Daily News - Setembro / Outubro (28/09 - 04/10) - 40 Semana de 2025

04/10

Almost 1 billion Salesforce records stolen, hacker group claims

Asahi Confirms Ransomware Caused System Disruption, with Shipments of Beer, Other Products Still Suspended

Discord customer service data breach leaks user info and scanned photo IDs

Discord Data Breach – Customers Personal Data and Scanned Photo IDs leaked

Hackers steal identifiable Discord user data in third-party breach

Jakarta police arrest alleged hacker using Bjorka alias

Japan beverage giant Asahi confirms ransomware attack, fears data leakage

KaruHunters Claims Cyber Attack on RIPE NCC

Phishing Campaign Aimed At Coinbase Users Uncovered

Renault and Dacia car owners warned of stolen personal data from cyber attack with UK drivers impacted

Renault customer details stolen in cyberattack

Salesforce Data Breach: Hackers Claim 1 Billion Records Stolen

Scanning Activity on Palo Alto Networks Portals Jump 500% in One Day

03/10

4 ways to use time to level up your security monitoring

“A new era for cybersecurity” as AI finds a multi-million-dollar blockchain bug

Adobe Analytics bug leaked customer data into other client reports

AI heightens phishing success as global cyber defences lag

AI hype hits a wall when the data doesn’t deliver

Allianz Life Confirms Data Breach Impacting 1.5 Million Customers

Apple strengthens storage flexibility with new disk image formats

Asahi Cyber Attack: A Warning for Manufacturing OT Security

Azerbaijan among nations targeted by politically motivated Red Wolf hacker group

Boeing supplier leak claimed by J Group ransomware

Boyd Gaming Data Breach Exposes Social Security Numbers

Brightstar Lottery Data Breach Exposes Social Security Numbers

Chinese-Speaking Cybercrime Group Hijacks IIS Servers for SEO Fraud

CISA Flags Meteobridge CVE-2025-4008 Flaw as Actively Exploited in the Wild

CISO Spotlights Cybersecurity Challenges in Education Following Kido Breach

City of Pittsburg Data Breach Affects 39,989 Individuals

Cl0p-Linked Gang Attempts to Extort Oracle E-Business Customers

CommetJacking attack tricks Comet browser into stealing emails

Critical Splunk Vulnerabilities Expose Platforms to Remote JavaScript Injection and More

Cyber gang claims attack on a Henry Schein subsidiary

Data breach at Motility Software Solutions affects over 766K customers

Detour Dog Caught Running DNS-Powered Malware Factory for Strela Stealer

European Cybersecurity Month 2025 kicks off with focus on phishing threats

Fewer than half of Canadian SMEs feel vulnerable to cyber attacks, data breaches: survey

Glenwood Management Data Breach Affects 8,146 People: SSNs Exposed

Global Exposure of 180,000 ICS/OT Devices Raises Safety Concerns

Google warns of Cl0p extortion campaign against Oracle E-Business users

Hackers claim Red Hat GitHub breach, allegedly steal 570GB of internal data

Hackers roubaram dados de escolas infantis britânicas e depois pediram desculpas aos pais

Hackers Target Unpatched Flaws in Oracle E-Business Suite

Hackers threaten Salesforce: pay up or over 700 companies’ data will be exposed

How Security Teams Can Manage Agentic AI Risks

Huawei Technologies Source Code Exposed in Data Breach

In Japan, Asahi Beer Is Running Out After Ransomware Attack Cripples IT Systems

Israel's 4th largest hospital, Shamir Medical Center, hit by ransomware on Yom Kippur

Japan may run out of its favorite Asahi beer after cyberattack

Kiple Data Breach Exposes Entire Company Source Code

Latest Pilot Jobs Data Breach from 2022 Exposes Approximately 119,000 User Details

Legal Practice Board of WA begins notifying data breach victims

LinkedIn sues software company allegedly scraping data from millions of profiles

Major car brands issue warning as UK drivers have data stolen by hackers in cyber attack

Major carmaker (Renault Group UK) confirms customer data stolen in cyber attack

Major Israeli hospital hit by Qilin ransomware attack

MetalSoft Data Breach Exposes Source Code and Private Tools

New "Cavalry Werewolf" Attack Hits Russian Agencies with FoalShell and StallionRAT

New Point and Click Phishing Kit Bypasses Defenses to Deliver Malicious Payloads

Notice warns of new LockBit 5.0 ransomware variant

Oracle links Clop extortion attacks to July 2025 vulnerabilities

Passkeys rise, but scams still hit hard in 2025

Patient email addresses in hospital data breach (Derriford Hospital)

