Hackmanac Cyber Alerts

🦅 #FreeDurov: Hacktivists Scramble on Telegram Supporting Pavel’s Release 🦅 Executive Summary The arrest of Telegram's founder and CEO, Pavel Durov, on August 24, 2024, due to allegations that his messaging platform has been used for various illicit activities has sparked significant international attention and debate, particularly around issues of freedom of speech and the responsibilities of social media platforms. Conversely, the arrest has also incited the ire of several hacktivist groups in cyberspace because, for many in this community, Durov is more than just a tech entrepreneur he is the mastermind behind two pivotal communication platforms in their lives Vkontakte, Russias answer to Facebook, and the anonymous messaging app Telegram. Vkontakte played a significant role in fostering communication and forming groups within hacktivist collectives.... 📖 Read more. 🔗 Via "CYBLE" ---------- 👁️ Seen on @cibsecurity

🚨Data Breach Alert - 🇪🇸Spain Federación Española de Balonmano, reportedly 70K users with DNI for sale. The same threat actor who on August 27 claimed to be selling 140K records exfiltrated from the Real Federación Española de Atletismo is today putting up for sale another 70K user records from the Real Federación Española de Balonmano, once again complete with DNI, Full Name, Phone, DOB, Address. Although these claims still need to be confirmed, users are advised to be cautious of potential phishing attempts.

🚨 News Alert 🚨 CISA, the FBI, and the Department of Defense Cyber Crime Center (DC3) identified an Iranian hacking group called Pioneer Kitten in connection with a series of ongoing ransomware attacks. The group appears to be linked to the Iranian government and is likely using an Iranian IT company, Danesh Novin Sahand, as a front. Targets of the attacks include education, financial, healthcare, defense, and local government sectors in the US, with multiple victims also in Israel, Azerbaijan, and UAE. https://thehackernews.com/2024/08/us-agencies-warn-of-iranian-hacking.html #cybercrime #pionerkitten #ransomware #cyberthreatmonitoring #hackmanac

🚨 0-day Alert 🚨 The South Korean Cyber Espionage group APT-C-60 exploited a zero-day code execution vulnerability in the Windows version of WPS Office to install the SpyGlace backdoor on East Asian targets https://www.bleepingcomputer.com/news/security/apt-c-60-hackers-exploited-wps-office-zero-day-to-deploy-spyglace-malware/ #zeroday #0day #vulnerability #cyberespionage #WPS #Windows #cyberthreatmonitoring #hackmanac

🚨 🚨 #CyberAttack #Alert 🚨 🚨 🇫🇷France: Réunion des musées nationaux - Grand Palais The hacking group Brain Cipher claims responsibility for the attack at Réunion des musées nationaux - Grand Palais. Allegedly, 300 GB of data were exfiltrated. #BrainCipher #Cybersecurity #ransomware #Hackmanac

🔒 The 10 Best Ways to Protect Your Crypto Assets. The Cryptocurrency Inside has already covered the first five essential ways to safeguard your crypto assets. ❗️ In the fast-paced world of cryptocurrencies, security has never been more crucial. Here are the top 10 ways to protect your assets: 1. 🔍 Choose Secure Storage Methods • For small amounts, use hot wallets like Trust Wallet or MetaMask. • For larger holdings, consider cold wallets such as Ledger or Trezor. 2. 🔗 Keep Your Private Keys Safe • Never share your private keys. • Regularly back them up and store them securely • Avoid online private key generators; use local tools instead. • Do not store your keys in your phone’s photo gallery, notes, or other folders. 3. 🌐 Be Careful When Socializing • Stay cautious on social media; avoid sharing details about your crypto assets. • Never disclose personal information or wallet access to strangers. 4. 🔖 Stay Educated and Informed • Continuously educate yourself on cryptocurrency security. • Keep up with the latest threats and security updates. 5. 🤝 Use Two-Factor Authentication • Enable two-factor authentication (2FA) on all cryptocurrency-related accounts. • Prefer authentication apps like Google Authenticator over SMS codes.

Telegram founder Pavel Durov was released from police custody in France on Wednesday and transferred to court for questioning ahead of a possible indictment. Source: CNN

🚨 News Alert 🚨 BlackByte blends tried-and-true tradecraft with newly disclosed vulnerabilities to support ongoing attacks https://blog.talosintelligence.com/blackbyte-blends-tried-and-true-tradecraft-with-newly-disclosed-vulnerabilities-to-support-ongoing-attacks/ #cybercrime #blackbyte #ransomware #cyberthreatmonitoring #hackmanac

🟧 #HackTuesday 🟧 Hack Tuesday: Week 21 - 27 August 2024 🚨 97 victims by 29 hacking groups 🚨 The most active #ransomware group this week is RansomHub with 10 claimed attacks. The United States is the most affected country, accounting for 52% of the victims. The Manufacturing sector is the most impacted, representing 20% of the claimed targets, followed by the Professional, Scientific, and Technical sectors at 14%, and the Wholesale/Retail sector at 12% Overall, the claimed stolen data amounts to approximately 13.7 Terabytes. The average #CyberRisk Factor is 4.0. #Hackmanac #CyberAttack #HT #Cybersecurity

🚨 Critical Vulnerability Alert 🚨 A critical vulnerability (CVE-2024-6386) with CVSS score of 9.9 has been discovered in the WPML WordPress plugin. This flaw affects all versions before 4.6.13 (released on August 20) and could allow attackers to execute code remotely, putting over a million websites at risk. If you are a WPML user update immediately your plugin! https://thehackernews.com/2024/08/critical-wpml-plugin-flaw-exposes.html #cybersecurity #vulnerability #wordpress #WPML #cyberthreatmonitoring #hackmanac

