Daily News - Janeiro (12/01 - 18/01) - 03 Semana de 2025

Information Security, Cyber Security, Privacy and Hacking News --- Daily Updates !! Weekly Resume...

18/01

FlowerStorm “Phishing-as-a-Service” Attacking Microsoft Users With Fake Login Pages

FTC orders GM to stop collecting and selling driver’s data

Hong Kong Database Leak Raises Privacy Concerns

Information Commissioner’s Office (ICO) Confirms it’s Still Investigating Lyca Mobile UK’s 2023 Data Breach

Massive Leak of Online Loan User Data Raises Alarms

Minecraft Event Documents Leak Raises Data Security Concerns

MITRE Launches D3FEND 1.0 to Standardize Cybersecurity Techniques for Countering Threats

NeutralPosture.com Data Breach Sparks Privacy Concerns

Online Loan Platform Data Leak Sparks Privacy Concerns

PoC Exploit Released for Palo Alto Expedition Tool OS Command Injection Vulnerability

U.S. Sanctions Chinese Cybersecurity Firm Over Treasury Hack Tied to Silk Typhoon

U.S. Treasury Sanctions Chinese cybersecurity firm and actor over federal agency breach tied to Salt Typhoon

17/01

61,000 Texans exposed to possible fraud amid data breach by state agency employees

380,000 customer medical records exposed by California cannabis chain breach

Another cyber attack against higher education contained

AT&T hack exposes agents’ call logs leaving FBI scrambling

Balancing usability and security in the fight against identity-based attacks

Belgium holds first trial of Russians for cybercrimes

Biotech Firm Settles Class Action Over Ransomware Attack for $7.5 Million

Blue Yonder investigating Clop ransomware threat linked to exploited Cleo CVEs

California Wildfires Spark Phishing Scams Exploiting Chaos

Change Healthcare Class Action Lawsuit Filed Over Data Breach That Allowed Hackers To Access Medical Information of 120M Patients

Chemeketa employees hit by retirement plan data breach

CISA warns of exploited Fortinet bugs as Microsoft issues its biggest Patch Tuesday in years

Costa Rica refinery cyberattack was first deployment for new US response program, ambassador says

Criptografia da Amazon é usada para roubar arquivos em novo ataque hacker

Critical Flaws in WGS-804HPT Switches Enable RCE and Network Exploitation

Cyber pros skeptical of Biden’s last-minute cybersecurity executive order

Cybercriminals capitalize on LA wildfire chaos via fake GoFundMe's and crypto coins

Data breach by Texas Health and Human Services employees affected 61,000 people

Data breach exposes 61,000 Texans after state employees improperly access info

Data breach hits company managing retirement for some Oregon school staff

Delaware’s Multistate Tax, Inc. Files Official Notice of Data Breach

DORA Takes Effect: Financial Firms Still Navigating Compliance Headwinds

Eindhoven University of Technology yet to recover from last week's cyber attack

EU Action Plan to Tackle Ransomware in Hospitals Lacks New Funding

EU takes decisive action on healthcare cybersecurity

European Privacy Group Sues TikTok and AliExpress for Illicit Data Transfers to China

FCC orders telecoms to secure their networks after Salt Tyhpoon hacks

General Motors (GM) banned from sharing driving and location data with insurance companies

Gezonderwinkelen.nl Faces Data Security Concerns After Reported Breach

Google Ads phishing scams target ad buyers

Google Releases Open Source Library for Software Composition Analysis

Hackers russos atacam WhatsApp de oficiais de governos ao redor do mundo

Hewlett Packard Enterprise (HPE) Data Reportedly Offered for Sale on Illicit Platforms

Homeowners are clueless about how smart devices collect their data

How Russian hackers went after NGOs’ WhatsApp accounts

How to Bring Zero Trust to Wi-Fi Security with a Cloud-based Captive Portal?

