Hackmanac Cyber Alerts

🚨Cyberattack Alert ‼️ 🇺🇸USA - Axis Health System, Rhysida Demands 25 BTC Rhysida hacking group claims to have breached Axis Health System. Ransom demand: 25 BTC (approx. $1,580,000). Ransom deadline: 17th Oct 24.

🚨Data Breach Alert: Save The Children Save The Children International has reportedly been compromised by a cybercriminal who claims to have stolen over 13,000 records belonging to global partners and approximately 8,000 employees. Allegedly, the stolen data includes full names, source code (over 6 GB), financial information, databases, and additional sensitive material. The confirmation or denial of these claims has yet to be verified

🚨Cyberattack Alert ‼️ 🇺🇸USA - Medex RansomHub ransomware group claims to have breached Medex. Allegedly, exfiltrated sensitive data include PII, financial data, health information, corporate data, credentials, intellectual property, and other confidential information. Ransom deadline: 14th Oct 24. Previously, on March 16, 2023, the Cl0p ransomware group had also listed Medex on its data leak site.

🚨Cyberattack Alert ‼️ 🇮🇹Italy - Ferramenta La Futura Srl Meow hacking group claims to have breached Ferramenta La Futura Srl. Allegedly, 19 GB of data were exfiltrated, including personal data such as identification numbers, insurance policies, financial information, client information, banking and tax documents, ID cards, driver’s license scans, passports, agreements, certificates, addresses, and medical records. This is the second time the company has been threatened by a hacking group: on September 15th, the RansomHub ransomware group claimed to have breached Ferramenta La Futura Srl and exfiltrated data such as clients, companies, financial information, and many more confidential documents.

🚨Data Breach Alert ‼️ 🇰🇼Kuwait - Boutiqaat A potential data breach at Boutiqaat has been detected on a hacking forum: the threat actor claims to have leaked for free a database containing the details of 3 million users. According to the post, the stolen database contains information such as names, email addresses, phone numbers, and physical addresses from various Middle Eastern countries. The confirmation or denial of these claims has yet to be verified, but in the meantime, Boutiqaat users are advised to be cautious of potential phishing attempts.

🇯🇵Japan - JAXA Cyberattack: Hackers Breach Accounts of Top Officials, Exposing Sensitive Space and Defense Data https://securityonline.info/jaxa-cyberattack-hackers-breach-accounts-of-top-officials-exposing-sensitive-space-and-defense-data/

🚨Cyberattack Alert ‼️ 🇯🇵Japan - Casio (カシオ計算機) Underground ransomware group claims responsibility for the attack on Casio. Allegedly, 204.9 GB of data were exfiltrated, including confidential documents (社外秘), legal documents, personal information of employees, confidential NDAs, employee payroll, patent information, financial documents, project details, and incidents. A sample has been provided. As we previously posted, Casio Computer Co., Ltd. experienced unauthorized access to its network on October 5, 2024, resulting in a system failure that disrupted some services.

🚨Data Breach Alert ‼️ 🇮🇱Israel - Doscast Handala, a pro-Palestinian hacktivist group, claims to have hacked Doscast, the largest radical Jewish community podcast website. Allegedly, the attack led to the exfiltration of a database containing 3 million lines of data from over 100,000 users.

🚨 Hackers targeted Android users by exploiting zero-day bug in Qualcomm chips 🚨 The zero-day vulnerability is officially designated as CVE-2024-43047. https://techcrunch.com/2024/10/09/hackers-were-targeting-android-users-with-qualcomm-zero-day/

🚨Cyberattacks Alert ‼️ 8Base ransomware group still active: Volkswagen among claimed attacks A new address for the data leak site of the 8Base ransomware group has recently been discovered, demonstrating that the group had not ceased its attacks (the last one detected by us was on June 21st). On the site, the names of 13 companies allegedly hit by the ransomware group and uploaded to the data leak site on September 23rd can be found: 🇩🇪 Volkswagen Group 🇫🇷 Groupe Bayard 🇺🇸 Stone Future Inc 🇮🇹 Daldoss Elevetronic 🇺🇸 Futureguard 🇧🇪 Kerkstoel 🇯🇲 Island Grill 🇩🇰 ErgoFloor 🇦🇹 Hauschild Installationen 🇪🇸 Evlox (formerly Tavex) 🇺🇸 Wild Apple Graphics 🇩🇪 Schumag Aktiengesellschaft 🇫🇷 Rossmann (SOFPO) For all the entities impacted, the ransom demand expired on September 30th, but the data that was supposed to be published is currently unavailable.

