THE DAILY HACK

November 21th, 2024

The Hacker News

North Korean Front Companies Impersonate U.S. IT Firms To Fund Missile Program

5 Scattered Spider Gang Members Indicted in Multi-Million Dollar Cybercrime Scheme

NHIs Are the Future of Cybersecurity: Meet NHIDR Nov 20, 2024?Identity Security / Cyber Defense

Decades-Old Security Vulnerabilities Found in Ubuntu’s Needrestart Package

Nov 20, 2024?Linux / Vulnerability

Microsoft Launches Windows Resiliency Initiative to Boost Security and System Integrity

Nov 20, 2024?Endpoint Security / AI Research

China-Backed Hackers Leverage SIGTRAN, GSM Protocols to Infiltrate Telecom Networks

Nov 20, 2024?Cyber Espionage / Telecom Security

Apple Releases Urgent Updates to Patch Actively Exploited Zero-Day Vulnerabilities

Nov 20, 2024?Zero Day / Vulnerability

Oracle Warns of Agile PLM Vulnerability Currently Under Active Exploitation

Ngioweb Botnet Fuels NSOCKS Residential Proxy Network Exploiting IoT Devices

Nov 19, 2024?Botnet / IoT Security

Hackers Hijack Unsecured Jupyter Notebooks to Stream Illegal Sports Broadcasts

Nov 19, 2024?Cloud Security / Piracy

New ‘Helldown’ Ransomware Variant Expands Attacks to VMware and Linux Systems Nov 19, 2024?Ransomware / Linux Cybersecurity researchers have shed light on a Linux variant of a relatively new ransomware strain called Helldown, suggesting that

Cybersecurity News Google Alerts

• Safeguarding Commercial Printing: Advancements in?Cybersecurity?– WhatTheyThink
• Axis Introduces Next-Generation Imaging, AI-Powered Analytics, and?Cybersecurity?with …
• Marsh launches?cybersecurity?compliance program – Insurance Business America
• CyberArk Achieves QC1 Certification From Italian National?Cybersecurity?Agency
• Norfolk Sheriff’s Office ‘victim of?cybersecurity?event’ – YouTube
• Retailers warned to bolster?cybersecurity?for Cyber Monday – Yahoo Finance
• Mike Waldner Appointed Director of Municipal?Cybersecurity?Grant Program Position …
• Group reviews proposals for?cybersecurity?grants – Warwick Beacon
• N-able acquires Adlumin to boost?cybersecurity?offerings – SecurityBrief New Zealand
• MGM Resorts Consolidates?Cybersecurity?and Saves Money with CrowdStrike

WEB

• Regulation – 2024/2847 – EN – EUR-Lex

Ransomware News Google Alerts

• Deep Instinct delivers malware and?ransomware?prevention for cloud data stored in S3 buckets
• India Faces 24% Surge in?Ransomware?Attacks | ANI Sues OpenAI | Daily Tech News | 21 Nov 2024
• Coalition highlights 68% surge in?ransomware?claims severity – Reinsurance News
• The Alarming Reality: APAC Firms Experience Heightened?Ransomware?Attacks
• Mexico Investigates?Ransomware?Attack On Legal Affairs Office – The Pinnacle Gazette
• How today’s?ransomware?groups operate | Security Info Watch
• Trellix report reveals evolving?ransomware?ecosystem trends – SecurityBrief New Zealand
• Mexico’s president says government is investigating reported?ransomware?hack of legal affairs office
• Ransomware?attacks surged this year as hackers exploited VPN weakness
• An emerging cyberthreat: vishing – Fierce Healthcare

Hacker News Google Alerts

• Ghost Tap:?Hackers?Exploiting NFCGate to Steal Funds via Mobile Payments
• US charges five in ‘Scattered Spider’?hacking?scheme – Reuters
• Now?Hackers?Are Using Snail Mail In Cyber Attacks—Here’s How – Forbes
• T-Mobile actually stopped some?hackers?from stealing customer data – The Verge
• The top 15 data points that?hackers?steal from you – Medical Economics
• Apple Urges Mac Users to Update After?Hackers?Exploit Zero-Day Vulnerabilities – CNET
• North Korea?hackers?behind 2019 $42 mln Ethereum heist, South Korea police say | Reuters
• T-Mobile Caught?Hackers?Early, Averting Data Leak – Insurance Journal
• Bits & Bites: Amicci’s gets?hacked: ‘It was just a Catch-22 of a disaster’ – Baltimore Sun
• Hacker?Gains Access To Files With Testimony Related To Matt Gaetz Accusations