Juneau student, school staff information may have been compromised in national data breach

KLSERVICE Shop Data Breach Reported in the USA

Lazarus Group Targets Developers in New Data Theft Campaign

Learning from 2024: An Unprecedented Exploitation of Remote Access Technologies

LinkedIn Job Scams Are the Latest Cyber Threat – Don’t Fall for Fake Recruiters

Malicious PyPi package steals Discord auth tokens from devs

Malware stole internal PowerSchool passwords from engineer’s hacked computer

Mortgage Investors Group says cyber attack compromised customers' personal information

MSSqlPwner: Open-source tool for pentesting MSSQL servers

Multiple Oregon school districts hit by Carruth data breach

New 'Sneaky 2FA' Phishing Kit Targets Microsoft 365 Accounts with 2FA Code Bypass

Northwest Territories (NWT) school boards hit by massive data breach, territory confirms

Noyb Files GDPR Complaints Against TikTok and Five Chinese Tech Giants

Otelier data breach exposes info, hotel reservations of millions

Pachuca Hidalgo IT Department Faces Potential Data Breach

Pedro Paulet Educational Institution Faces Data Breach Concerns

Personal data stolen as council struck by cyber attack

‘Phantom Hacker’ Drains $20,000 From Bank of America Account – Now the Bank Refuses To Reimburse: Report

'PowerSchool' hit by cyber attack

Python-Based Bots Exploiting PHP Servers Fuel Gambling Platform Proliferation

Ransomware Gangs Claimed More Than 5,000 Attacks in 2024

Researchers Warn of NTLMv1 Bypass in Active Directory Policy

Russian couple on trial for large-scale ransomware attacks

Sanctions Imposed Amid Chinese Cyber Espionage Allegations

Scary Google Ads Phishing Scam

Scholastic investigates reports of cyber attack

Sensitive Data Exposure Reported at NetSe.in

‘Sneaky Log’ phishing kits slip by Microsoft 365 accounts

South Carolina Department of Education (SCDE) responds to PowerSchool data breach impacting South Carolina schools

Star Blizzard Targets WhatsApp in New Campaign

Summit County student, staff information may have been compromised in data breach

Suspected AI-Powered Python Backdoor Tapped for RansomHub Deployment

The Great Cannabis Hack—380,000 Pot Users Impacted By Attack

The QR code you got via WhatsApp hides a dark Russian secret

Treasury sanctions Salt Typhoon hacking group behind breaches of major US telecom firms

Trojanized images leveraged in separate malware campaigns

Twitter User Data Breach Raises Privacy Concerns

Two East Tennessee school districts affected by international data breach

UAE thwarts nearly 200,000 daily ransomware attacks, identifies hackers

UK Home Office to ban government and critical infrastructure entities from making ransomware payments

UN Aviation Agency International Civil Aviation Organization (ICAO) Suffers Data Breach Impacting Nearly 12,000 People

US Announces Sanctions Against North Korean Fake IT Worker Network

U.S. cannabis supplier Stiiizy says data breach impacted over 380,000 customers

US sanctions Chinese firm, hacker behind telecom and Treasury hacks

U.S. Sanctions North Korean IT Worker Network Supporting WMD Programs

US to Ban Chinese and Russian Connected Car Technologies Over Security Risks

Vulnerabilities in SimpleHelp Remote Access Software May Lead to System Compromise

WazirX Freezes $3M in USDT in Cyber Attack Aftermath

Wolf Haldenstein Data Breach Impacts 3.4 Million People

16/01

2024 US Healthcare Data Breaches: 585 Incidents, 180 Million Compromised User Records

Accelerated BlackBasta-like email attack examined

American cycling clothing brand hit by ransomware attack

Biden Tightens Software Supply Chain Security Requirements Ahead of Trump Takeover

Black Basta Rapid-Fire Attack Blasted 1,165 Emails at 22 Target Mailboxes in 90 Minutes

California Wildfire Exploited By Hackers To Launch Phishing Attacks

Change Healthcare Ransomware Attack: Data Review “Substantially Complete”

City of West Haven takes IT systems offline following a major cyber attack

Clop Ransomware exploits Cleo File Transfer flaw: dozens of claims, disputed breaches

Configuration files for 15,000 Fortinet firewalls leaked. Are yours among them?