PHI Potentially Stolen in Phishing Attack on Superior Vision Service

Protegrity Developer Edition: Free containerized Python package to secure AI pipelines

Qantas hides stolen data in a cloak of secrecy with permanent injunction

Ransomware Group Debuts Salesforce Customer Data Leak Site

Red Hat admits Data Breach via Compromised GitLab Instance n 570GB of Internal Data Allegedly Stolen

Renault and Dacia UK warn of data breach impacting customers

Renault UK Notifies Customers of Data Breach via Third-Party Provider

Researchers Warn of Self-Spreading WhatsApp Malware Named SORVEPOTEL

Rhadamanthys Stealer Evolves: Adds Device Fingerprinting, PNG Steganography Payloads

Scattered LAPSUS$ Hunters Claim Salesforce Breach, 1B Records, 39 Firms Listed

Scattered LAPSUS$ Hunters Ransomware Group Claims New Victims on New Website

Shamir Medical Center in Israel Targeted by Qilin Ransomware Gang Demanding $700,000 Ransom

ShinyHunters launches Salesforce data leak site to extort 39 victims

SideWinder Hacker Group Hosting Fake Outlook/Zimbra Portals to Steal Login Credentials

Signal threatens to leave the EU if chat control is implemented

US Air Force shuts down IT system after data breach

WestJet Confirms Major Data Breach Affecting 1.2 Million Customers

WestJet Data Breach Impacts 1.2 Million Customers

When loading a model means loading an attacker

02/10

Akira Ransomware Breaches Barr & Barr and Keystone Solutions

Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown

Android spyware campaigns impersonate Signal and ToTok messengers

Automating Pentest Delivery: 7 Key Workflows for Maximum Impact

Biotech platforms keep missing the mark on security fundamentals

Boeing supplier data leaked online after alleged hack

Building a mature automotive cybersecurity program beyond checklists

Chekov: Open-source static code analysis tool

China sentences 11 crime syndicate leaders to death for Myanmar scam ring

Confucius Hackers Hit Pakistan With New WooperStealer and Anondoor Malware

Confucius Shifts from Document Stealers to Python Backdoors

Cyprus Post Data Breach Exposes Sensitive Government Documents

DataCarry Ransomware Group Breaches Swedish IT Company Miljödata, Steals Confidential Data

Dimensional Control Systems Hit by J Ransomware

DrayTek warns of remote code execution bug in Vigor routers

Emergency Responders Health Center reports data breach affecting more than 1,500 individuals

Expired US Cyber Law Puts Data Sharing and Threat Response at Risk

Extortion Emails Sent to Executives by Self-Proclaimed Clop Gang Member

Forget lengthy and complex passwords, NIST says

Forrester: Agentic AI-Powered Breach Will Happen in 2026

Free VPN Apps Found Riddled With Security Flaws

Google Mandiant Probes New Oracle Extortion Wave Possibly Linked to Cl0p Ransomware

Governo inglês libera R$ 10 bi para ajudar Jaguar Land Rover após ataque hacker

GPT needs to be rewired for security

HackerOne paid $81 million in bug bounties over the past year

Hackers backtrack after UK nursery data breach backlash

Hackers claim to have plundered Red Hat’s GitHub repos

How to Close Threat Detection Gaps: Your SOC's Action Plan

Jaguar Land Rover Secures £1.5 Billion UK-Backed Loan to Rebuild Supply Chain After Cyber Attack

Microsoft Defender bug triggers erroneous BIOS update alerts

Microsoft Outlook stops displaying inline SVG images used in attacks

New “Klopatra” trojan drains bank accounts while victims sleep

Oracle customers sent extortion emails claiming data breach in suspected Cl0p campaign

Oracle customers targeted with emails claiming E-Business Suite breach, data theft

Outcomes One alerts 149,000 Aetna members to email breach following phishing attack

Phishing Dominates EU-Wide Intrusions, says ENISA

ProSpy and ToSpy: New spyware families impersonating secure messaging apps

Red Hat allegedly hit by huge breach exposing major organizations, including the NSA

Red Hat Confirms Data Breach After GitHub Repositories Stolen

Red Hat confirms security incident after hackers claim GitHub breach

Salud Consultorios Data Breach Exposes Argentinian Patient Info

Sanatorio Privado Punilla Suffers SQL Database Breach

The energy sector is ground zero for global cyber activity

The new cyber-analyst certification that will tackle the cyber-talent gap

Tractor Supply fined $1.35M for violating California privacy laws

UK makes new attempt to access Apple cloud data, FT reports

Underwriting is shifting to AI-driven, real-time decisions by 2030

US Government Shutdown to Slash Federal Cybersecurity Staff

Warning: Beware of Android Spyware Disguised as Signal Encryption Plugin and ToTok Pro

Your Service Desk is the New Attack Vector—Here's How to Defend It.

