Hackmanac Cyber Alerts

🚨Cyberattack Alert Update ‼️ 🇯🇵Japan - KADOKAWA Black Suit ransomware group leaks the exfiltrated files from KADOKAWA once again, this time with additional data, as indicated by the upload date of September 10th. Last August, the cybercriminal group warned the company that they would be attacked again.

🆕 Andrei Kutin, CEO of Match Systems, discussed interesting issues in a new podcast with Adel Bhurtun. 🎙️ Adel asks Andrei, what’s the solution to avoiding the increased risk of being scammed due to the rise of AI? Find out what Andrei had to say. ❓ Balancing privacy while being a content creator remains a challenge, especially with AI deepfakes and even law enforcement tracking our every move. 🔜 You can hear the answers to these and other interesting questions by listening to the new podcast at ➡️ https://www.youtube.com/watch?v=-uefEam3CF4

🚨Cyberattack Alert ‼️ 🇨🇦Canada - QECO, Rhysida Demands 10 BTC The hacking group Rhysida claims to have breached Qualifications Evaluation Council of Ontario (QECO) Ransom demand: 10 BTC (approx. $570,000). Ransom deadline: 17th Sept 24.

🚨🚨Data Breach Alert ‼️ A potential data breach at CapGemini has been detected on a hacking forum. According to the post, in September 2024, CapGemini suffered a significant data breach that exposed 20 gigabytes of databases, source code, private keys, credentials, API keys, projects, employee data, threat reports, T-Mobile's virtual machine logs, documents, and more. The confirmation or denial of these claims has yet to be verified.

🚨Data Breach ‼️ - Japan 🇯🇵 Several accommodation facilities in Japan have reported unauthorized access to their systems, likely due to the use of a common reservation management platform. The impacted accomodation facilities include: - La Vista Kirishima Hills; - Natural Hot Spring Onyado Nono Kanazawa; - Dormy Inn Higashi Muroran; - WeBase Hakata; - Hotel Resol Kyoto Shijo Muromachi; - Best Western Okinawa Kouki Beach. The compromised data includes names, addresses, phone numbers, emails, and other personal details. Full article: https://xtech.nikkei.com/atcl/nxt/column/18/00001/09741/

🚨Cyberattack Alert ‼️ 🇲🇾Malaysia - Bank Rakyat The hacking group Hunters International claims to have breached Bank Rakyat, the biggest Islamic cooperative bank in Malaysia. Allegedly, 463.2 GB (144,015 files) of data were exfiltrated. Ransom deadline: 13th Sept 24.

🚨Data Breach‼️ Electronic payment gateway Slim CD disclosed a data breach impacting 1.7M individuals https://securityaffairs.com/168229/data-breach/slim-cd-disclosed-a-data-breach.html

🚨Cyberattack Alert ‼️ - 🇺🇸Orchid Orthopedic Solutions The hacking group Cl0p claims to have breached Orchid Orthopedic Solutions. Allegedly, 2 TB of data were exfiltrated.

🚨Cyberattack Alert ‼️ - 🇺🇸Pennsylvania State Education Association, Rhysida Demands 20 BTC The hacking group Rhysida claims to have breached the Pennsylvania State Education Association. Ransom demand: 20 BTC (approx. $1,140,000). Ransom deadline: 17th Sept 24.

⚠️ Cyberattack Alert ‼️ - 🇧🇪 Schyns Assurances & Finances and Assurances Verzekeringen The hacking group Kill Security claims to have breached two Belgian insurance companies: Schyns Assurances & Finances and Assurances Verzekeringen. The cybercriminal group states that for both companies, they compromised a third-party provider and exfiltrated data related to SaaS enterprise clients. Ransom deadline: 17th Sept 24.

⚠️Cyberattack Alert ‼️ - 🇯🇵Miyaki Co. Ltd The hacking group Cicada3301 claims to have breached Miyaki Co. Ltd. Allegedly, 100 GB of data, including research materials of the company's products, were exfiltrated.

⚠️Cyberattack Alert - 🇫🇷AVF Biomedical The hacking group RansomHub claims to have breached AVF Biomedical. Allegedly, 31 GB of data were exfiltrated. Ransom deadline: 23rd Sep 24.

⚠️Cyberattack Alert - 🇮🇹Università degli Studi di Genova (UniGe) The hacking group RansomHub claims to have breached the Università degli Studi di Genova (UniGe). Allegedly, 18 GB of data were exfiltrated. Ransom deadline: 23rd Sep 24.

⚠️Cyberattack Alert - 🇺🇸Millsboro Animal Hospital The hacking group Qilin claims to have breached Millsboro Animal Hospital.

⚠️Cyberattack Alert - 🇺🇸Cardiology Of Virginia The hacking group RansomHub claims to have breached Cardiology Of Virginia. Allegedly, 1 TB of data were exfiltrated. Ransom deadline: 15th Sep 24.

⚠️Cyberattack Alert - 🇪🇸Grupo Cortefiel, Medusa Demands $800,000 The hacking group Medusa claims to have breached Grupo Cortefiel, one of Europe's leading fashion retailers operating in the specialised chain segment. Allegedly, 724.59 GB of data were exfiltrated. Ransom demand: $800,000. Ransom deadline: 17th Sep 24.

🚨 Critical Vulnerability Alert 🚨 A critical flaw in the LiteSpeed Cache plugin for WordPress could allow unauthenticated users to take control of arbitrary accounts. https://securityaffairs.com/168145/security/litespeed-cache-plugin-wordpress-flaw.html #vulnerability #wordpress #cyberthreatmonitoring #hackmanac

Car rental giant Avis discloses data breach impacting customers https://www.bleepingcomputer.com/news/security/car-rental-giant-avis-discloses-data-breach-impacting-customers/

North Korean hackers are targeting developers on #LinkedIn with fake job offers, using coding tests to infect macOS. Once inside, they steal credentials, access code, and drain crypto funds. Social engineering remains a serious cyber threat https://thehackernews.com/2024/09/north-korean-threat-actors-deploy.html