Critical SimpleHelp vulnerabilities fixed, update your server instances!

Critical vulnerabilities remain unresolved due to prioritization gaps

Crypto Phishing on Telegram Surged 2,000% Since November 2024: Scam Sniffer

Cyber attack on Conad: Lynx group claims theft of confidential data and demands ransom in crypto

Cybercriminals Impersonate Google Ads in Promoted Results to Exploit Advertiser Accounts

Digital Operational Resilience Act (DORA) Compliance Costs Soar Past €1m for Many UK and EU Businesses

Enzo Biochem Agrees to Settlement in Class Action Suit Related to Ransomware Attack

EU Steps Up Cyber Defense with Action Plan to Protect Critical Healthcare Infrastructure

EU To Launch New Support Centre by 2026 to Boost Healthcare Cybersecurity

Eyewear Wholesaler Data Breach Sparks Privacy Concerns

Florida State Database Breach Sparks Public Data Security Concerns

French woman falls for faux Brad Pitt, loses $850K, gets cyberbullied

FTC scolds GoDaddy for neglecting basic cybersecurity

FunkSec Ransomware Dominating Ransomware Attacks, Compromised 85 Victims in December

GoDaddy Accused of Serious Security Failings by FTC

Google OAuth flaw exposes millions to data breach risk

Google ‘Perpetual Hack’ Attack Steals Passwords And 2FA—Act Now

Google Search ads are being hacked to steal account info

Gravy Analytics Data Breach Sparks Privacy Concerns in the United States

Hackers Abusing Teams Chat For Remote Session & To Drop Black Basta Malware

Hackers Hide Malware in Images to Deploy VIP Keylogger and 0bj3ctivity Stealer

Hackers Use Image-Based Malware and GenAI to Evade Email Security

Hackney Council buys new IT system to handle cyber incident-related housing backlogs

How CISOs can elevate cybersecurity in boardroom discussions

Huge “zombie” MikroTik router botnet spreads malware and obscures Russian hackers

Illicit crypto volumes grow

Jia Bo Sports Betting Platform Faces Potential Data Breach in China

July ransomware attack on OneBlood resulted in data heist

Liberty Public Schools notifies families of data breach to student information system

Major leak exposes 1.5 billion Weibo, DiDi, Shanghai Communist Party, and others’ records

Massive Data Breach Exposes Over 1 Million U.S. Personal Records

MetLife Data Breach Raises Privacy Concerns in the United States

Microsoft sues cybercriminals for breaching Azure OpenAI platform

New Hacking Group Leaks Configuration of 15,000 Fortinet Firewalls

New UEFI Secure Boot bypass vulnerability discovered (CVE-2024-7344)

New UEFI Secure Boot flaw exposes systems to bootkits, patch now

New UEFI Secure Boot Vulnerability Could Allow Attackers to Load Malicious Bootkits

New Zealand law firm Bell & Graham confirms ransomware attack

Nominet confirms network breach via Ivanti VPN Zero-Day vulnerability

Northborough-Southborough Public Schools (NSBORO) posts details on the PowerSchool data breach

One in ten AI prompts puts sensitive data at risk

15/01

3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security Update

5 Emerging AI Threats Australian Cyber Pros Must Watch in 2025

$675K Morrison Community Hospital data breach class action settlement

A Warning For Millions Of iPhone Users: Beware Of This Text Phishing Scam

AI email guardian hamstrung by powerful QR code and CAPTCHA combo cyberattack

Alliance Public Schools Reports Data Breach

BayMark Health Services says cyber attack compromised staff and patients' data

Bridgewater-Raritan school software provider targeted in global cyberattack

Catholic school board impacted by data breach

Change This Setting to Avoid This Google Calendar Spoofing Attack

Chinese PlugX Malware Deleted in Global Law Enforcement Operation

CISA Launches AI Cybersecurity Playbook to Strengthen Collective Defense

CISA Launches Playbook to Boost AI Cybersecurity Collaboration

Codefinger ransomware gang uses compromised AWS keys to encrypt S3 bucket

Contextal Platform: Open-source threat detection and intelligence

Critical SimpleHelp Flaws Allow File Theft, Privilege Escalation, and RCE Attacks

