Hackmanac Cyber Alerts

Special Lecture 2: Cyber Threat Intelligence by Mr. YJ and Network Security Overview| SMT 2024 https://ift.tt/lS426CW

For our second technical post, we have an analysis of a Windows RCE vulnerability in the Wi-Fi driver (CVE-2024-30078), which includes a detailed root cause analysis and exploitation constraints. Enjoy :) https://www.crowdfense.com/windows-wi-fi-driver-rce-vulnerability-cve-2024-30078/

Introduction to Cyber Threat Intelligence https://ift.tt/p5TxUh2

🟧 #HackTuesday 🟧 Hack Tuesday: Week 28 Aug - 03 Sept 2024 ⚠️ 130 victims by 22 hacking groups ⚠️ The most active ransomware group this week is RansomHub with 28 claimed attacks. The United States is the most affected country, accounting for 48% of the victims. The Manufacturing sector is the most impacted, representing 25% of the claimed targets, followed by the Professional, Scientific, and Technical sectors at 18%, and the Wholesale/Retail sector at 11% Overall, the claimed stolen data amounts to approximately 45.9 Terabytes. The average Cyber Risk Factor is 4.0. #Hackmanac #HT #Cybersecurity

🚨 Supply Chain Cyber Threats: Key Incidents and Lessons Learned 🚨 Last week, we dove into the key cyber risks impacting the Supply Chain and the solutions to address them (https://hackmanac.com/news/supply-chain-and-cyber-security-from-risks-to-solutions). Now, we’re zooming on the 4 biggest cyber incidents involving a Supply Chain that shook industries worldwide. 🌐 From the MOVEit attack compromising 2,600+ organizations like BBC and British Airways, to the infamous Log4j vulnerability affecting millions of devices, these cases underscore the urgent need for stronger security measures. 🔐 💡 Key Lessons Learned: - Timely Patching & Continuous Monitoring 🛠 - Understanding the Impact of Open Source 🔍 - The IT Supply Chain Attack Ripple Effect 📋 - The Persistent Threat of Nation-State Attacks 🔒 - Improving Incident Response and Crisis Management ⚠️ - Collaboration & Information Sharing 🤝 Here the full story: https://hackmanac.com/news/supply-chain-and-cyber-security-key-incidents-and-lessons-learned #CyberSecurity #SupplyChain #MOVEit #Log4j #Kaseya #SolarWinds #CyberThreatMonitoring #hackmanac #CyberSecurityAwareness

🚨 News Alert 🚨 According Cyber Security experts, the Russia-linked group APT28 (aka Fancy Bear, Pawn Storm, Sofacy Group, Sednit, BlueDelta, and STRONTIUM) is behind the cyber attack that recently hit the German Air Traffic Control Agency (DFS) disrupting its operations https://securityaffairs.com/168070/apt/apt28-cyber-attack-german-air-traffic-control-agency-dfs.html #cybersecurity #APT28 #cyberthreatmonitoring #hackmanac

🚨 Mindblowing numbers alert! 🚨 According to recent research, 45% of employees still have access to their ex-employer’s data, and over 25% of companies have had their reputations damaged due to ex-employees misusing data after leaving the company 🤡 Want to make sure your organization doesn’t fall into this risky 1/3? Learn how to safeguard your data and create a bulletproof offboarding protocol in just 20 minutes! 💼 Join ex-Google expert Ben King and the Zenphi team in a free webinar on ‘Offboarding in Google Workspace’. Get hands-on tips for: — Automating access revokes — Securing accounts post-departure — Preventing unauthorized access 📋 Bonus: Register for free and receive an Employees offboarding checklist! 💡This webinar will set you apart as a cybersecurity pro — don’t miss it : https://thn.news/offboarding-best-practices

🚨 News Alert 🚨 Fake OnlyFans cybercrime tool infects hackers with malware https://www.bleepingcomputer.com/news/security/fake-onlyfans-cybercrime-tool-infects-hackers-with-malware/ #cybersecurity #malware #cyberthreatmonitoring #hackmanac

🥷 Scammers hacked into Penpie's DeFi protocol and stole approximately $27 million in cryptocurrency. 💸 The criminals exchanged the stolen crypto assets for 11,900 ETH. Some of the funds have already been sent to Tornado Cash. While this method of hiding the crime is not always reliable, skilled cybersecurity experts can often trace mixers. It's possible that in this case, they will also be able to track the movement of the assets. ✍️ We will continue to monitor the situation. 👋 Match Systems

