Daily News - Setembro (14/09 - 20/09) - 38 Semana de 2025Felipe Prado14 de set.13 min de leituraAtualizado: 21 de set.20/09A cyber attack causes delays and cancellations in several European airports | EconomyBMW Group seems to be victim of the Everest ransomware groupCanada dismantles TradeOgre exchange, seizes $40 million in cryptoCyberattack causes disruption at Brussels AirportCyber Attack Grounds Flights at London, Brussels, and Berlin AirportsCyberattack Disrupts Airport Check-In Systems Across EuropeCyberattack disrupts operations at major European airports, including HeathrowEuropean Airports Hit by Cyber attack: How Travel and Tourism Are AffectedFBI warns bad actors are spoofing the IC3 cybercrime reporting website'Government must act' as Jaguar Land Rover workers devastated by cyber attackHeathrow among slew of European airports hit with cyber attack as flights delayed and cancelledHeathrow, Brussels, and Berlin Airports Experience Flight Disruptions After Cyber Attack, Flight Delays and Cancellations Across Europe, What You Need to KnowLastPass Warns of Fake Repositories Infecting macOS with Atomic InfostealerMajor European airports sound the alarm over potential cyber-attackNew York Blood Center confirms it notified 194k people of data breachOperations At London, Other Major European Airports Hit After Cyber AttackRansomware payments drop 73% in education sector: Sophos reportResearchers Uncover GPT-4-Powered MalTerminal Malware Creating Ransomware, Reverse ShellShadowLeak Zero-Click Flaw Leaks Gmail Data via OpenAI ChatGPT Deep Research AgentTransport secretary update as UK flights 'delayed and cancelled' after cyber attackUS healthcare center notifies 456K people of data breach19/0917,500 Phishing Domains Target 316 Brands Across 74 Countries in Global PhaaS SurgeAfter major hacks, S. Korea vows government-wide efforts to minimize data breach damageAI-Driven Phishing Attacks: Deceptive Tactics to Bypass Security SystemsAmateur porn website users’ data leaked online, hackers claimAmerican Income Life (AIL) Suffers Health Insurance Data BreachAttackers Abuse AI Tools to Generate Fake CAPTCHAs in Phishing AttacksBeyond the Score: Rethinking Vulnerability Management in a Contextual EraCalifornia medical billing company Altos notifies patients of data breach exposing personal and health informationCanada confiscates $41M in crypto, based on "belief"Chinese Network Selling Thousands of Fake US and Canadian IDsCISA 2015 Closes in on Expiration, Security Leaders Share ConcernsCISA exposes malware kits deployed in Ivanti EPMM attacksCISA Warns of Two Malware Strains Exploiting Ivanti EPMM CVE-2025-4427 and CVE-2025-4428Coinbase Hacker Exposed Customer IDs and Bank Accounts in $400M BreachColumbia University Health Care to Pay $600,000 to Settle Data Breach LawsuitCritical GoAnywhere MFT Platform Vulnerability Exposes Enterprises to Remote ExploitationCyber Attack Grounds Pulkovo Airport's WebsiteCyber attacks cost German economy 300 billion euros in past year, survey findsCybercriminal Group Everest Claims Massive Data Breach at ClarinsDark Web Profile: Dire Wolf RansomwareDevelopment of VMware ESXi-targeted shinysp1d3r RaaS underwayFBI warns bad actors are spoofing the IC3 cybercrime reporting websiteFBI warns of cybercriminals using fake FBI crime reporting portalsFederal Appeals Court Orders Resentencing of BreachForums Founder Connor FitzpatrickFortra Releases Critical Patch for CVSS 10.0 GoAnywhere MFT VulnerabilityFortra warns of max severity flaw in GoAnywhere MFT's License ServletGroup raises alarm over massive data breach in NigeriaHacker gang claims breach of Baltimore Medical System, leaks patient dataHackers claim attack on the US's biggest sushi supplier – again?Hackers claim breach of Italian post, researchers disagreeHackers say they’ve jacked SK Telecom’s source codeHow Nigerian man