Hackmanac Cyber Alerts

🚨 Cyber Attack Alert 🚨 🇰🇼 Kuwait - The Investment Dar RansomHub ransomware group claims to have breached The Investment Dar, one of the largest Islamic finance organizations in the entire MENA region. "We encrypted all your networks and extracted some interesting data from you," the cybercriminals write. Ransom deadline: 16th Aug 24. #Hackmanac #ransomware

A #Ransomware Attack Killed a Cow. In the Swiss canton of Zug, a ransomware attack on a farmer's computer systems, including a milking robot, resulted in the death of a cow and her calf. The cybercriminals demanded 10,000 Swiss Francs ($10,800) for decryption, but the farmer chose not to pay. Although the milking robot continued functioning without the network connection, the farmer could not access vital data, leading to the delayed detection of the cow's distress. The monetary damage, excluding the ransom, amounted to over €6,400. Read more: https://www.heise.de/en/news/Switzerland-Cow-and-calf-die-after-cyberattack-on-milking-robot-9826477.html #CyberAttack #CyberSecurity #Hack

🚨#Windows Update Flaws Allow Undetectable Downgrade Attacks🚨 Researcher showcases hack against #Microsoft Windows Update architecture, turning fixed vulnerabilities into zero-days. #0Day https://www.securityweek.com/safebreach-sounds-alarm-on-windows-update-flaws-allowing-undetectable-downgrade-attacks/

🚨 #CyberAttack Alert 🚨 🇲🇽 #Mexico, Tiba IT Services Mexico Tiba IT Services Mexico has been listed as a victim by the Cactus #ransomware group. The hackers allegedly exfiltrated 29 GB of personal identifiable information, employees' and executives' personal and corporate data, financial documents, contracts, corporate correspondence, etc. #Hackmanac #CyberSecurity #cactus

🚨#CyberAttack 🚨 🇪🇸#Spain: A cyberattack on the hospitals of Granada compromised the ID numbers and email addresses of about 50,000 healthcare professionals from the Clínico San Cecilio and Virgen de las Nieves hospitals, as well as the Área de Gestión Sanitaria Sur de la provincia and the Distrito Granada-Metropolitano- Article and image by elhacker.NET: https://blog.elhacker.net/2024/08/ciberataque-hospitales-granada-datos-personales.html?utmsource=dlvr.it&utmmedium=twitter

Leaked Documents Show #Nvidia Scraping ‘A Human Lifetime’ of Videos Per Day to Train #AI Nvidia scraped videos from Youtube and several other sources to compile training data for its AI products, internal Slack chats, emails, and documents. https://www.404media.co/nvidia-ai-scraping-foundational-model-cosmos-project/

🚨 #CyberAttack 🚨 🇧🇷#Brazil: The Dark Vault ransomware group listed 2 Brazilian entities: - ComOferta - Mercado Mineiro At the time of writing, in both cases, the websites are down. #Ransomware #DarkVault #Hack #CyberSecurity

🚨 #CyberAttack 🚨 🇵🇭 #Philippines, JG Summit Holdings JG Summit Holdings has been listed as a victim by the RansomHub ransomware group. The hackers allegedly exfiltrated 300 GB of data and claim to have encrypted more than 40k computers. Ransom deadline: 15th Aug 24. JG Summit Holdings, Inc. is one of the largest conglomerates in the Philippines with business interests in air transportation, banking, food manufacturing, hotels, petrochemicals, power generation, publishing, real estate and property development, and telecommunications. #Ransomware #RansomHub #Cybersecurity

🚨 #CyberAttack 🚨 🇯🇵 #Japan, Nidec Corporation Nidec Corporation has been listed as a victim by the Everest ransomware group. This is the second time hackers have claimed to breach the company. On June 3rd, the 8Base ransomware group also stated they had targeted Nidec. #Ransomware #Hack #cybersecurity

🚨 #CyberAttack 🚨 🇺🇸 #USA, Bayhealth Hospital - Hackers Demand 25 BTC Bayhealth Hospital, a healthcare system serving the central and southern portion of Delaware, has been listed as a victim by the Rhysida #ransomware group. The sample provided includes passports, Social Security Numbers (SSNs), and other miscellaneous documents. Ransom demand: 25 BTC (approx. $1,400,000). Ransom deadline: August 14, 2024. #Hack #Healthcare #Rhysida #CyberSecurity

