Cyber Operations Targeting Russian Organizations: The Rise of Decoy Dog Malware Recent reports have unveiled a significant series of cyber attacks against Russian entities, characterized by the deployment of a sophisticated malware known as Decoy Dog. According to cybersecurity firm Positive Technologies, these operations fall under a cluster identified as…
Breach Notification, Fraud Management & Cybercrime, Healthcare Muskogee City County 911 Authority Reports Data Breach Affecting Patient Information from 2011 Marianne Kolbasuk McGee (HealthInfoSec) • October 9, 2024 Image: Muskogee City County Enhanced 911 Trust Authority The Muskogee City County Enhanced 911 Trust Authority in Oklahoma is in the process…
Cybersecurity researchers have identified significant vulnerabilities within Microsoft’s Azure Health Bot Service that could allow malicious actors to traverse customer environments, potentially accessing sensitive patient data. These vulnerabilities were recently reported by Tenable, emphasizing the critical nature of the flaws now patched by Microsoft. Tenable’s investigation highlights that the vulnerabilities…
TikTok Confirms Security Breach Targeting High-Profile Accounts TikTok has recently acknowledged a significant security vulnerability that has allowed threat actors to take control of prominent accounts on its platform. This incident, which has raised serious concerns about user safety and data security, was initially reported by Semafor and Forbes, highlighting…
Data Breach Exposes Personal Information of Over 237,000 Comcast Customers In a recent cybersecurity incident, telecom giant Comcast, along with Truist Bank and Capio & CF Medical, has found itself entangled in a significant data breach that has compromised sensitive customer information. The breach is linked to a security incident…
Ivanti Issues Critical Security Updates for Virtual Traffic Manager Flaw Ivanti has announced the release of urgent security updates to address a critical vulnerability in its Virtual Traffic Manager (vTM) that could allow unauthorized users to bypass authentication and gain administrative access. The vulnerability, identified as CVE-2024-7593, carries a high…
The Computer Emergency Response Team of Ukraine (CERT-UA) has issued a critical alert regarding a resurgence of cyber attacks specifically targeting the country’s defense forces. These attacks employ a malware known as SPECTR as part of a broader espionage campaign identified as SickSync. The agency has linked these malicious activities…
Cyber Breach Alert: DumpForums Claims Dr.Web Data Theft In a significant cybersecurity incident, the notorious hacking forum known as DumpForums has announced that it has orchestrated a major data breach against Dr.Web, a well-established cybersecurity firm based in Russia. The attackers assert they have successfully extracted an astounding 10 terabytes…
On Tuesday, Microsoft released a set of critical updates addressing a total of 90 security vulnerabilities within its software, including ten zero-day exploits. Notably, six of these zero-days are actively being leveraged in real-world attacks, raising significant concerns regarding the potential for widespread exploitation in the wild. The vulnerabilities span…