hacked US varsity, stole $235,000 – OfficialsHow To Automate Alert Triage With AI Agents and Confluence SOPs Using TinesHubSpot's Jinjava Engine Vulnerability Exposes Thousands of Websites to RCE AttacksHybridPetya ransomware bypasses Windows Secure BootInsurer Says Tech Services Firms Should Pay for Insured’s Ransomware DamagesJaguar Land Rover supply chain staff told to claim universal credit after cyber attack halts production, Union saysKT's data breach woes get worseLLMs can boost cybersecurity decisions, but not for everyoneLotte Card faces harsher sanctions as authorities probe possible further hacker intrusionsLouis Vuitton data breach could lead to potential class action lawsuitsMicrosoft Patches A Critical Entra ID Vulnerability Discovered by Dutch HackerMinistry of Health of San Juan Data Breach Exposes 992k RecordsMorrisroe suffers cyber-attackMyHomemadePorn User Database Leaked in Data BreachNew CountLoader Malware Uses Weaponized PDF to Deliver RansomwareNew Phishing Attack Targets Facebook Users to Steal Login CredentialsNP3 Benefícios Data Breach Exposes Customer and Driver DataPensacola Hospitalist Data Breach Affects Patient InfoPhishing scam targets UK sponsor license holdersQilin Led Ransomware Attack Claimed to Compromised 104 Organizations in AugustRansomware attack closed South Lyon Schools for 3 days, officials confirmResearchers believe Gamaredon and Turla threat groups are collaboratingRussian Hackers Gamaredon and Turla Collaborate to Deploy Kazuar Backdoor in UkraineRussian spy groups Turla, Gamaredon join forces to hack Ukraine, researchers sayRussian State Hackers Collaborate in Attacks Against UkraineShifting supply chains and rules test CPS security strategiesSky Airline Data Breach Exposes 10GB of Company DataSolarWinds issues advisory on Salesforce integration breach involving Salesloft DriftSystemBC Powers REM Proxy With 1,500 Daily VPS Victims Across 80 C2 ServersThe real-world effects of EU’s DORA regulation on global businessesThe unseen side of malware and how to find itU.K. Arrests Two Teen Scattered Spider Hackers Linked to August 2024 TfL Cyber AttackUNC1549 Hacks 34 Devices in 11 Telecom Firms via LinkedIn Job Lures and MINIBIKE MalwareVastaamo psychotherapy hack: US citizen charged in latest twist of notorious data breachZero-Click Vulnerability in ChatGPT's Agent Enables Silent Gmail Data TheftWatchGuard Issues Fix for 9.3-Rated Firebox Firewall Vulnerability18/091 in 3 Android Apps Leak Sensitive Data1Password and Perplexity partner on Comet AI browser - a full time personal assistant with security by defaultAI is altering entry-level cyber hiring — and the nature of the skills gapAI made crypto scams far more dangerousBehind the scenes of cURL with its founder: Releases, updates, and securityBMW claimed by Everest gang: Have luxury brands become the latest ransomware trend?BMW Data Breach: Everest Ransomware Targets Audit DocumentsCentral Valley Regional Center probes mishandling of confidential patient recordsCountLoader Broadens Russian Ransomware Operations With Multi-Version Malware LoaderCVE-2025-10585 is the sixth actively exploited Chrome zero-day patched by Google in 2025Cyberattack at Hampton Regional Medical Center exposed patient dataGenerali Group Hit by Crypto24 Ransomware AttackGlobal hiring risks: What you need to know about identity fraud and screening trendsGoogle fixes actively exploited Chrome zero-day vulnerability (CVE-2025-10585)Google Patches Chrome Zero-Day CVE-2025-10585 as Active V8 Exploit Threatens MillionsGoogle patches sixth Chrome zero-day exploited in attacks this yearHackers can flip bits in RAM to escalate privileges and take over systemsHackers claim breach of Italian post, researchers disagreeHackers now going straight to the source – company data backupsHow CISOs Can Drive Effective AI GovernanceiOS malicious deepfakes put