🚨 Critical Vulnerability Alert 🚨 A critical vulnerability (CVE-2024-6386) with CVSS score of 9.9 has been discovered in the WPML WordPress plugin. This flaw affects all versions before 4.6.13 (released on August 20) and could allow attackers to execute code remotely, putting over a million websites at risk. If you are a WPML user update immediately your plugin! https://thehackernews.com/2024/08/critical-wpml-plugin-flaw-exposes.html #cybersecurity #vulnerability #wordpress #WPML #cyberthreatmonitoring #hackmanac

Supply chain attacks represent a 𝘀𝗲𝗿𝗶𝗼𝘂𝘀 𝗮𝗻𝗱 𝗶𝗻𝗰𝗿𝗲𝗮𝘀𝗶𝗻𝗴𝗹𝘆 𝘀𝗼𝗽𝗵𝗶𝘀𝘁𝗶𝗰𝗮𝘁𝗲𝗱 𝘁𝗵𝗿𝗲𝗮𝘁. By targeting the intricate web of relationships between companies and their suppliers, attackers can magnify the impact of a single breach, causing 𝘄𝗶𝗱𝗲𝘀𝗽𝗿𝗲𝗮𝗱 𝗱𝗮𝗺𝗮𝗴𝗲 across multiple entities. 𝗞𝗲𝘆 𝗥𝗶𝘀𝗸𝘀 𝗶𝗻𝗰𝗹𝘂𝗱𝗲: - Data Leaks & Breaches - Malware Infiltration - Vulnerable Code Exploitation - Compromised Partners - Denial of Service Attacks 𝗣𝗿𝗼𝗮𝗰𝘁𝗶𝘃𝗲 𝗦𝗼𝗹𝘂𝘁𝗶𝗼𝗻𝘀: - Adopt a "Zero Trust" Framework - Implement Network Segmentation - Enhance DevSecOps Practices - Conduct Software Composition Analysis (SCA) - Invest in Threat Identification & Insider Threat Training Understanding and mitigating supply chain risks is 𝗻𝗼 𝗹𝗼𝗻𝗴𝗲𝗿 𝗼𝗽𝘁𝗶𝗼𝗻𝗮𝗹—it’s a priority. This is not just about protection, it's an opportunity to 𝘀𝘁𝗿𝗲𝗻𝗴𝘁𝗵𝗲𝗻 𝘆𝗼𝘂𝗿 𝗖𝘆𝗯𝗲𝗿 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝘀𝘁𝗿𝗮𝘁𝗲𝗴𝘆 and safeguard your business. Read the full article to discover more ⤵️ https://www.linkedin.com/pulse/supply-chain-cyber-security-from-risks-solutions-hackmanac-t9vzf Stay Cyber Safe! 🔐 #CyberSecurity #SupplyChain #RiskManagement #StayCyberSafe #hackmanac

In less than 15 days we were featured in the @nytimes, @Forbes6, @Gizmodomedia, SC Magazine and even @tuttoHTML. Definitely proud of our Team! https://www.nytimes.com/2024/08/15/business/social-security-numbers-stolen-hack.html https://www.forbes.com/sites/kellyphillipserb/2024/08/23/what-you-need-to-know-and-do-about-the-massive-social-security-numbers-breach/ https://gizmodo.com/hackers-claim-to-have-stolen-top-secret-documents-from-the-u-s-marshals-service-2000491162 https://www.scmagazine.com/news/hunters-international-ransomware-gang-threatens-to-leak-us-marshals-data https://www.html.it/magazine/hacker-rubano-dati-al-servizio-federale-degli-u-s-marshals/ #hackmanac #cybersecurity #cyberthreatmonitoring #strategicthreatintelligence

Hackmanac on Gizmodo 🤩 Read the full article about US Marshals attack here⤵️ https://gizmodo.com/hackers-claim-to-have-stolen-top-secret-documents-from-the-u-s-marshals-service-2000491162

🚨 #DataBreach #Alert 🚨 🇪🇸Spain - Real Federación Española de Atletismo A potential data breach at the Real Federación Española de Atletismo has been detected on a hacking forum: 140K users are reportedly affected. According to the post, the database contains each entry with DNI, Full Name, Phone Number, Date of Birth, and Address. The confirmation or denial of these claims has yet to be verified. #CyberAttack #CyberSecurity

🟧 #HackTuesday 🟧 Hack Tuesday: Week 21 - 27 August 2024 🚨 97 victims by 29 hacking groups 🚨 The most active #ransomware group this week is RansomHub with 10 claimed attacks. The United States is the most affected country, accounting for 52% of the victims. The Manufacturing sector is the most impacted, representing 20% of the claimed targets, followed by the Professional, Scientific, and Technical sectors at 14%, and the Wholesale/Retail sector at 12% Overall, the claimed stolen data amounts to approximately 13.7 Terabytes. The average #CyberRisk Factor is 4.0. #Hackmanac #CyberAttack #HT #Cybersecurity

🚨🚨🚨 #CyberAttack #Alert 🚨🚨🚨 🇺🇸USA - Crowe The hacking group Hunters International claims to have breached Crowe LLP, a $1.3 million revenue company and a leading provider of audit, tax, advisory, risk, and performance services. For now, the ransomware group has not provided any samples. Just yesterday, Hunters International claimed responsibility for another major cyber attack on the United States Marshals Service. #HuntersInternational #Cybersecurity #ransomware #Hackmanac