01/10

3 Ways to Bolster Security This Cybersecurity Awareness Month

2025 Cybersecurity Reality Check: Breaches Hidden, Attack Surfaces Growing, and AI Misperceptions Rising

£206 Million Revenue Loss for Co-op Following Cyberattack

A2AS framework targets prompt injection and agentic AI security risks

AI Tops Cybersecurity Investment Priorities, PwC Finds

Akira gang claims eleven new victims, and they’re all alike

Allianz Life says July data breach impacts 1.5 million people

BancoCapital Ecuador Suffers Major Database Leak and Data Breach

Biometric spoofing isn’t as complex as it sounds

BNB Chain X Account Compromised for Phishing Attack

Broadcom Issues Patches for VMware NSX and vCenter Security Flaws

Campaign Warns Solicitors and House Buyers of Payment Diversion Fraud

Cascade Pacific Pulp LLC Targeted in Akira Ransomware Attack

Cervejaria não consegue retomar produção após ataque hacker; casos se multiplicam

China to hacking victims: you’ve got one hour to spill beans

Cybersecurity M&A Roundup: CrowdStrike, SentinelOne and Check Point Invest in AI Security

DepEd Samar Data Breach Exposes Teacher and Staff Information

German government wants to replace passwords with passkeys

GloboTech Communications Source Code Leaked in Data Breach

Google Drive for desktop will spot, stop and remedy ransomware damage

Hackers Exploit Milesight Routers to Send Phishing SMS to European Users

Hackers find hidden exploit in Google's Gemini

Hackers love LOTL (Living off the Land), this approach shuts them down

Hathijobs Data Breach Exposes 217k User Records

How to stop a single vendor breach from taking down your business

ICO (Information Commissioner’s Office): Imgur's UK Decision Won’t Prevent Regulatory Fine

Inc Ransomware Breach Hits LAMMCO, Ideal Bathrooms, NAC

Intelliloan mortgage breach exposes customer PII, social security numbers, driver's licenses

Israeli high-tech funding and M&A gain in 2025 despite ongoing Gaza war

Job Shop data breach exposes thousands to identity theft risks

Lifeprinter app on iOS and Android spilled 2 million private photos

Major Ransomware Attack Hits Union County, Exposing Personal Data of Over 45,000 People

Massive network of 30,000 websites filters victims before delivering scams or malware

Meet Phantom Taurus, the stealth Chinese espionage group you’ve never heard of

Multi-media systeme AG Hit by J Ransomware Group Data Breach

New Android banking trojan hijacks thousands of phones

New Android Banking Trojan "Klopatra" Uses Hidden VNC to Control Infected Smartphones

New China-Aligned Hackers Hit State and Telecom Sectors

New WireTap Attack Extracts Intel SGX ECDSA Key via DDR4 Memory-Bus Interposer

North Korea’s IT workers are targeting firms beyond tech, crypto, and the U.S.

OneLogin Bug Let Attackers Use API Keys to Steal OIDC Secrets and Impersonate Apps

Prefeitura no interior de Minas Gerais sofre ataque hacker e cofres públicos são roubados

Ransomware remains the leading cause of costly cyber claims

Red Hat OpenShift AI Flaw Exposes Hybrid Cloud Infrastructure to Full Takeover

Russian hackers claim attack on NHS contractor

Scattered LAPSUS$ Hunters Telegram Channel, Linked to ShinyHunters and Scattered Spider, Resurfaces

Shortcut-based Credential Lures Deliver DLL Implants

Sonofet Data Breach Exposes User and Company Information

Spotting crypto fraud: key red flags every investor and platform should be aware of

The American view: Two survival guides for dysfunctional workplaces

Too many Cisco ASA firewalls still unsecure despite zero-day attack alerts

Ukraine Warns of CABINETRAT Backdoor + XLL Add-ins Spread via Signal ZIPs

WestJet begins notifying US customers of data breach after June cyberattack

30/09

$50 Battering RAM Attack Breaks Intel and AMD Cloud Security Protections

After 16 Billion Login Records Leak, India Orders Shift to New Government Email Domain

