The Breach News

NETSCOUT Reports Rise in DDoS Attacks Targeting Healthcare Sector

On October 2, NETSCOUT, a global leader in network monitoring solutions, revealed critical findings in its latest DDoS Threat Intelligence Report. The organization reported that Distributed Denial of Service (DDoS) attacks are evolving, increasingly employing innovative technologies and tactics to disrupt networks. This alarming update comes as entities in multiple…

Read MoreNETSCOUT Reports Rise in DDoS Attacks Targeting Healthcare Sector

Severe WPML Plugin Vulnerability Puts WordPress Sites at Risk of Remote Code Execution

An alarming security vulnerability has been identified within the WPML (WordPress Multilingual) plugin, which has the potential to allow authenticated users to perform remote code execution under specific conditions. This security flaw, designated as CVE-2024-6386, carries a critical CVSS score of 9.9 and affects all versions prior to 4.6.13, released…

Read MoreSevere WPML Plugin Vulnerability Puts WordPress Sites at Risk of Remote Code Execution

DarkGate Malware Targets Samba File Shares in Brief Surge Attack

Cybersecurity Experts Uncover DarkGate Malware Campaign Targeting Samba File Shares In a recent investigation, cybersecurity analysts have unveiled a brief yet impactful campaign associated with DarkGate malware, which exploited Samba file sharing services as a vector for infection. Researchers from Palo Alto Networks’ Unit 42 indicated that the campaign occurred…

Read MoreDarkGate Malware Targets Samba File Shares in Brief Surge Attack

Extending Operation Cronos: Insights into LockBit Ransomware and FIN7 Deepfake Malware

Europol, in a coordinated effort with global law enforcement agencies, has expanded its Operation Cronos to apprehend four individuals alleged to have connections with the notorious LockBit ransomware group. A recent press release highlighted the successful arrests as well as the seizure of servers and financial assets linked to this…

Read MoreExtending Operation Cronos: Insights into LockBit Ransomware and FIN7 Deepfake Malware

MSSP Market Update: Court Evaluates Liability for Data Breaches

Security Concerns Heightened Amid Data Breach at Columbus Regional Healthcare System Recent developments surrounding the data breach at Columbus Regional Healthcare System (CRHS) underscore the escalating concerns over cybersecurity vulnerabilities in the healthcare sector. A federal class-action lawsuit has emerged from this incident, alleging that CRHS failed to adequately protect…

Read MoreMSSP Market Update: Court Evaluates Liability for Data Breaches

CISA Alerts on Serious Apache OFBiz Vulnerability Amid Ongoing Exploitation Reports

Critical Apache OFBiz Vulnerability Identified by CISA The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently identified a significant security vulnerability affecting the Apache OFBiz open-source enterprise resource planning (ERP) system, adding it to its Known Exploited Vulnerabilities (KEV) catalog. This fresh entry follows evidence of active exploitation observed…

Read MoreCISA Alerts on Serious Apache OFBiz Vulnerability Amid Ongoing Exploitation Reports

WazirX Cryptocurrency Exchange Faces $230 Million Loss in Significant Security Breach

WazirX Suffers Major Security Breach Resulting in $230 Million Loss The Indian cryptocurrency exchange WazirX has reported a significant security breach that has led to the theft of approximately $230 million in digital assets. The breach specifically affected one of their multi-signature wallets, which are designed to enhance security by…

Read MoreWazirX Cryptocurrency Exchange Faces $230 Million Loss in Significant Security Breach

BlackByte Ransomware Targets VMware ESXi Vulnerability in Recent Attack Surge

The BlackByte ransomware group has been actively exploiting security vulnerabilities to facilitate its attacks, notably including a recently patched flaw in VMware ESXi hypervisors. Cisco Talos reports that threat actors are utilizing a combination of this vulnerability along with various compromised drivers to disrupt security measures. Specifically, the exploitation involves…

Read MoreBlackByte Ransomware Targets VMware ESXi Vulnerability in Recent Attack Surge