CVE-2024-44243 macOS flaw allows persistent malware installation

Cyberattack disclosed by Mortgage Investors Group after Black Basta claims

Cybersecurity Incident Targets San Nicolás, Nuevo León

Cybersecurity is stepping into a new era of complexity

Dare County Schools provides update on recent online data breach

E-Benefit Solution Notifies Consumers of Recent Data Breach

Enhancing Health Care Cybersecurity: Bridging HIPAA Gaps with Innovation

Excelsior Orthopaedics says data breach compromised the data of 357,000 patients

FBI Confirms It Deleted Files From 4,258 U.S.-Based Computers

FBI Deletes PlugX Malware from 4,250 Hacked Computers in Multi-Month Operation

FBI removed PlugX malware from U.S. computers

FBI Removes PlugX Malware from 4,200 U.S. Computers in PRC-Linked Cyber Operation

Fortinet Confirms Critical Zero-Day Vulnerability in Firewalls

Fortinet Vulnerability Exploited: Patch Now to Prevent Super-Admin Breaches

Gateshead Council suffers cyber attack and personal data stolen

Global Data Breach Exposes 1.27TB of Sensitive Information

Google Ads Users Targeted in Malvertising Scam Stealing Credentials and 2FA Codes

Google Cloud Researchers Uncover Flaws in Rsync File Synchronization Tool

Granite School District reassures residents after data breach letter sparks scam fears

Hackers are stealing Google Ads accounts to publish fake ads in a perpetual cycle

Hackers boast of health workers visa data breach, sparking police probe

Hackers Use CVE-2024-50603 to Deploy Backdoor on Aviatrix Controllers

How Role-Based Identity Management Can Protect Against AD- And Entra ID-Related Risk

How scammers are tricking Apple iMessage users into disabling phishing protection

I tested a VPN-ready router to secure my Wi-Fi connections - and I'm nearly sold on the idea

Illicit Crypto-Inflows Set to Top $51bn in a Year

KnowBe4 research confirms effective security awareness training significantly reduces data breaches

Lazarus Group Targets Web3 Developers with Fake LinkedIn Profiles in Operation 99

Massive Data Breach Exposes Personal Information of 125,000 Egyptians

Microsoft Discovers macOS Flaw CVE-2024-44243, Bypassing SIP

Microsoft ends support for Office apps on Windows 10 in October

Microsoft Patches Eight Zero-Days to Start the Year

Multi-Cloud Adoption Surges Amid Rising Security Concerns

Nationwide Data Breach Affecting Multiple Long Island School Districts

North Korean IT Worker Fraud Linked to 2016 Crowdfunding Scam and Fake Domains

Over 660,000 Rsync servers exposed to code execution attacks

Rsync vulnerabilities allow remote code execution on servers, patch quickly!

