPUs based on recent AMD Zen microarchitecture. 🛡️ AMD Zen chips and DDR5 RAM modules were previously considered less vulnerable to Rowhammer, but the latest findings challenge t…
Sapphire Clan, alongside other Russian hacker collectives, has purportedly initiated a series of DDoS attacks against Ukrainian websites. These cyber assaults are reportedly carried out in response to a recent terrorist attack in Moscow. Among the targeted sites are critical Ukrainian entities such…
Gli aggressori, camuffandosi da dipartimenti HR o contabilità aziendali, stanno inviando email fraudolente che promettono aggiustamenti salariali o accessi a buste paga elettroniche, nel tentativo di sottrarre credenziali di accesso e altre informazioni sensibili.
Article Summary: 🔒 CISA and the FBI urge technology manufacturing companies to review software for SQL injection vulnerabilities before shipping. 🛡️ SQL injection attacks exploit security vulnerabilities to access, manipulate, or delete sensitive data. 🔑 Parameterized queries with prepared statement…
Article Summary : 🔒 Despite the critical role of APIs, the vast majority of commercial decision-makers are ignoring the burgeoning security risk for businesses, according to Fastly. 🔐 APIs have become a favorite gateway for cybercriminals, with 84% of respondents admitting to not having advanced API…