Akira Ransomware Group Claims Eleven New Victims

Akulaku Data Breach Allegedly Exposes 32 Million Users

Avalara, Inc. Data Breach Exposes Customer and API Data

Asahi halts Japan shipments after cyberattack disrupts operations

Asahi halts ordering, shipping, and customer service after cyberattack

Asahi Suspends Operations in Japan After Cyber-Attack

AZpro Group Suffers Ransomware Attack and Data Breach

Beer Brewing Giant Asahi Halts Production Following Cyberattack

Broadcom fixes high-severity VMware NSX bugs reported by NSA

Broadcom patches VMware Zero-Day actively exploited by UNC5174

Canada's WestJet says some passenger data exposed in cybersecurity breach

Cheaper and faster: China’s DeepSeek introduces new experimental AI model

Chinese hackers exploiting VMware zero-day since October 2024

CIISec Members Say Budgets Are Falling Behind Threats

CISA says it will fill the gap as federal funding for MS-ISAC dries up

CISA Sounds Alarm on Critical Sudo Flaw Actively Exploited in Linux and Unix Systems

CISA warns of critical Linux Sudo flaw exploited in attacks

Coursemonster Data Breach Exposes Information of 67k Users

Critical WD My Cloud bug allows remote command injection

"Crypto queen" pleads guilty to role in massive cryptocurrency scheme

Cyber risk quantification helps CISOs secure executive support

Dana-Farber Cancer Institute Targeted in Data Breach

Everything you need to know about Ohio’s age verification laws

Ex-Boyd Gaming employee sues over data breach

Fake Google Careers Recruiters Target Users in Gmail Credential Theft

Gemini Trifecta Highlights Dangers of Indirect Prompt Injection

Gen Z most likely to fall for phishing scam, cybersecurity report finds

Google unveils AI-powered security to trap ransomware attacks

Hacker claims global AT&T, Mercedes partner

Hackers exploiting critical sudo flaw: CISA wants five bugs gone by October 20th

Hackers nab FEMA, Customs and Border Protection staff data

Hacktivist group claims breach of Israeli satellite operator Spacecom

Harrods Confirms Major Data Breach Affecting 430,000 Customers’ Personal Information

How to restructure your security program to modernize defense

Jaguar Land Rover factories will undergo a 'phased restart' following massive cyber attack

Japan's largest beer brewer stops production after cyberattack

Keeping the internet afloat: How to protect the global cable network

Major Data Breach Hits Multiple Uruguayan Government Agencies

Maryland cyber-attack disrupts bus tracking and exposes personal data

MCBS, LLC Hit by PEAR Ransomware in Significant Data Breach

Mobidic Asset Management Hit by Qilin Ransomware Attack

Nearly 50,000 Cisco firewalls vulnerable to actively exploited flaws

New Android RAT Klopatra Targets Financial Data

New Android Trojan "Datzbro" Tricking Elderly with AI-Generated Facebook Travel Events

New firewall in California: Newsom signs bill to regulate AI titans

New MatrixPDF toolkit turns PDFs into phishing and malware lures

Phantom Taurus: New China-Linked Hacker Group Hits Governments With Stealth Malware

Researchers Disclose Google Gemini AI Flaws Allowing Prompt Injection and Cloud Exploits

Sendit sued by the FTC for illegal collection of children data

Shadow AI soaring: 59% of employees hide AI use from their bosses

Sistem Informasi Manajemen Rumah Sakit Data Breach Exposes Indonesian Patient Information

Smishing Campaigns Exploit Cellular Routers to Target Belgium

South Korea elevates cyber threat alert after massive data centre blaze disrupts government systems

SuperEd Data Breach Exposes 1.5 GB of Company Information

The CSO guide to top security conferences

The hidden risks inside open-source code

UK convicts Chinese national in £5.5B crypto fraud, marks world’s largest Bitcoin seizure

U.K. Police Just Seized £5.5 Billion in Bitcoin — The World's Largest Crypto Bust

Urgent: China-Linked Hackers Exploit New VMware Zero-Day Since October 2024

U.S. CISA adds Adminer, Cisco IOS, Fortra GoAnywhere MFT, Libraesva ESG, and Sudo flaws to its Known Exploited Vulnerabilities catalog

US Cuts Federal Funding for MS-ISAC Cybersecurity Program

VMware virtual machines under attack: hackers may have exploited zero-day for months

Volvo North America Reports Major Ransomware Attack on IT Provider, Employee Data Compromised

Western Digital My Cloud NAS devices vulnerable to unauthenticated RCE (CVE-2025-30247)

WestJet confirms recent breach exposed customers' passports

Windows 11 KB5065789 update released with 41 changes and fixes

Wrapex Industrial Services Inc. Hit by DevMan Ransomware Attack

Your budget Android phone might be spying on you

29/09

10 signs your business could be vulnerable to a cyber attack

Agentic AI in IT security: Where expectations meet reality

AGETIC Bolivia Suffers Major 35.6 GB Government Data Breach

AI-Generated Code Used in Phishing Campaign Blocked by Microsoft

Akira Ransomware bypasses MFA on SonicWall VPNs

Akira ransomware: From SonicWall VPN login to encryption in under four hours

Albany Gastroenterology Consultants Reports Data Breach Exposing Sensitive Information of Over 55,000 Patients

