Hackmanac Cyber Alerts

🎧 This Thursday, there will be an Ama session where you'll learn the answer to the question, "Is Privacy a Prerequisite for Crypto's Growing Appeal?" 📅 August 22 | 11 CET (9 UTC) 📍 https://twitter.com/i/spaces/1yNxagypAvWGj 🎙️Speakers: Andrei Kutin from Match Systems Tomer Warschauer Nuni from Kima Network Andrea Zapparoli Manzoni from HackManac Patrick Schulte from Dubbz ⏰ Don't miss out on this exciting event! 👋 Match Systems

Don't miss our AMA session tomorrow 📅August 22 at 11:00AM CET! you'll learn the answer to the question, "Is Privacy a Prerequisite for Crypto's Growing Appeal?"

🚨 Cyber Attack Alert 🚨 🇬🇧 UK - Globacap APT73 ransomware group claims to have breached Globacap, a leading capital markets technology firm that digitises and automates the world’s private capital markets. Allegedly, logins, passwords, and other documents were exfiltrated. Ransom deadline: 02nd Sep 24. #APT73 #Cybersecurity #Hackmanac

🚨 News Alert 🚨 According to Chainalysis 2024 Crypto Crime Mid-year Update Part 1, ransomware inflows rose by approximately 2%, from $449.1 million to $459.8 million. The average amount of cryptocurrency stolen per heist increased by almost 80% while 2024 has seen the largest ransomware payment ever recorded: approximately $75 million to the Dark Angels ransomware group. https://www.chainalysis.com/blog/2024-crypto-crime-mid-year-update-part-1/ #cybercrime #ransomware #cybersecurity #cyberthreatmonitoring #hackmanac

⚠️ Microchip Technology Faces Operational Disruption After #Cyberattack ⚠️ On August 17, 2024, Microchip Technology Incorporated $MCHP detected suspicious activity within its IT systems. By August 19, 2024, the company confirmed that an unauthorized party had disrupted some servers and business operations. This disruption has affected the company's manufacturing facilities, leading to reduced operational capacity and impacting the ability to fulfill orders. More details: https://www.sec.gov/Archives/edgar/data/827054/000082705424000153/mchp-20240820.htm

𝐔𝐧𝐝𝐞𝐫𝐬𝐭𝐚𝐧𝐝𝐢𝐧𝐠 𝐭𝐡𝐞 𝐃𝐚𝐫𝐤 𝐖𝐞𝐛: 𝐰𝐡𝐚𝐭 𝐢𝐭 𝐢𝐬 𝐚𝐧𝐝 𝐰𝐡𝐲 𝐢𝐭 𝐦𝐮𝐬𝐭 𝐛𝐞 𝐦𝐨𝐧𝐢𝐭𝐨𝐫𝐞𝐝 The 𝑫𝒂𝒓𝒌 𝑾𝒆𝒃 is a mysterious and dangerous place where cybercriminals operate in the shadows, selling stolen data and planning attacks. Though it represents only a limited part of the internet, the risks it poses are immense for both individuals and organizations. According to the last 𝐇𝐚𝐜𝐤𝐦𝐚𝐧𝐚𝐜 𝐆𝐥𝐨𝐛𝐚𝐥 𝐂𝐲𝐛𝐞𝐫 𝐀𝐭𝐭𝐚𝐜𝐤𝐬 𝐑𝐞𝐩𝐨𝐫𝐭, in 2023 𝟲𝟬% of cyber attacks were communicated exclusively on the Dark Web. This underscores the urgent need to closely monitor these hidden activities. 👉 Integrating Dark Web and Cyber Threat Monitoring into a Cybersecurity Strategy is not just an option: it’s a necessity to maintain a proactive defense posture. 🔗 Read the full article to discover more ⤵️ https://www.linkedin.com/pulse/understanding-dark-web-what-why-must-monitored-hackmanac-kjf6f #CyberSecurity #DarkWeb #CyberThreatMonitoring #CyberThreats #StayCyberSafe #Hackmanac

⚠️ Major #Backdoor in Millions of RFID Cards Allows Instant Cloning ⚠️ https://www.securityweek.com/major-backdoor-in-millions-of-rfid-cards-allows-instant-cloning/

#PoC Exploit for Windows #0Day Flaws CVE-2024-38202 and CVE-2024-21302 Released These vulnerabilities could reintroduce old issues, turning patched Windows systems into zero-day targets. https://securityonline.info/poc-exploit-for-windows-0-day-flaws-cve-2024-38202-and-cve-2024-21302-released/

🚨 Cyber Attack Alert 🚨 🇨🇮 Ivory Coast - CODIVAL Space Bears #ransomware group claims to have breached CODIVAL. Ransom deadline: 30th Aug 24. #SpaceBears #Cybersecurity #Hackmanac

Attempting to access the clearnet blog of the Lynx ransomware group: Tor VS Brave, Chrome, Edge. Thank you #Tor for the service