Secureworks Exposes North Korean Links to Fraudulent Crowdfunding

Stop wasting money on ineffective threat intelligence: 5 mistakes to avoid

The CFO may be the CISO's most important business ally

The High-Stakes Disconnect For ICS/OT Security

The Top 8 Countries Leading the Cyber Defense Race in 2025

University of Rwanda Faces Major Data Breach Concerns

U.S. CISA adds Fortinet FortiOS to its Known Exploited Vulnerabilities catalog

Using cognitive diversity for stronger, smarter cyber defense

Website Breach Reported for Ahmad Al Mutawa Platform in UAE

Welcome Hall Mission Data Breach Sparks Privacy Concerns

Windows BitLocker bug triggers warnings on devices with TPMs

Wultra Secures €3M to Protect Financial Institutions from Quantum Threats

14/01

4 Reasons Your SaaS Attack Surface Can No Longer be Ignored

A new campaign is likely targeting a zero-day in Fortinet FortiGate firewalls

AI, Web3 and Decentralization: Tech Trends Shaping 2025’s Altcoin Season

Allstate car insurer sued for tracking drivers without permission

Apple vulnerability discovered: your camera and data could be at risk

Beware cybersecurity tech that’s past its prime — 5 areas to check or retire

Blockchain in cybersecurity: opportunities and challenges

Boost up Your SOC & DFIR Operations with ANY.RUN's Threat Intelligence Feeds

Breach of Lebanese Intelligence Database Sparks Security Concerns

Browser-Based Cyber-Threats Surge as Email Malware Declines

CISA Adds Second BeyondTrust Flaw to KEV Catalog Amid Active Attacks

Connecticut city of West Haven assessing impact of cyberattack

Critical Infrastructure Urged to Scrutinize Product Security During Procurement

Critical PowerDNS Vulnerabilities Let Attackers Gain Access to the Server Remotely

Critical SAP NetWeaver Vulnerabilities Let Attacker Gain Access to the system

Department of Justice (DOJ) confirms FBI operation that mass-deleted Chinese malware from thousands of US computers

Extensive Personal Data Leak Reported in France

FBI wipes Chinese PlugX malware from over 4,000 US computers

Fortinet fixes FortiOS zero-day exploited by attackers for months (CVE-2024-55591)

Fortinet FortiGate Firewalls Under Attack By Exploit a Zero-Day Vulnerability

Fortinet Released Security Updates to Fix 15 Vulnerabilities That Affect Multiple Products

Fortinet warns of auth bypass zero-day exploited to hijack firewalls

Gen AI strategies put CISOs in a stressful bind

Google OAuth flaw lets attackers gain access to abandoned accounts

Google OAuth “Sign in with Google” Vulnerability Exposes Millions of Accounts to Data Theft

Google OAuth Vulnerability Exposes Millions via Failed Startup Domains

Hackers use FastHTTP in new high-speed Microsoft 365 password attacks

Hackers Using Fake YouTube Links to Steal Login Credentials

How AI and ML are transforming digital banking security

Illicit HuiOne Telegram Market Surpasses Hydra, Hits $24 Billion in Crypto Transactions

January Windows updates may fail if Citrix SRA is installed

Malicious actors’ GenAI use has yet to match the hype

Malicious Kong Ingress Controller Image Found on DockerHub

Manchester Law Firm Leads 15,000 to Sue Google and Microsoft over AI Data

Massive Data Leak Targets U.S. Mobile Homeowners

Microsoft 365 apps crash on Windows Server after Office update

Microsoft drops legal hammer on AI jailbreaks

Microsoft fixes actively exploited Windows Hyper-V zero-day flaws

Microsoft January 2025 Patch Tuesday: 8 Zero-Days, 3 Actively Exploited

Microsoft January 2025 Patch Tuesday fixes 8 zero-days, 159 flaws

Microsoft January 2025 Patch Tuesday – 159 Vulnerabilities Fixed, Including 10 Critical RCE's

Microsoft Releases Windows 11 KB5050009 & KB5050021 cumulative Updates

Microsoft Uncovers macOS Vulnerability CVE-2024-44243 Allowing Rootkit Installation

New AI Rule Aims to Prevent Misuse of US Technology

New Codefinger Ransomware Exploits AWS to Encrypt S3 Buckets

New Ransomware Encrypts Amazon S3 Buckets Using SSE-C Encryption

OneBlood Confirms Ransomware Attack – Donor’s Personal Information Stolen

OWASP Publishes First-Ever Top 10 “Non-Human Identities (NHI) Security Risks

Remediation Times Drop Sharply as Cyber Hygiene Take Up Surges

Russia-linked APT UAC-0063 target Kazakhstan in with HATVIBE malware

Russian-Linked Hackers Target Kazakhstan in Espionage Campaign with HATVIBE Malware

Russia's largest platform for state procurement hit by cyberattack from pro-Ukraine group

Sensitive Data Reportedly Exposed in Baghdad’s Al-Karkh Region

Smishing Attack Targets iMessage Users by Exploiting Built-In Phishing Protections