As zero-day exploits rage, close to 200,000 Cisco devices are exposed online

BBC reporter targeted in multi-million pound cyber attack plot

BreachForums gets (yet another) "Star" studded reboot: "Not some young adults in their basement"

Business Integra Data Breach Exposes 8GB of Sensitive Info

Can We Trust AI To Write Vulnerability Checks? Here's What We Found

Canada's WestJet notifies American travelers whose data was hacked in June breach

Canadian Art Organization PHI Centre Hit by INC Ransomware Attack

Chinese drone maker DJI loses appeal to get off Pentagon blacklist

Coherence: Insider risk strategy’s new core principle

Cornwall Council data breach saw pupils' details sent to strangers

Court imposes $343,500 fine for creating deepfake porn of six Australian women

Credera Suffers Major Data Breach Affecting Client Source Codes

Cybersecurity leaders underreport cyber incidents to executives

Debt Agency Preccs Data Breach Exposes 142k Records

Despite Russian influence, Moldova votes Pro-EU, highlighting future election risks

Dutch Authorities Arrest Teens in Foreign Interference Case

Dutch teens arrested for spying on behalf of pro-Russian hackers

Dutch teens detained over alleged WiFi sniffing for Russia

Eckerd Connects Data Breach Affects Sensitive PII and PHI

Emergency Responders Health Center (ERHC) Data Breach Affects Patient Info

EvilAI Malware Masquerades as AI Tools to Infiltrate Global Organizations

Firezone: Open-source platform to securely manage remote access

First Malicious MCP Server Found Stealing Emails in Rogue Postmark-MCP Package

Friends of NRA spills supporter data on Google

Google and Flo settle privacy class-action lawsuit for $56M

Hackers claim data breach of Israeli satellite operator

Harrods alerts customers to new data breach linked to third-party provider

Harrods Reveals Supply Chain Breach Impacting Online Customers

Harrods suffers new data breach exposing 430,000 customer records

How attackers poison AI tools and defenses

How to Use a Password Audit to Improve Your Cybersecurity

Killsec Ransomware Group Claims Two New Victims: WalletKu and xChief

Medusa hits Comcast, demands $1.2 million to delete troves of corporate data

Meta AI chatbot outsmarted to instruct on incendiary device making

Michael Strain Builders (MSB) Hit by Sarcoma Ransomware Attack

Microsoft Flags AI-Driven Phishing: LLM-Crafted SVG Files Outsmart Email Security

National Cyber Authorities Launch OT Security Guidance

Pharmacie[.]ma Data Breach Exposes Data of 41,772 Customers

Privacy watchdog slams AI firm for selling shady “reputation reports”

Ransomware gang sought BBC reporter’s help in hacking media giant

Seu robô aspirador é seguro? Ataque hacker transforma aparelho em um pesadelo (e como se proteger)

SonicWall SSL VPN Attacks Escalate, Bypassing MFA

The CISO’s guide to stronger board communication

The State of AI in the SOC 2025 - Insights from Recent Study

Top 10 fastest growing ICT jobs

Two-Thirds of Organizations Have Unfilled Cybersecurity Positions

UK govt backs JLR with £1.5 billion loan guarantee after cyberattack

X (Twitter) Allegedly Breached by Threat Actor

28/09

Akira ransomware breaching MFA-protected SonicWall VPN accounts

Akira Ransomware: New Campaign Targets SonicWall Firewalls

Aviation faces rising hacker threat

British department store Harrods warns customers that some personal details taken in data breach

Data breach leaks sensitive bank records (India)

Famous British luxury department store warns customers about data breach

Google Project Zero Details ASLR Bypass on Apple Devices Using NSDictionary Serialization

Government Steps In With £1.5bn Loan Guarantee To Support Jaguar Land Rover After Cyber Attack

Harrods Confirms Data Breach After Cyberattack Hits Third Party

Harrods luxury department store warns customers of data breach

New Research Warns Multitasking Leaves Employees Exposed to Phishing

Phishing scams, the real threat to your security

Tata Motors' Jaguar Land Rover gets UK govt loan guarantee after cyber-attack

UK government guarantees £1.5bn loan for JLR supply chain after cyber attack

Last Week - Última Semana

Daily News - Setembro (21/09 - 27/09) - 39 Semana de 2025