Apple users and banks at riskJaguar Land Rover will extend its production halt into a third week following a cyberattackLinkedIn now uses your data for AI by default, opt out now!Maida.health Data Breach Exposes Brazilian Military Police DataNCA Singles Out “The Com” as it Chairs Five Eyes GroupNew York Blood Center Alerts 194,000 People to Data BreachPair of Suspected Scattered Spider Hackers Charged by UK, US AuthoritiesPastor and his wife found guilty in $3M crypto scamPyPI invalidates tokens stolen in GhostAction supply chain attackQilin Ransomware Hits 5 South Korean Asset Management FirmsReportage Empire Properties Data Breach Exposes Customer DatabaseSafepay Ransomware Allegedly Breaches Armour Home, Venetian Associates, DrCloudEHR, Slusarski, Alliance Steel, Browne, GOS Heating, and BIOS OrthopedicsShadow AI is breaking corporate security from withinSK Telecom Data Breach: Source Code and AWS Keys LeakedSonicWall Discloses Compromise of Cloud Backup ServiceSonicWall says attackers compromised some firewall configuration backup filesSonicWall Urges Password Resets After Cloud Backup Breach Affecting Under 5% of CustomersSonicWall warns customers to reset credentials after MySonicWall backups were exposedSt. John Ambulance Canada Allegedly Breached; 17,000 User Records Leaked OnlineSTMicroelectronics Data Breach Exposes Internal Corporate FilesSilentSync RAT Delivered via Two Malicious PyPI Packages Targeting Python DevelopersSystemBC malware turns infected VPS systems into proxy highwayTarget-rich environment: Why Microsoft 365 has become the biggest riskTiffany & Co. Data Breach Exposes Personal Information of Its CustomersTwo Suspected ‘Scattered Spider’ Members Charged in Transport for London HackUK arrests 'Scattered Spider' teens linked to Transport for London hackVC Firm Insight Partners Notifies Victims After Ransomware BreachWatchGuard warns of critical vulnerability in Firebox firewallsWhere CISOs need to see Splunk go nextWhy Shadow AI Is the Next Big Governance Challenge for CISOs17/095 steps for deploying agentic AI red teaming$2M up for grabs for security researchers as Ethereum prepares for an upgradeA Quarter of UK and US Firms Suffer Data Poisoning AttacksAndroid apps with millions of downloads stealing ad money right under Google’s noseApple backports fix for actively exploited CVE-2025-43300Baltimore hospital network victim of major data breach, hackers claimBlack Hills Regional Eye Institute Alerts Patients to January Data BreachBots vs. humans? Why intent is the game-changerChina bans Nvidia AI chipsChinese TA415 Uses VS Code Remote Tunnels to Spy on U.S. Economic Policy ExpertsCISSP certification: Requirements, training, exam, and costCoinbase Data Breach Hits 69,000 Users After Insider Sells Sensitive InfoCreating a compliance strategy that works across bordersCritical CVEs in Chaos-Mesh Enable In-Cluster Code ExecutionCybersecurity firm Netskope lifts IPO price range, eyes $7.3 billion valuationData breach at Tiffany’s exposes gift card numbersDoes Nothing Phone pass our cybersecurity test? Here’s what we foundDoJ resentenced former BreachForums admin to three years in prisonDOJ Resentences BreachForums Founder to 3 Years for Cybercrime and Possession of CSAMDutch Tech Firm Vurbis Interactive Allegedly Breached – Data of Nearly 89,000 Users for SaleEuropol adds Spanish academic to Most Wanted list for aiding pro-Russian hackersFairmont Federal Credit Union Data Breach in 2023 Hits Nearly 190,000 PeopleFileFix Campaign Using Steganography and Multistage PayloadsFlorida Eye Care Provider Data Breach Affects 153,000 PatientsFrom ClickFix to MetaStealer: Dissecting Evolving Threat Actor TechniquesFrom Quantum Hacks to AI Defenses – Expert Guide to Building Unbreakable Cyber ResilienceFundline Finance Corporation of the Philippines Allegedly Hit by Massive Data Breach, 1 Million