🇪🇸#Spain: Radiotelevisión Española (RTVE) - 21,000 registered candidates' data exposed in a security incident A security flaw on the website www.convocatoriasrtve​‌.es, managed by Tea Cegos S.A., has exposed personal data of candidates for Radiotelevisión Española (RTVE) opposition exams. The exposed information includes banking details, identity documents, professional certificates, and payment receipts. This vulnerability allowed public access to sensitive data, affecting potentially over 21,000 registered candidates. The breach has been active for several days, and RTVE has not yet confirmed the full extent of the exposure. Article and image by El Independiente: https://www.elindependiente.com/series-y-television/comunicacion/2024/08/07/un-agujero-de-seguridad-deja-al-descubierto-los-datos-personales-de-los-opositores-de-rtve/

🚨 #CyberAttack 🚨 🇦🇺 #Australia, Kempe Engineering Pty Ltd Kempe Engineering Pty Ltd has been listed as a victim by the RansomHub ransomware group. The hackers allegedly exfiltrated 4 TB of sensitive data, including financial records, customer data, all internal mail, and proprietary business information. #Ransomware #Hack #CyberSecurity

🚨 #CyberAttack 🚨 🇪🇸 #Spain, Suandco - Abogados y Economistas Suandco - Abogados y Economistas has been listed as a victim by the Mad Liberator ransomware group. Ransom deadline: 14th Aug 24. #Ransomware #Hack #CyberSecurity

🚨 #CyberAttack 🚨 🇮🇳 #India, Bonatra Bonatra has been listed as a victim by the Kill Security ransomware group. The hackers allegedly exfiltrated patient data. Ransom demand: $4,000. Ransom deadline: 23rd Aug 24. #Ransomware

🚨🚨 #DataBreach 🚨🚨 🇧🇷#Brazil: Multiple Potential Data Breaches - More Than 50 Million Records Allegedly Compromised In the last few hours, 3 potential major breaches have been detected at Fundo de Garantia do Tempo de Serviço (FGTS), FTD Educação, and Ingresse. - Fundo de Garantia do Tempo de Serviço (FGTS): - Stolen data size: 39M records - Data type: Full Name, Phone Number, Document Number, Date of Birth, Address, and so on. - Selling price: $1,800 - FTD Educação: - Stolen data size: 132,457 records (1,181,097 with tickets) - Data type: Full Name, Email, Hashed Password, Phone Number, and so on. - Ingresse: - Stolen data size: 15M users records - Data type: SSN, Name, Phone, Email, Event Name, Order Date, Payment Option, Total Paid, Sales Report, Tickets and amenities issued, Partial revenue, Sales by ticket type - Selling price: $10,000 The confirmation or denial of these claims has yet to be verified. #CyberAttack #Hack

🚨 #DataBreach 🚨 🇮🇩#Indonesia: Kimia Farma Apotek and Kimia Farma Care – 26 million records allegedly compromised are being sold for $2600 on a hacking forum. The data includes detailed information on employee salaries, attendance and leave, contracts and positions, company assets and accounting, health and vaccinations, recruitment, family and emergency contacts, education and training, along with various other administrative details. The confirmation or denial of these claims has yet to be verified. #CyberAttack #Hack #CyberSecurity

🚨 #CyberAttack 🚨 🇺🇸 #USA - KLA KLA, a Fortune 500 company, has been listed as a victim by the Meow hacking group. The hackers allegedly exfiltrated logins, passwords, emails, customers, and more. #DataBreach #Hack #CyberSecurity

🚨 #CyberAttack 🚨 🇺🇸 #USA - KinetX Aerospace KinetX Aerospace, the first commercial company to provide mission design and navigation services for #NASA’s deep space missions, has been listed as a victim by the Play #ransomware group. Allegedly, the hackers exfiltrated private and personal confidential data, clients' documents, budget, payroll, accounting, contracts, taxes, IDs, and financial information. Ransom deadline: 11th Aug 24. #Cybersecurity #Hack

🚨 #CyberAttack 🚨 🇺🇸 #USA, Omni Family Health Omni Family Health has been listed as a victim by the Hunters International ransomware group. The hackers allegedly exfiltrated 2.7 TB (2,914,900 files) of data, including HR (human resources, employees, reviews), accounting (contracts, incomes, reports, tax, federal grants, invoices, corporation documents), medical, insurances and health care, employee data, and databases. #Ransomware #Hack #CyberSecurity #Healthcare

#CrowdStrike releases a 12-page PDF with the Incident Root Cause Analysis that led to the crash of millions of computers worldwide: Link:https://www.crowdstrike.com/wp-content/uploads/2024/08/Channel-File-291-Incident-Root-Cause-Analysis-08.06.2024.pdf