THE DAILY HACK - November 28, 2024

THE DAILY HACK

THANKS FOR READING THE DAILY HACK - Daily cybersecurity news from 25-year www.RemoteDataBackups.com; the only Kaseya software Distributor in the USA. Save an average of 30% off products and suites for MSPs and IT Departments with IT Complete, VSA RMM, Datto RMM/Endpoint Management, Security Unified Backup, Audit & Compliance Business, Services Networking, IT Operations, MSP Enablement, and Kaseya 365. MSPs earn 20% recurring commissions. Contact [email protected] or call 1 866 722 2587.

November 28th, 2024

Cybersecurity News Google Alerts

• U.S. Telecom Giant T-Mobile Detects Network Intrusion Attempts from Wireline Provider

Ransomware News Google Alerts

• Ransomware?Attack on Blue Yonder Disrupts Starbucks, UK Supermarkets: A Cyber Wake-Up Call
• Blue Yonder?ransomware?attack leaves global brands scrambling – ReadWrite
• Major cybercrime crackdowns signal shift in global cybersecurity strategies | IDM Magazine
• VPN vulnerabilities, weak credentials fuel?ransomware?attacks – Help Net Security
• Ransomware?payments are now a critical business decision – Help Net Security
• Russian charged with LockBit?ransomware?crimes — $10 million reward for his arrest – MSN
• Blue Yonder hack: which supermarkets have been affected? – Yorkshire Post
• Officials: Hoboken City Hall hit by?ransomware?cyberattack – News 12 – New Jersey
• Ransomware?attack disrupts operations for Starbucks, other stores
• Ransomware?attack disrupts operations for Starbucks, other stores – YouTube

Breaches News Google Alerts

• Hyundai, Mahindra, Kia among firms fined Rs 7300 cr for emission?breach?| India News
• Settlement for historical abuse survivors caught up in data?breach?could pave way for payout …
• Coupang Fined Over 1.5 Billion Won for Major Data?Breach?Violations – Businesskorea
• John Bateman,?breach?notices and Terrell May: Benji lifts lid on Tiger Town
• Breach?of the Information Protection Principles by Fire and Rescue NSW
• Silver Springs Bottled Water Company reports an online data security?breach?– WCJB
• HIA: Survivors awarded ￡30,000 after data?breach?– BBC News
• Silver Springs Bottled Water Company reports an online data security?breach?– WCJB
• Russian Hackers?Breached?a DC-Area Organization Through a Neighbor’s Wi-Fi. Here’s …

The Hacker News

The Future of Serverless Security in 2025: From Logs to Runtime Protection

XMLRPC npm Library Turns Malicious, Steals Data, Deploys Crypto Miner

Cybercriminals Exploit Popular Game Engine Godot to Distribute Cross-Platform Malware

U.S. Telecom Giant T-Mobile Detects Network Intrusion Attempts from Wireline Provider

Latest Multi-Stage Attack Scenarios with Real-World Examples

Researchers Discover “Bootkitty” – First UEFI Bootkit Targeting Linux Kernels

APT-C-60 Hackers Exploit StatCounter and Bitbucket in SpyGlace Malware Campaign

INTERPOL Busts African Cybercrime: 1,006 Arrests, 134,089 Malicious Networks Dismantled

Matrix Botnet Exploits IoT Devices in Widespread DDoS Botnet Campaign

Critical WordPress Anti-Spam Plugin Flaws Expose 200,000+ Sites to Remote Attacks

Intruder Launches Intel: A Free Vulnerability Intelligence Platform For Staying Ahead of the Latest Threats

RomCom Exploits Zero-Day Firefox and Windows Flaws in Sophisticated Cyberattacks

Chinese Hackers Use GHOSTSPIDER Malware to Hack Telecoms Across 12+ Countries

CISA Urges Agencies to Patch Critical “Array Networks” Flaw Amid Active Attacks

Weekly Recap: Top Cybersecurity Threats, Tools, and Practices (Nov 18 – Nov 24)

Cybersecurity Blind Spots in IaC and PaC Tools Expose Cloud Platforms to New Attacks