🚨Cyberattack Alert ‼️ 🇮🇩Indonesia - Trans F&B Kill Security hacking group claims to have breached Trans F&B. Allegedly, exfiltrated data include sensitive personal information (PII) such as full names, birth dates, addresses, religion, gender, and email addresses.

🚨Internet Archive hacked. 31M records breached🚨 The breach exposed user records including email addresses, screen names and bcrypt password hashes. HIBP permalink: https://haveibeenpwned.com/PwnedWebsites#InternetArchive

🚨A new ransomware group has been detected: Sarcoma, 30 victims 🚨 🇺🇸 ICS Nett 🇪🇸 Ferrer & Ojeda 🇺🇸 AHI Supply 🇧🇴 Importadora Monterrey SRL 🇿🇦 National Edging 🇯🇵 Nexus-Shinozaki 🇬🇧 Structure-flex 🇧🇷 Ciclo Cairu 🇸🇪 Nora-Lindefrakt 🇺🇸 Rio Marine 🇺🇸 InCare Technologies 🇫🇷 Antenne Reunion Radio 🇿🇦 GMG Mining Supplies 🇧🇬 Smart Media Group Bulgaria 🇺🇸 The Roberts Family Law Firm 🇨🇦 Gedco 🇺🇸 EARTHWORKS Group 🇦🇺 Perfection Fresh 🇳🇿 Advanced Accounting & Business Advisory 🇦🇺 Road Distribution Services 🇪🇸 Lácteos Lorán 🇪🇸 Curtidos Barbero 🇧🇲 EasyPay 🇶🇦 Jumbo Electronics Qatar 🇮🇹 Navarra & Marzano 🇰🇼 Costa Del Sol Hotels 🇦🇺 The Plastic Bag 🇨🇦 Elevator One 🇨🇦 March Elevator 🇵🇭 Suntrust Properties In total, Sarcoma claims to have exfiltrated 5,324.76 GB.

⚠️🇦🇪UAE issues security alert for Samsung users ⚠️ Samsung has released new security updates to address two critical vulnerabilities and 28 high-risk vulnerabilities in the Android OS. https://www.khaleejtimes.com/business/tech/uae-issues-security-alert-for-samsung-users

🚨🚨Zero-Day Alert: Three Critical Ivanti CSA Vulnerabilities Actively Exploited https://thehackernews.com/2024/10/zero-day-alert-three-critical-ivanti.html

🚨Cyberattack Alert ‼️ 🇺🇸USA - Victron Energy Abyss hacking group claims to have breached Victron Energy, a premier fuel distributor founded by Ali Sharaf. Allegedly, 2.3 TB of data were exfiltrated. Ransom deadline: 16th Oct 24.

🚨Cyberattack Alert ‼️ 🇫🇷France - Université Paris-Saclay RansomHouse hacking group claims to have breached Université Paris-Saclay. Allegedly, 1 TB of data were exfiltrated. Last August 12, through its X social media account, Université Paris-Saclay announced that a ransomware cyberattack had affected the university on 11/08/2024, which coincides exactly with the encryption date communicated by the ransomware group. https://x.com/UnivParisSaclay/status/1822993151428121078

🔐 Leverage AI Safely: Maximize Benefits While Mitigating Risks 🤖 AI has great potential, but it also comes with Cyber Security challenges. As part of our series about AI & Cyber Security, we've explored both opportunities and risks (https://hackmanac.com/news/ai-and-cyber-security-from-risks-to-opportunities) and cyberattacks already occurred thanks to this technology (https://hackmanac.com/news/ai-and-cyberattacks-from-exploitation-to-targeting). Now, we’re concluding with essential guidelines in order to safely harness the power of AI while protecting your organization. ✅ In this article, we cover: • Audit AI systems🔍 • Privacy Protection🔒 • Software and Systems Maintenance 🔄 • Adversarial Training 🛡 • Staff Training 📚 • Incident Response Plan 📝 👉 Read the full article here: https://hackmanac.com/news/leverage-ai-safely-maximize-benefits-while-mitigating-risks #AI #Cybersecurity #AIsafety #TechTrends #DataProtection #CyberSecurityAwareness #Hackmanac #ExpertInsights

⚠️Libano-Suisse exposed unprotected data from an Azure Blob. ⚠️ Libano-Suisse Insurance Company is an insurance company established in Lebanon, the Middle East, the Gulf and North Africa. https://medium.com/@newschu.substack.com/libano-suisse-exposed-unprotected-data-from-an-azure-blob-f4d017143633

🚨Microsoft has detected an increase in the use of legitimate file hosting services like SharePoint, OneDrive, and Dropbox in Business Email Compromise (BEC) attacks, commonly seen in enterprise environments, as part of a tactic to evade detection. https://thehackernews.com/2024/10/microsoft-detects-growing-use-of-file.html