Software security awareness training is at an all-time low

TechnoBoom User Database Leak Raises Privacy Concerns

Tennessee-based mortgage lender confirms December cyberattack

This is the year CISOs unlock AI’s full potential

Threat actors exploit Aviatrix Controller flaw to deploy backdoors and cryptocurrency miners

TikTok's last dance: the ‘spy’ you can’t quit

UK Considers Ban on Ransomware Payments by Public Bodies

UK Domain Registry Nominet Confirms Cyber Attack Exploiting Ivanti RCE Zero-Day

UK Registry Nominet Breached Via Ivanti Zero-Day

US govt says North Korea stole over $659 million in crypto last year

Zero-Day Vulnerability in PDF Files Leaking NTLM Data in Adobe & Foxit Reader

Zero-Day Vulnerability Suspected in Attacks on Fortinet Firewalls with Exposed Interfaces

What 2024 taught us about security vulnerabilties

Windows 10 KB5049981 update released with new BYOVD blocklist

Windows 11 KB5050009 & KB5050021 cumulative updates released

WP3.XYZ malware attacks add rogue admins to 5,000+ WordPress sites

13/01

4.2m impacted by Scholastic data beach

7 Million OpenSea Emails Exposed: Crypto Community on High Alert for Phishing Threats

33,542 Ivanti Connect Secure Instances Exposed as Exploitation of CVE-2025-0282 Unfolds

100 Million macOS Users At Risk – New Banshee Malware Attacks Bypassing Apple’s XProtect

A breach of Gravy Analytics’ huge trove of location data threatens the privacy of millions

AI revolutionizes phishing attacks, enables use of deepfake

Ako Ransomware Abusing Windows API Calls To Detect Infected System Locations

Alleged Blender, Sinbad cryptomixer operators arrested, indicted

Alleged Top Ransomware FunkSec Operators Appear to Develop Malware Using AI Help

Attackers are encrypting AWS S3 data without using ransomware

Aviatrix Controller RCE Vulnerability Exploited In The Wild

Chainsaw: Open-source tool for hunting through Windows forensic artefacts

CISOs embrace rise in prominence — with broader business authority

Clicks on phishing links in the workplace almost tripled in 2024

Credit Card Skimmer campaign targets WordPress via database injection

Cyber Attack Hits Renowned University, Classes Suspended

Cyberattack forces Dutch university to cancel lectures

Cybersecurity researchers discover malware targeting macOS users

Critical macOS Sandbox Vulnerability (CVE-2024-54498) PoC Exploit Released Online

Crypto industry alarmed as 7 million OpenSea email users’ leak resurfaces

Data breach compromises STIIIZY customers’ data

Data Breach For Both Golden Hills And Christ The Redeemer School Divisions

Dutch chipmaking giant ASML's key feeder university, located just 5 miles away, suspends lessons after cyber attack

Eindhoven University hit by cyber attack, perpetrators unknown

Eindhoven University of Technology suspends classes following cyberattack

Emergency shutdown as top tech university grapples with cyberattack

EU law enforcement training agency data breach: Data of 97,000 individuals compromised

Everest ransomware gang lists Aussie company Evidn as a victim

Expired Domains Allowed Control Over 4,000 Backdoors on Compromised Systems

Four Years of CISA: A Policy Review of U.S. Cybersecurity and Infrastructure Security

Furry Hacker Breaches Scholastic – Exposes Data of 8 Million People

Game developer deletes all social media accounts, suggests others should follow

GitHub CISO on security strategy and collaborating with the open-source community

GPU Driver Vulnerabilities in Imagination Let Attackers Gain Kernel Access Remotely

Hacker Broke into ‘Path of Exile 2’ Admin Account, Hijacked Wave of Characters

Hackers behind the TU Eindhoven cyber attack still unknown, no classes on Tuesday

Hackers Breach Telefonica Network, Leak 2.3 GB of Data Online

Hackers Exploit Aviatrix Controller Vulnerability to Deploy Backdoors and Crypto Miners

Hackers Exploiting YouTube to Deliver Malware Bypassing Antivirus Detections

iMessage text gets recipient to disable phishing protection so they can be phished