Breaches News Google Alerts

• Alleged Ford ‘Breach‘ Encompasses Auto Dealer Info – Dark Reading
• Six regional US banks are forced to issue urgent debit card alerts following a security?breach
• Full recovery from?breaches?takes longer than expected – Help Net Security
• T-Mobile Learns From Past?Breaches, Manages to Stop New Attack – MacRumors
• One-third of organisations report data?breaches?costing over $1 mn in 3 yrs
• Data?Breaches?Reported by Hopscotch; Athenahealth; Central Resources
• Fintech For 45 Of 50 Top Banks Confirms Data?Breach?– Forbes
• Danish military says it’s staying close to Chinese ship after data cable?breaches?| Reuters
• How a data?breach?led to one consumer’s identity theft nightmare – NBC 6 South Florida
• Ford debunks report of data?breach?after hacker claims: No threat, customer impact

Federal Trade Commission News

• FTC Takes Action Against Marriott and Starwood Over Multiple Data Breaches?(October 9, 2024?)
• FTC Staff Report Finds Large Social Media and Video Streaming Companies Have Engaged in Vast Surveillance of Users with Lax Privacy Controls and Inadequate Safeguards for Kids and Teens?(September 19, 2024?)
• FTC Investigation Leads to Lawsuit Against TikTok and ByteDance for Flagrantly Violating Children’s Privacy Law?(August 2, 2024?)
• Reports of Unwanted Telemarketing Calls Down More Than 50 Percent Since 2021. Reports of Unwanted Telemarketing Calls Down More Than 50 Percent Since 2021
• Northern? Minnesota Man Indicted For “Cryptojacking” Scheme
• FTC Takes Action Against Marriott and Starwood Over Multiple Data Breaches?(October 9, 2024?)
• FTC Staff Report Finds Large Social Media and Video Streaming Companies Have Engaged in Vast Surveillance of Users with Lax Privacy Controls and Inadequate Safeguards for Kids and Teens?(September 19, 2024?)
• FTC Sends Refunds to Consumers Harmed by CafePress’s Data Security Failures?(September 18, 2024?)
• FTC Announces Tentative Agenda for September 19 Open Commission Meeting?(September 12, 2024?)
• FTC Sends Refunds to Consumers Deceived by Genetic Testing Firm 1Health.io Over Data Deletion and Security Practices?(September 9, 2024?)
• New FTC Data Shows Massive Increase in Losses to Bitcoin ATM Scams?(September 3, 2024?)
• FTC Takes Action Against Security Camera Firm Verkada over Charges it Failed to Secure Videos, Other Personal Data and Violated CAN-SPAM Act?(August 30, 2024?)
• FTC Investigation Leads to Lawsuit Against TikTok and ByteDance for Flagrantly Violating Children’s Privacy Law?(August 2, 2024?)
• FTC Issues Orders to Eight Companies Seeking Information on Surveillance Pricing?(July 23, 2024?)
• FTC, ICPEN, GPEN Announce Results of Review of Use of Dark Patterns Affecting Subscription Services, Privacy?(July 10, 2024?)
• FTC Order Will Ban NGL Labs and its Founders from Offering Anonymous Messaging Apps to Kids Under 18 and Halt Deceptive Claims Around AI Content Moderation?(July 9, 2024?)
• FTC Finalizes Order with Avast Banning it from Selling or Licensing Web Browsing Data for Advertising and Requiring it to Pay $16.5 Million?(June 27, 2024?)
• Statement of the Commission Regarding TikTok Complaint Referral to DOJ?(June 18, 2024?)
• FTC Finalizes Order with Blackbaud Related to Allegations the Firm’s Security Failures Led to Data Breach?(May 20, 2024?)
• FTC Releases Fiscal Year 2023 Annual Report?(May 15, 2024?)
• BetterHelp Customers Will Begin Receiving Notices About Refunds Related to a 2023 Privacy Settlement with FTC?(May 6, 2024?)
• FTC Finalizes Order with InMarket Prohibiting It from Selling or Sharing Precise Location Data?(May 1, 2024?)
• FTC Finalizes Changes to the Health Breach Notification Rule?(April 26, 2024?)
• FTC Sends Refunds to Ring Customers Stemming from 2023 Settlement over Charges the Company Failed to Block Employees and Hackers from Accessing Consumer Videos?(April 23, 2024?)
• Proposed FTC Order will Prohibit Telehealth Firm Cerebral from Using or Disclosing Sensitive Data for Advertising Purposes, and Require it to Pay $7 Million?(April 15, 2024?)

FBI News

• U.S. Joins International Action Against RedLine and META Infostealers
• Founder of Cryptocurrency Financial Services Firm ‘MyTrade’ Pleads Guilty to Market Manipulation and Fraud Conspiracy
• U.S. Joins International Action Against RedLine and META Infostealers
• Meridian Man Sentenced in the Northern District of Georgia for Computer Hacking and Extortion Scheme
• Joint Statement from FBI and CISA on the People’s Republic of China Targeting of Commercial Telecommunications Infrastructure
• Nigerian National Sentenced to 10 Years for $20 Million Cyber Fraud Scheme