Users’ Data for SaleGlobal Equipment Giant CNH Industrial Allegedly Breached by Ransomware AttackHackers steal client data from Kering's Gucci, Balenciaga and McQueen: ReportHow a fake ICS network can reveal real cyberattacksHow a fake ICS network can reveal real cyberattacksHundreds of NPM packages compromised as ongoing supply chain attack snowballs out of controlInfamous BreachForums founder will be heading to jail after allIntroducing The Gentlemen, a new ransomware group who are anything butJaguar Land Rover production down for at least another week due to cyberattackLotte Card data breach impacts over 1 million usersMajor Bangladeshi ISP Link3 Technologies Allegedly Breached, Data of 189,000 Users for SaleMany networking devices are still vulnerable to pixie dust attackMicrosoft and Cloudflare disrupt massive RaccoonO365 phishing serviceMicrosoft and Cloudflare teamed up to dismantle the RaccoonO365 phishing serviceMicrosoft Disrupts RaccoonO365 Phishing Kit, Seizes 338 Malicious SitesMicrosoft disrupts the RaccoonO365 Phishing-as-a-Service operation, names alleged leaderMicrosoft seizes 340 websites linked to growing phishing subscription serviceOfficial Chinese Enterprise Services Website for Foshan Allegedly HackedOld file types, new tricks: Attackers turn everyday files into weaponsOs bastidores do ataque hacker à Sinqia, que desviou R$ 710 milhões, segundo o CEO da fintech ArttaOver 1 Million Records of Poste Italiane Customers Allegedly Leaked in Data BreachRaccoonO365 Phishing Network Dismantled as Microsoft, Cloudflare Take Down 338 DomainsRayhunter: EFF releases open-source tool to detect cellular spyingRentable Nvidia rigs are putting passwords at riskRethinking AI Data Security: A Buyer's GuideRussian hackers bombard Liverpool City Council with cyberattacksRussian Online Retailer Vincci Allegedly Suffers Data Breach – Customer Database LeakedSarcoma Ransomware Group Allegedly Breaches German Companies Pfullendorfer Tor-Systeme, KWG, F1-Generation, and IAD GmbHScattered Spider not dark after all: researchers see signs of life in new attacksScattered Spider Resurfaces With Financial Sector Attacks Despite Retirement ClaimsShai-Hulud Worm Infects Over 500 NPM Packages in Sophisticated Supply Chain AttackShai-Hulud Worm Prowls npm to Steal Hundreds of SecretsSonicWall warns customers to reset credentials after breachSpanish Airline Helity Copter Airlines Allegedly Breached, 2 Million Records For SaleTA558 Uses AI-Generated Scripts to Deploy Venom RAT in Brazil Hotel AttacksTaskUs Employees Behind Coinbase Breach, US Court Filing AllegesVC giant Insight Partners warns thousands after ransomware breachVibe Coding: Managing the Strategic Security Risks of AI-Accelerated DevelopmentWarlock Ransomware Allegedly Breaches Hitachi HTA, Medkar, ELS Surveying, Webville, SSA Group, Ferus Smit, and Chroma ATE16/0915 Ransomware Gangs Declare End of Operations on BreachForum1.1 million Farmers Insurance customers hit by data breach linked to Salesforce hackAI video surveillance could end privacy as we know itAnthropic Report Shows Bad Actors Abusing Claude in AttacksAPI Threats Surge to 40,000 Incidents in 1H 2025Apple Backports Fix for CVE-2025-43300 Exploited in Sophisticated Spyware AttackApple backports zero-day patches to older iPhones and iPadsAssisted Living Pharmacy Service reports cyberattack, ransomware group claims responsibilityBags of info stolen from multiple top luxury brands - double check your data nowBreachForums administrator given three-year prison stint after resentencingChaos Mesh Critical GraphQL Flaws Enable RCE and Full Kubernetes Cluster TakeoverChatGPT, Gemini, Claude, Meta AI easily made phishing emails to scam elders, in a studyChinese AI Villager Pen Testing Tool Hits 11,000 PyPI DownloadsCyber resilience must be engineered into the UK’s infrastructure futureData breach exposes