Google Exposes GLASSBRIDGE: A Pro-China Influence Network of Fake News Sites

North Korean Hackers Steal $10M with AI-Driven Scams and Malware on LinkedIn

APT-K-47 Uses Hajj-Themed Lures to Deliver Advanced Asyncshell Malware

Russian Hackers deploy HATVIDE and CHERRYSPY Malware Across Europe and Asia

Microsoft, Meta, and DOJ Disrupt Global Cybercrime and Fraudulent Networks

Warning: Over 2,000 Palo Alto Networks Devices Hacked in Ongoing Attack Campaign

PyPI Attack: ChatGPT, Claude Impersonators Deliver JarkaStealer via Python Libraries

? North Korean Front Companies Impersonate U.S. IT Firms To Fund Missile Program

5 Scattered Spider Gang Members Indicted in Multi-Million Dollar Cybercrime Scheme

NHIs Are the Future of Cybersecurity: Meet NHIDR Nov 20, 2024?Identity Security / Cyber Defense

Decades-Old Security Vulnerabilities Found in Ubuntu’s Needrestart Package

Nov 20, 2024?Linux / Vulnerability

Microsoft Launches Windows Resiliency Initiative to Boost Security and System Integrity

Nov 20, 2024?Endpoint Security / AI Research

China-Backed Hackers Leverage SIGTRAN, GSM Protocols to Infiltrate Telecom Networks

Nov 20, 2024?Cyber Espionage / Telecom Security

Apple Releases Urgent Updates to Patch Actively Exploited Zero-Day Vulnerabilities

Nov 20, 2024?Zero Day / Vulnerability

Oracle Warns of Agile PLM Vulnerability Currently Under Active Exploitation

Ngioweb Botnet Fuels NSOCKS Residential Proxy Network Exploiting IoT Devices

Nov 19, 2024?Botnet / IoT Security

Hackers Hijack Unsecured Jupyter Notebooks to Stream Illegal Sports Broadcasts

Nov 19, 2024?Cloud Security / Piracy

New ‘Helldown’ Ransomware Variant Expands Attacks to VMware and Linux Systems Nov 19, 2024?Ransomware / Linux Cybersecurity researchers have shed light on a Linux variant of a relatively new ransomware strain called Helldown, suggesting that

Remote Data Backups is a Distributor for Kaseya Cybersecurity and Data Protection Products. Tell us your needs. Or get a quote.

cybernews

Hackers can access laptop cams without activating LED Researcher Finds

Hello, this is your chatbot leaking: WotNot exposes 346K sensitive Customer Files

Former Fortnite player accused of meme coin scam Hacker?

Snowflake hacker still on the loose – close to being identified

DJI unveils compact wireless microphone for cameras and smartphones

Reddit elbows way up social media leaderboard as X trails behind

What’s on NASA’s ‘stranded’ astronauts’ table for Thanksgiving?

Hackers can access laptop webcams without activating the LED, researcher finds

28 November 2024

Zuckerberg meets Trump for dinner at Mar-a-Lago, talks innovation

OnePoint Patient Care breach affects 1.7 million people ?

€1.6M seized in illegal streaming network takedown

Australia bans social media for children: what’s in the bill?