Indian EdTech platform Wissenhive targeted by ransomware group

International Civil Aviation Organization (ICAO) says nearly 12,000 impacted by recruitment data breach

Ivanti Rolls Out Patches to Mitigate Exploits in Connect Secure, Policy Secure, and ZTA Gateways

Location tracking company Unacast tells Norway its data was hacked, broadcaster says

Major cyberattack hits Slovakian land registry

Maryland Secures $564K in Settlement Over Data Breach Impacting Thousands

Massive Data Breach at Gravy Analytics Exposes Location Data of Millions, Raising Privacy Concerns

Massive Data Breach Exposes Personal Information of 328,000 Australians

Medusind Data Breach Exposes Over 360,000 Individuals’ Healthcare Info

Meet FunkSec: A New, Surprising Ransomware Group, Powered by AI

Microsoft MFA outage blocking access to Microsoft 365 apps

Microsoft Multi-Factor Authentication Down Blocking Office 365 Users Access

Microsoft took legal action against crooks who developed a tool to abuse its AI-based services

Netherlands’ Eindhoven University Hit by Cyberattack, Network Shut Down

New Amazon Ransomware Attack—‘Recovery Impossible’ Without Payment

New Ransomware Group Uses AI to Develop Nefarious Tools

New York Pursues £1.6 Million in Cryptocurrency Stolen in Job Fraud

OpenSea email breach puts crypto users at $1B phishing risk

Oppo, Realme phone brands in hot seat for data breach

PayPal Phishing Attack; Cybercriminals Exploit Platform Features in Sophisticated Scam

Peterborough Police warn residents about phishing scam targeting online users

Phishing campaign targeting Apple iMessage

Phishing click rates tripled in 2024 despite user training

PowerSchool Data Breach May Affect Southwestern Pa. Schools

Pro-Palestine Hacktivist Group ‘Mr. Hamza’ Claims MI6 DDoS Attack to Show Power

Quishing – The Rising Threat of QR Code Phishing in Cybersecurity

Ransomware abuses Amazon AWS feature to encrypt S3 buckets

Ransomware on ESXi: The mechanization of virtualized attacks

Researchers Detailed ZAP Scanner’s Capabilities in Identifying Security Flaws

Scholastic suffers data breach exposing 8 million people, report says

SuperDraft data breach exposes more than 300,000 customer records

Telefonica Breach Hits 20,000 Employees and Exposes Jira Details

Telefónica confirms breach of internal ticketing system following data leak

Three Cryptomixer Masterminds Charged Processing Ransomware Payments

Three Russians Charged with Crypto Mixer Money Laundering

Time for a change: Elevating developers’ security skills

Ukrainians in Portugal complain about data breach

US cannabis company hacked, customers’ passports exposed

WEF Warns of Growing Cyber Inequity Amid Escalating Complexities in Cyberspace

WordPress Skimmers Evade Detection by Injecting Themselves into Database Tables

12/01

ASML-Backed Dutch University Suspends Classes After Cyber Attack

AudioPrints.com Database Reportedly Compromised

Eindhoven University of Technology (TU Eindhoven) takes network offline after cyber attack

IBM watsonx.ai Vulnerability Let Attackers Embed Arbitrary JavaScript Code in Web UI

Italy Attacked by Pro Palestine Hackers Movement

Kaspersky Reveals AI Dangers In Perfecting Phishing Fraud

Local schools affected by PowerSchool data breach

Magic Unveiled: Happy Magic Trick Shop Database Reportedly Leaked

Massive Vehicle Dealer Customer Data Leak Reported in China

New Gmail Cyber Attack Confirmed— Encryption Key Hackers Strike

New hacker attacks on Italy: banks, ports and companies targeted

PayPal Phishing Attacks: New Cybersecurity Threat Explained

PowerSchool data breach exposes millions of student and teacher records

TU Eindhoven network taken offline after cyber attack, no classes on Monday

Daily News - Janeiro (05/01 - 11/01) - 02 Semana de 2025