secrets of China's censorship firewallData Leak Allegedly Hits Israeli Financial Firm GoldenBitFBI ‘aware’ of Anchorage health clinic data breach as hackers claim 60K patients impactedFifteen Ransomware Gangs “Retire,” Future UnclearFinance apps are much more interested in you than you thinkFinWise Bank Warns of Insider Data BreachGenerative AI enables rapid phishing attacks on older usersGitHub adds post-quantum protection for SSH accessGoogle Confirms Law Enforcement Portal Breach by “Scattered Lapsus$ Hunters,” Reports No Data Was AccessedGoogle nukes 224 Android malware apps behind massive ad fraud campaignGucci and Alexander McQueen Hit by Customer Data BreachGucci, Balenciaga and Alexander McQueen Breach Linked to ShinyHuntersGucci, Balenciaga, McQueen confirm breach, Shiny Hunters claim 7.4M customers' data stolenHacker é preso em Pernambuco por vazar dados do youtuber Felca e acessar sistemas sigilososHackers Claim Access to State Bank of Vietnam’s Creditor Database; Investigation UnderwayHackers setting traps for vibe coders: AI assistants can deliver malwareInsider breach at FinWise Bank exposes data of 689,000 AFF customersJaguar Land Rover (JLR) Extends Production Halt After Cyber-AttackJaguar Land Rover extends shutdown after cyberattack by another weekKering Confirms Cyber-Attack: Hackers Steal Data from Gucci, Balenciaga, and McQueenKeys Pathology Associates reports vendor breach impacting 13,756 patientsKillSec Ransomware Attacking Healthcare Industry IT SystemsLuxury Leak Horror: Gucci, Balenciaga and McQueen Hacked in Cyber-Attack Exposing Millions of High-End ShoppersMore than 69,000 people in Wisconsin impacted by TransUnion data breachNew FileFix attack uses steganography to drop StealC malwareNew FileFix Variant Delivers StealC Malware Through Multilingual Phishing SiteNPM users hit again: Advanced supply chain attack infiltrates over 40 packagesOngoing FileFix Attack Installs StealC Infostealer Via Fake Facebook PagesOT security needs continuous operations, not one-time fixesPersonal data of 1.5 mln people leaked in Swedish data breachPhoenix RowHammer Attack Bypasses Advanced DDR5 Memory Protections in 109 SecondsPoland boosts cybersecurity to €1B after Russian hacks on hospitals and water systemsPS&KP Motor Allegedly Breached, Sensitive Customer Data Leaked OnlineRansomware attackers used incorrectly stored recovery codes to disable EDR agentsRussian gang claims breach of US broadcaster, executive exposedScattered Lapsus claims SK Telecom data breach; company deniesSecurity Leaders Discuss Restaurant Brands International’s VulnerabilitiesSelf-propagating supply chain attack hits 187 npm packagesSelf-Replicating Worm Hits 180+ npm Packages to Steal Credentials in Latest Supply Chain AttackSlopAds Fraud Ring Exploits 224 Android Apps to Drive 2.3 Billion Daily Ad BidsSwedish data breach exposes 1.5 million people’s personal informationTaiwan phishing crimes spread to South Korea, mirroring KT caseUK: Tax Refund-Themed Phishing Slows in 2025Ukrainian Fugitive Added to EU Most Wanted List for LockerGoga RansomwareU.S. Senator Calls for Investigation of MicrosoftUvalde Consolidated Independent School District (CISD) faces scrutiny over ransomware attack and transparency issuesVibe coders lose crypto after installing extensions on popular marketplacesVietnam investigates cyberattack on creditors dataVoidProxy Phishing Service Targets Microsoft, Google AccountsYurei ransomware exploits open-source tools, raising double-extortion risks15/095 trends reshaping IT security strategies today6 Browser-Based Attacks Security Teams Need to Prepare For Right NowAI-Forged Military IDs Used in North Korean Phishing AttackAI-Powered Villager Pen Testing Tool Hits 11,000 PyPI Downloads Amid Abuse ConcernsApple iOS 26 update, new Apple Intelligence features, rolls out todayArkime: Open-source network