Federal Trade Commission News

• FTC Takes Action Against Marriott and Starwood Over Multiple Data Breaches?(October 9, 2024?)
• FTC Staff Report Finds Large Social Media and Video Streaming Companies Have Engaged in Vast Surveillance of Users with Lax Privacy Controls and Inadequate Safeguards for Kids and Teens?(September 19, 2024?)
• FTC Investigation Leads to Lawsuit Against TikTok and ByteDance for Flagrantly Violating Children’s Privacy Law?(August 2, 2024?)
• Reports of Unwanted Telemarketing Calls Down More Than 50 Percent Since 2021. Reports of Unwanted Telemarketing Calls Down More Than 50 Percent Since 2021
• Northern? Minnesota Man Indicted For “Cryptojacking” Scheme
• FTC Takes Action Against Marriott and Starwood Over Multiple Data Breaches?(October 9, 2024?)
• FTC Staff Report Finds Large Social Media and Video Streaming Companies Have Engaged in Vast Surveillance of Users with Lax Privacy Controls and Inadequate Safeguards for Kids and Teens?(September 19, 2024?)
• FTC Sends Refunds to Consumers Harmed by CafePress’s Data Security Failures?(September 18, 2024?)
• FTC Announces Tentative Agenda for September 19 Open Commission Meeting?(September 12, 2024?)
• FTC Sends Refunds to Consumers Deceived by Genetic Testing Firm 1Health.io Over Data Deletion and Security Practices?(September 9, 2024?)
• New FTC Data Shows Massive Increase in Losses to Bitcoin ATM Scams?(September 3, 2024?)
• FTC Takes Action Against Security Camera Firm Verkada over Charges it Failed to Secure Videos, Other Personal Data and Violated CAN-SPAM Act?(August 30, 2024?)
• FTC Investigation Leads to Lawsuit Against TikTok and ByteDance for Flagrantly Violating Children’s Privacy Law?(August 2, 2024?)
• FTC Issues Orders to Eight Companies Seeking Information on Surveillance Pricing?(July 23, 2024?)
• FTC, ICPEN, GPEN Announce Results of Review of Use of Dark Patterns Affecting Subscription Services, Privacy?(July 10, 2024?)
• FTC Order Will Ban NGL Labs and its Founders from Offering Anonymous Messaging Apps to Kids Under 18 and Halt Deceptive Claims Around AI Content Moderation?(July 9, 2024?)
• FTC Finalizes Order with Avast Banning it from Selling or Licensing Web Browsing Data for Advertising and Requiring it to Pay $16.5 Million?(June 27, 2024?)
• Statement of the Commission Regarding TikTok Complaint Referral to DOJ?(June 18, 2024?)
• FTC Finalizes Order with Blackbaud Related to Allegations the Firm’s Security Failures Led to Data Breach?(May 20, 2024?)
• FTC Releases Fiscal Year 2023 Annual Report?(May 15, 2024?)
• BetterHelp Customers Will Begin Receiving Notices About Refunds Related to a 2023 Privacy Settlement with FTC?(May 6, 2024?)
• FTC Finalizes Order with InMarket Prohibiting It from Selling or Sharing Precise Location Data?(May 1, 2024?)
• FTC Finalizes Changes to the Health Breach Notification Rule?(April 26, 2024?)
• FTC Sends Refunds to Ring Customers Stemming from 2023 Settlement over Charges the Company Failed to Block Employees and Hackers from Accessing Consumer Videos?(April 23, 2024?)
• Proposed FTC Order will Prohibit Telehealth Firm Cerebral from Using or Disclosing Sensitive Data for Advertising Purposes, and Require it to Pay $7 Million?(April 15, 2024?)
• The FTC’s Efforts in the Greater Fight Against Ransomware and Cyber-Related Attacks?(October 20, 2023?)

FBI News

• U.S. Joins International Action Against RedLine and META Infostealers
• Founder of Cryptocurrency Financial Services Firm ‘MyTrade’ Pleads Guilty to Market Manipulation and Fraud Conspiracy
• U.S. Joins International Action Against RedLine and META Infostealers
• Meridian Man Sentenced in the Northern District of Georgia for Computer Hacking and Extortion Scheme
• Joint Statement from FBI and CISA on the People’s Republic of China Targeting of Commercial Telecommunications Infrastructure
• Nigerian National Sentenced to 10 Years for $20 Million Cyber Fraud Scheme
• Santa Clarita Man Who Led Organization That Trafficked Drugs to Darknet Customers Nationwide Sentenced to Eight Years in Prison
• Five Defendants Charged Federally with Running Scheme that Targeted Victim Companies via Phishing Text Messages
• Phobos Ransomware Administrator Extradited from South Korea to Face Cybercrime Charges
• Computer Programmer Convicted for Helping Run One of the Biggest Illegal Television Show Streaming Services in the United States
• Meridian Man Sentenced in the Northern District of Georgia for Computer Hacking and Extortion Scheme
• Portfolio Manager of ‘A.I.’ Investment Fund Arrested for Stealing Fund Assets
• Joint Statement from FBI and CISA on the People’s Republic of China Targeting of Commercial Telecommunications Infrastructure
• Idaho Man Sentenced for Computer Hacking and Extortion Scheme