🚨 Cyber Attack Alert 🚨 🇲🇽 Mexico: CUSAEM - Cuerpos de Seguridad Auxiliares del Estado de México LockBit 3.0 ransomware group claims to have breached CUSAEM - Cuerpos de Seguridad Auxiliares del Estado de México. Allegedly, 630 GB of data were exfiltrated. Ransom deadline: 30th Aug 24. #LockBit #Cybersecurity #Hackmanac

🚨 Cyber Attack Alert 🚨 🇮🇳 India - JPoint Kill Security #ransomware group claims to have breached JPoint, a digital project launched by JITO (Jain International Trade Organization) powered by Nahar Group. Allegedly, more than 2 million customer records were exfiltrated. Ransom demand: $15,000. Ransom deadline: 05th Sep 24. #Hackmanac #CyberSecurity #KillSecurity

⚠️BlindEagle (a.k.a APT-C-36): A New APT Targeting Latin America BlindEagle, also known as APT-C-36, is an Advanced Persistent Threat (APT) actor targeting entities in Latin America, primarily in Colombia, Ecuador, Chile, and Panama, with a dual focus on financial and cyber-espionage goals. The group uses phishing emails to impersonate governmental and financial institutions, deploying Remote Access Trojans (RATs) like njRAT, LimeRAT, BitRAT, and AsyncRAT to steal sensitive information and financial credentials. Article and Image by Kaspersky: https://securelist.com/blindeagle-apt/113414/?reseller=glsecurelist_awarn_ona_smmall_b2b_some_lnksm-team____7b320a7f615246ed&utm_source=twitter&utm_medium=social&utm_campaign=gl_securelist_db0077&utm_content=sm-post&utm_term=gl_twitter_organicofccidjyjva2774&kaspr=zie3

🚨 News Alert 🚨 Digital wallets can allow purchases with stolen credit cards https://www.theregister.com/2024/08/20/digital_wallets_simplify_fraud/ #cybercrime #fraud #cybersecurity #cyberthreatmonitoring #hackmanac

🟧 #HackTuesday 🟧 Hack Tuesday: Week 14 - 20 August 2024 🚨 93 victims by 27 hacking groups 🚨 The most active #ransomware group this week is RansomHub with 20 claimed attacks. The most affected country is the United States, accounting for 46% of the victims, while the Manufacturing sector is the most impacted, accounting for 26% of the claimed targets, followed by the Professional, Scientific and Technical sectors with 17%. Overall, the claimed stolen data amounts to approximately 29.1 Terabytes. The average #CyberRisk Factor is 4.0. #Hackmanac #CyberAttack #HT #Cybersecurity

🚨 HACKMANAC GLOBAL CYBER ATTACKS REPORT 2024 🚨 📊 Our Global Cyber Attacks Report 2024 is now available! 📈 In this 40+ page study we analyze more than 7,000 known attacks that occurred globally in 2023 and compare them to those of the previous five years (2018-2022), highlighting key trends such as: 🔍 Evolution of cyber threats 🔍 Most targeted industries 🔍 Most used attack techniques 🔍 Types of attackers 🔍 Most dangerous cybercrime gangs 🔍 Attack impact by industry, attacker, etc. 📥 Visit our download area for a free copy of the report ⤵ https://hackmanac.com/hackmanac-global-cyber-attacks-report-2024 #Hackmanac #CyberSecurityReport #CyberThreatMonitoring #CyberAttacks2024 #CyberThreats #CyberRiskManagement #ImpactAnalysis

The New York Times Leak: What Was Exposed? At the beginning of June, the New York Times experienced a significant data leak where over 5,600 git repositories were exposed on the 4chan forum, revealing a large number of secrets. The leak exposed 4,875 unique secrets, including 228 critical keys like AWS and Auth0 keys. The breach was caused by a leaked GitHub token, and the New York Times has been aware of the issue since January 2024. Article and image by GitGuardian: https://blog.gitguardian.com/the-secrets-of-the-new-york-times-source-code-breach-2/?utmsource=cybersec&utmmedium=newsfeed

⚠️#CyberAttack Alert 🇯🇵 Japan - KADOKAWA: Black Suit #ransomware group continues to threaten the company.

⚠️ CISA Warns of Critical Jenkins #Vulnerability Exploited in #Ransomware Attacks The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the critical Jenkins vulnerability, CVE-2024-23897, to its Known Exploited Vulnerabilities (KEV) catalog after it was used in ransomware attacks. This path traversal flaw, with a CVSS score of 9.8, can lead to remote code execution, allowing attackers to read and manipulate sensitive files on Jenkins servers. The vulnerability has been exploited by the IntelBroker threat actor and the RansomExx ransomware gang to infiltrate companies like BORN Group and Brontoo Technology Solutions. CISA has urged Federal Civilian Executive Branch (FCEB) agencies to apply the necessary patches by September 9, 2024. Full article: https://thehackernews.com/2024/08/cisa-warns-of-critical-jenkins.html