analysis and packet capture systemCayetano Heredia National Hospital of Peru Allegedly Breached, 2 Million Records LeakedCISA at Risk After OIG Accuses it of Wasting Federal FundsCybercriminals steal 160 million records from Vietnamese financial system, exposing entire populationData breach exposes 600K luxury skincare firm users, hackers claimEverest Ransomware Claims Attacks on Professional Trust Company, Studio Legale Tisot Iuris, Key 4 Energy, and MFO ITALIAFairmont Federal Credit Union 2023 data breach impacted 187K peopleFinWise insider breach impacts 689K American First Finance customersFlaw at major enterprise chatbot maker leads to cookie theftFTC launches probe to see whether AI companies are protecting children from harmful chatsGoogle confirms hackers gained access to law enforcement portalHackers stuffed malware into fake Signal, WhatsApp, and Chrome appsHeyFood Africa Data Breach Allegedly Exposes 139,000 User RecordsHiddenGh0st, Winos and kkRAT Exploit SEO, GitHub Pages in Chinese Malware AttacksHong Kong Telecom Provider Allegedly Breached; Root Access Sold on Dark WebHybridPetya Mimics NotPetya, Adds UEFI CompromiseINC ransom group claimed the breach of Panama’s Ministry of Economy and FinanceINC Ransomware Allegedly Breaches US Firms Heritage Growth Partners, H.I.E.C., and Rosco Vision SystemsIndian Web Host Ready2Host Suffers Data Breach, 23.4k Customer Records Allegedly LeakedLovesac Admits Data Breach Compromising Sensitive Personal DataMassive “Great Firewall of China” data leak reveals surveillance tech Silk RoadMicrosoft: Exchange 2016 and 2019 reach end of support in 30 daysMost enterprise AI use is invisible to security teamsMustang Panda Deploys SnakeDisk USB Worm to Deliver Yokai Backdoor on Thailand IPsNorth Korean hacker group Kimsuky caught using AI to forge military ID cardsNew Phoenix attack bypasses Rowhammer defenses in DDR5 memoryPhilippine Department of Education Division for Masbate Allegedly Breached – Data of Over 115,000 Students and Faculty for SalePhishing campaign targets Rust developersPhishing Campaigns Drop RMM Tools for Remote AccessRussian-American News Outlet Kstati.net Allegedly Breached, User Data LeakedRussian Chemical Exporter Promchimexport Allegedly Breached, Database LeakedSEO Poisoning Targets Chinese Users with Fake Software SitesShibarium and Monero attacked, highlighting network vulnerabilitiesSource Code of American Telecom Firm Airspan Networks Allegedly Leaked OnlineSri Lanka’s Ministry of Finance Allegedly Breached; Full Database and Server Access for SaleStatic feeds leave intelligence teams reacting to irrelevant or late dataStop waiting on NVD — get real-time vulnerability alerts nowThe Science Fiction Forum Suffers Alleged Data Breach, 16.2K Users ExposedThreat notification campaign by Apple should be taken seriously, CERT-FR saysUK ICO finds students behind majority of school data breachesWhat could a secure 6G network look like?Why neglected assets are the hidden threat attackers love to findYour SOC is the parachute — Will it open?14/09CISA wasted federal funding and mismanaged cybersecurity retention program, watchdog findsFBI warns of UNC6040, UNC6395 hackers stealing Salesforce dataHacker breaks into on-campus smart washing machines — management eventually disables devices, leaving thousands of students with no reliable laundry serviceMayor to keep pressing for 'every possible support' to protect JLR jobs after cyber attackNew scam tactics emerge after CIC data breach in VietnamNew VoidProxy phishing service targets Microsoft 365, Google accountsRansomware attack cancels school for several days at Texas districtShibarium Bridge Hacked for Approximately $2.3 MillionState Department Offers $11 Million for Information on Alleged HackerLast Week - Última Semana !!!Daily News - Setembro (07/09 - 13/09) - 37 Semana de 2025
Comentários