🟧 #HackTuesday 🟧 Hack Tuesday: Week 28 Aug - 03 Sept 2024 ⚠️ 130 victims by 22 hacking groups ⚠️ The most active ransomware group this week is RansomHub with 28 claimed attacks. The United States is the most affected country, accounting for 48% of the victims. The Manufacturing sector is the most impacted, representing 25% of the claimed targets, followed by the Professional, Scientific, and Technical sectors at 18%, and the Wholesale/Retail sector at 11% Overall, the claimed stolen data amounts to approximately 45.9 Terabytes. The average Cyber Risk Factor is 4.0. #Hackmanac #HT #Cybersecurity

🚨 Supply Chain Cyber Threats: Key Incidents and Lessons Learned 🚨 Last week, we dove into the key cyber risks impacting the Supply Chain and the solutions to address them (https://hackmanac.com/news/supply-chain-and-cyber-security-from-risks-to-solutions). Now, we’re zooming in on the 4 biggest cyber incidents involving a Supply Chain that shook industries worldwide. 🌐 From the MOVEit attack compromising 620+ organizations like BBC and British Airways, to the infamous Log4j vulnerability affecting millions of devices, these cases underscore the urgent need for stronger security measures. 🔐 💡 Key Lessons Learned: - Timely Patching & Continuous Monitoring 🛠 - Understanding the Impact of Open Source 🔍 - The IT Supply Chain Attack Ripple Effect 📋 - The Persistent Threat of Nation-State Attacks 🔒 - Improving Incident Response and Crisis Management ⚠️ - Collaboration & Information Sharing 🤝 Here the full story: https://hackmanac.com/news/supply-chain-and-cyber-security-key-incidents-and-lessons-learned #CyberSecurity #SupplyChain #MOVEit #Log4j #Kaseya #SolarWinds #CyberThreatMonitoring #hackmanac #CyberSecurityAwareness

⚠️Cyberattack Alert - 🇪🇸IDOM The hacking group Lynx claims to have breached IDOM, a multinational company providing professional services in consulting, engineering and architecture. Allegedly, contracts with customers, postal correspondence, personal data of employees, and financial documents were exfiltrated.

🚨 News Alert 🚨 Clearview AI fined €30.5M by Dutch authorities for illegal facial data collection and GDPR violations. https://thehackernews.com/2024/09/clearview-ai-faces-305m-fine-for.html #cybersecurity #fine #GDPR #violation #cyberthreatmonitoring #hackmanac

🚨 News Alert 🚨 Clearview AI fined €30.5M by Dutch authorities for illegal facial data collection and GDPR violations. https://thehackernews.com/2024/09/clearview-ai-faces-305m-fine-for.html #cybersecurity #fine #GDPR #violation #cyberthreatmonitoring #hackmanac

Congrats to our winners! 👏👏👏

🚨 News Alert 🚨 The FTC (US Federal Trade Commission) has reported a massive increase in losses to Bitcoin ATM scams. These scams reached nearly ten times the amount from 2020 and over $110 million in 2023. https://www.bleepingcomputer.com/news/security/ftc-americans-lost-over-110-million-to-bitcoin-atm-scams-in-2023/ #cybersecurity #cryptocurrency #scam #bitcoin #cyberthreatmonitoring #hackmanac

🚨 News Alert 🚨 A data analytics company worth $40 billion was recently breached because of a secret posted on Jira colaboration app. This unfortunate event is a good reminder of the importance of better protecting business secrets and sensitive data. https://thehackernews.com/2024/09/secrets-exposed-why-your-ciso-should.html #cybersecurity #databreach #cyberthreatmonitoring #hackmanac

BREAKING ‼️⚠️ The FBI reports that North Korea is aggressively targeting the crypto industry North Korea is conducting advanced social engineering campaigns against employees in the DeFi and cryptocurrency sectors to deploy malware and steal digital assets. These campaigns involve extensive research and personalized scenarios, where North Korean cyber actors impersonate recruiters or known contacts to gain victims' trust. Despite the technical expertise of those in the targeted industries, the sophistication of these tactics makes even experienced individuals vulnerable. The FBI has issued warnings and mitigation strategies, highlighting North Korea's ongoing threat to cryptocurrency organizations. Source: FBI